Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
File: vD3h6YQAgLg8ZSeM3qheopiClIE.mft (raw, json)
Hash identifier: KPN4Ip6H00z41P8QaERN9a8XFyVxyPUD8kfthCXx6kY=
Subject key identifier: 8B:63:B2:65:17:BE:C5:54:7C:87:40:B2:56:1D:24:DB:74:75:76:4E
Authority key identifier: BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81
Certificate issuer: /CN=F36FCA07AF/serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
Certificate serial: 0258
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
Manifest number: 0251
Signing time: Mon 12 May 2025 04:06:49 +0000
Manifest this update: Mon 12 May 2025 04:06:48 +0000
Manifest next update: Wed 14 May 2025 04:06:48 +0000
Files and hashes: 1: vD3h6YQAgLg8ZSeM3qheopiClIE.crl (hash: Q3L7wQygiVq1xgZzRaV7o1xF27a3fTI+DFbRnATcHcc=)
2: B8CAC7A2985B11EFB8B2954E762E951A.roa (hash: 0SM5T8NNVkyg9HDp47V5o7gPmb06fjxNsfa8bT7ZCeg=)
3: 878D493881A211EE930A1D244AD9E6FC.roa (hash: zLISAvhBvxTn3b4oaLe3yfM1aFnsxwTljhKhQX5W/BU=)
4: BC17C6B4985911EFB44BE2BE762E951A.roa (hash: Bo/5IgYc6mUDXUlEMJ0TGF8yZL8JGbJAqfj9nRlvJTE=)
5: 2710C32E985C11EF9F3C7A50762E951A.roa (hash: bmsEiP38JU+Ehb3iR+wE1cNU6seqsv/LKiiqBY7usJI=)
6: 02E6D31E985A11EF9E664242762E951A.roa (hash: kGG1RiMSP23E2TSxLvJ3oRzrbpa7GUjmAWIe62Zi+WQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FCA07AF, serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
Validity
Not Before: May 12 04:06:48 2025 GMT
Not After : May 14 04:06:48 2025 GMT
Subject: CN=682173d9-f883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:2b:4e:66:02:11:3b:c4:b6:98:d9:37:53:
b4:e8:34:d7:fa:7d:bf:c8:f1:0b:59:93:90:eb:8e:
a4:5e:49:0d:aa:dc:5c:20:02:33:7a:de:24:04:f5:
16:ac:4a:1c:c9:e7:ed:79:97:74:e4:68:78:e3:31:
e6:8d:bf:1d:4b:3b:ee:23:8c:77:ac:4d:ae:c5:34:
ca:61:34:d2:fa:e0:37:0d:28:35:8f:7e:2c:fd:fd:
6a:c4:4b:86:b6:81:83:0e:de:60:1b:2c:60:2e:3d:
a8:b8:ab:6b:3f:53:ff:a6:8b:ce:9e:36:ef:23:b2:
37:1a:5c:3e:aa:0c:20:f0:24:32:d8:92:12:f2:a6:
38:b8:09:10:4f:36:26:85:1b:a2:6b:f9:39:8c:9a:
c1:84:6e:6a:64:f4:2e:0a:5a:d8:a6:e3:85:f0:65:
83:f2:2c:95:85:fd:28:76:8b:b2:6b:59:c6:4d:f3:
e6:5e:af:bc:30:af:92:4d:ae:95:1f:d6:f4:9c:8f:
b8:2c:30:b2:ad:e8:d4:4c:d3:1a:99:fd:71:e4:30:
43:27:e0:29:99:01:dc:29:76:70:cc:d5:af:88:17:
c1:b3:49:5c:8d:66:c8:9e:bf:65:b4:70:77:9f:21:
87:2b:46:4f:a7:45:f1:91:f1:fd:58:d8:a3:43:94:
a7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:63:B2:65:17:BE:C5:54:7C:87:40:B2:56:1D:24:DB:74:75:76:4E
X509v3 Authority Key Identifier:
keyid:BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d8:ee:3f:6f:8f:39:9d:1c:e1:33:b6:cd:1b:b0:40:7d:d8:
63:62:d4:29:0d:2c:70:96:c7:4e:66:a4:28:d5:76:90:dd:2f:
3f:72:7a:d9:5a:2c:d9:58:34:37:7c:f4:ad:78:b5:c6:6e:d4:
77:bd:6b:fe:35:b8:05:aa:7f:bb:7b:c1:1b:22:c2:34:cd:58:
85:18:b2:98:0d:87:24:be:07:24:eb:92:e1:57:38:d0:85:ea:
1b:fd:44:26:61:80:ca:94:b4:75:35:70:c5:21:ae:e3:04:7e:
4d:3a:f2:cc:1c:a8:22:0b:d5:55:25:00:ef:66:c7:3d:17:0f:
47:4f:25:f9:4d:25:64:73:92:86:16:ee:a1:50:6a:d1:02:2c:
b8:ab:82:9a:d6:79:7c:ba:c7:5e:7f:6c:f4:be:f8:af:dc:1d:
52:cd:75:60:94:c6:d1:96:b8:b4:2e:c9:9e:3a:85:78:11:36:
33:94:42:0e:02:4c:37:6c:a7:ee:d4:46:f4:9c:93:46:58:fd:
ec:08:5e:86:4d:6c:c6:f8:f2:a5:fe:7c:b1:f2:36:fc:3f:52:
05:7c:8d:f1:25:cc:33:d1:50:9b:50:c5:92:25:b6:ea:d9:41:
29:6b:80:87:14:b4:19:b3:ad:63:74:99:d0:ed:4f:6e:80:39:
c5:3a:e0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:16:15 2025 by rpki-client