Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
File: KIBrwzr6AQb7b4x0Keq3jBIBolk.mft (raw, json)
Hash identifier: iGs/H7ULKDFz9N1IIfc4c8Gs29wd26ZLXG6j7QWQT0g=
Subject key identifier: 33:B1:6C:40:F8:E2:3A:36:3B:DA:6B:22:BE:85:60:E8:A1:CB:0D:84
Authority key identifier: 28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59
Certificate issuer: /CN=F36E201DAR/serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
Certificate serial: 02EF
Authority info access: rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
Manifest number: 02EE
Signing time: Sun 27 Jul 2025 03:56:51 +0000
Manifest this update: Sun 27 Jul 2025 03:56:50 +0000
Manifest next update: Tue 29 Jul 2025 03:56:50 +0000
Files and hashes: 1: KIBrwzr6AQb7b4x0Keq3jBIBolk.crl (hash: 0NmRCldX1CIRzJQvhbo0K69YVxbNLOPEaOP45LD8eyM=)
2: 12D945AE311311EEAFAB622D4AD9E6FC.roa (hash: 1y9sdDMI5w0HwUMIMsTMrTkhx4nO8g3B7LIIf0j6KVA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751 (0x2ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E201DAR, serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
Validity
Not Before: Jul 27 03:56:50 2025 GMT
Not After : Jul 29 03:56:50 2025 GMT
Subject: CN=6885a383-d591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:37:71:f6:00:a8:f8:27:40:f3:c4:ed:74:
99:54:9f:a3:53:97:6b:dd:23:42:45:68:d2:36:6a:
2f:8b:f9:24:af:86:a7:6d:c3:26:a1:2a:7b:21:bd:
9b:05:d3:d7:2d:06:f6:71:16:92:6a:67:f4:b1:44:
fc:17:ef:29:ca:3a:31:b9:5b:46:2c:70:1d:45:d2:
95:9c:73:59:80:d1:8e:10:e0:d0:97:a3:e1:36:a6:
df:6b:ca:d1:6a:a5:5c:fd:30:68:0b:d9:98:1f:85:
9f:20:11:76:51:ce:2b:a5:10:06:5f:a4:c6:80:99:
6c:7b:4a:7e:16:51:24:ca:0f:72:2e:32:c6:8d:27:
47:b1:a4:56:17:ab:ee:37:61:2e:d7:df:12:c0:d1:
dd:82:ef:3f:9f:32:3f:9e:3f:94:af:b5:e7:0b:9f:
69:80:02:d0:0f:58:3e:1f:50:02:e3:07:8a:30:d7:
41:16:e4:28:55:19:3b:68:f0:82:84:a5:21:b4:4e:
e8:4b:31:4c:1d:4e:41:84:73:36:5e:fa:8b:6f:d3:
fa:59:1b:99:89:68:52:d9:0c:1d:fb:92:e2:54:c4:
d6:9c:03:df:d2:54:f1:c1:6c:fb:aa:81:5d:89:42:
3b:6a:e7:7c:31:48:e8:6c:21:50:34:1c:b1:e0:ec:
82:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B1:6C:40:F8:E2:3A:36:3B:DA:6B:22:BE:85:60:E8:A1:CB:0D:84
X509v3 Authority Key Identifier:
keyid:28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9f:75:8a:94:6e:25:c9:2e:07:0a:15:e6:7b:84:ea:dc:d6:
12:96:e5:55:a7:ff:de:d7:69:2c:61:dd:3e:64:2e:8d:66:bd:
47:ef:51:f6:66:24:a4:a3:89:f6:d4:ab:a6:3f:d7:fa:b5:cd:
75:36:10:33:d5:e9:2b:62:04:97:67:22:f8:38:0b:71:39:f2:
69:aa:80:5c:78:2b:a3:1e:8d:7c:b3:c8:ac:ac:42:7b:39:ae:
f4:28:c9:b1:36:0a:03:3e:e7:94:de:58:fa:41:00:63:84:95:
5f:66:3f:f4:f4:2d:b7:74:a2:8b:3d:46:13:a9:8e:aa:01:78:
d2:b6:b9:de:00:7e:d4:88:12:f4:24:64:e8:d6:09:d7:d7:1e:
e1:66:c3:cf:99:c7:b4:ed:56:3b:0e:44:0d:8b:c5:ff:5b:fb:
07:0d:dc:b4:af:86:bf:a0:66:3c:d9:a6:83:6c:dc:4c:5b:39:
c5:6d:a8:55:36:56:8c:2e:69:70:37:b8:fe:84:ed:73:5a:f7:
aa:a3:68:67:1e:a8:4b:be:83:8f:a7:16:3e:e3:15:aa:0e:1e:
f8:02:75:a6:a4:6b:74:cd:8b:50:67:61:e2:1a:9b:ed:88:e4:
6a:49:25:9e:f4:b1:12:c4:f5:03:1b:8a:9d:59:cb:99:1c:62:
d6:ed:61:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:49:10 2025 by rpki-client