Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
File: KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft (raw, json)
Hash identifier: bagTIMF2nzZRO2og0AHkH2WmQRXQNhIxHzv2pF6jnHU=
Subject key identifier: D7:0F:90:6F:FC:84:85:02:D9:17:8E:41:A1:2C:9C:4E:F1:C0:14:10
Authority key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
Certificate issuer: /CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Certificate serial: 04F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
Manifest number: 04EC
Signing time: Wed 17 Sep 2025 02:45:49 +0000
Manifest this update: Wed 17 Sep 2025 02:45:48 +0000
Manifest next update: Fri 19 Sep 2025 02:45:48 +0000
Files and hashes: 1: KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl (hash: 94TaVle2eqDD8kaCZbAMmbFUWwBfvvWMohTCygTagCg=)
2: 073BD64605C911EE95E74F304AD9E6FC.roa (hash: In9Q3d/Y0USLa0Qt9FonWtXn6zDCpfpzJ3Ey6VoUa4c=)
3: 16A921E4DC0B11EC947D03A2F1222468.roa (hash: vGBFcYwGWSd28shsl6wLto7Mn3qQgY7dKVAEPsi5kBs=)
4: A9F0CED005CB11EEAE1D25384AD9E6FC.roa (hash: zxEwyc9gplQBJFrp7SAoD+b4/1ve107UCm4IoIpj8I0=)
5: BF8426E405CA11EE92157D354AD9E6FC.roa (hash: A+WykTSmvAsx1MAKq+Pb3eSJ+oLcJkndPTp4NaD0n4Y=)
6: 3DA37FA805CA11EE97650D344AD9E6FC.roa (hash: qnjPAnaVGfXdRft23JxV+6Cp0V+QdoJKnDCoKaZOhOc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 02:45:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1268 (0x4f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E29EDAF, serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Validity
Not Before: Sep 17 02:45:48 2025 GMT
Not After : Sep 19 02:45:48 2025 GMT
Subject: CN=68ca20dd-3102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:84:89:b8:ae:97:2d:e9:69:12:96:20:86:
5b:74:7d:ce:50:02:d3:dc:0c:ae:52:d6:76:ec:0e:
74:d2:61:9e:54:59:0f:ad:98:0b:d7:82:e6:ac:06:
ab:4e:01:bc:1d:75:98:9d:46:31:f3:5b:44:e5:45:
54:e0:b7:73:51:c2:c9:45:cf:45:ee:2e:74:41:78:
7b:65:39:e1:35:08:d9:75:91:49:42:33:69:64:fc:
67:64:91:4e:68:91:c9:d4:fe:49:6d:97:45:24:79:
38:f8:e3:8d:28:f8:28:c0:76:9d:7d:2e:30:08:ac:
ab:f1:98:80:13:26:0b:ac:d2:df:aa:8a:13:2e:e3:
9c:73:bc:58:b6:db:a8:22:7e:9d:e3:0e:52:dc:2b:
aa:e4:6b:6b:ca:f6:17:a1:a0:19:ac:d8:b8:be:4b:
5a:9b:f4:8d:bb:6d:01:7c:f5:72:fc:31:8a:5e:1e:
0f:22:4a:51:41:9e:ac:f5:3a:6f:a2:ea:4f:a9:c8:
f4:7a:05:3d:a8:0e:5e:78:28:13:a2:ba:2a:90:ea:
63:02:5b:dd:cd:09:5a:70:b3:d3:2d:8c:4a:1a:49:
a7:d4:c3:b8:f6:8e:47:11:13:65:f8:bd:a3:d7:14:
ad:ab:17:ef:85:48:da:48:98:8e:f2:0e:f7:d0:21:
47:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0F:90:6F:FC:84:85:02:D9:17:8E:41:A1:2C:9C:4E:F1:C0:14:10
X509v3 Authority Key Identifier:
keyid:2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:02:1b:eb:9d:d2:ac:0d:e1:d3:15:26:31:cc:ad:97:fc:fa:
ac:59:ad:02:22:c3:dd:be:04:44:53:9e:a7:5d:0a:00:95:ea:
7a:1d:ee:10:37:9e:93:a8:f8:8f:f9:4b:ab:5c:7c:d0:e8:0e:
35:70:22:3d:80:9a:5c:e2:cb:c6:a4:ea:da:62:2a:4c:3a:ab:
cd:5c:67:fc:47:92:32:8b:d5:ed:00:f7:64:c1:92:76:fd:95:
62:c5:77:15:2a:0b:55:5b:a8:c4:47:12:22:71:69:58:89:7a:
1e:d1:a0:84:2f:eb:a2:10:c2:42:45:06:81:07:e6:5c:e9:d0:
06:14:ab:25:80:a9:c5:af:13:26:8e:46:5f:b6:8f:71:b0:41:
48:43:8c:29:94:53:50:79:c4:4b:2a:a0:c3:20:f1:d7:54:d6:
cb:38:ef:fc:7d:1f:75:4c:c9:d6:ea:6d:04:3d:0d:6b:1c:7f:
cc:ea:59:44:ba:e3:c7:3d:76:63:1c:57:21:fd:8b:2e:95:35:
b9:82:ec:37:5d:ba:e1:30:3f:50:a5:cb:b2:21:7e:b0:a4:3e:
b9:3e:bb:f7:62:7b:d5:71:3e:5c:9b:f1:19:3d:fa:4b:17:b7:
9f:2d:38:f4:c8:d5:81:81:52:2a:ce:fa:fc:66:38:8d:1f:62:
5a:09:9a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:25:17 2025 by rpki-client