Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
File: -kNarmNKJJQBjFzfiFcJr1vONro.mft (raw, json)
Hash identifier: cITkwJeF3aBLVco+QSJZtDRnrDp1sgEz1/ocof6ySlM=
Subject key identifier: D4:4D:2A:DB:88:64:A0:BA:35:68:67:F2:7B:A2:1E:6C:3B:70:2E:25
Authority key identifier: FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
Certificate issuer: /CN=F36B1FB2AF/serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Certificate serial: 0793
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
Manifest number: 0793
Signing time: Thu 31 Jul 2025 01:57:52 +0000
Manifest this update: Thu 31 Jul 2025 01:57:51 +0000
Manifest next update: Sat 02 Aug 2025 01:57:51 +0000
Files and hashes: 1: -kNarmNKJJQBjFzfiFcJr1vONro.crl (hash: kK/w1MX61tJvf6PGn8jhF4Jl6CFfJsYbw869Ny9gBzA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1939 (0x793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B1FB2AF, serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Validity
Not Before: Jul 31 01:57:51 2025 GMT
Not After : Aug 2 01:57:51 2025 GMT
Subject: CN=688acda0-aa17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d9:8b:08:bb:03:c4:be:af:cf:a3:ed:37:23:
07:64:ca:f5:95:84:c4:76:3c:69:a4:22:f4:ed:f4:
1a:2f:0d:9b:a8:cd:f1:4c:df:8a:50:42:d9:f2:fc:
a4:2e:ae:27:bd:c1:74:40:a7:55:e0:b7:aa:3c:70:
ba:70:65:9f:04:cf:36:e4:bb:62:a9:7a:8b:06:91:
bd:e0:98:4b:38:90:69:24:6d:f6:ea:08:cd:59:66:
40:0e:91:56:b5:a2:36:fe:a2:15:a1:73:cd:10:17:
0d:05:9e:14:bd:ba:0b:77:b8:d3:fe:a4:89:70:02:
ea:60:bf:10:44:67:53:d8:69:ee:4d:34:77:c9:fc:
42:b9:79:c1:0b:64:03:a0:79:5b:ec:ad:7c:46:d3:
16:ad:bf:8c:bd:ee:d4:a8:5e:8b:b9:c5:f9:8a:62:
af:8d:18:ec:78:3f:af:00:e9:b7:45:a0:22:cf:f6:
b3:47:8b:88:45:d1:61:5e:26:55:bb:65:60:96:e9:
dd:51:aa:b3:9d:ee:84:fc:9a:d4:db:87:a4:5d:c8:
94:bc:f3:ad:c7:97:77:24:19:69:ae:cf:cf:79:31:
b2:fc:f6:23:59:58:62:ee:e2:6e:20:d9:92:ce:3e:
11:89:d3:7e:ce:01:36:71:c1:46:5f:4f:cd:dd:67:
44:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4D:2A:DB:88:64:A0:BA:35:68:67:F2:7B:A2:1E:6C:3B:70:2E:25
X509v3 Authority Key Identifier:
keyid:FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:dc:7a:78:a5:5f:15:88:58:3a:d8:51:bb:1c:2f:d6:c6:a7:
d0:c7:46:f3:4b:1a:a5:d1:6a:b2:ca:3b:5e:30:d8:03:e7:18:
80:58:a0:60:39:f9:e3:dc:08:11:9a:88:03:d1:34:eb:01:bf:
ce:db:ad:9f:b1:b0:b2:bc:f2:34:1f:0e:48:47:ea:22:fb:8e:
ad:2a:88:6f:80:d5:d0:78:79:28:07:6f:69:cf:be:38:0c:3e:
76:06:6f:56:ee:92:31:0e:30:47:f7:2f:aa:ec:80:0e:b2:c1:
f0:3a:d6:3f:b5:72:19:9f:08:25:c9:ae:b4:b8:81:d2:48:f0:
cd:52:ee:ac:a7:ad:dd:fa:2d:80:88:df:80:0f:70:2f:e3:20:
5c:01:ca:84:6e:ff:50:1b:5c:ed:e4:c4:49:73:ab:53:68:07:
58:0a:47:68:f1:4f:2f:e1:bb:cf:02:b5:4e:b2:60:c2:f5:fe:
ea:ef:3c:02:7b:61:33:8c:1f:26:31:b7:e5:9d:7f:a9:fa:9d:
22:64:44:a7:1c:bb:e7:26:55:ae:c6:77:76:26:03:34:b4:25:
a2:e7:1b:82:c7:53:d7:79:9b:cc:77:da:dc:46:e7:8e:10:6b:
d8:1e:26:a3:5e:96:b5:cd:f0:84:73:17:c7:d1:80:36:ee:cc:
13:25:77:23
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB5MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjFGQjJBRjExMC8GA1UEBRMoRkE0MzVBQUU2MzRBMjQ5NDAxOEM1Q0RGODg1NzA5
QUY1QkNFMzZCQTAeFw0yNTA3MzEwMTU3NTFaFw0yNTA4MDIwMTU3NTFaMBgxFjAU
BgNVBAMTDTY4OGFjZGEwLWFhMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDX2YsIuwPEvq/Po+03IwdkyvWVhMR2PGmkIvTt9BovDZuozfFM34pQQtny
/KQurie9wXRAp1Xgt6o8cLpwZZ8Ezzbku2KpeosGkb3gmEs4kGkkbfbqCM1ZZkAO
kVa1ojb+ohWhc80QFw0FnhS9ugt3uNP+pIlwAupgvxBEZ1PYae5NNHfJ/EK5ecEL
ZAOgeVvsrXxG0xatv4y97tSoXou5xfmKYq+NGOx4P68A6bdFoCLP9rNHi4hF0WFe
JlW7ZWCW6d1RqrOd7oT8mtTbh6RdyJS8863Hl3ckGWmuz895MbL89iNZWGLu4m4g
2ZLOPhGJ037OATZxwUZfT83dZ0TzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1E0q
24hkoLo1aGfye6IebDtwLiUwHwYDVR0jBBgwFoAU+kNarmNKJJQBjFzfiFcJr1vO
NrowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIxRkIyL0VDQkM3RTgyOUY4MzExRUE4NDU5MTUzN0Y4QUVBMjI4Ly1rTmFy
bU5LSkpRQmpGemZpRmNKcjF2T05yby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLy1rTmFybU5LSkpRQmpGemZpRmNKcjF2T05yby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjFGQjIvRUNCQzdFODI5RjgzMTFFQTg0NTkxNTM3RjhB
RUEyMjgvLWtOYXJtTktKSlFCakZ6ZmlGY0pyMXZPTnJvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBM3Hp4pV8ViFg62FG7HC/WxqfQx0bz
Sxql0WqyyjteMNgD5xiAWKBgOfnj3AgRmogD0TTrAb/O262fsbCyvPI0Hw5IR+oi
+46tKohvgNXQeHkoB29pz744DD52Bm9W7pIxDjBH9y+q7IAOssHwOtY/tXIZnwgl
ya60uIHSSPDNUu6sp63d+i2AiN+AD3Av4yBcAcqEbv9QG1zt5MRJc6tTaAdYCkdo
8U8v4bvPArVOsmDC9f7q7zwCe2EzjB8mMbflnX+p+p0iZESnHLvnJlWuxnd2JgM0
tCWi5xuCx1PXeZvMd9rcRueOEGvYHiajXpa1zfCEcxfH0YA27swTJXcj
-----END CERTIFICATE-----
Generated at Thu Jul 31 11:17:00 2025 by rpki-client