Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
File: KSWEoez-KvMJMi1y5i2NXGpe968.mft (raw, json)
Hash identifier: IQz3ycQAB9uVIxv0JXohjnVaoxGmGnLMSthPYzorclE=
Subject key identifier: D9:4F:EA:0F:1B:A9:69:D8:98:41:77:A5:60:25:E1:E4:52:AC:A2:0A
Authority key identifier: 29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF
Certificate issuer: /CN=F364791EAF/serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
Certificate serial: 027E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
Manifest number: 027C
Signing time: Thu 03 Apr 2025 02:35:00 +0000
Manifest this update: Thu 03 Apr 2025 02:35:00 +0000
Manifest next update: Sat 05 Apr 2025 02:35:00 +0000
Files and hashes: 1: KSWEoez-KvMJMi1y5i2NXGpe968.crl (hash: ULZl0hfvKSJJRKS3ql12KjHbEQnzzpmGiURvXHpFpGM=)
2: BF7E3710144311EFA22B150D017001B1.roa (hash: 8/PkEBIvQqXhRj2NABgd13CMYm/zHriVEu3SoXyW4r4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.crl
rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 638 (0x27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364791EAF
Validity
Not Before: Apr 3 02:35:00 2025 GMT
Not After : Apr 5 02:35:00 2025 GMT
Subject: CN=67edf3d4-648b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9c:d7:a2:15:06:00:16:6a:72:e3:0e:44:02:
12:94:17:40:96:26:2f:1c:e7:55:ff:59:f7:bd:c5:
62:68:8d:05:d1:3c:be:2d:28:9e:e4:d1:6c:74:cb:
4b:5b:73:e8:81:ed:12:41:58:cf:c7:9c:5d:f2:22:
0e:12:0c:09:b9:b5:23:02:f7:57:29:db:92:2d:f6:
c6:5c:f7:4a:d7:c5:fa:98:ae:74:75:71:d1:59:79:
e0:b9:6d:bb:c7:a8:1f:08:6e:b3:65:b5:0d:62:34:
03:27:27:2a:7e:62:44:bd:52:f6:de:9c:c6:b1:ba:
0f:93:22:86:f0:1f:80:b5:3c:4b:32:b3:89:b6:d0:
12:89:81:ae:dd:63:30:73:67:b5:0a:e3:d7:88:a2:
c0:a3:0d:6c:29:0c:39:26:31:9c:cd:a6:22:f1:26:
3a:9d:91:09:4a:c5:6b:11:5b:c5:64:13:2d:4f:b3:
e7:2f:9b:22:97:aa:3c:14:a4:ca:7f:67:3e:43:ee:
a8:6e:e1:93:7b:c9:fe:ce:0a:c4:78:9e:74:69:eb:
92:14:98:76:b8:c1:00:0e:3b:07:0c:7c:57:3f:92:
ee:4c:04:64:e0:32:83:1b:8a:56:be:97:0b:94:0c:
d1:6d:e7:e0:e7:5e:93:5d:db:4d:ee:89:ee:35:a9:
56:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4F:EA:0F:1B:A9:69:D8:98:41:77:A5:60:25:E1:E4:52:AC:A2:0A
X509v3 Authority Key Identifier:
keyid:29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:94:e6:f1:95:f9:b5:56:57:e1:ad:36:55:ca:c3:01:09:6b:
f4:1e:05:5a:bc:19:ff:15:7f:4e:a5:ec:4f:dc:8b:5e:ca:00:
