Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
File: Y2BaihJPjsom32anMaZF3MgxlJU.mft (raw, json)
Hash identifier: bDMOX8yJCCIUXNy3+oCf7WhKerhvTqYDlosV51R689M=
Subject key identifier: 3C:2A:75:CE:34:B7:43:9B:A4:DD:7E:56:F9:99:61:A4:8E:44:27:18
Authority key identifier: 63:60:5A:8A:12:4F:8E:CA:26:DF:66:A7:31:A6:45:DC:C8:31:94:95
Certificate issuer: /CN=F36150C1AF/serialNumber=63605A8A124F8ECA26DF66A731A645DCC8319495
Certificate serial: 0CC3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
Manifest number: 0CC3
Signing time: Sun 29 Jun 2025 01:07:34 +0000
Manifest this update: Sun 29 Jun 2025 01:07:33 +0000
Manifest next update: Tue 01 Jul 2025 01:07:33 +0000
Files and hashes: 1: Y2BaihJPjsom32anMaZF3MgxlJU.crl (hash: zbxsKBwaLKWd326Ak+BCdZAx6Dm68PyQmglbvI+lMEQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3267 (0xcc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36150C1AF, serialNumber=63605A8A124F8ECA26DF66A731A645DCC8319495
Validity
Not Before: Jun 29 01:07:33 2025 GMT
Not After : Jul 1 01:07:33 2025 GMT
Subject: CN=686091d6-6bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:b7:4c:d1:8d:3e:eb:01:42:36:f7:12:64:
33:ec:1c:33:2d:90:76:46:d3:89:50:1e:01:af:1e:
6b:b5:9b:ac:0b:b8:e3:1e:c8:02:5c:03:7f:12:75:
ab:e5:a0:86:ae:e6:24:8c:5c:1c:4e:ab:05:51:cc:
5b:23:3a:7b:b3:29:9d:22:5f:28:85:17:7d:49:c7:
e5:76:a0:88:41:21:01:49:cc:45:ab:f3:db:45:ef:
d0:b1:6f:9c:c4:01:3a:88:9c:a5:d3:4a:16:ca:1e:
41:5a:03:91:b4:68:74:85:0a:54:79:d3:81:54:a2:
3a:83:ed:b2:eb:4a:4a:12:16:1f:54:73:fe:99:35:
b2:f1:be:1c:11:a9:3f:73:7c:ac:18:be:94:f2:a1:
b9:1b:69:8d:f2:0e:28:9e:d0:ce:50:f9:81:e6:c8:
d3:58:5b:f2:bb:93:89:69:4d:2e:35:eb:70:9a:46:
72:d9:47:09:fc:1b:2a:07:b8:82:cf:32:55:88:fc:
9e:53:ed:c1:36:ce:62:f8:0a:d9:ca:0e:7a:e7:37:
52:b8:8e:f6:04:6d:9e:75:88:e9:78:c2:34:1e:4a:
c1:35:b5:7c:39:e9:40:60:8a:d7:bb:75:cb:68:3c:
fa:22:7b:1b:5c:fc:66:97:32:08:d8:3f:5b:f4:3a:
70:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2A:75:CE:34:B7:43:9B:A4:DD:7E:56:F9:99:61:A4:8E:44:27:18
X509v3 Authority Key Identifier:
keyid:63:60:5A:8A:12:4F:8E:CA:26:DF:66:A7:31:A6:45:DC:C8:31:94:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:43:04:c5:83:97:fc:69:81:4d:0c:5e:fa:4e:a0:6a:2b:5d:
23:86:3c:a7:13:dd:31:09:55:01:c2:8d:b6:58:c3:35:c3:3a:
f1:62:fc:02:e0:87:a6:00:e6:cd:71:89:79:2e:6b:66:cf:e6:
e9:c7:9f:cb:df:ea:84:5c:59:c6:c3:cc:2c:e3:43:0c:46:77:
58:cb:3c:ae:74:69:42:88:0c:ac:4a:ed:f2:22:aa:04:e1:7f:
d2:a4:73:c4:29:12:e6:fb:e8:ec:08:03:09:15:ee:f3:ae:7b:
f0:79:84:10:db:3b:5d:87:3e:70:2e:1e:ca:e2:d1:fd:dd:2f:
9d:bf:73:a2:ac:8b:00:9b:63:c2:39:fe:e8:ca:b1:27:03:c3:
11:e7:6e:94:85:9e:ec:20:ce:b5:07:91:62:d9:fb:da:44:c5:
13:f0:a0:8e:72:5d:a1:6c:3a:b8:4b:b3:73:d4:e8:fc:69:5b:
6e:e3:53:db:e5:98:66:e2:68:d0:58:ed:c7:b4:94:d1:c7:83:
3f:92:ab:ad:2a:cf:e9:03:da:b9:e8:be:fb:a2:c9:33:c9:71:
a9:6c:35:44:44:fd:dd:d3:a7:e7:d3:36:69:5a:40:b7:16:09:
b8:26:cd:a6:ec:87:5f:58:6e:22:73:f9:1a:ed:9b:41:11:24:
2d:23:db:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:08:36 2025 by rpki-client