Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
File: IMgTB9QVShV5wAQJACMAaCWVvTU.mft (raw, json)
Hash identifier: gef60f+ARnNr9Un4k14ijXeofAjMXknW2fV9B4QBbSU=
Subject key identifier: 4D:3B:92:F0:59:79:82:26:DC:5C:26:9B:0A:DA:B7:21:F9:4C:73:6A
Authority key identifier: 20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
Certificate issuer: /CN=F36DD00FAF/serialNumber=20C81307D4154A1579C00409002300682595BD35
Certificate serial: 0353
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
Manifest number: 0351
Signing time: Fri 04 Jul 2025 03:39:43 +0000
Manifest this update: Fri 04 Jul 2025 03:39:42 +0000
Manifest next update: Sun 06 Jul 2025 03:39:42 +0000
Files and hashes: 1: IMgTB9QVShV5wAQJACMAaCWVvTU.crl (hash: B2ciX+CyVi3bn8FFuCtfNKGSyZjb7/KSikxx0Z/emRQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 03:39:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 851 (0x353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DD00FAF, serialNumber=20C81307D4154A1579C00409002300682595BD35
Validity
Not Before: Jul 4 03:39:42 2025 GMT
Not After : Jul 6 03:39:42 2025 GMT
Subject: CN=68674cff-39c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:07:81:a2:36:09:9b:c2:80:8e:ee:6d:48:
cf:f5:e6:9a:5a:82:ec:44:65:77:fc:c7:1e:56:b6:
f3:d1:ec:06:d0:96:f1:a2:38:23:5f:7b:41:e7:14:
e2:66:cc:bb:d1:42:d1:c3:10:6a:77:4f:21:e2:23:
e1:8c:55:05:0c:ff:37:2c:12:4b:12:af:2f:45:91:
b0:02:c1:13:f8:cc:5e:16:de:e7:e7:d7:97:f8:92:
43:05:e3:21:e6:40:29:7f:66:a2:c2:5e:43:99:29:
8d:b7:d2:65:b5:a1:f7:3b:d3:32:85:d7:08:90:81:
ef:4e:81:05:5e:fc:4a:9f:7f:d1:cd:ed:cc:95:84:
e4:19:86:b5:b8:a5:ed:db:7f:6b:74:77:82:f7:00:
8c:00:29:e4:fe:ee:ed:2f:d2:de:97:39:bb:18:55:
4d:c3:82:19:f5:e8:06:40:35:d6:48:ae:30:e5:13:
89:82:be:7e:58:7b:7b:61:e7:d1:43:54:70:13:26:
8a:6a:c1:e1:f2:6e:b2:a5:c0:8b:51:35:ea:e6:1a:
91:30:97:0a:ea:a6:a1:92:08:2f:61:1e:ec:83:ce:
03:7b:b3:69:70:f0:19:47:1a:31:a8:01:5f:bc:01:
da:97:d1:5f:5d:5b:71:fe:ec:79:9a:7a:7c:12:19:
92:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3B:92:F0:59:79:82:26:DC:5C:26:9B:0A:DA:B7:21:F9:4C:73:6A
X509v3 Authority Key Identifier:
keyid:20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a4:55:8d:79:09:00:56:2f:6f:52:fe:02:b4:62:81:4e:11:
97:16:d2:c7:0f:26:e8:2c:fe:32:b8:bb:0f:7c:28:97:0f:6b:
b5:44:0c:07:0c:13:0f:a1:62:fb:d8:d7:a0:7c:6f:8d:a0:d7:
f4:39:f9:49:91:11:6b:c3:bc:53:4b:f5:98:60:56:25:64:f3:
2d:45:19:b9:78:d6:af:f3:f4:7b:b8:0e:b1:58:14:20:6b:1d:
40:88:4e:c9:ae:71:23:e1:fb:82:7d:49:76:0b:90:e6:96:15:
16:0b:86:01:57:99:73:aa:68:0e:d5:e0:5d:ea:ef:47:6e:af:
1c:7e:06:1e:91:92:6f:1d:15:87:92:c5:4a:ea:44:2c:6d:05:
6f:a9:6b:3b:af:c1:dd:0d:9a:b9:2b:40:16:bf:dc:76:58:b0:
f4:e3:67:38:79:13:08:81:73:e6:2f:3e:5a:4a:7e:ab:89:82:
d1:e5:e0:ff:c2:87:7e:c3:12:97:a5:2d:3f:62:4d:07:05:05:
df:6d:bb:34:f8:81:a5:bb:a4:b6:1d:11:db:3c:1e:97:70:0d:
00:68:14:8b:1e:58:30:ae:3a:22:a6:17:89:de:6e:ea:88:2b:
2e:eb:64:f3:b8:63:3b:a3:16:bd:7d:b4:cc:e2:70:db:ac:bf:
53:61:17:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:09:13 2025 by rpki-client