Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
File: zz9PkkOmHTvtkzzA81M8or4JO9w.mft (raw, json)
Hash identifier: Mxxk44oSwbueK5K/NTJesMf1D+dBRHPPvAoQhaZBQUw=
Subject key identifier: 7A:FD:77:7B:65:2F:F1:52:FB:06:3E:EF:4D:DE:30:65:74:46:CB:8E
Authority key identifier: CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC
Certificate issuer: /CN=F36628D0AF/serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
Certificate serial: 01D0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
Manifest number: 01D0
Signing time: Mon 05 May 2025 04:24:39 +0000
Manifest this update: Mon 05 May 2025 04:24:38 +0000
Manifest next update: Wed 07 May 2025 04:24:38 +0000
Files and hashes: 1: zz9PkkOmHTvtkzzA81M8or4JO9w.crl (hash: EZKuEjf+8fMNs4QiZtJ8PTcVcXvIXvLtgeXR9yL139Q=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 07 May 2025 00:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36628D0AF, serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
Validity
Not Before: May 5 04:24:38 2025 GMT
Not After : May 7 04:24:38 2025 GMT
Subject: CN=68183d87-ca49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:4a:c6:e5:b8:92:54:cb:86:27:86:33:e7:
52:7f:3d:3e:77:ae:98:71:2d:a1:e3:a8:1d:35:5b:
df:69:3e:b1:3f:ae:8d:2e:f0:03:46:26:41:2f:a9:
25:f1:2b:54:d1:63:11:4b:f6:08:2b:00:75:36:c3:
ab:a1:78:31:25:2b:84:ca:e5:0a:6e:57:d4:13:fa:
b5:9b:56:68:cf:e7:96:ed:4c:0a:05:5d:43:42:52:
5d:5c:46:f4:3e:64:d1:4f:a9:90:dc:13:da:48:64:
50:cc:f0:bd:9c:5e:68:07:92:37:cf:56:72:98:8a:
3a:f4:4c:98:b7:69:a2:66:e9:57:cc:53:67:04:e7:
6f:67:b7:1c:4c:4b:a9:a8:d9:5a:1a:c1:4a:79:c2:
0a:5d:ee:b8:53:75:f7:10:e8:71:6f:dd:68:56:e8:
22:0b:92:04:78:2a:e9:0e:54:34:64:58:8f:e5:0c:
32:7a:bc:42:d1:53:a1:a3:36:ca:0c:7c:9a:5a:11:
3f:97:13:18:67:1c:3d:eb:99:a9:6d:0b:11:56:8b:
a1:64:42:bc:c8:3d:ec:70:75:aa:c8:79:3b:4d:73:
fc:24:0d:e4:bf:ee:f2:84:e1:42:ec:48:d9:c7:16:
6b:3f:58:7e:49:a5:d3:bd:4c:be:5a:f2:7b:80:c2:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FD:77:7B:65:2F:F1:52:FB:06:3E:EF:4D:DE:30:65:74:46:CB:8E
X509v3 Authority Key Identifier:
keyid:CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:31:e3:e8:63:16:1e:e8:63:d6:c9:48:4a:7d:75:88:96:b7:
58:a3:81:26:60:d1:a2:ed:09:7b:38:f5:b1:40:5d:13:d1:1f:
5d:37:6c:83:6a:6f:a9:b5:a4:69:78:2c:54:a5:a1:e5:fe:1f:
8e:31:d5:a1:17:29:2b:d4:ef:bc:44:d8:bc:7d:02:76:1d:53:
78:30:f9:f4:b2:26:42:bb:a2:96:63:d0:c5:41:f8:5a:65:14:
b1:fc:10:f8:f5:49:ce:32:72:16:e5:14:6c:a6:da:08:90:29:
72:3a:de:40:37:e5:b9:6a:c8:05:e9:58:6e:ce:ef:52:e8:3a:
43:28:16:e7:ba:ca:ce:c7:aa:86:0d:72:db:13:0d:97:1a:6f:
9f:6a:92:f0:0b:35:9b:34:41:70:a4:78:12:e7:06:6d:7a:a5:
e0:a1:f6:e5:45:9a:73:28:7e:97:e3:d6:a0:db:c9:c4:01:4f:
55:59:12:31:b3:b0:4b:de:5c:9b:83:25:41:d6:46:22:29:4e:
df:2f:c7:a5:6c:f7:22:69:16:d4:62:c0:b3:15:b1:13:b4:7c:
05:d7:15:f8:6c:7c:aa:9a:27:f8:a4:6d:e9:f8:6a:3d:60:da:
65:b0:f7:bf:2c:46:01:97:f3:c0:36:c3:8e:ad:71:23:f8:28:
10:88:40:01
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjI4RDBBRjExMC8GA1UEBRMoQ0YzRjRGOTI0M0E2MUQzQkVEOTMzQ0MwRjM1MzND
QTJCRTA5M0JEQzAeFw0yNTA1MDUwNDI0MzhaFw0yNTA1MDcwNDI0MzhaMBgxFjAU
BgNVBAMTDTY4MTgzZDg3LWNhNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEDkrG5biSVMuGJ4Yz51J/PT53rphxLaHjqB01W99pPrE/ro0u8ANGJkEv
qSXxK1TRYxFL9ggrAHU2w6uheDElK4TK5QpuV9QT+rWbVmjP55btTAoFXUNCUl1c
RvQ+ZNFPqZDcE9pIZFDM8L2cXmgHkjfPVnKYijr0TJi3aaJm6VfMU2cE529ntxxM
S6mo2VoawUp5wgpd7rhTdfcQ6HFv3WhW6CILkgR4KukOVDRkWI/lDDJ6vELRU6Gj
NsoMfJpaET+XExhnHD3rmaltCxFWi6FkQrzIPexwdarIeTtNc/wkDeS/7vKE4ULs
SNnHFms/WH5JpdO9TL5a8nuAwjk1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUev13
e2Uv8VL7Bj7vTd4wZXRGy44wHwYDVR0jBBgwFoAUzz9PkkOmHTvtkzzA81M8or4J
O9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyOEQwLzRGNTAxMDI4QzczNDExRUVCNEExODk2NTc3NTQxMkU2L3p6OVBr
a09tSFR2dGt6ekE4MU04b3I0Sk85dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3p6OVBra09tSFR2dGt6ekE4MU04b3I0Sk85dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjI4RDAvNEY1MDEwMjhDNzM0MTFFRUI0QTE4OTY1Nzc1
NDEyRTYveno5UGtrT21IVHZ0a3p6QTgxTThvcjRKTzl3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBOMePoYxYe6GPWyUhKfXWIlrdYo4Em
YNGi7Ql7OPWxQF0T0R9dN2yDam+ptaRpeCxUpaHl/h+OMdWhFykr1O+8RNi8fQJ2
HVN4MPn0siZCu6KWY9DFQfhaZRSx/BD49UnOMnIW5RRsptoIkClyOt5AN+W5asgF
6Vhuzu9S6DpDKBbnusrOx6qGDXLbEw2XGm+fapLwCzWbNEFwpHgS5wZteqXgofbl
RZpzKH6X49ag28nEAU9VWRIxs7BL3lybgyVB1kYiKU7fL8elbPciaRbUYsCzFbET
tHwF1xX4bHyqmif4pG3p+Go9YNplsPe/LEYBl/PANsOOrXEj+CgQiEAB
-----END CERTIFICATE-----
Generated at Mon May 5 06:23:53 2025 by rpki-client