Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
File: IPoazDHazMuDL9LUtfzXWC-kIsk.mft (raw, json)
Hash identifier: Dj+xoj/psadyVHIjSzHH93E9dQlu2yzNnWW0khMx5lY=
Subject key identifier: F9:92:62:3F:46:A8:7D:30:1F:D1:67:B1:F2:DC:83:95:0A:20:38:03
Authority key identifier: 20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9
Certificate issuer: /CN=F36B2CCCAF/serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
Certificate serial: BB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
Manifest number: BA
Signing time: Sun 11 May 2025 05:00:40 +0000
Manifest this update: Sun 11 May 2025 05:00:40 +0000
Manifest next update: Tue 13 May 2025 05:00:39 +0000
Files and hashes: 1: IPoazDHazMuDL9LUtfzXWC-kIsk.crl (hash: VAIw/dTUDE0s9wWlEDfV5lFhvQOkkSQFRKC8kCcXwiY=)
2: 8327C434A35411EF974E14A1762E951A.roa (hash: TgV6J8OnLK9ODPkaOzrwonQ7ArSo3b7jgatmRvGo6BI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B2CCCAF, serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
Validity
Not Before: May 11 05:00:40 2025 GMT
Not After : May 13 05:00:39 2025 GMT
Subject: CN=68202ef8-9b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:48:0b:7a:23:f4:68:e5:67:ad:41:34:78:
69:1c:c3:3d:72:52:ce:64:aa:fa:39:84:c7:19:4e:
9d:92:6a:06:7c:32:73:5a:96:2f:eb:86:40:d0:1b:
65:97:a9:96:a0:a7:de:6e:e4:14:27:c3:05:35:73:
48:d2:55:5a:fe:3a:61:e4:78:06:ff:b9:38:15:3b:
89:ce:33:14:be:17:d1:e0:10:1d:d5:d6:d9:c0:9a:
61:51:81:28:ea:11:5a:1b:b6:32:f4:76:a9:2c:84:
bf:15:fe:ec:c5:5d:e3:14:c0:df:51:30:61:c4:7d:
7a:9f:93:08:3c:d0:cf:64:b6:df:d0:10:7f:e7:82:
47:6a:25:7c:54:09:24:df:00:8b:a6:f3:32:2a:35:
1a:5c:67:b4:71:97:8a:23:eb:d0:2e:f8:f1:19:ab:
2d:61:cc:6c:91:7d:96:88:d2:40:94:be:84:3f:43:
38:93:22:a6:2c:24:69:4f:39:f5:b5:33:b2:15:d3:
b7:aa:cb:9c:7e:0b:36:63:b7:f4:73:24:92:2f:41:
3b:5c:9e:fe:27:77:da:db:c9:de:86:c3:87:9d:41:
d7:8f:ff:85:6c:64:da:b0:f2:a0:e8:8d:ce:04:ef:
9b:8b:4b:d2:fe:54:2c:e4:1f:14:a1:88:b4:52:03:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:92:62:3F:46:A8:7D:30:1F:D1:67:B1:F2:DC:83:95:0A:20:38:03
X509v3 Authority Key Identifier:
keyid:20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:ef:c0:b3:75:e5:13:ba:5b:c2:23:9a:e5:ac:f8:7b:85:d3:
6a:c3:1f:8a:f0:bb:a9:56:19:66:1f:14:71:00:47:70:67:05:
55:5d:90:30:09:6b:7f:60:dd:18:ec:10:14:fc:b1:8f:91:06:
d8:2c:7b:cc:3f:d6:24:8f:00:9f:b5:37:ac:ab:0d:08:fa:8a:
b1:18:5a:8a:2b:fe:e4:6c:9e:4f:0c:4e:e0:76:d4:1f:1a:d5:
12:a1:72:f9:25:12:79:17:4b:99:09:e1:3a:9d:7b:c8:07:cf:
7f:ad:b1:ab:71:9b:bc:ed:7a:c2:46:59:f0:78:51:0a:a7:f3:
aa:cb:5f:e3:d7:41:83:90:68:9f:b5:73:4b:ec:58:f8:08:8a:
dd:e2:87:3a:5a:6e:e6:af:96:23:89:a8:f6:56:20:21:37:f7:
f9:f8:65:64:44:42:1c:14:8b:b2:87:9c:8f:e6:05:f7:72:0d:
54:c8:10:c0:b9:d0:ff:ef:8e:75:6f:b4:69:70:d6:49:20:a1:
3c:e2:75:b8:1b:95:8a:a0:00:01:0d:04:a9:6e:24:ef:c0:d5:
d5:83:6e:ed:ea:df:84:e8:6d:02:3a:e9:55:6f:da:48:04:86:
9f:9f:cf:c7:cc:c9:41:3e:23:ec:b5:e3:90:b3:66:2a:53:1a:
bf:67:fb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:22:27 2025 by rpki-client