Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft
File: KFr00NNaAfToZi1wYXSTEwgbBW8.mft (raw, json)
Hash identifier: C+WLZDiyp7zOPEvf3l9yGhW/Lc1/hvsPQl52wtdwwck=
Subject key identifier: 72:72:99:18:5B:48:FB:7B:A7:BD:D9:E5:96:7A:49:7B:22:27:E8:5A
Authority key identifier: 28:5A:F4:D0:D3:5A:01:F4:E8:66:2D:70:61:74:93:13:08:1B:05:6F
Certificate issuer: /CN=F36A45F8AF/serialNumber=285AF4D0D35A01F4E8662D7061749313081B056F
Certificate serial: 22
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KFr00NNaAfToZi1wYXSTEwgbBW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft
Manifest number: 21
Signing time: Wed 17 Sep 2025 05:12:24 +0000
Manifest this update: Wed 17 Sep 2025 05:12:24 +0000
Manifest next update: Fri 19 Sep 2025 05:12:24 +0000
Files and hashes: 1: KFr00NNaAfToZi1wYXSTEwgbBW8.crl (hash: Yd3v0UwDlLGNX/OE2E30K4V+D6GtTCpOajFqUz0EUVo=)
2: C8DBFA287C1F11F0A46A9BE9DAE4EC9C.roa (hash: MEidKfzt+zEnon2K4l4j1oz0vKLVkgQvpvIBenvS0UU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft
rsync://rpki.afrinic.net/repository/afrinic/KFr00NNaAfToZi1wYXSTEwgbBW8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 05:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A45F8AF, serialNumber=285AF4D0D35A01F4E8662D7061749313081B056F
Validity
Not Before: Sep 17 05:12:24 2025 GMT
Not After : Sep 19 05:12:24 2025 GMT
Subject: CN=68ca4338-2c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dc:c0:d1:36:4e:c6:3b:76:a7:e2:93:af:7e:
a2:68:6b:55:32:3e:f0:75:aa:87:56:7b:ef:fe:a1:
67:54:54:53:1a:1f:ba:9a:cb:7e:36:10:cd:f8:9d:
49:31:17:2d:93:90:62:8f:db:04:41:79:a0:d6:e7:
d7:dd:11:35:bc:d8:de:12:62:70:af:eb:83:9a:e3:
a4:e5:95:5f:76:81:03:5d:3c:4d:88:22:7f:7d:1e:
7b:83:67:dd:88:fc:cd:70:1a:ae:d7:1c:84:18:91:
b4:ba:af:65:66:d8:89:35:79:10:7e:8f:6a:46:66:
6c:ac:0b:48:9e:78:0d:59:d9:23:84:ec:68:f9:bf:
08:8f:8a:95:0e:5e:fd:ed:f6:9d:ab:a6:ae:09:d0:
43:ea:d5:a5:13:7c:51:97:17:b9:e5:a7:cc:6f:49:
f4:c6:b5:3d:96:6b:0b:38:09:e3:da:96:db:d0:d8:
9e:ca:e9:4a:b2:64:9a:a6:7f:9e:b1:7c:45:77:44:
3b:f7:7c:8b:8b:cb:2b:c9:ba:09:5b:ff:1d:39:11:
96:a8:2d:f0:30:c7:be:7a:5d:6a:7f:64:10:61:86:
7f:d6:03:d8:62:a7:cd:da:f6:89:5c:72:02:b0:5f:
ad:56:78:67:c8:00:e2:e3:49:df:22:4d:10:48:84:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:72:99:18:5B:48:FB:7B:A7:BD:D9:E5:96:7A:49:7B:22:27:E8:5A
X509v3 Authority Key Identifier:
keyid:28:5A:F4:D0:D3:5A:01:F4:E8:66:2D:70:61:74:93:13:08:1B:05:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KFr00NNaAfToZi1wYXSTEwgbBW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:86:2d:58:38:dd:43:c0:ef:27:03:4e:3f:ff:2a:58:79:de:
14:ad:e8:4e:82:71:eb:25:2d:6a:b2:12:a0:94:43:65:21:72:
92:88:94:02:df:15:37:54:9d:2e:59:3e:84:3c:14:0a:a4:5a:
38:5c:05:4d:2c:5c:e7:55:d8:de:4a:6b:c7:c9:07:50:42:b2:
ca:30:b4:97:48:06:73:10:62:16:83:28:52:2f:d2:14:83:ec:
6b:41:a8:8a:95:77:bc:1f:1e:b1:02:d8:eb:78:80:45:0a:35:
9d:2d:ca:64:a6:82:67:21:e7:3e:9d:f7:ce:7c:84:2e:94:b9:
68:24:50:20:97:0a:3e:bc:da:dd:c9:82:13:33:7a:9f:8f:a3:
7f:74:aa:bb:ff:58:a6:42:34:15:a5:2a:2b:ee:b3:48:90:80:
44:21:50:b3:a4:5c:3f:43:7b:70:60:f0:e0:dd:fd:aa:ab:f2:
88:f8:0d:4f:9c:fa:db:9c:ed:4a:ce:d6:42:1a:29:a1:e9:b5:
6d:86:27:f2:11:d6:dc:5d:e2:af:3b:77:8b:9a:83:37:aa:54:
56:c8:99:f4:16:6e:22:02:4d:a1:e7:f3:32:ca:d2:d9:74:d5:
4f:39:ca:77:73:0a:11:22:9a:2f:e7:09:a2:ff:c8:06:2a:4b:
e0:5d:6f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:26:57 2025 by rpki-client