5d:5c:06:8f:01:1f:c0:d8:5d:7a:3b:45:c2:08:35:a8:84:19:
5b:1a:8d:3d:a4:47:27:2c:19:93:80:9a:c3:22:05:0b:fc:f4:
24:51:68:4c:35:a2:f0:d5:40:24:84:4c:99:d4:4f:08:a2:2b:
f6:81:fb:2f:8a:bf:95:34:9a:e0:86:e8:19:8d:23:b9:63:3b:
4c:8b:37:37:b5:de:64:ae:eb:41:3e:54:9a:a8:cd:eb:67:34:
b4:23:e1:ea:7f:5b:f7:32:32:92:eb:71:55:f8:f8:e7:dd:26:
f9:f7:7a:f1:7c:d4:f6:e8:c5:81:80:e3:ac:6b:56:26:b8:36:
e8:40:73:3b:2f:7a:ed:b2:be:3e:9d:fb:4f:c5:41:1a:ef:ed:
4e:53:a9:28:0c:87:97:26:b3:bc:05:4e:13:e9:31:11:da:50:
bd:33:05:c2:c9:17:ea:7c:04:bd:4b:f3:cb:3f:c4:ac:b9:ec:
6d:1c:a9:5a:a1:03:1e:4a:05:e0:3b:be:32:76:a5:5a:22:d8:
da:74:db:4a:a7:fe:b8:98:a7:30:35:f2:bd:90:8f:6c:7d:f0:
e1:ca:13:f2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDc5MUVBRjExMC8GA1UEBRMoMjkyNTg0QTFFQ0ZFMkFGMzA5MzIyRDcyRTYyRDhE
NUM2QTVFRjdBRjAeFw0yNTA0MDMwMjM1MDBaFw0yNTA0MDUwMjM1MDBaMBgxFjAU
BgNVBAMTDTY3ZWRmM2Q0LTY0OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCknNeiFQYAFmpy4w5EAhKUF0CWJi8c51X/Wfe9xWJojQXRPL4tKJ7k0Wx0
y0tbc+iB7RJBWM/HnF3yIg4SDAm5tSMC91cp25It9sZc90rXxfqYrnR1cdFZeeC5
bbvHqB8IbrNltQ1iNAMnJyp+YkS9UvbenMaxug+TIobwH4C1PEsys4m20BKJga7d
YzBzZ7UK49eIosCjDWwpDDkmMZzNpiLxJjqdkQlKxWsRW8VkEy1Ps+cvmyKXqjwU
pMp/Zz5D7qhu4ZN7yf7OCsR4nnRp65IUmHa4wQAOOwcMfFc/ku5MBGTgMoMbila+
lwuUDNFt5+DnXpNd203uie41qVYzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU2U/q
DxupadiYQXelYCXh5FKsogowHwYDVR0jBBgwFoAUKSWEoez+KvMJMi1y5i2NXGpe
968wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3OTFFLzdFQzNGNjM2MkY4NTExRUVBODM5NzY3MjRBRDlFNkZDL0tTV0Vv
ZXotS3ZNSk1pMXk1aTJOWEdwZTk2OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0tTV0VvZXotS3ZNSk1pMXk1aTJOWEdwZTk2OC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDc5MUUvN0VDM0Y2MzYyRjg1MTFFRUE4Mzk3NjcyNEFE
OUU2RkMvS1NXRW9lei1Ldk1KTWkxeTVpMk5YR3BlOTY4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMlObxlfm1VlfhrTZVysMBCWv0HgVa
vBn/FX9OpexP3IteygBdXAaPAR/A2F16O0XCCDWohBlbGo09pEcnLBmTgJrDIgUL
/PQkUWhMNaLw1UAkhEyZ1E8Ioiv2gfsvir+VNJrghugZjSO5YztMizc3td5krutB
PlSaqM3rZzS0I+Hqf1v3MjKS63FV+Pjn3Sb593rxfNT26MWBgOOsa1YmuDboQHM7
L3rtsr4+nftPxUEa7+1OU6koDIeXJrO8BU4T6TER2lC9MwXCyRfqfAS9S/PLP8Ss
uextHKlaoQMeSgXgO74ydqVaItjadNtKp/64mKcwNfK9kI9sffDhyhPy
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:38:52 2025 by rpki-client