Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
File: xj3vPkSJRRRCc6POcAST0qDFrZo.mft (raw, json)
Hash identifier: RX0M8+SSfgQWYiEeWtpYCOFl8vHUNODIp09//50A5PM=
Subject key identifier: 39:A2:CD:51:6F:BF:94:C0:B1:B7:6E:AC:99:31:57:F5:8F:27:05:96
Authority key identifier: C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A
Certificate issuer: /CN=F3640DFDAF/serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
Certificate serial: C5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
Manifest number: C4
Signing time: Sat 26 Apr 2025 05:01:04 +0000
Manifest this update: Sat 26 Apr 2025 05:01:03 +0000
Manifest next update: Mon 28 Apr 2025 05:01:03 +0000
Files and hashes: 1: xj3vPkSJRRRCc6POcAST0qDFrZo.crl (hash: 7HZVga+YlaCSOwnuUZlJ9+4r20uUs7OKbxbAw5Q9O94=)
2: 70BD095E911A11EF82BB6497762E951A.roa (hash: 5fyS1GERhUUgdGRbwBe9ouhJvbIYLSd3rIAGNjMRUFs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3640DFDAF, serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
Validity
Not Before: Apr 26 05:01:03 2025 GMT
Not After : Apr 28 05:01:03 2025 GMT
Subject: CN=680c6890-e5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:40:d2:79:f5:f3:13:d8:85:db:98:b8:27:40:
25:5a:19:52:a8:02:c8:0b:4e:8e:0e:e2:05:52:c3:
0f:e7:ed:70:c1:bc:20:a6:4e:91:83:b9:47:c0:34:
75:96:a0:ce:ab:ca:82:a2:6b:b9:59:a3:1d:8d:6c:
3a:e7:3b:af:0f:eb:da:8c:c4:78:93:c9:c3:81:10:
60:4b:7c:49:e1:32:b3:93:e4:88:bf:5c:1f:52:9f:
93:0e:79:b4:81:8b:9d:b7:2f:5a:1f:3e:80:18:67:
b4:18:0e:2c:86:c6:83:e1:d9:09:5f:9d:46:b4:b1:
75:e9:50:0d:22:0d:9e:ef:4b:14:ec:a6:77:8c:37:
39:2c:32:bd:03:37:80:2f:60:e0:db:ba:16:d5:b9:
80:68:7a:80:fb:6e:57:ba:75:e2:9d:94:d7:83:68:
4e:f9:ee:cc:12:1b:10:14:88:33:a8:0a:04:2e:ad:
47:94:1b:1f:ed:7c:ac:e4:f9:55:4c:92:b9:a6:8f:
66:e4:7b:01:ef:fa:64:b2:61:02:5b:30:61:80:25:
1f:2f:1f:59:f3:99:e5:ed:12:fd:fa:ea:e0:c3:dd:
32:d4:6e:92:c7:3f:26:57:99:b1:04:36:96:7b:60:
a7:2f:db:0a:93:6b:f1:f7:d7:ba:91:85:95:93:ff:
29:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A2:CD:51:6F:BF:94:C0:B1:B7:6E:AC:99:31:57:F5:8F:27:05:96
X509v3 Authority Key Identifier:
keyid:C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:18:2d:b5:8b:32:6a:2d:bd:dc:77:70:b7:38:0f:ad:61:0a:
97:ef:a1:a4:5b:82:b6:d8:b6:b2:10:fc:e5:84:c2:3a:e9:fd:
d5:5c:2e:f0:84:5a:ce:07:4e:2a:81:09:a7:48:ca:cd:c9:bd:
9b:32:82:27:bf:0e:df:4c:80:7e:40:4f:46:b0:a4:fd:dc:64:
b4:d4:e0:f7:d6:23:15:c8:82:77:cc:aa:1b:ba:52:31:0f:13:
5e:69:8e:b1:dd:fc:cb:5a:60:e0:b8:b4:98:2a:71:89:42:a6:
e5:09:6b:b8:18:1e:a1:51:49:b1:79:42:61:aa:46:35:72:13:
5d:65:2c:ec:2d:4b:73:a6:92:29:f2:ab:0a:88:72:33:68:ec:
6a:d5:2b:fa:3b:a6:ee:2b:f7:98:40:9c:cd:c1:f8:49:b0:eb:
c8:2b:7d:b1:fb:2b:3a:a5:93:2b:dd:0c:77:e5:af:b2:5a:ac:
70:6b:24:0e:a0:87:ce:0d:bf:2f:9d:e6:83:70:81:9d:11:78:
87:43:d1:27:de:29:3f:76:ac:2e:f6:9b:62:bc:44:9d:23:54:
4c:25:ad:d4:00:2b:41:f3:90:25:85:fe:e3:18:aa:99:db:b6:
28:ba:70:62:50:f0:47:82:34:37:76:4d:75:f5:f3:85:cc:66:
58:e2:82:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:55 2025 by rpki-client on console.sobornost.net