Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
File: JIykhYdpP_HNXYNmIkrKDSuXyjs.mft (raw, json)
Hash identifier: bYC2LDQ5UQISXuA2kvcUnp7KnVRPL9gE/WQ7ElVxJrA=
Subject key identifier: 0B:DB:ED:A2:8F:05:94:5B:13:01:E6:0F:65:94:E1:44:D8:CE:8D:54
Authority key identifier: 24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
Certificate issuer: /CN=F36F387AAF/serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Certificate serial: 0204
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
Manifest number: 0203
Signing time: Mon 16 Jun 2025 04:23:23 +0000
Manifest this update: Mon 16 Jun 2025 04:23:22 +0000
Manifest next update: Wed 18 Jun 2025 04:23:22 +0000
Files and hashes: 1: JIykhYdpP_HNXYNmIkrKDSuXyjs.crl (hash: y2XaZey8S8Pc0HBk9r4vfB565eRSh/kSivaIHh3TWR8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F387AAF, serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Validity
Not Before: Jun 16 04:23:22 2025 GMT
Not After : Jun 18 04:23:22 2025 GMT
Subject: CN=684f9c3a-8477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:f5:b4:20:2c:ba:ba:7b:8b:0f:7f:9f:d6:
8a:80:56:3c:cd:a1:c0:e7:0b:07:da:c7:32:f1:1e:
0f:85:03:24:35:57:f2:63:6c:92:7d:9c:73:3d:34:
91:31:b5:3f:8d:2b:64:fc:05:42:7d:0f:4a:4d:0f:
a7:5e:29:03:04:8b:2d:82:d2:92:75:4b:3a:73:47:
b1:3c:0d:4b:18:8d:16:c2:4f:b1:52:ac:16:75:6d:
bc:34:75:b8:a2:04:fb:d6:61:02:14:be:0e:3e:3c:
86:ed:44:32:1a:73:1a:52:2f:fa:d8:4f:92:ff:98:
c5:1d:17:09:21:8d:3d:45:63:9b:9b:5e:69:c9:c8:
15:2b:ec:e3:6c:49:7c:2a:f3:4a:a4:db:a2:52:f5:
62:8d:7a:fc:09:1e:f1:66:35:27:29:33:77:b8:74:
36:98:e9:4d:e5:96:a5:b8:0f:4d:63:bd:7a:db:01:
25:3d:39:6b:b3:69:40:85:ab:01:83:4e:68:d5:5f:
a0:9a:79:13:4f:86:8f:cc:e9:7d:5a:41:4b:21:21:
0a:64:2c:d7:97:fb:86:12:d9:20:55:66:0b:b9:74:
27:f5:9e:a8:86:49:1f:cb:4b:fb:47:08:d1:e0:30:
84:b6:c6:41:3c:e8:52:10:7a:46:46:08:9d:1e:f5:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DB:ED:A2:8F:05:94:5B:13:01:E6:0F:65:94:E1:44:D8:CE:8D:54
X509v3 Authority Key Identifier:
keyid:24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:39:d3:7e:84:34:c5:4a:8b:42:fd:5e:24:29:fc:0b:6d:a2:
d3:16:a9:c0:20:c8:a4:ac:94:c1:74:12:86:28:84:b2:42:63:
3f:f2:7b:db:71:a3:ff:8f:35:a2:5b:41:82:92:d7:58:27:08:
d8:ca:00:27:2d:16:2f:3d:23:7c:55:37:44:5e:8d:ef:32:5f:
c4:bb:40:9c:e8:f9:15:11:0e:04:be:f0:8b:4d:a5:43:83:60:
65:69:15:62:95:79:82:74:1d:25:77:96:00:16:dd:93:e4:55:
59:0d:da:a0:b4:29:86:95:f8:04:08:e1:75:23:24:92:2a:7a:
26:56:f2:39:7d:15:24:38:1f:a0:8f:74:8c:1e:7b:a2:b5:c5:
60:21:b4:86:cd:b6:44:ea:c0:0b:7e:00:99:32:09:04:6c:b5:
e6:cb:e5:2c:37:f4:13:d9:22:66:44:a4:00:9a:9e:90:c1:89:
ec:8b:10:bc:c2:6f:0b:11:7e:27:aa:8a:22:88:7c:c5:23:05:
eb:d9:6e:f3:5d:c1:02:84:c6:2c:60:15:60:a4:b6:94:e0:1a:
22:70:62:48:74:73:39:5e:41:7d:68:78:55:26:8a:90:5c:22:
62:29:8b:da:00:12:92:d4:74:5d:43:c0:26:31:7e:ac:55:84:
34:0a:44:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:24:06 2025 by rpki-client