Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
File: CbNOEzY507TuNRYTuKYNaxkCrWM.mft (raw, json)
Hash identifier: UvdSvcNc15YIqOX17qtJHZNjJnTcfjazhDML59Tcq1c=
Subject key identifier: 48:2F:BA:D1:8F:AE:A8:A1:0F:8D:69:08:58:62:5C:70:51:72:0C:EB
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Certificate issuer: /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial: 019D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
Manifest number: 0197
Signing time: Sun 11 May 2025 04:29:14 +0000
Manifest this update: Sun 11 May 2025 04:29:13 +0000
Manifest next update: Tue 13 May 2025 04:29:13 +0000
Files and hashes: 1: CbNOEzY507TuNRYTuKYNaxkCrWM.crl (hash: wIvIgzQTtGTcA6U2YWCc4KM0cNITLCc2X+oIuDmpcIY=)
2: 109E9816058E11EF9F2E082A017001B1.roa (hash: awGoqbBSAx/fCGhKKOOxrJpeJJgZ+sWJhXA1UCAvdvs=)
3: F1372870058911EFB8214008017001B1.roa (hash: t2P1L8ixLWdSZJ4m2IxwLYayMJ240E8hcnHi+YngPF0=)
4: 6A08039C101011EFA385055B017001B1.roa (hash: A6nZPy/mB+rYQKkTcDrcj6TrmIhozwVdv/FBstEbirU=)
5: 7F80E364058F11EFB71B1335017001B1.roa (hash: rJz+n5vELGUm/ZVnAC3v32ehr4m666WbMOKDdNfrYmo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3693AE0AF, serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Validity
Not Before: May 11 04:29:13 2025 GMT
Not After : May 13 04:29:13 2025 GMT
Subject: CN=6820279a-d986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:a3:82:ef:d5:1b:41:d8:a0:56:3a:83:1b:
7b:3a:8a:ee:17:e1:70:47:69:42:ef:99:b1:8d:98:
c0:de:7a:4e:11:5c:95:11:c3:4f:4a:39:7b:68:d8:
f5:98:10:62:8e:8a:92:33:3c:b0:a6:c7:60:79:bc:
58:7b:f2:fe:cb:7b:0a:c2:45:5d:47:76:51:00:e8:
93:d2:57:3b:cf:43:02:3c:77:21:d9:8b:48:c2:a4:
06:61:19:28:08:df:31:5d:e1:a4:fa:f1:3d:58:37:
2d:a8:9e:60:3e:4e:49:ab:2b:54:04:e4:de:ca:ea:
8b:d4:f2:d8:9e:c6:62:48:97:6c:27:69:f3:7d:7f:
20:29:95:c7:dc:5c:47:d2:28:23:0c:45:df:ca:4a:
c1:73:dd:a2:d7:1c:3b:71:d4:d6:cb:f5:19:62:6c:
8f:e1:6d:f5:1e:54:8b:50:0d:62:91:db:c5:22:59:
17:a6:91:52:8a:df:e6:8f:46:8b:3b:f5:67:6d:ab:
4c:93:58:c9:07:f8:ad:ce:dc:c0:18:23:56:10:1a:
43:c4:8e:4d:71:04:d7:c1:ec:58:b8:2d:ba:97:07:
dd:fa:29:fe:54:b0:5d:92:79:ef:a9:30:85:5e:74:
b4:05:79:34:23:03:8d:73:4b:d4:2b:43:de:e8:c7:
52:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2F:BA:D1:8F:AE:A8:A1:0F:8D:69:08:58:62:5C:70:51:72:0C:EB
X509v3 Authority Key Identifier:
keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3f:cd:0a:d6:f5:70:ad:0e:9e:00:50:86:cc:50:f1:1f:7a:
52:f1:53:ac:38:e4:6c:81:fa:ba:66:7e:94:64:fb:c0:52:c1:
00:b5:32:c4:86:90:1b:34:20:42:5c:83:f3:9d:87:09:a5:4b:
16:2b:7b:e3:9d:d1:ac:c4:d5:f4:b6:74:f0:70:28:2e:4c:d2:
8c:79:68:bc:e7:c1:54:94:f7:1e:58:f9:a6:c6:5b:f5:17:ce:
8c:e7:d1:fb:eb:ff:6a:85:48:32:56:0c:8a:d1:e5:38:fd:d7:
ca:af:d8:9e:a1:d8:d1:d5:00:ed:32:33:be:8a:2b:4b:ae:33:
6c:56:e4:b0:83:af:14:7d:f8:53:47:4e:36:81:00:39:1c:55:
71:dc:5b:1f:50:0b:be:6d:d5:75:84:c7:15:09:37:c6:23:b8:
81:8c:ef:80:3c:6b:2d:95:78:eb:9f:db:6e:0d:fc:f1:e0:4f:
d5:ee:91:dd:2b:bb:20:f9:ff:3a:40:e8:ff:e9:93:6f:66:9a:
16:c1:8d:04:00:f6:31:d1:eb:85:1e:2f:a4:b7:03:c0:4f:75:
aa:5d:2d:97:13:7e:62:5d:e2:50:d4:f7:fe:34:e0:9b:97:96:
67:3d:37:cd:39:6b:dd:6e:be:b4:c2:a6:6c:81:b4:5b:01:03:
34:e5:3f:0a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTNBRTBBRjExMC8GA1UEBRMoMDlCMzRFMTMzNjM5RDNCNEVFMzUxNjEzQjhBNjBE
NkIxOTAyQUQ2MzAeFw0yNTA1MTEwNDI5MTNaFw0yNTA1MTMwNDI5MTNaMBgxFjAU
BgNVBAMTDTY4MjAyNzlhLWQ5ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC306OC79UbQdigVjqDG3s6iu4X4XBHaULvmbGNmMDeek4RXJURw09KOXto
2PWYEGKOipIzPLCmx2B5vFh78v7LewrCRV1HdlEA6JPSVzvPQwI8dyHZi0jCpAZh
GSgI3zFd4aT68T1YNy2onmA+TkmrK1QE5N7K6ovU8tiexmJIl2wnafN9fyAplcfc
XEfSKCMMRd/KSsFz3aLXHDtx1NbL9RlibI/hbfUeVItQDWKR28UiWRemkVKK3+aP
Ros79Wdtq0yTWMkH+K3O3MAYI1YQGkPEjk1xBNfB7Fi4LbqXB936Kf5UsF2See+p
MIVedLQFeTQjA41zS9QrQ97ox1KJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUSC+6
0Y+uqKEPjWkIWGJccFFyDOswHwYDVR0jBBgwFoAUCbNOEzY507TuNRYTuKYNaxkC
rWMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkzQUUwL0JCRTUyRkYyMDBFMTExRUZBRjg0RDYwNzAxNzAwMUIxL0NiTk9F
elk1MDdUdU5SWVR1S1lOYXhrQ3JXTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NiTk9Felk1MDdUdU5SWVR1S1lOYXhrQ3JXTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTNBRTAvQkJFNTJGRjIwMEUxMTFFRkFGODRENjA3MDE3
MDAxQjEvQ2JOT0V6WTUwN1R1TlJZVHVLWU5heGtDcldNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPP80K1vVwrQ6eAFCGzFDxH3pS8VOs
OORsgfq6Zn6UZPvAUsEAtTLEhpAbNCBCXIPznYcJpUsWK3vjndGsxNX0tnTwcCgu
TNKMeWi858FUlPceWPmmxlv1F86M59H76/9qhUgyVgyK0eU4/dfKr9ieodjR1QDt
MjO+iitLrjNsVuSwg68UffhTR042gQA5HFVx3FsfUAu+bdV1hMcVCTfGI7iBjO+A
PGstlXjrn9tuDfzx4E/V7pHdK7sg+f86QOj/6ZNvZpoWwY0EAPYx0euFHi+ktwPA
T3WqXS2XE35iXeJQ1Pf+NOCbl5ZnPTfNOWvdbr60wqZsgbRbAQM05T8K
-----END CERTIFICATE-----
Generated at Sun May 11 12:34:29 2025 by rpki-client