
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
File: kgRBKh8SvNXSs845kazvaXbIhl4.mft (raw, json)
Hash identifier: MFNXg958fqeLREYv8YP8x1va2nML1n6h8TnqP3hCPDA=
Subject key identifier: 99:35:D7:D1:5B:EF:D5:42:68:10:FB:03:36:EB:1E:63:42:07:60:6C
Authority key identifier: 92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E
Certificate issuer: /CN=F3647FF0AF/serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
Certificate serial: 040F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
Manifest number: 040D
Signing time: Sat 07 Jun 2025 03:14:07 +0000
Manifest this update: Sat 07 Jun 2025 03:14:06 +0000
Manifest next update: Mon 09 Jun 2025 03:14:06 +0000
Files and hashes: 1: kgRBKh8SvNXSs845kazvaXbIhl4.crl (hash: lx1XdONyf2mpNsf+PESapY24tqFqOl66Sfsp0zaovDs=)
2: AD72D8203AC511EF8BAB4075762E951A.roa (hash: uGjLeTcQtjvoi+G1lNbi/6hF5oa6IK/lI55KybZViDM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 03:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1039 (0x40f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3647FF0AF, serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
Validity
Not Before: Jun 7 03:14:06 2025 GMT
Not After : Jun 9 03:14:06 2025 GMT
Subject: CN=6843ae7f-879a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:f1:a0:75:bb:2b:f3:48:77:aa:31:7a:93:
26:98:2b:e8:46:ed:3c:73:43:9a:e5:0a:a1:5a:bd:
e3:47:63:0e:4e:86:c6:ee:3c:c0:88:c3:1c:3f:21:
2e:bf:15:f5:8e:1f:6d:fd:a1:92:7c:91:2f:42:f5:
01:65:57:5d:9d:e8:4a:33:62:29:9f:7c:89:4d:90:
d9:c5:a4:2b:ea:7e:f4:ba:0f:8f:35:58:f5:ab:06:
06:0f:ea:65:2e:d4:12:be:f8:36:0d:2d:36:0f:f5:
59:6d:07:79:6e:56:62:4b:08:88:bc:d8:95:2b:72:
b8:43:a3:c7:28:59:a2:1b:fe:ba:f4:c4:15:7c:a4:
ff:8e:6e:a7:55:94:f6:42:4a:d7:ba:3d:54:d7:1a:
8a:74:15:58:be:9f:3c:34:5a:17:af:e4:e2:07:ca:
3a:bb:76:92:94:f4:a3:bc:13:07:b8:43:cc:15:7d:
db:42:1c:3b:85:09:fd:62:1c:fb:d1:a2:58:d6:cf:
fa:54:96:31:8e:a0:07:28:62:e8:c2:d0:5b:cf:15:
c3:34:ef:a8:be:6e:7c:eb:47:6f:cf:cd:af:80:66:
c5:a2:b5:5b:e1:93:ef:ea:e5:0e:73:00:88:e5:78:
40:0c:4f:9a:b5:87:2d:37:99:84:7c:1d:0d:0b:cd:
a3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:35:D7:D1:5B:EF:D5:42:68:10:FB:03:36:EB:1E:63:42:07:60:6C
X509v3 Authority Key Identifier:
keyid:92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:c1:83:49:9f:c0:f6:8d:70:bf:16:45:d3:ef:3b:aa:4c:60:
ba:91:83:65:96:1e:bc:a5:ad:12:a8:bf:50:a3:c8:e6:85:2b:
bd:3b:82:69:95:9e:e6:7a:09:a0:0c:a4:cf:bc:1b:1f:79:d3:
fc:b5:92:37:1e:9f:a9:55:c7:86:b4:10:1f:e1:23:86:c9:d7:
d9:4f:25:87:56:ac:7d:be:62:09:bc:26:19:80:d4:35:f8:3a:
7f:bc:74:08:6c:d3:da:b6:50:49:94:16:ce:61:3d:d7:f4:b8:
f3:25:06:d7:8f:8e:b1:01:16:19:b8:e0:de:28:0b:0d:08:6a:
fa:1c:f2:a9:f7:d1:1f:d5:1c:9b:a9:1b:1d:81:28:3d:e7:b8:
94:a5:4f:ec:5f:3e:58:08:34:4b:f2:d7:f7:5a:42:d6:dd:79:
99:96:c8:5c:e2:58:22:5a:e9:5a:13:6e:03:cc:cf:94:4b:54:
da:2b:ec:ea:0b:16:90:9f:d7:ee:81:97:74:8e:7c:44:29:95:
df:4d:49:d9:97:5b:f9:3c:d3:17:de:4c:13:c1:47:f9:c1:0c:
7b:c7:8e:3b:f6:53:4a:38:22:1e:22:4c:9d:15:b1:3d:a0:ff:
95:5e:31:9d:66:18:71:b5:7e:cc:9b:06:a0:5d:a6:3d:59:ea:
19:66:81:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:31:45 2025 by rpki-client