Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
File: YCmqMiQ3H_80BW6mdrX5npQG208.mft (raw, json)
Hash identifier: nUYAaZCvatO0+xFPjBS8of0dU5COx3x8SLg7udLqYAA=
Subject key identifier: EA:35:DC:8D:BB:EE:86:70:74:E6:DF:98:E7:08:D0:90:03:01:1A:1D
Authority key identifier: 60:29:AA:32:24:37:1F:FF:34:05:6E:A6:76:B5:F9:9E:94:06:DB:4F
Certificate issuer: /CN=F362BDD7AF/serialNumber=6029AA3224371FFF34056EA676B5F99E9406DB4F
Certificate serial: DE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
Manifest number: DE
Signing time: Sat 10 May 2025 04:56:12 +0000
Manifest this update: Sat 10 May 2025 04:56:11 +0000
Manifest next update: Mon 12 May 2025 04:56:11 +0000
Files and hashes: 1: YCmqMiQ3H_80BW6mdrX5npQG208.crl (hash: 8qde7nwAaQjueicAsbnoCc3i9vMZ/gkG1aZQMXP4eHQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.crl
rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362BDD7AF, serialNumber=6029AA3224371FFF34056EA676B5F99E9406DB4F
Validity
Not Before: May 10 04:56:11 2025 GMT
Not After : May 12 04:56:11 2025 GMT
Subject: CN=681edc6c-8ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:7c:ad:7d:ce:1a:aa:df:09:84:c7:ed:ee:
cf:0e:e2:aa:e3:b1:dd:8e:21:37:02:e8:c5:2d:53:
fc:8a:ba:60:21:42:34:42:59:a0:73:e0:da:d4:96:
e5:15:38:10:3c:48:20:54:45:12:ee:f6:99:9c:78:
cc:d3:08:50:1e:50:f2:61:6a:99:be:33:4c:bb:03:
19:d9:2f:9f:14:f1:88:ea:7f:5f:92:62:83:9f:67:
65:08:72:7e:57:ca:fb:92:31:f3:fb:3d:fb:1c:eb:
e9:b8:fd:e4:0c:6e:b0:43:8d:bf:9b:42:4e:00:0a:
d2:88:ca:98:67:68:54:85:93:f6:05:c1:63:f6:51:
56:86:61:5b:1f:b2:99:1d:ec:dd:b7:35:b6:72:ce:
30:5c:a8:11:bd:21:d3:38:55:3d:1d:44:56:ef:65:
0a:2b:dc:b8:fe:8f:ff:9a:17:ab:59:13:31:60:f8:
9d:7f:5c:23:9d:c3:92:12:f6:73:7b:ac:95:60:af:
c9:d9:35:d0:7b:18:20:98:19:10:d9:a1:c4:85:99:
1f:0c:38:4b:2a:0c:53:f6:18:39:1e:66:8e:4e:36:
52:1c:07:88:e8:b8:57:68:13:ed:b5:5f:18:c9:41:
8f:aa:52:74:d7:71:57:89:ac:4a:26:07:7e:9e:98:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:35:DC:8D:BB:EE:86:70:74:E6:DF:98:E7:08:D0:90:03:01:1A:1D
X509v3 Authority Key Identifier:
keyid:60:29:AA:32:24:37:1F:FF:34:05:6E:A6:76:B5:F9:9E:94:06:DB:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:09:a2:26:61:c5:3e:e3:ec:9a:56:df:82:94:a4:93:6a:9e:
5a:ce:22:85:61:74:11:9c:b9:5a:b0:2d:8e:64:dd:98:ed:54:
