Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
File: -kNarmNKJJQBjFzfiFcJr1vONro.mft (raw, json)
Hash identifier: BwcmdESvcj80EAHFsVBBixHUqakiUHv6dLWLYGEW25I=
Subject key identifier: CE:E1:79:AE:4A:5E:DB:F5:86:3F:10:F7:40:A1:C0:2C:C7:F3:BB:80
Authority key identifier: FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
Certificate issuer: /CN=F36B1FB2AF/serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Certificate serial: 075B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
Manifest number: 075B
Signing time: Fri 06 Jun 2025 01:55:48 +0000
Manifest this update: Fri 06 Jun 2025 01:55:47 +0000
Manifest next update: Sun 08 Jun 2025 01:55:47 +0000
Files and hashes: 1: -kNarmNKJJQBjFzfiFcJr1vONro.crl (hash: wW+m22PmrimAZCMRsUWkVOM4dbkNFL4Wq+Pk6Hw3iPw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1883 (0x75b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B1FB2AF, serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Validity
Not Before: Jun 6 01:55:47 2025 GMT
Not After : Jun 8 01:55:47 2025 GMT
Subject: CN=68424aa4-36c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:84:d3:22:84:e4:0f:9f:bc:fd:26:5c:08:
06:76:56:40:0c:32:37:43:21:a5:03:48:a0:26:44:
87:ca:2c:eb:b5:c9:51:cc:4b:16:b9:95:d4:a1:eb:
ad:17:86:21:60:e1:e6:ee:6c:1d:7b:04:cb:b6:a4:
01:47:92:a4:6c:a4:7d:f9:e2:dc:2a:d3:91:38:0d:
83:80:b1:cc:2b:f3:be:b8:6a:f0:ab:98:59:a2:b4:
77:6a:28:6a:47:2a:8a:77:1a:45:43:de:91:2c:a7:
f3:62:74:6c:4a:d4:d5:1e:dd:04:54:41:39:38:d4:
28:58:39:70:1a:86:f3:33:a9:81:4e:b4:72:da:d5:
95:7a:39:45:33:f3:c0:74:49:01:ec:62:f9:8e:38:
8d:eb:b8:a1:d3:26:6a:24:6b:c7:ad:59:4a:56:2b:
37:34:30:cc:d3:6b:7c:f7:3a:18:f2:e1:fd:ca:f4:
e4:25:6b:d1:b2:d1:99:12:f4:1f:97:43:af:fe:8e:
98:07:c7:a8:29:43:91:0b:d0:a1:00:95:e9:d6:38:
db:0f:2c:54:c9:e8:3b:92:82:70:98:70:07:6d:06:
86:f1:2b:06:c8:ec:e7:59:4e:5d:3d:64:b2:78:a5:
02:70:7d:5e:21:a1:4b:51:87:96:43:e6:56:4e:00:
18:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E1:79:AE:4A:5E:DB:F5:86:3F:10:F7:40:A1:C0:2C:C7:F3:BB:80
X509v3 Authority Key Identifier:
keyid:FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:01:9d:27:8b:23:2c:0f:6d:d2:62:e1:5e:3c:9e:10:45:86:
21:0d:76:42:2f:60:82:f2:5f:26:7e:2b:7e:2e:ac:8f:cd:f6:
b3:59:f0:4d:88:7b:f5:89:df:44:ff:86:cd:24:48:8a:7f:c1:
64:ef:ea:48:3f:7c:84:8a:f9:9a:7f:60:5d:64:26:35:53:34:
f2:98:a1:81:c7:e8:bd:19:d1:b8:70:25:0d:1f:32:e0:aa:e6:
ce:26:4f:93:e9:85:33:b9:44:1e:9d:dd:8e:32:1a:51:8e:34:
71:91:70:42:9a:09:7c:24:7a:35:66:c5:65:11:cb:0d:4f:3a:
28:93:05:ce:81:0f:27:90:63:a8:74:33:25:42:98:03:6b:0d:
14:ab:41:01:5f:0a:75:f4:27:3d:85:61:5c:cb:5f:1b:e7:9a:
31:92:99:c3:b8:2e:68:52:1f:e3:76:bd:a3:ce:34:fd:d1:31:
8c:f3:03:54:84:94:1a:e4:08:d7:15:0c:45:a7:bc:a2:37:28:
46:f8:00:3d:f7:af:73:bc:93:15:20:da:f8:e0:10:a6:8c:38:
e5:8a:2f:0b:1e:96:ad:ef:87:98:22:56:56:2c:ac:37:ae:1b:
e0:b8:fe:5c:2d:f4:e0:24:28:40:13:11:ff:d9:67:7c:e8:c4:
6d:c6:7c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:41:22 2025 by rpki-client