
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
File: IPoazDHazMuDL9LUtfzXWC-kIsk.mft (raw, json)
Hash identifier: pGSZgC71BPTdBj4iVj9HWeLyFzN5DXgr6/A8yUQhUc8=
Subject key identifier: 9B:AB:8D:BD:DD:3E:21:78:E1:CC:B9:35:7D:60:79:4D:67:06:3F:AA
Authority key identifier: 20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9
Certificate issuer: /CN=F36B2CCCAF/serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
Certificate serial: EE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
Manifest number: ED
Signing time: Mon 30 Jun 2025 05:05:46 +0000
Manifest this update: Mon 30 Jun 2025 05:05:45 +0000
Manifest next update: Wed 02 Jul 2025 05:05:45 +0000
Files and hashes: 1: IPoazDHazMuDL9LUtfzXWC-kIsk.crl (hash: JGSgPyfBSdoALk+3bfp4mw9WmkbjP4DVV83GZ0e/Zak=)
2: 8327C434A35411EF974E14A1762E951A.roa (hash: TgV6J8OnLK9ODPkaOzrwonQ7ArSo3b7jgatmRvGo6BI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 05:05:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B2CCCAF, serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
Validity
Not Before: Jun 30 05:05:45 2025 GMT
Not After : Jul 2 05:05:45 2025 GMT
Subject: CN=68621b2a-9b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:37:5a:e5:92:6d:d4:c3:9d:43:bd:6a:76:65:
6b:94:00:67:a4:7e:3d:82:d0:e2:b5:2e:6b:0f:f3:
d9:e8:17:55:04:34:90:14:7c:a3:3a:29:98:e3:1e:
f0:5b:75:08:b4:60:00:9f:3c:0c:09:5e:b2:b5:d3:
da:24:70:9f:a8:97:14:f0:79:cb:dc:15:0d:ba:e8:
88:aa:60:76:39:ce:ab:9a:14:6b:6a:0c:c3:38:75:
7c:62:17:2d:12:c4:03:ed:40:76:27:08:a2:06:a7:
5d:a5:46:bd:41:c3:2a:d5:f4:c7:d1:89:f7:e5:55:
ca:10:93:76:df:de:71:82:0e:47:91:6b:88:04:4d:
7e:0d:c9:63:ab:26:62:26:79:dd:3c:98:42:5f:17:
72:fc:98:c2:1e:6b:67:30:c9:44:c1:c7:8f:f8:3b:
07:bf:47:38:da:fd:4a:da:6f:b3:1a:08:18:6c:5f:
a5:7a:83:91:b5:13:50:82:46:f2:a0:b0:46:47:4d:
7c:2c:a1:7a:1f:e5:30:f0:dc:ba:21:0c:ef:d2:33:
52:4f:0f:ee:7d:b1:15:ca:bb:8b:d3:eb:25:34:08:
48:5c:8d:c8:63:4e:ed:0f:4d:b1:4f:23:7e:66:81:
d5:e8:4f:c8:43:d7:4c:9c:2c:0d:93:ca:e8:68:94:
2d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AB:8D:BD:DD:3E:21:78:E1:CC:B9:35:7D:60:79:4D:67:06:3F:AA
X509v3 Authority Key Identifier:
keyid:20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:37:73:93:41:f6:41:ca:88:99:42:f5:08:24:e8:52:aa:e6:
23:86:75:b0:3d:2f:83:2f:f2:a2:74:43:2c:01:43:e4:03:f6:
d7:05:2d:e7:6e:57:21:6d:17:93:82:e3:b0:c3:e4:d5:01:d9:
23:c1:fd:e6:b9:8b:2b:f3:6d:08:ed:ce:dd:df:13:30:52:ef:
e5:47:b9:5e:d7:e0:a4:12:52:37:7f:7d:27:80:85:80:ca:86:
a9:22:d3:80:02:ed:60:25:e8:06:70:04:27:8b:a0:55:be:42:
db:87:19:2b:10:0e:e1:ad:ab:aa:db:e0:de:47:95:3f:c7:8d:
fe:b0:9a:cd:5c:bd:35:b2:07:f8:e7:29:87:26:c0:a0:58:59:
0f:e5:c0:81:1d:6d:71:9d:f8:8b:89:27:df:24:ad:c6:6e:24:
57:fb:6b:c3:96:ff:d2:27:0e:e5:e3:02:db:e1:e1:11:28:1c:
33:87:4d:d3:94:95:92:92:3c:1a:b5:0d:d3:2b:31:a9:81:09:
e9:6a:65:6b:87:7c:1c:da:0f:c9:28:19:93:9e:fd:9e:cb:70:
57:50:4b:88:3f:fd:c9:8b:1e:f0:b2:c9:0a:ed:a3:e1:4f:cd:
83:18:42:29:46:9c:b1:1a:8b:66:03:32:77:f3:4d:af:b2:eb:
3d:07:e7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:21:16 2025 by rpki-client