Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
File: X8N97OtwCLunQTR4RbdrR2d66mk.mft (raw, json)
Hash identifier: vNDn47GDQdwHk8F+sU162PwmSGiaoGBfEpFyvR/iNNc=
Subject key identifier: 23:96:CE:60:E4:41:EA:C9:57:F4:18:51:8C:66:E2:B5:F8:AF:CC:59
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Certificate issuer: /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial: 0255
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
Manifest number: 024F
Signing time: Sun 11 May 2025 04:05:22 +0000
Manifest this update: Sun 11 May 2025 04:05:22 +0000
Manifest next update: Tue 13 May 2025 04:05:22 +0000
Files and hashes: 1: X8N97OtwCLunQTR4RbdrR2d66mk.crl (hash: wxTKu4vrpXPJsHG0PcW/bqiB46Q/Q/3wyjuhDaE06uc=)
2: 6DA5A2565FD511EFA88ABB88762E951A.roa (hash: ro2wQBC/RLqE0zVlMpswfR5i9xWzti7o20ft60EsccY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3650567AF, serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Validity
Not Before: May 11 04:05:22 2025 GMT
Not After : May 13 04:05:22 2025 GMT
Subject: CN=68202202-a76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:60:86:6a:96:e3:b9:d8:1c:e5:b9:a3:a6:
6f:f1:64:cd:a4:24:96:2e:a5:4f:28:f8:d5:fa:55:
84:38:70:1b:cc:de:61:a9:64:72:73:ef:37:02:2b:
95:ed:a4:ee:dc:6f:3c:db:41:4b:68:67:72:10:27:
b0:86:05:d7:9d:f0:49:d2:ed:81:b1:8b:b7:00:96:
9d:0d:5c:b9:e9:3e:b0:6d:76:5a:89:52:c4:e6:2e:
56:61:b6:07:aa:3e:bb:60:06:fc:48:09:ce:fd:cd:
94:d3:ee:ca:36:91:4f:cc:ea:1a:9d:02:b0:81:60:
b0:66:92:8a:e1:53:b6:d0:af:38:7d:a0:a5:6c:d8:
0a:9d:c5:32:5e:23:c5:b8:94:90:bd:94:c3:45:e5:
a7:9f:49:19:1c:77:3c:d3:f6:3d:e2:dc:91:5c:35:
1a:03:2b:df:e5:df:f6:da:00:b2:40:7d:96:5b:ab:
86:95:b6:42:45:86:91:63:ef:42:28:1d:20:2e:36:
92:ca:27:50:8d:30:c4:2d:07:c4:33:88:11:ab:30:
9e:c2:7e:51:3d:58:76:7c:9f:57:88:8d:32:9b:29:
d8:7d:fa:9c:de:c7:7a:dd:eb:04:7e:6a:24:92:76:
e4:4d:14:ed:cb:04:4c:a2:09:b7:2b:77:a8:45:d6:
9f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:96:CE:60:E4:41:EA:C9:57:F4:18:51:8C:66:E2:B5:F8:AF:CC:59
X509v3 Authority Key Identifier:
keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:09:f7:02:a8:13:94:91:5a:61:f8:98:ec:61:f9:92:38:c8:
c5:3b:9c:2e:0a:4b:4e:34:1a:50:63:96:6c:38:71:3e:e0:29:
9b:ed:49:75:7b:ec:db:cd:96:7e:3c:3f:36:4b:c0:87:3c:b8:
d6:97:9d:74:51:3a:1a:c0:ff:0a:b0:15:64:f2:7d:15:51:95:
06:f9:ed:b0:02:3d:58:c1:ae:4e:0a:0d:04:11:5a:12:99:94:
a2:15:c2:fa:97:23:05:fc:60:88:80:7f:8f:bb:2b:e6:23:7d:
71:86:9d:f1:e4:ef:c4:70:de:86:93:ce:51:ca:86:0c:c9:a0:
a2:53:4d:c5:98:79:16:d9:70:21:ab:23:a4:2e:c2:23:7b:f7:
67:73:1f:fd:12:df:90:6e:94:bb:62:0c:64:29:d5:1d:ea:a8:
d2:4f:1d:41:15:fc:70:85:6e:df:a2:80:4c:74:29:c6:4e:45:
1a:2b:00:ed:8b:99:84:41:6d:9a:2d:79:cd:97:ac:40:8a:ae:
fc:4c:6b:b8:ca:d0:90:67:34:07:e8:2e:1f:8c:e7:f3:80:a4:
54:a8:1d:48:98:eb:c8:82:8d:22:4f:96:04:be:59:33:a1:98:
f7:d3:1a:01:e8:e6:7f:d3:89:49:a0:10:a3:75:6e:b1:df:b7:
92:3e:24:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:41:49 2025 by rpki-client