Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft
File: ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft (raw, json)
Hash identifier: yWN9YUl30GiWGoW8+oxIfOxIVS6UozIINIvqRfc48pw=
Subject key identifier: 65:91:A8:0B:BE:91:F1:51:44:62:F2:22:66:ED:6D:A1:FF:8A:30:EF
Authority key identifier: 38:D2:17:BB:C9:98:9F:8B:1C:EC:1B:3A:43:60:1F:11:E3:D1:1E:4B
Certificate issuer: /CN=F3674908AF/serialNumber=38D217BBC9989F8B1CEC1B3A43601F11E3D11E4B
Certificate serial: 05
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ONIXu8mYn4sc7Bs6Q2AfEePRHks.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft
Manifest number: 04
Signing time: Thu 03 Jul 2025 05:25:31 +0000
Manifest this update: Thu 03 Jul 2025 05:25:31 +0000
Manifest next update: Sat 05 Jul 2025 05:25:31 +0000
Files and hashes: 1: ONIXu8mYn4sc7Bs6Q2AfEePRHks.crl (hash: pnwHGufSkBQISdz+fFsIhA27BQIOPl4OCu+b70bs2JQ=)
2: 1F963ED8564511F0A6FF3AF2DAE4EC9C.roa (hash: X2krD4jdJ7pGQ3zXFaC89RNcw5IbwbOm7CUbTFo1if4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.crl
rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft
rsync://rpki.afrinic.net/repository/afrinic/ONIXu8mYn4sc7Bs6Q2AfEePRHks.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 05:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3674908AF, serialNumber=38D217BBC9989F8B1CEC1B3A43601F11E3D11E4B
Validity
Not Before: Jul 3 05:25:31 2025 GMT
Not After : Jul 5 05:25:31 2025 GMT
Subject: CN=6866144b-536c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ca:e5:16:31:cf:4a:f9:b6:4b:2a:50:4a:00:
7c:15:24:c6:04:ba:26:4d:32:58:3e:d2:98:32:7c:
82:ca:89:9e:d2:75:08:33:61:0d:eb:29:ce:be:09:
fc:8e:94:50:dc:30:38:c2:6f:60:1d:c3:57:7e:03:
30:ad:5b:d0:f0:a0:e3:a2:45:92:51:6c:67:a4:85:
f1:a4:ff:ec:a1:47:71:fc:d7:0a:89:39:40:f6:f8:
56:6c:13:0b:a3:97:7c:7d:b5:7c:72:90:d5:c6:41:
9d:60:e0:6d:0e:1f:40:f8:d6:17:34:4e:57:5a:57:
fc:7e:92:26:88:88:cf:59:b1:f1:78:93:7b:8f:67:
29:52:0e:44:06:eb:17:ed:6d:e4:24:89:0a:db:a7:
71:d4:06:c5:59:66:d1:34:0d:51:ba:78:22:e2:92:
61:f8:8b:bb:a7:fc:98:8b:59:1e:cd:1f:64:c2:aa:
4a:f0:15:01:a3:0d:fb:85:25:6e:db:93:19:ef:79:
9f:c1:d4:8e:4a:3d:4c:f2:ba:08:67:07:8b:a8:c2:
e4:15:f2:c0:8f:64:99:22:d7:8b:f9:36:fe:c5:72:
2a:fa:44:1a:9a:27:1a:8c:26:00:3a:4d:ad:33:8d:
23:a6:a1:ee:d6:b5:10:18:0d:8c:d7:26:7e:95:95:
a5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:91:A8:0B:BE:91:F1:51:44:62:F2:22:66:ED:6D:A1:FF:8A:30:EF
X509v3 Authority Key Identifier:
keyid:38:D2:17:BB:C9:98:9F:8B:1C:EC:1B:3A:43:60:1F:11:E3:D1:1E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ONIXu8mYn4sc7Bs6Q2AfEePRHks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:5b:b9:25:22:cb:7c:81:94:f4:7f:6e:b0:5e:ab:18:78:2e:
60:f7:06:b1:ef:9b:b3:7f:b4:4b:51:8f:b3:5c:42:fc:d7:d4:
01:ff:0a:1c:89:09:48:4d:6e:12:2f:aa:7d:cc:ef:f0:04:de:
4c:e9:81:de:a1:17:49:2a:8f:a0:66:39:b3:9d:a3:07:ab:8d:
bf:fe:4c:f4:b6:a7:b7:d7:86:06:85:8a:92:dd:2c:14:81:5b:
05:de:21:ae:98:bf:4e:b9:de:cb:99:02:cc:77:26:35:b8:9e:
18:57:82:8a:5e:50:c0:f2:64:0d:d7:94:0d:2d:11:f0:7c:f9:
08:25:74:7a:58:09:54:f4:d0:f4:43:e9:5b:c2:3b:b4:0b:5f:
f6:fa:26:40:2c:15:90:54:e7:d1:9f:4d:b8:a7:fd:1d:74:68:
51:53:c2:6e:29:0e:07:9e:78:3d:f5:06:8f:1e:4c:44:1a:11:
c2:3b:5c:be:08:92:23:53:fe:29:11:a0:38:d2:3d:79:c5:27:
6a:75:93:fe:61:d1:86:ef:99:92:1f:97:c2:83:bc:9c:ab:24:
96:05:40:e0:f6:e6:0a:97:73:4d:4b:e3:47:b3:c4:ff:32:a5:
34:22:f9:00:b9:ed:5d:88:a9:6a:e4:86:ba:a9:c5:32:af:3f:
1d:20:fa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:04:03 2025 by rpki-client