Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
File: poVzBBtD85x4jvNbdksxjIhJyf4.mft (raw, json)
Hash identifier: jEIimNoQ3oUa74COwwtXvemjAGm/TKI8MBpG2jODx8A=
Subject key identifier: A4:85:3A:EC:2A:51:54:BD:CC:D1:F5:96:50:D2:C8:00:54:7A:1C:23
Authority key identifier: A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE
Certificate issuer: /CN=F3632159AF/serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
Certificate serial: 03D1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
Manifest number: 03D1
Signing time: Wed 14 May 2025 03:16:24 +0000
Manifest this update: Wed 14 May 2025 03:16:23 +0000
Manifest next update: Fri 16 May 2025 03:16:23 +0000
Files and hashes: 1: poVzBBtD85x4jvNbdksxjIhJyf4.crl (hash: Qjh1cx9iIaSsP21mYZAa09nx2K/vh6B8rbJoxidBLvo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 May 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 977 (0x3d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3632159AF, serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
Validity
Not Before: May 14 03:16:23 2025 GMT
Not After : May 16 03:16:23 2025 GMT
Subject: CN=68240b08-5b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8c:79:91:4f:14:44:52:10:f6:1f:82:98:9c:
af:03:78:82:84:42:68:06:98:9d:8c:39:18:89:38:
36:90:01:48:86:50:89:bb:20:bc:9a:89:c5:fa:51:
92:8d:2f:ab:91:05:8f:4c:84:94:fc:91:35:09:28:
eb:5e:cc:3c:b8:60:e0:66:21:a1:e8:3a:5c:1e:03:
91:53:a1:3a:07:a2:94:a1:b8:0e:be:09:67:86:95:
79:a1:1d:06:53:74:63:bf:ac:75:17:83:b7:05:e4:
c0:cf:72:23:83:f3:dd:d8:65:1d:fc:72:3e:b8:d0:
6b:03:41:de:66:37:d1:b6:a0:fa:a4:bc:4a:85:69:
29:bc:64:6c:47:35:b2:2c:6d:59:87:43:0c:59:77:
32:6d:78:fb:29:ea:68:a7:21:ea:98:18:29:00:60:
5b:3f:03:e3:18:57:c4:f0:1c:06:c2:21:f3:7a:b7:
a2:f9:13:cf:e9:9c:b3:14:30:19:ea:3c:15:96:dc:
25:f5:38:8d:3b:b6:16:67:b9:d6:36:22:2e:dc:f9:
14:3a:0a:42:34:8d:19:8c:47:21:ac:c8:c8:c8:da:
2d:99:5c:3a:7c:64:6f:00:9c:f3:dc:d2:a9:3b:9e:
fd:ee:4b:4f:a8:dd:ee:1c:7b:20:ae:5a:7a:a1:2e:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:85:3A:EC:2A:51:54:BD:CC:D1:F5:96:50:D2:C8:00:54:7A:1C:23
X509v3 Authority Key Identifier:
keyid:A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:e4:b1:cd:6f:32:e5:e9:97:df:85:67:22:1a:f8:c9:96:cb:
3d:d3:3d:6e:00:95:72:f5:54:83:bc:80:9d:e7:41:8c:e3:f1:
90:b0:32:52:4f:12:ab:16:e5:ed:5e:62:1b:8f:9b:8e:7c:4c:
bc:d8:20:86:65:94:3b:9f:28:53:a0:03:2b:67:e2:1e:1d:2e:
84:5b:b6:3c:c6:d4:19:00:f5:63:a6:93:75:52:94:6b:2c:65:
8d:c2:dc:53:5a:3f:c3:db:7d:83:d3:c2:03:95:ec:4d:14:a5:
2b:16:85:6d:51:cc:b4:ce:b0:d7:96:47:d4:a6:63:82:d8:32:
6a:b1:99:60:23:bb:4a:42:be:c7:eb:02:0d:da:0f:9d:2d:f2:
3f:d0:5b:2d:de:5e:54:71:f4:36:a8:f6:0e:00:94:af:eb:9f:
73:e6:d2:54:a6:34:16:30:0a:1a:68:83:f5:90:d1:78:5f:a6:
d8:28:9c:af:66:41:f1:c1:23:8d:6f:ea:11:e5:5c:b3:62:38:
9e:b9:45:37:42:5b:07:2e:f1:9c:9f:13:45:51:56:9a:bd:27:
9a:35:ba:af:a8:9c:30:0f:56:7c:46:48:61:a8:ae:b7:e9:80:
f2:f0:2c:94:74:95:02:11:1e:75:3c:b9:8e:96:75:c3:19:a2:
3a:b6:3d:fc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA9EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzIxNTlBRjExMC8GA1UEBRMoQTY4NTczMDQxQjQzRjM5Qzc4OEVGMzVCNzY0QjMx
OEM4ODQ5QzlGRTAeFw0yNTA1MTQwMzE2MjNaFw0yNTA1MTYwMzE2MjNaMBgxFjAU
BgNVBAMTDTY4MjQwYjA4LTViMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOjHmRTxREUhD2H4KYnK8DeIKEQmgGmJ2MORiJODaQAUiGUIm7ILyaicX6
UZKNL6uRBY9MhJT8kTUJKOtezDy4YOBmIaHoOlweA5FToToHopShuA6+CWeGlXmh
HQZTdGO/rHUXg7cF5MDPciOD893YZR38cj640GsDQd5mN9G2oPqkvEqFaSm8ZGxH
NbIsbVmHQwxZdzJtePsp6minIeqYGCkAYFs/A+MYV8TwHAbCIfN6t6L5E8/pnLMU
MBnqPBWW3CX1OI07thZnudY2Ii7c+RQ6CkI0jRmMRyGsyMjI2i2ZXDp8ZG8AnPPc
0qk7nv3uS0+o3e4ceyCuWnqhLvxxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUpIU6
7CpRVL3M0fWWUNLIAFR6HCMwHwYDVR0jBBgwFoAUpoVzBBtD85x4jvNbdksxjIhJ
yf4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMyMTU5L0EyNEM5ODNDNEFCQzExRURBMEY1NzA4NEYxMjIyNDY4L3BvVnpC
QnREODV4NGp2TmJka3N4akloSnlmNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3BvVnpCQnREODV4NGp2TmJka3N4akloSnlmNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzIxNTkvQTI0Qzk4M0M0QUJDMTFFREEwRjU3MDg0RjEy
MjI0NjgvcG9WekJCdEQ4NXg0anZOYmRrc3hqSWhKeWY0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAi5LHNbzLl6ZffhWciGvjJlss90z1u
AJVy9VSDvICd50GM4/GQsDJSTxKrFuXtXmIbj5uOfEy82CCGZZQ7nyhToAMrZ+Ie
HS6EW7Y8xtQZAPVjppN1UpRrLGWNwtxTWj/D232D08IDlexNFKUrFoVtUcy0zrDX
lkfUpmOC2DJqsZlgI7tKQr7H6wIN2g+dLfI/0Fst3l5UcfQ2qPYOAJSv659z5tJU
pjQWMAoaaIP1kNF4X6bYKJyvZkHxwSONb+oR5VyzYjieuUU3QlsHLvGcnxNFUVaa
vSeaNbqvqJwwD1Z8RkhhqK636YDy8CyUdJUCER51PLmOlnXDGaI6tj38
-----END CERTIFICATE-----
Generated at Wed May 14 13:40:31 2025 by rpki-client