c5:8e:65:e9:26:99:72:df:8f:f8:38:96:a6:61:f0:84:47:48:
fc:ed:7b:74:cc:ee:3f:2e:37:a6:15:8a:31:1f:67:c6:3a:99:
81:a7:ac:67:b2:60:33:d9:ba:6b:f3:fa:28:51:ab:a3:02:82:
8c:8c:ac:e6:f5:b1:ee:38:71:65:19:7a:fd:90:b2:33:57:18:
41:6c:e7:fd:ae:30:7e:3e:b7:c7:c9:8b:3a:1a:5f:39:7e:d0:
2e:69:ef:34:bb:ad:98:3e:26:7d:6b:ec:e6:ab:df:ed:f5:c8:
a2:4f:e7:04:8c:26:40:b1:9d:eb:eb:7a:5c:f4:08:9b:7e:6e:
e4:c9:c2:82:a1:43:a1:26:2e:d3:d0:eb:50:81:1f:bc:c3:44:
1d:3d:af:55:9c:f9:65:d3:b3:0a:ab:09:bb:54:fd:4c:96:76:
0a:61:8f:16:30:33:56:21:ba:1f:03:70:e9:e9:ef:e0:7d:c8:
41:ca:8e:56:9a:d5:83:ea:8a:71:b5:41:3e:91:f9:bb:15:b2:
ae:77:38:67:af:c8:0d:f7:31:77:89:e6:2b:96:6a:a4:57:0e:
a5:c1:3d:86
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkJERDdBRjExMC8GA1UEBRMoNjAyOUFBMzIyNDM3MUZGRjM0MDU2RUE2NzZCNUY5
OUU5NDA2REI0RjAeFw0yNTA1MTAwNDU2MTFaFw0yNTA1MTIwNDU2MTFaMBgxFjAU
BgNVBAMTDTY4MWVkYzZjLThjZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLUXytfc4aqt8JhMft7s8O4qrjsd2OITcC6MUtU/yKumAhQjRCWaBz4NrU
luUVOBA8SCBURRLu9pmceMzTCFAeUPJhapm+M0y7AxnZL58U8Yjqf1+SYoOfZ2UI
cn5XyvuSMfP7Pfsc6+m4/eQMbrBDjb+bQk4ACtKIyphnaFSFk/YFwWP2UVaGYVsf
spkd7N23NbZyzjBcqBG9IdM4VT0dRFbvZQor3Lj+j/+aF6tZEzFg+J1/XCOdw5IS
9nN7rJVgr8nZNdB7GCCYGRDZocSFmR8MOEsqDFP2GDkeZo5ONlIcB4jouFdoE+21
XxjJQY+qUnTXcVeJrEomB36emBURAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU6jXc
jbvuhnB05t+Y5wjQkAMBGh0wHwYDVR0jBBgwFoAUYCmqMiQ3H/80BW6mdrX5npQG
208wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJCREQ3L0VGNEQyQjA2ODU2MTExRUZBNTY3MEQ5RDc2MkU5NTFBL1lDbXFN
aVEzSF84MEJXNm1kclg1bnBRRzIwOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lDbXFNaVEzSF84MEJXNm1kclg1bnBRRzIwOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkJERDcvRUY0RDJCMDY4NTYxMTFFRkE1NjcwRDlENzYy
RTk1MUEvWUNtcU1pUTNIXzgwQlc2bWRyWDVucFFHMjA4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhCaImYcU+4+yaVt+ClKSTap5aziKF
YXQRnLlasC2OZN2Y7VTFjmXpJply34/4OJamYfCER0j87Xt0zO4/LjemFYoxH2fG
OpmBp6xnsmAz2bpr8/ooUaujAoKMjKzm9bHuOHFlGXr9kLIzVxhBbOf9rjB+PrfH
yYs6Gl85ftAuae80u62YPiZ9a+zmq9/t9ciiT+cEjCZAsZ3r63pc9Aibfm7kycKC
oUOhJi7T0OtQgR+8w0QdPa9VnPll07MKqwm7VP1MlnYKYY8WMDNWIbofA3Dp6e/g
fchByo5WmtWD6opxtUE+kfm7FbKudzhnr8gN9zF3ieYrlmqkVw6lwT2G
-----END CERTIFICATE-----
Generated at Sat May 10 08:02:19 2025 by rpki-client