Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
File: qUI_pMACbS5NqCEtEo2dJwfoHck.mft (raw, json)
Hash identifier: RW0oDBCJrF4KMDwqEkOxbzVVh2iFJ9M0R7CtTrxhLHs=
Subject key identifier: 37:3F:28:54:7F:B0:8B:8A:D4:AB:27:00:F6:10:D8:DA:55:70:C3:B8
Authority key identifier: A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
Certificate issuer: /CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Certificate serial: 05C2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
Manifest number: 05C0
Signing time: Sun 29 Jun 2025 02:28:44 +0000
Manifest this update: Sun 29 Jun 2025 02:28:44 +0000
Manifest next update: Tue 01 Jul 2025 02:28:44 +0000
Files and hashes: 1: qUI_pMACbS5NqCEtEo2dJwfoHck.crl (hash: Ft+2prGCAC2rhV/HPF4w7uk61ZPFjRU8O8lKH8VBWtE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1474 (0x5c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E70F4AF, serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Validity
Not Before: Jun 29 02:28:44 2025 GMT
Not After : Jul 1 02:28:44 2025 GMT
Subject: CN=6860a4dc-607c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:02:83:a3:65:8a:4c:b5:21:6f:5d:32:68:
c4:4e:ac:e5:8f:86:4c:31:05:0c:5a:f0:2b:17:36:
c8:46:97:2c:c1:c2:d8:c2:5e:8b:2e:fe:ea:2c:a9:
af:f2:e3:e7:f4:f9:08:e7:3d:c1:26:f2:a7:6e:d1:
5b:0b:a5:f9:f0:fa:cd:23:43:5a:67:2e:00:15:9d:
70:4b:f3:af:c9:c2:90:cd:30:0d:82:95:b8:b6:8a:
4c:6d:25:b3:95:64:91:57:11:70:4e:c0:b6:2f:f8:
47:8d:a1:78:ba:27:07:b0:63:78:fa:0b:c8:b1:b6:
f5:02:16:37:6c:46:75:c2:ac:fb:9a:c4:62:b6:ad:
7c:70:55:8c:d3:15:d4:1a:17:30:1e:7b:38:a1:87:
f9:c5:d0:db:1c:65:65:c6:fc:06:4f:35:93:64:48:
4a:0e:73:91:e9:fa:d6:5b:85:de:ba:3a:13:89:68:
5b:ef:d9:df:15:08:16:5c:83:15:bc:3f:2e:44:c1:
37:1b:2e:46:b1:dc:29:cc:69:8d:54:9f:13:23:60:
23:b7:5d:00:13:fb:c3:c1:6b:cd:df:bf:24:35:ff:
80:fa:a4:d4:3b:bb:31:4c:cd:b6:4b:d7:22:30:2a:
72:90:c7:41:39:58:6c:0d:21:b8:ae:91:17:d3:46:
27:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3F:28:54:7F:B0:8B:8A:D4:AB:27:00:F6:10:D8:DA:55:70:C3:B8
X509v3 Authority Key Identifier:
keyid:A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b1:8f:0b:c4:ea:21:c2:d3:ff:2b:6e:54:ff:5f:84:bd:6e:
48:41:1e:5e:12:75:bc:74:e1:ed:b8:b0:37:c3:3f:5e:cc:9d:
e8:9e:d7:25:5b:c4:6b:8e:29:59:30:37:4b:7a:1b:02:b7:7d:
2d:01:5e:cf:c6:9a:03:7e:ea:f6:77:17:f2:9f:d1:86:09:1f:
78:52:df:ad:e8:9b:4c:b6:20:09:23:95:b6:65:4c:b1:69:b0:
9d:b7:6c:f3:eb:7f:52:71:f2:2f:7d:be:ea:5b:62:b2:06:54:
03:9b:83:ea:d7:15:f2:16:0c:76:18:9e:0a:cc:7d:c5:54:ee:
02:8a:b8:b7:ae:2c:ef:a0:ca:ea:1d:df:f1:f5:0b:6f:e6:16:
29:5a:13:dd:9f:c8:c2:e0:66:61:27:ed:87:73:f2:93:57:3c:
90:f9:c5:d6:12:f4:af:c4:88:b7:2c:01:90:ec:2a:0d:60:cb:
e0:53:01:31:a4:93:c3:c6:17:82:c3:42:14:a2:95:e1:3d:bf:
61:2f:5e:f2:f3:86:0a:f4:3e:c9:57:71:09:90:57:2d:e3:d6:
40:48:af:cb:41:e0:10:36:84:ae:a5:bf:a1:11:d5:ec:cb:c5:
ce:de:43:9b:6d:96:91:2e:4f:7f:f4:68:60:f2:8e:46:be:6a:
ef:ba:3c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:50:45 2025 by rpki-client