Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
File: 4TG21PnDQatckQb6eKacm4gJKw8.mft (raw, json)
Hash identifier: C1rkFYvF482dHXXD5Vo9gEkz0dtmUmpzMmqCS7Tn0KQ=
Subject key identifier: 3F:92:36:17:0D:FF:21:E9:EE:7B:AF:96:C0:99:BD:74:3C:4C:2A:2F
Authority key identifier: E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
Certificate issuer: /CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Certificate serial: 0191
Authority info access: rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
Manifest number: 0190
Signing time: Wed 30 Apr 2025 04:28:29 +0000
Manifest this update: Wed 30 Apr 2025 04:28:29 +0000
Manifest next update: Fri 02 May 2025 04:28:28 +0000
Files and hashes: 1: 4TG21PnDQatckQb6eKacm4gJKw8.crl (hash: KINLs0w5DuZOayfZhADIitBv3U7wBdZM9I4RoZ+DHd8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 02 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBC4BAR, serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Validity
Not Before: Apr 30 04:28:29 2025 GMT
Not After : May 2 04:28:28 2025 GMT
Subject: CN=6811a6ed-7d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:71:21:49:c9:16:4f:89:9d:44:dd:e2:8e:
b7:c3:91:76:71:21:a4:6e:f6:fd:bb:e0:c2:4c:bf:
eb:b2:92:66:9b:ee:4e:b2:cb:e4:0d:20:73:37:a3:
90:69:22:8f:a5:90:f6:62:f9:c1:5c:0a:4c:01:87:
18:27:2d:2d:6a:86:7b:19:02:ec:56:64:71:2c:c5:
e2:ef:66:71:a1:0f:f7:b7:d8:ec:d7:a9:d8:1c:6a:
63:30:74:e8:2b:ae:5b:54:ee:db:0c:5a:41:7a:78:
80:3f:fb:d7:a6:8b:94:17:6b:19:a2:a8:63:99:b0:
f8:a1:36:7f:1f:d8:36:09:01:9b:7f:11:1e:70:67:
93:0c:1e:8a:9f:91:6e:fc:e3:66:ea:f1:94:2c:f0:
41:41:57:ea:d4:fe:66:0e:a4:96:c1:73:4c:35:7e:
ae:d2:c6:fe:69:d3:66:41:e2:98:80:dd:b9:0d:f3:
4d:a2:18:13:e0:c5:96:65:d0:31:c1:72:7c:1d:7c:
84:de:c1:bd:45:ed:31:31:f8:af:cd:61:22:cf:fb:
a5:5f:f7:73:43:27:1b:35:3f:99:10:59:d6:40:d0:
1a:2e:d3:8b:2a:3a:8e:c6:53:f2:ea:0d:7d:e0:c3:
02:3c:22:13:7b:e4:13:de:a6:a0:d3:3b:ee:e9:80:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:92:36:17:0D:FF:21:E9:EE:7B:AF:96:C0:99:BD:74:3C:4C:2A:2F
X509v3 Authority Key Identifier:
keyid:E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:67:46:70:c4:d5:65:c6:e9:8d:68:8d:1a:f2:90:bf:4a:60:
e1:14:99:9b:16:5d:74:ce:e0:d9:5a:f5:47:24:e5:b0:44:d5:
66:bf:d1:db:b1:ea:e6:6e:c9:c8:14:84:da:3d:78:53:98:eb:
64:a4:7a:d4:2d:5e:7f:f1:fa:8f:e5:a5:5a:94:69:99:d0:9a:
fe:31:22:e5:97:31:f7:28:20:0f:e8:60:e0:82:ce:e6:78:57:
62:5e:88:a3:85:3b:5b:80:1c:74:ae:2c:23:63:24:7e:a8:b3:
7a:08:6f:11:be:02:8f:ec:4a:2c:6e:47:d8:a1:b9:26:62:0e:
7e:59:df:38:08:b0:1d:c1:0b:b6:15:cb:e7:93:d7:8b:37:47:
f1:75:1c:3c:3d:9f:ae:4f:73:fd:ed:21:3c:4c:b9:a0:39:3a:
c7:42:71:57:ca:98:c6:9e:2e:c2:2c:a5:c7:7c:a2:64:b2:0f:
24:e1:ad:a6:9e:e5:35:ee:34:13:f9:bb:32:64:a9:a9:33:f0:
6a:ce:6e:d2:2f:10:38:8d:9f:2e:33:9d:b1:10:2d:ce:be:ab:
f3:aa:d1:9a:bb:ff:7e:e0:58:e4:a6:e1:a1:8d:37:e5:46:61:
3c:67:ef:48:1d:ba:4d:ef:7b:6a:19:43:01:46:ef:b6:15:b5:
8c:ba:1e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:14:53 2025 by rpki-client