Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
File: GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft (raw, json)
Hash identifier: ZnxImCgh74X+7ON2H1moikcX+t6ZTO1l6vxw7hsmL5k=
Subject key identifier: AF:25:80:5B:79:63:DB:21:DF:9C:8A:F5:34:7F:1F:04:ED:72:73:AE
Authority key identifier: 18:DA:68:2C:1E:3E:C3:46:4D:39:1D:9B:71:A5:B8:52:A6:C9:B6:E3
Certificate issuer: /CN=F361E99DAF/serialNumber=18DA682C1E3EC3464D391D9B71A5B852A6C9B6E3
Certificate serial: 0670
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
Manifest number: 066E
Signing time: Sun 29 Jun 2025 02:07:54 +0000
Manifest this update: Sun 29 Jun 2025 02:07:53 +0000
Manifest next update: Tue 01 Jul 2025 02:07:53 +0000
Files and hashes: 1: GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl (hash: YWV1xY7h5CBKEFKCy9rsApbSHm4918sDcw1l9+8af5I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl
rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1648 (0x670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361E99DAF, serialNumber=18DA682C1E3EC3464D391D9B71A5B852A6C9B6E3
Validity
Not Before: Jun 29 02:07:53 2025 GMT
Not After : Jul 1 02:07:53 2025 GMT
Subject: CN=68609ffa-4337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:a2:11:5a:7e:a2:48:9a:7f:b3:61:48:c0:
97:31:23:9d:88:4b:7c:b5:70:7c:e7:0c:dc:7b:27:
79:bc:24:90:aa:60:c5:ef:ba:4c:94:ad:6b:1b:27:
95:91:ed:8f:af:e4:52:bf:e3:70:4c:2f:24:59:7d:
e9:35:83:cb:2a:26:c2:c0:70:0c:ac:78:c2:bd:c8:
6c:6e:3f:f6:6d:73:0d:b1:a6:52:7c:93:51:3c:e7:
4c:d7:af:4a:07:86:3a:04:90:ab:40:0d:e6:a4:40:
fa:a2:6a:37:58:30:0b:01:0e:7f:a9:eb:1c:f3:b0:
e5:d1:06:74:c3:ad:ba:c6:76:95:a8:8f:25:44:04:
11:a2:39:c3:d5:fb:94:07:e4:ea:f9:9c:3b:95:2f:
1d:8d:21:9c:84:87:ad:17:d2:bf:76:0b:cd:39:29:
63:27:89:ec:bb:11:b7:c9:57:c8:f9:db:95:8e:e0:
8f:6a:a9:92:ad:10:5b:6c:9a:44:4f:ae:bb:e3:5d:
3a:e1:3e:ea:bb:1c:89:40:23:41:15:bb:bf:aa:21:
d0:02:83:90:29:76:19:c2:f0:ec:27:78:d5:e9:db:
a5:64:bb:e6:42:8d:ab:7f:23:83:74:14:3c:fc:b3:
6e:2d:5b:4b:2b:5f:45:e4:48:ae:06:f0:3d:08:61:
10:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:25:80:5B:79:63:DB:21:DF:9C:8A:F5:34:7F:1F:04:ED:72:73:AE
X509v3 Authority Key Identifier:
keyid:18:DA:68:2C:1E:3E:C3:46:4D:39:1D:9B:71:A5:B8:52:A6:C9:B6:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:ba:40:fb:d7:f2:73:05:9c:88:1a:74:7d:85:65:b9:0d:62:
58:d4:b6:b3:d0:47:25:21:b7:d0:28:03:be:e9:0a:06:b2:92:
fa:94:a7:5a:28:29:ae:46:92:b2:17:38:42:be:98:09:dd:bd:
21:ec:af:d5:1c:8b:28:47:3b:b7:b4:9a:6c:91:c5:74:ee:5b:
5d:d5:7f:80:9a:fb:cb:c9:9e:8f:2c:39:14:b3:db:77:76:38:
88:4b:f3:e6:3e:59:87:2d:77:fa:7c:89:8a:02:df:fb:1f:b7:
4b:8d:e2:c5:32:dc:94:9d:6d:66:a8:a6:23:81:ab:77:6f:7a:
1e:df:bb:fc:f0:4c:5b:cd:f0:6a:5f:d0:a9:3e:30:30:a9:bf:
f2:cc:ff:72:26:ac:67:0c:f3:b8:ee:a5:e0:5f:97:92:6d:f9:
68:09:54:11:01:68:5c:22:31:66:4c:9b:3d:82:8e:c8:50:d8:
a7:9a:d9:e6:81:82:84:d5:02:9c:0a:27:aa:09:38:dd:07:06:
9d:03:1d:f7:95:6a:7d:e9:5f:f5:cb:8e:01:87:2c:6b:04:a1:
0c:b5:2f:e8:78:c0:15:e4:6b:b6:c7:13:d8:a7:ea:22:ad:cb:
7f:a2:b9:65:5b:8e:83:f7:b2:3b:5a:d7:4f:7a:fc:4b:78:f7:
ab:69:fa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:04:50 2025 by rpki-client