Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
File: 3YPIwAXNcQS4JubaokvJUXkImqM.mft (raw, json)
Hash identifier: MFi1C0nkwgiJazTVuhpFNcWmRuXFvRMaTJsHJ3WHTcI=
Subject key identifier: 95:A7:45:AF:5F:D6:63:14:0C:70:B4:FF:BD:D1:4C:91:FF:8B:05:9E
Authority key identifier: DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3
Certificate issuer: /CN=F36162E8AF/serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
Certificate serial: 0582
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
Manifest number: 0580
Signing time: Sat 10 May 2025 02:29:37 +0000
Manifest this update: Sat 10 May 2025 02:29:36 +0000
Manifest next update: Mon 12 May 2025 02:29:36 +0000
Files and hashes: 1: 3YPIwAXNcQS4JubaokvJUXkImqM.crl (hash: wgkvpLpeF7L5lPxnNIUqBcgcDyWs1jEbEYYyM44lfG4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1410 (0x582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36162E8AF, serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
Validity
Not Before: May 10 02:29:36 2025 GMT
Not After : May 12 02:29:36 2025 GMT
Subject: CN=681eba11-6fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:ec:15:9f:5f:a1:7c:7e:4d:6f:05:26:a3:
7b:47:1b:8d:82:c7:76:d2:97:d9:5f:5f:86:e5:76:
8f:82:75:94:01:b0:29:bc:cf:ec:bb:1f:db:d6:a9:
9b:66:dd:65:da:6c:60:63:c2:aa:72:a4:fe:46:85:
20:6d:61:79:93:b2:d7:55:24:15:81:31:99:6c:44:
be:43:80:c5:f5:4f:59:39:e8:4e:1c:df:71:bd:53:
05:9a:77:18:f4:13:e2:3b:05:64:dd:cb:0b:0f:d1:
ed:fc:6c:64:0e:78:a6:9b:d0:34:68:5a:21:b6:32:
fc:0b:06:04:2a:11:fe:ad:9d:06:5a:c2:73:36:9f:
4c:d1:47:84:af:e4:7a:11:6e:a2:0c:37:ea:dd:50:
46:b8:88:d4:6a:0d:7c:59:b1:ba:a3:96:f7:52:54:
18:87:41:56:2f:c0:1a:94:c0:e3:8d:56:a1:df:ce:
49:01:aa:5d:79:dd:37:43:1d:fe:bc:8b:87:ba:07:
0a:31:8a:d2:db:92:8b:8c:8e:a3:4e:41:58:ed:6f:
99:fe:ac:51:5b:3a:6c:47:7b:aa:6c:78:64:b3:a3:
2a:45:48:a2:83:02:74:77:8b:51:21:ac:8a:21:13:
58:9e:41:9a:3f:2a:aa:9e:7c:a6:5e:a1:e7:d7:e9:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A7:45:AF:5F:D6:63:14:0C:70:B4:FF:BD:D1:4C:91:FF:8B:05:9E
X509v3 Authority Key Identifier:
keyid:DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d8:ba:65:a4:9f:bb:2f:96:05:a9:68:af:2f:bd:44:55:76:
e6:c1:37:b4:ee:16:c0:05:b9:21:96:4a:95:eb:c8:68:7e:80:
75:1a:fe:cd:41:f3:83:0c:90:1e:8c:c4:47:08:ba:86:85:a6:
6e:27:5a:da:a1:2e:18:84:c2:eb:03:86:a3:2e:5c:4d:23:f1:
70:fd:11:70:61:f1:cd:bb:15:a7:a4:e0:f8:74:25:c6:1b:b4:
6a:d7:ce:93:54:10:95:47:8d:f1:bd:32:37:20:5b:ae:18:17:
34:6e:45:6a:7b:a6:6e:4a:f9:b6:0f:bb:a2:96:2b:14:98:96:
c4:f8:dc:7f:22:37:55:61:53:44:65:b1:d4:a9:a2:ce:2f:70:
97:06:06:26:55:ca:19:03:23:cd:df:54:3c:9e:4b:85:2d:be:
4b:22:93:90:7c:11:b5:f7:a6:78:c7:c2:e5:1f:d9:d3:cc:96:
51:8c:c5:1b:5e:ee:5e:15:da:e1:ae:47:ef:55:dc:8e:fb:3d:
7f:34:81:73:58:10:fa:dd:10:ad:f6:1f:94:1c:56:2f:25:8a:
cf:df:34:c2:b2:a9:17:c3:63:3d:6b:44:ae:5f:d3:1a:e5:e9:
ea:9f:93:a7:a5:18:f7:4d:79:5e:50:58:7b:b1:c6:b0:84:da:
88:93:e3:e8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTYyRThBRjExMC8GA1UEBRMoREQ4M0M4QzAwNUNENzEwNEI4MjZFNkRBQTI0QkM5
NTE3OTA4OUFBMzAeFw0yNTA1MTAwMjI5MzZaFw0yNTA1MTIwMjI5MzZaMBgxFjAU
BgNVBAMTDTY4MWViYTExLTZmZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDA0OwVn1+hfH5NbwUmo3tHG42Cx3bSl9lfX4bldo+CdZQBsCm8z+y7H9vW
qZtm3WXabGBjwqpypP5GhSBtYXmTstdVJBWBMZlsRL5DgMX1T1k56E4c33G9UwWa
dxj0E+I7BWTdywsP0e38bGQOeKab0DRoWiG2MvwLBgQqEf6tnQZawnM2n0zRR4Sv
5HoRbqIMN+rdUEa4iNRqDXxZsbqjlvdSVBiHQVYvwBqUwOONVqHfzkkBql153TdD
Hf68i4e6BwoxitLbkouMjqNOQVjtb5n+rFFbOmxHe6pseGSzoypFSKKDAnR3i1Eh
rIohE1ieQZo/KqqefKZeoefX6X8fAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUladF
r1/WYxQMcLT/vdFMkf+LBZ4wHwYDVR0jBBgwFoAU3YPIwAXNcQS4JubaokvJUXkI
mqMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE2MkU4Lzc4NUM1MDRBRkI0MzExRUI4QThBQkYzQ0Q4QTAxNENFLzNZUEl3
QVhOY1FTNEp1YmFva3ZKVVhrSW1xTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzNZUEl3QVhOY1FTNEp1YmFva3ZKVVhrSW1xTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTYyRTgvNzg1QzUwNEFGQjQzMTFFQjhBOEFCRjNDRDhB
MDE0Q0UvM1lQSXdBWE5jUVM0SnViYW9rdkpVWGtJbXFNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBc2LplpJ+7L5YFqWivL71EVXbmwTe0
7hbABbkhlkqV68hofoB1Gv7NQfODDJAejMRHCLqGhaZuJ1raoS4YhMLrA4ajLlxN
I/Fw/RFwYfHNuxWnpOD4dCXGG7Rq186TVBCVR43xvTI3IFuuGBc0bkVqe6ZuSvm2
D7uilisUmJbE+Nx/IjdVYVNEZbHUqaLOL3CXBgYmVcoZAyPN31Q8nkuFLb5LIpOQ
fBG196Z4x8LlH9nTzJZRjMUbXu5eFdrhrkfvVdyO+z1/NIFzWBD63RCt9h+UHFYv
JYrP3zTCsqkXw2M9a0SuX9Ma5enqn5OnpRj3TXleUFh7scawhNqIk+Po
-----END CERTIFICATE-----
Generated at Sat May 10 13:51:23 2025 by rpki-client