Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
File: shxmbZvNmMAZWRBxeUg3JoQDINk.mft (raw, json)
Hash identifier: AciWEPmuB9/17TOpriCOQCougYSv2cg2vFUv2nuszCU=
Subject key identifier: AE:9D:65:DB:CC:BE:40:B8:B9:08:3B:36:E2:CA:3B:23:F2:8E:A6:A3
Authority key identifier: B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
Certificate issuer: /CN=F3675681AF/serialNumber=B21C666D9BCD98C01959107179483726840320D9
Certificate serial: 01FD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
Manifest number: 01FA
Signing time: Thu 15 May 2025 04:16:10 +0000
Manifest this update: Thu 15 May 2025 04:16:09 +0000
Manifest next update: Sat 17 May 2025 04:16:09 +0000
Files and hashes: 1: shxmbZvNmMAZWRBxeUg3JoQDINk.crl (hash: zAM+LjgJtyMdOtDTvQgL02vqAOA/5+8oFz6XwAYYntk=)
2: 3C5DC152150F11F0AFA3C00D6EB8BCC6.roa (hash: fH15aNCg4OTSLMaHS4OXxFDniAhEu0g0inrw6icGVBw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 04:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3675681AF, serialNumber=B21C666D9BCD98C01959107179483726840320D9
Validity
Not Before: May 15 04:16:09 2025 GMT
Not After : May 17 04:16:09 2025 GMT
Subject: CN=68256a8a-dfa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d8:54:d2:d5:5b:74:2f:59:b5:8a:2c:4d:59:
9e:a9:96:61:8a:73:38:aa:ed:a0:3c:20:10:e2:a6:
30:a0:9b:f1:4d:7e:0c:2c:27:ea:0e:7c:2b:80:78:
fc:f7:47:68:cb:da:bc:97:c5:a6:89:25:b6:a8:6a:
4b:2c:73:e2:2a:94:04:2c:b1:b8:7e:0a:d8:fb:a9:
31:66:d1:6a:75:42:f4:8f:06:c0:fe:72:72:bc:b7:
7b:f6:22:33:32:49:86:82:e9:e5:92:f8:4d:c0:e4:
b9:5e:14:de:3b:8c:9d:3e:ca:95:d0:64:f0:cc:be:
2a:7b:e3:2d:ab:b1:f2:e8:25:44:c0:fd:03:35:b3:
5d:a4:e7:9e:26:60:70:ce:58:c3:ea:17:81:c9:0a:
db:08:1f:01:90:74:4b:9a:3c:fb:d4:44:b9:89:19:
b3:56:84:8e:c1:56:72:45:d3:eb:65:be:74:15:0f:
92:2d:e3:c3:b8:0f:92:66:0d:ed:a4:ac:d7:9e:62:
2f:19:da:4a:22:de:f1:1b:27:32:94:e8:32:2c:80:
1c:d9:0c:85:54:2d:4c:76:bb:3b:96:46:ce:6e:69:
29:34:a0:d1:7a:47:ff:65:79:e8:e7:a3:5c:86:b1:
0f:cb:34:c6:98:be:83:b9:0a:dc:98:b1:e3:3d:e2:
a5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9D:65:DB:CC:BE:40:B8:B9:08:3B:36:E2:CA:3B:23:F2:8E:A6:A3
X509v3 Authority Key Identifier:
keyid:B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:d3:80:df:4d:98:53:31:82:83:66:c2:ad:68:30:6e:db:3b:
1a:5e:03:e8:ab:3e:26:b7:35:0d:29:8a:5e:a9:36:7a:fa:84:
2d:b3:8e:f0:90:75:12:81:68:52:81:5d:e8:7e:0a:09:9c:64:
a8:14:fd:65:30:d7:e0:c4:19:38:b9:a2:bd:05:6d:ac:83:a2:
6c:15:ae:4c:c2:8f:11:35:d0:36:39:cd:14:a5:ba:a3:a3:aa:
87:f5:22:25:fa:29:00:57:25:c9:0f:a5:5c:63:e8:12:c3:62:
2c:11:df:01:02:c0:9e:26:e1:f6:f2:6e:b5:71:30:4c:2c:2c:
2d:67:ab:a9:c3:69:e5:96:54:4e:cf:8f:6c:87:d4:e7:fc:31:
cb:fd:76:b6:a8:3b:0d:d7:03:b1:b5:03:8e:c6:d8:b8:2a:18:
dd:f5:9e:2f:7c:27:22:65:2c:48:88:b2:5a:6b:72:6e:62:65:
db:20:e2:21:90:df:dd:78:69:01:36:3e:9f:e2:b6:ab:19:74:
48:85:74:ba:3d:55:68:7e:16:7d:26:ab:a6:d8:eb:92:e6:99:
49:f9:1c:01:50:37:77:4c:e9:b6:84:c5:ce:8f:9a:8b:2e:c6:
4c:a2:be:94:d0:ac:f8:f0:3a:6b:b5:f4:96:ed:39:41:30:78:
56:6c:41:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:02:00 2025 by rpki-client