Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
File: kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft (raw, json)
Hash identifier: GxI74S2BMARUbx0UZpv03hcpn+VQn2aIGIXkS2/Vdfs=
Subject key identifier: 18:8A:9F:82:63:5A:04:2F:B1:3D:5D:09:94:0A:91:75:C6:1B:B9:89
Authority key identifier: 93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
Certificate issuer: /CN=F362AF02AR/serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
Certificate serial: 0944
Authority info access: rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
Manifest number: 093D
Signing time: Tue 16 Sep 2025 01:24:02 +0000
Manifest this update: Tue 16 Sep 2025 01:24:01 +0000
Manifest next update: Thu 18 Sep 2025 01:24:01 +0000
Files and hashes: 1: kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl (hash: g2lYNRZEpFZvn8WMGr7v2d/S7OxlOIAJvwUkYO9Qji0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl
rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2372 (0x944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362AF02AR, serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
Validity
Not Before: Sep 16 01:24:01 2025 GMT
Not After : Sep 18 01:24:01 2025 GMT
Subject: CN=68c8bc31-7e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:02:ee:f0:27:a2:b0:37:8e:25:d5:a7:81:56:
d7:8e:95:24:11:d5:0f:64:3a:63:8a:07:c8:b4:11:
4f:81:83:b3:5c:d4:ab:43:c5:17:09:a0:71:bd:8c:
43:4f:38:93:be:1b:13:97:6c:89:12:be:16:a7:79:
ca:c9:e3:05:3a:a6:5a:30:11:de:fc:37:a5:8e:9e:
ef:9f:7c:c3:70:bd:15:e3:33:ba:c1:bb:f5:1a:dd:
3d:8d:2e:58:e2:8b:95:c5:80:9f:ae:f8:70:75:f7:
2a:55:0e:d7:4e:fd:ef:05:d2:0c:6e:4d:8c:80:cd:
ba:40:f6:e4:5f:32:3b:3a:63:c8:ae:c4:8c:97:b4:
85:ed:0d:cb:0f:39:fe:6e:fe:6e:14:ac:9e:5f:c2:
45:1f:67:8d:23:13:87:8d:fa:29:03:25:7e:2f:1b:
46:fb:6d:d5:bc:9c:a9:85:ac:a3:75:12:6d:52:e6:
71:3a:f3:d3:81:ff:55:13:21:81:91:d9:ee:6c:0f:
fc:2e:b1:e1:7d:21:61:bd:b8:e9:5b:7a:49:a4:2b:
16:02:6c:96:52:64:bd:e7:7f:46:df:0a:45:e9:a5:
3d:34:62:d0:fe:cf:13:ce:18:cf:50:e7:37:ca:7e:
fb:59:0f:2c:ea:6b:a0:7d:d9:a5:60:2f:30:5b:38:
31:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8A:9F:82:63:5A:04:2F:B1:3D:5D:09:94:0A:91:75:C6:1B:B9:89
X509v3 Authority Key Identifier:
keyid:93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:fb:1a:04:59:20:b3:1e:ae:02:af:b3:2f:d2:4e:4d:fc:35:
5d:6d:c9:2a:64:e7:d4:42:75:d9:31:e4:8d:64:05:db:9e:c9:
48:b4:d5:3b:a6:d9:54:52:d4:9e:8f:42:b2:38:06:12:13:13:
95:9b:24:f4:36:d7:5e:2d:14:f2:a7:22:c9:90:78:b2:5b:61:
bf:4d:e1:40:3a:66:fe:3b:b8:38:2b:3b:2a:e8:b3:66:ba:75:
17:f9:36:e3:65:a0:08:7d:4f:3a:58:d3:53:d4:6f:81:de:2b:
27:ec:f3:d5:4c:51:80:52:58:9f:85:bb:42:80:a5:dc:4a:9f:
a2:9b:65:6a:30:74:94:34:a9:c3:15:af:4d:36:83:1e:d0:74:
9e:d2:e5:23:7d:7d:01:9f:ad:22:1a:9b:e9:7c:e8:e1:fa:89:
4a:04:48:fb:24:05:27:8f:13:28:6b:24:c1:c4:4a:0b:1b:9b:
7c:13:9a:9f:87:6c:dd:1a:3a:3e:c0:07:20:56:d8:5b:90:d2:
12:f9:8a:90:1b:d5:ed:9c:a7:fa:ef:bc:6b:d0:dc:f5:67:b1:
7a:e1:ab:c1:f7:71:91:e9:98:10:aa:fb:73:24:31:0f:ce:95:
57:a9:4e:9e:39:91:5e:75:0a:45:69:36:e3:f8:0f:87:93:44:
05:32:17:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:50:13 2025 by rpki-client