Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
File: Upl4cSNfYM1xWncQ_9bi6kyI0po.mft (raw, json)
Hash identifier: r9w35qtE5xigk88aarvljaJjq5kTmnNd5SyVb/5d+Ks=
Subject key identifier: C7:4C:81:0F:3D:F6:C5:FE:7F:66:E5:C3:96:39:90:B4:80:B6:E9:A5
Authority key identifier: 52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
Certificate issuer: /CN=F36F7F21AF/serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Certificate serial: 0455
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
Manifest number: 044D
Signing time: Sun 27 Apr 2025 02:57:38 +0000
Manifest this update: Sun 27 Apr 2025 02:57:37 +0000
Manifest next update: Tue 29 Apr 2025 02:57:37 +0000
Files and hashes: 1: Upl4cSNfYM1xWncQ_9bi6kyI0po.crl (hash: r5AxuDP/gQuWmQRbugG8GIGG7Lg/x7Muy0zUcvaYZxE=)
2: A27E602082FF11EE8205C9864AD9E6FC.roa (hash: pv58iSJoNZfLF15J4awhKwcNzaZSo1gyn9KUtGLQf7U=)
3: 811B0F4682FF11EEAC9619864AD9E6FC.roa (hash: pPHAUOTt22hBeaB17IRburRyPCm6dJpRxd6TfErC+xI=)
4: 504C6FECEA3811EC884DB1F5F1222468.roa (hash: 2dT5xvQBi0tE9GzEX5D2/RqrdvgMzSxkzDaBAFZ3JCY=)
5: 40750D8E82FF11EEA9EF75854AD9E6FC.roa (hash: IfBtUMkbvyisKLp/KIr1N58P5Vt8K4q1zYyTPAWX8DY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1109 (0x455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F7F21AF, serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Validity
Not Before: Apr 27 02:57:37 2025 GMT
Not After : Apr 29 02:57:37 2025 GMT
Subject: CN=680d9d22-801c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:cb:a7:b7:93:bc:b9:64:0c:29:fb:58:57:
2a:75:3b:a6:25:53:ea:85:69:05:7c:78:4f:b8:55:
c3:3b:5f:dc:62:9e:0c:22:90:d4:69:26:f4:98:9b:
5b:08:33:d9:36:c2:d9:2a:fb:ad:17:f5:66:88:59:
48:4a:f5:63:83:39:ef:bd:10:67:5f:3b:4a:24:62:
01:5e:45:a7:91:e5:db:36:cb:6b:5b:d6:de:15:78:
84:f8:bb:de:04:77:18:9e:3c:65:65:56:f4:8e:96:
b0:34:12:28:71:de:99:0a:bc:0a:e0:c4:c4:8c:4a:
d3:66:aa:a2:84:e3:97:48:56:9d:18:0c:45:b5:c1:
cc:f3:0d:4e:6f:0f:84:e8:a3:72:cb:07:74:63:de:
64:78:3e:cb:2a:0a:c2:ed:c0:b5:bb:9e:09:2a:8c:
57:e6:4b:a4:b3:f8:8e:14:8e:69:61:92:ec:bb:b3:
32:1a:b4:c4:71:f2:5f:76:c6:a1:eb:9c:34:f1:5a:
97:87:3c:af:97:88:99:34:d1:a6:52:35:e1:44:02:
20:1f:b1:1d:a7:24:d4:d2:96:4f:f0:95:da:55:d4:
7b:9e:8b:8d:b3:f4:2a:7d:56:da:b3:77:33:f5:dc:
f0:9e:12:1a:e7:60:71:e2:32:b8:18:d2:66:0d:89:
f1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4C:81:0F:3D:F6:C5:FE:7F:66:E5:C3:96:39:90:B4:80:B6:E9:A5
X509v3 Authority Key Identifier:
keyid:52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c3:bf:c6:b0:c5:b6:76:b2:5d:bc:96:76:51:4c:87:c5:de:
fb:a8:9f:90:8f:8b:af:65:a3:05:d0:6d:b7:e9:c7:08:a0:ba:
3f:8c:05:56:d4:73:6f:1a:6c:72:aa:c7:9c:00:7a:44:b9:3d:
11:42:5a:ea:0a:b2:ba:0b:f2:5c:fa:9f:a6:36:e6:df:d4:11:
2c:02:b5:a9:8e:4f:85:0d:0a:64:1f:93:d8:26:3d:3e:c1:f9:
67:46:60:8e:bd:fa:13:93:cc:0b:9c:7b:e1:21:4e:91:d3:80:
f3:45:3e:cb:30:7b:fb:05:8c:ca:39:10:a5:f1:44:38:f8:b5:
40:a7:77:7d:75:54:0f:aa:43:6b:a9:82:f6:2d:f9:ce:ec:53:
9e:6f:c6:3b:b0:a7:a6:a4:c3:3a:90:da:dd:f7:a1:21:f6:05:
4a:d7:1a:d6:94:4a:45:16:99:37:78:1a:a9:11:bb:07:1d:27:
b5:c9:53:d7:70:09:32:66:b3:f4:ec:1b:a3:5e:bc:b6:e2:25:
34:a5:70:5e:f1:47:f7:95:8b:3a:6c:32:fe:c4:0a:a4:a2:dd:
7b:cf:c4:77:29:a4:1d:f7:7b:bb:4c:e5:61:ef:08:94:fd:e8:
72:98:75:fe:9a:08:b5:f4:d9:f9:cb:a6:d4:42:66:04:0c:a9:
9c:05:67:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:59:44 2025 by rpki-client