Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
File: 4TG21PnDQatckQb6eKacm4gJKw8.mft (raw, json)
Hash identifier: Sohqce05o8UeXPLfy8iZDmq089rlChcDx8z09/TT46c=
Subject key identifier: 25:6F:34:35:AB:C8:2D:38:ED:3F:13:37:B8:02:1F:56:F6:39:6B:D4
Authority key identifier: E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
Certificate issuer: /CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Certificate serial: 01C3
Authority info access: rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
Manifest number: 01C2
Signing time: Wed 18 Jun 2025 11:30:47 +0000
Manifest this update: Wed 18 Jun 2025 11:30:46 +0000
Manifest next update: Fri 20 Jun 2025 11:30:46 +0000
Files and hashes: 1: 4TG21PnDQatckQb6eKacm4gJKw8.crl (hash: WwVJdIkyP2HW56PjtTgFVdBZL2hmGHprnQcd1DckXN8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Jun 2025 11:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBC4BAR, serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Validity
Not Before: Jun 18 11:30:46 2025 GMT
Not After : Jun 20 11:30:46 2025 GMT
Subject: CN=6852a367-5ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5c:f2:81:d1:b5:e4:2b:2d:b0:d3:d6:c8:32:
02:af:1c:1b:3f:99:59:33:77:cd:25:a9:ea:16:02:
f1:3f:52:f3:72:0f:dd:19:9e:59:69:fc:c8:7c:d2:
bb:47:83:82:f0:9d:01:27:a4:9f:ed:98:d7:f0:44:
e9:4d:b4:27:a3:38:5e:eb:69:f8:ee:cf:37:76:21:
b8:6f:eb:39:35:f7:46:17:2c:c6:8a:e8:6a:6f:d7:
cc:19:f6:2c:0d:fe:4a:6a:1c:5a:c4:c2:33:1e:49:
4b:fe:69:31:16:2d:42:34:2b:b1:73:cf:90:3c:d6:
71:b9:f8:37:ec:5c:7a:d3:ba:0c:1a:a8:5f:ee:5d:
30:6e:12:d5:88:78:0d:f7:35:9d:18:66:91:f0:09:
0e:11:d1:f1:29:fa:09:ef:84:11:2d:e0:cd:16:eb:
ce:c3:00:9b:ba:c0:9d:d3:8c:db:cc:20:c1:c6:d0:
96:c1:f5:df:a6:1a:8d:68:64:65:71:2f:4f:0b:1a:
0c:86:5d:e4:27:ad:c6:db:fe:02:c2:b9:02:9a:4e:
fd:a4:7a:53:05:fa:77:da:a1:c4:99:5c:91:7e:4f:
ec:2a:e0:ed:79:62:fc:0f:f8:45:52:e3:84:b2:8a:
93:1a:a5:42:dc:e3:e8:27:49:99:7c:54:21:34:b1:
d0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6F:34:35:AB:C8:2D:38:ED:3F:13:37:B8:02:1F:56:F6:39:6B:D4
X509v3 Authority Key Identifier:
keyid:E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ae:1d:da:89:76:61:1b:b4:55:c5:52:2b:4a:16:20:5e:8f:
47:49:e8:ef:84:d4:46:c5:c1:76:6a:33:f2:b8:e5:48:86:44:
5c:b4:56:f5:e5:ec:ac:51:1f:e2:0f:9b:e3:e4:3c:c0:10:2f:
67:f8:72:da:10:5c:53:81:4e:22:1a:72:84:75:de:34:d5:b7:
42:a5:d1:4a:b9:1d:4b:42:e0:21:ad:c8:4d:3f:96:2b:04:a0:
77:38:52:47:2c:ea:2c:b7:87:ae:3e:f0:13:48:c5:f6:74:b9:
43:be:de:4b:a9:dd:c5:ff:98:d5:ca:ab:57:8f:92:0b:5d:a5:
e1:94:ab:1a:2a:59:09:8d:45:f8:af:0f:dd:0f:25:ee:9e:b5:
ff:6f:c6:40:12:4d:4c:dd:3d:de:cc:bf:74:b9:e8:3c:b1:af:
99:e8:05:fa:91:6b:4c:13:63:c5:7a:2b:99:e1:87:27:4c:78:
68:75:9e:82:64:2c:d7:fc:ea:65:eb:26:04:94:23:00:46:89:
71:d5:1d:1e:82:53:81:93:d8:ef:61:bf:9a:93:5a:18:e8:28:
e3:d9:ab:5c:33:95:fb:5a:29:64:bf:df:48:f8:3b:c1:db:43:
9b:9a:0a:ad:1e:7f:32:88:4b:5f:a8:3a:93:04:ce:94:65:09:
6a:83:c1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:58:59 2025 by rpki-client