Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier: 9DnP1HGtUjnh5fRSDcpSvWgGDrYOeldIUckVT3W7sQ0=
Subject key identifier: D8:55:92:40:B2:D7:30:30:8F:79:74:0D:F1:3D:6A:4B:D3:C6:5F:84
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer: /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial: 03DB
Authority info access: rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number: 03DA
Signing time: Mon 28 Apr 2025 03:18:50 +0000
Manifest this update: Mon 28 Apr 2025 03:18:49 +0000
Manifest next update: Wed 30 Apr 2025 03:18:49 +0000
Files and hashes: 1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: nFxg7ipdxNp67mP7nsq56ue1ORzK3fM9EZxKfv/ElW8=)
2: 8FD98C2038B311EDAAA5E7DFF1222468.roa (hash: UXAWeOCC1criU7XL7P2zWbiZAhjMbu4dS0oFzWgmmoM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 987 (0x3db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA5EAAR, serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Validity
Not Before: Apr 28 03:18:49 2025 GMT
Not After : Apr 30 03:18:49 2025 GMT
Subject: CN=680ef39a-62f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:25:d8:84:f2:3a:3d:fa:d5:7f:3f:cc:61:
92:60:06:a2:a3:83:31:ab:12:35:c3:b8:c0:54:59:
d3:30:b2:8c:65:f8:da:aa:21:ff:32:39:c4:9e:38:
01:34:17:50:05:3e:7b:36:8a:dd:75:82:d0:62:15:
c1:96:dd:75:54:26:ce:0b:e0:9e:25:56:83:07:ab:
28:cc:2e:87:3c:90:f9:23:d7:1f:ee:19:dc:4c:5d:
cd:0a:36:48:7b:62:20:5f:a5:87:b9:56:17:b0:d3:
6e:e9:bc:00:83:77:a7:2c:4d:95:b2:2b:ca:4d:c8:
e7:0b:a7:d5:56:91:43:d3:1d:27:b1:54:09:62:81:
8e:9c:86:20:13:82:90:91:0d:ef:2a:a1:8a:e9:ba:
4d:90:a4:0e:ae:30:9a:8c:89:02:40:1a:9e:ac:ee:
90:ff:40:96:af:05:36:89:38:90:7b:4a:0d:f1:7e:
f9:2e:da:7c:0e:98:00:e6:0c:af:99:1b:2c:3c:9c:
27:bc:5d:1b:0a:19:4c:af:c0:86:e8:a2:10:93:4b:
65:d4:54:92:ad:75:14:8a:36:bb:40:af:2f:fd:cb:
6f:bc:aa:ad:4c:dd:27:5b:ab:ff:15:0e:d6:55:75:
74:d0:4d:82:5f:29:cf:34:e2:c2:b3:0a:ba:33:fd:
9e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:55:92:40:B2:D7:30:30:8F:79:74:0D:F1:3D:6A:4B:D3:C6:5F:84
X509v3 Authority Key Identifier:
keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:57:a6:c5:6d:bf:73:25:0e:64:48:dd:11:b2:34:1a:c2:a7:
12:5d:2c:15:8b:5e:10:6b:08:66:5a:41:ab:51:c9:2b:e0:06:
bc:26:86:cf:6a:00:03:96:40:36:73:2b:36:d3:62:d9:94:21:
89:b8:c0:79:1f:2d:ac:b8:bf:54:37:5f:be:3e:a2:d6:37:bd:
f7:0c:28:32:6e:3e:10:1c:0f:72:d1:8e:f0:4a:dc:26:35:cf:
8e:43:65:0f:ed:1e:75:db:23:f3:bd:2f:5c:63:09:07:01:6c:
71:9c:6d:5a:ce:00:bf:c5:40:86:9f:b2:91:21:41:8b:6a:59:
0c:2f:8c:96:be:ac:1a:51:4e:69:2e:89:85:69:73:6a:6c:e8:
36:04:ac:d3:2e:78:20:14:4a:79:e1:30:81:72:4d:2b:8d:4e:
d8:c7:0b:67:83:08:f1:8e:aa:c9:6f:fd:ba:e4:2f:20:a5:5c:
50:8f:ce:2a:88:76:80:c7:14:01:ca:66:1f:cb:2c:76:72:ff:
92:41:bc:be:fb:c8:92:e7:bc:9f:c7:39:81:ab:1f:be:16:01:
91:53:a0:e9:29:1d:48:60:77:94:94:9e:d1:1c:19:18:9a:ac:
b5:be:33:6b:0f:f6:f8:d7:58:ec:ae:dd:e3:a0:00:9e:f8:81:
2f:90:06:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:21:16 2025 by rpki-client