Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
File: ai026HfXJSbET24AT680-ZBPIxE.mft (raw, json)
Hash identifier: 6u89n8c+yl/W9v7Q/NDsIy1z85Pp1oLPbnRFGpyPKIQ=
Subject key identifier: E0:C4:7F:F9:2B:E1:E6:73:DE:B6:9C:FB:5C:CD:DF:36:7F:B9:9B:F5
Authority key identifier: 6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11
Certificate issuer: /CN=F36A991DAF/serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
Certificate serial: 06DA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
Manifest number: 06DA
Signing time: Wed 02 Jul 2025 02:03:09 +0000
Manifest this update: Wed 02 Jul 2025 02:03:08 +0000
Manifest next update: Fri 04 Jul 2025 02:03:08 +0000
Files and hashes: 1: ai026HfXJSbET24AT680-ZBPIxE.crl (hash: 3DYXy521BzvLTzL7XnPykjEwH3aNC0lJY+F+yLn47ko=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 02:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1754 (0x6da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A991DAF, serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
Validity
Not Before: Jul 2 02:03:08 2025 GMT
Not After : Jul 4 02:03:08 2025 GMT
Subject: CN=6864935d-2d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:d5:ea:98:dd:a0:8f:a5:b7:9e:45:af:e3:
cf:c7:fc:1f:e1:44:1b:f0:e9:9f:b8:a9:38:64:0a:
1f:9c:3c:c3:d5:69:42:ab:af:3c:b6:2e:f8:35:67:
50:18:8e:f5:70:8b:fe:a2:78:4c:58:a1:aa:5c:1a:
fa:8e:f8:f8:02:83:c7:5d:3f:d7:41:3d:c1:74:39:
b8:a5:19:0a:5a:2d:e5:b5:6c:f5:b5:f3:95:7c:79:
00:1f:a1:4e:d9:d7:4f:86:71:ce:8d:a7:bb:b2:b8:
dd:e1:11:16:b0:ed:8c:bc:45:8e:d9:d1:67:74:5e:
39:69:2f:8c:6e:71:55:2b:d6:42:6f:62:52:05:f5:
09:dc:29:a9:f2:b4:43:d9:5b:a1:97:42:a6:17:41:
15:a6:39:64:2e:c5:35:10:69:b7:39:81:79:66:32:
b4:8d:d1:4b:f1:6b:06:49:d2:07:86:ad:53:b2:63:
61:01:16:de:d7:d6:e9:d4:5d:2e:5d:6d:61:4b:d6:
75:fd:b0:d9:f2:85:a3:db:88:ec:34:33:d5:7f:f7:
f0:a1:b3:7d:b1:d8:60:3d:59:c2:07:8f:2b:69:52:
81:5f:ff:4c:f7:6f:4d:9a:9d:0d:66:4d:5a:ca:6e:
92:6f:98:1b:74:98:a5:c4:e0:62:67:33:a6:a9:f5:
d9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C4:7F:F9:2B:E1:E6:73:DE:B6:9C:FB:5C:CD:DF:36:7F:B9:9B:F5
X509v3 Authority Key Identifier:
keyid:6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:75:b0:76:7e:2f:e0:37:be:3b:d8:e0:31:18:fe:b4:05:ad:
04:a1:14:9e:5f:f3:c7:01:22:5a:a9:a7:62:0a:57:9d:4e:c2:
cb:bc:fa:4b:4b:31:fd:e9:5a:13:99:ca:74:74:cc:43:4b:9b:
e7:c1:48:4b:c9:f8:d2:ca:f9:4f:4f:50:57:03:b5:be:8a:fc:
58:53:e3:27:19:c2:1b:cd:17:70:8c:e4:ab:80:8b:07:69:15:
99:61:0f:e0:8a:2c:d1:81:ee:74:9d:7f:3c:d2:a5:bd:4a:40:
3a:9e:32:41:43:3d:17:2f:7f:b9:fa:0b:1e:ad:6c:dc:f9:b5:
c9:f6:0a:80:50:ce:0a:83:2f:44:42:8f:b1:53:6b:11:b7:4b:
c8:5a:e2:1d:68:e3:bc:4c:d3:c0:a4:64:2e:7f:66:e3:9d:ba:
a6:df:2c:f9:59:6b:b5:ad:f1:61:26:38:27:12:00:54:ed:d8:
1e:bd:f6:1d:ec:f4:06:7e:bf:8e:84:22:78:20:d1:bc:d2:67:
11:28:73:a9:de:13:72:9b:8f:88:9a:e2:0e:e1:3e:93:49:5e:
b2:47:00:cd:cd:99:bb:13:96:ca:c1:d7:10:69:23:68:98:99:
6e:eb:ee:7a:18:12:67:7c:6d:d4:02:2b:2e:d8:27:0b:98:dd:
08:24:6e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:40:10 2025 by rpki-client