Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
File: l9Y19-2_mFQOYSLJxsIL43gotSY.mft (raw, json)
Hash identifier: wxnKMy/ddASlOo5LN0b9qNYxbFiSp8xhebVK8UG/u7s=
Subject key identifier: A3:15:62:B4:DB:AA:96:E5:D9:EF:78:03:CB:E9:9C:F5:79:5D:AB:AD
Authority key identifier: 97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26
Certificate issuer: /CN=F3624E32AF/serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
Certificate serial: 0329
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
Manifest number: 0328
Signing time: Mon 30 Jun 2025 03:44:19 +0000
Manifest this update: Mon 30 Jun 2025 03:44:19 +0000
Manifest next update: Wed 02 Jul 2025 03:44:19 +0000
Files and hashes: 1: l9Y19-2_mFQOYSLJxsIL43gotSY.crl (hash: c2olxRqJ2kUr8weUnF9uFuIxygvsOXf1B1xBDjJo+fw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 809 (0x329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3624E32AF, serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
Validity
Not Before: Jun 30 03:44:19 2025 GMT
Not After : Jul 2 03:44:19 2025 GMT
Subject: CN=68620813-190a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:f8:46:f8:e4:2d:84:17:f5:24:48:af:ac:
3c:49:f6:5a:d5:3f:27:aa:a8:7e:e8:8d:ef:8a:a7:
6c:8b:c0:84:5e:a5:b8:b0:4c:61:6b:47:01:78:9b:
e0:c7:ee:e5:3d:25:02:0f:23:99:f7:77:a4:65:84:
7b:64:a6:e8:3b:1d:f2:dc:00:a9:8e:27:83:ec:49:
b4:14:f2:7a:02:47:bf:33:df:0b:27:4e:8c:4c:55:
18:bc:6f:5f:92:41:3b:2e:85:7e:50:a9:36:98:a3:
59:91:98:a8:65:76:aa:38:70:d6:db:de:f4:b9:1d:
7f:be:77:8b:32:0b:68:de:44:0b:33:7c:ec:c7:20:
60:73:15:23:d4:cd:a0:c1:80:8b:bd:b7:8a:17:5a:
08:19:05:61:00:fc:d9:63:92:65:36:ed:06:43:45:
86:eb:dc:ed:3c:c6:92:b5:43:0e:68:f8:ba:93:5b:
4d:e0:b5:e7:4d:f8:27:d1:e1:74:1c:cf:36:70:53:
84:8e:c9:ff:82:ca:8c:b4:2e:81:df:2d:d3:9e:01:
ef:ad:75:a4:18:3a:da:73:63:75:28:6a:33:f6:42:
f3:e0:c1:0c:cb:c9:ad:b3:1e:9d:88:3d:52:e1:cb:
1e:97:1a:e3:a8:d2:ab:88:d3:81:d7:88:e6:26:ea:
74:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:15:62:B4:DB:AA:96:E5:D9:EF:78:03:CB:E9:9C:F5:79:5D:AB:AD
X509v3 Authority Key Identifier:
keyid:97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:d5:94:b4:fd:ad:92:3f:ea:ad:ab:59:63:27:ba:ed:d4:6e:
96:33:85:f2:d1:11:4e:95:78:3b:fc:ae:80:d1:d1:1e:c9:f9:
f6:bb:db:b1:37:d7:a7:61:80:9f:6d:18:7c:00:73:b6:ca:92:
62:e7:78:74:04:f7:54:92:82:e6:ea:45:e6:68:58:09:e5:3d:
d6:c7:2e:ed:bc:d6:eb:35:17:7a:6b:2b:3b:b0:72:5c:ac:8d:
23:c1:0d:88:f9:b1:0a:18:67:42:c3:9d:8d:b5:e6:cc:5e:51:
82:6f:5b:7a:a5:72:f3:9a:db:81:5e:06:7f:fb:c5:d7:95:9b:
65:c4:b3:c4:90:7e:89:da:ac:24:db:fa:c2:5f:67:54:0d:03:
6d:d1:38:09:f7:f5:27:c1:c7:23:5b:1e:f7:c1:04:24:98:e6:
aa:0d:0a:46:c7:b9:e7:a0:d8:15:87:49:08:d0:56:c4:fc:7b:
70:40:2b:31:fe:a3:f1:57:11:34:72:c2:a4:d1:17:c1:d6:f4:
3b:53:f4:90:1d:d5:cc:31:17:02:d5:fc:f6:84:88:fd:54:f4:
e2:4f:24:ba:8f:48:54:fc:b3:9d:90:e9:75:f9:16:c0:c7:13:
35:69:01:cf:4e:91:da:39:de:12:5f:10:a2:de:2e:b5:97:0b:
7c:07:17:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:02:19 2025 by rpki-client