Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
File: iVUnx34gFEZnMJDwgWSPGGEnsbo.mft (raw, json)
Hash identifier: o7C2blegWGj65vd97mdaiJrOp+rwUX5GUL3GYuLrFBs=
Subject key identifier: B9:57:7F:BA:A9:4C:89:B9:2C:51:25:BD:3B:97:7A:9A:AE:0D:25:57
Authority key identifier: 89:55:27:C7:7E:20:14:46:67:30:90:F0:81:64:8F:18:61:27:B1:BA
Certificate issuer: /CN=F36ED442AF/serialNumber=895527C77E201446673090F081648F186127B1BA
Certificate serial: 0E47
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
Manifest number: 0E47
Signing time: Wed 02 Jul 2025 00:57:34 +0000
Manifest this update: Wed 02 Jul 2025 00:57:33 +0000
Manifest next update: Fri 04 Jul 2025 00:57:33 +0000
Files and hashes: 1: iVUnx34gFEZnMJDwgWSPGGEnsbo.crl (hash: roxePqDurazTeWQdN3uRLZB4fHVMKVX2MYCkC/GrZl8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 00:57:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3655 (0xe47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36ED442AF, serialNumber=895527C77E201446673090F081648F186127B1BA
Validity
Not Before: Jul 2 00:57:33 2025 GMT
Not After : Jul 4 00:57:33 2025 GMT
Subject: CN=686483fe-8f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:65:8f:67:bb:5a:d1:95:59:ca:2e:bb:1b:5b:
8a:34:1d:0c:17:9d:a0:7c:8e:87:99:96:30:90:f9:
80:87:9d:59:63:87:2d:7d:16:bc:2c:69:9d:19:73:
fe:e7:9f:1b:69:3b:ed:df:60:06:eb:29:83:1f:fb:
97:b7:ab:4e:ad:16:7b:55:84:2a:20:b9:10:66:47:
38:fc:c2:ea:28:a8:13:f7:2d:eb:37:47:b7:06:7f:
99:27:87:65:f0:37:a9:54:8c:37:d9:ab:ac:63:e2:
da:69:8a:09:97:a6:08:24:5b:b6:fc:1f:fa:21:2f:
ac:95:4e:b3:b1:cb:9d:88:30:17:39:a7:7e:a4:66:
f8:4d:e5:85:d0:4d:9c:51:9a:eb:94:c2:84:0c:d9:
33:bb:ba:f7:2f:ca:79:59:6e:19:2b:eb:1c:6b:fb:
1e:32:b2:7b:fb:1e:b8:1d:83:9b:0e:67:97:db:d1:
17:10:ab:bd:78:07:08:33:10:02:d0:71:a2:51:45:
50:ab:e9:4d:be:f0:91:a4:bf:dd:89:9f:56:5e:d8:
3d:1a:9e:6e:a3:e0:c9:ff:c9:5e:95:be:38:df:8f:
6a:08:92:c4:c8:1c:0c:91:b7:dc:16:bc:2b:3d:3a:
c1:b5:bf:b5:85:09:ea:7b:ee:26:82:b5:22:45:42:
37:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:57:7F:BA:A9:4C:89:B9:2C:51:25:BD:3B:97:7A:9A:AE:0D:25:57
X509v3 Authority Key Identifier:
keyid:89:55:27:C7:7E:20:14:46:67:30:90:F0:81:64:8F:18:61:27:B1:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:99:6f:85:4c:5f:96:e2:48:98:03:28:9c:96:2f:64:c6:bd:
f9:44:25:9b:30:85:ec:47:bd:a7:5c:ca:97:dc:bc:1b:ea:15:
c5:02:85:bc:5c:1e:7c:cc:f6:28:5d:93:76:b3:05:82:e8:cc:
31:3e:de:c3:6a:da:8a:b4:ab:04:bc:f9:d1:ea:25:76:07:e6:
7f:b1:9b:06:c0:9a:00:98:0b:48:60:7b:10:06:6d:b7:84:ed:
90:e2:31:1f:5c:f7:2a:e4:51:14:3a:cc:f0:8c:e1:4d:1f:a6:
6a:fb:f9:9d:df:06:ce:9d:bf:8d:c5:a9:0d:11:5d:e4:a3:26:
ab:d9:c5:55:00:c9:ee:f0:29:eb:b3:d4:ad:1e:06:4c:db:d4:
27:ba:b4:2f:f3:a8:e5:ff:c7:47:3e:16:c7:6a:64:65:c4:8e:
7c:57:11:af:16:d3:07:7f:3f:11:46:82:39:6a:d6:be:d1:c8:
de:b5:08:52:f4:6f:e3:87:88:d7:b5:9a:5f:5e:28:33:fd:48:
74:f7:ef:24:01:bb:09:62:20:cd:38:49:9b:41:7b:54:11:28:
a6:30:9c:0a:ee:37:18:ff:4f:60:87:55:3b:2d:05:c7:94:6d:
f4:4c:3f:91:04:ba:93:ad:a7:4d:2d:21:66:c7:7a:dc:43:38:
88:0f:cc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:09:14 2025 by rpki-client