Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
File: KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft (raw, json)
Hash identifier: /F2SdDZHglghjKhAYdnQdEBFkRSV48so4zTFcsFxPS4=
Subject key identifier: B5:34:84:9C:B8:2F:4C:3B:23:BC:B1:89:78:75:92:85:49:6D:FD:FD
Authority key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
Certificate issuer: /CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Certificate serial: 048E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
Manifest number: 0486
Signing time: Sun 08 Jun 2025 02:56:09 +0000
Manifest this update: Sun 08 Jun 2025 02:56:08 +0000
Manifest next update: Tue 10 Jun 2025 02:56:08 +0000
Files and hashes: 1: KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl (hash: nAGNm2+OVQ0bzTW2WQRNpV8AqjqkyHqTCz3itILNplg=)
2: 073BD64605C911EE95E74F304AD9E6FC.roa (hash: In9Q3d/Y0USLa0Qt9FonWtXn6zDCpfpzJ3Ey6VoUa4c=)
3: 16A921E4DC0B11EC947D03A2F1222468.roa (hash: vGBFcYwGWSd28shsl6wLto7Mn3qQgY7dKVAEPsi5kBs=)
4: A9F0CED005CB11EEAE1D25384AD9E6FC.roa (hash: zxEwyc9gplQBJFrp7SAoD+b4/1ve107UCm4IoIpj8I0=)
5: BF8426E405CA11EE92157D354AD9E6FC.roa (hash: A+WykTSmvAsx1MAKq+Pb3eSJ+oLcJkndPTp4NaD0n4Y=)
6: 3DA37FA805CA11EE97650D344AD9E6FC.roa (hash: qnjPAnaVGfXdRft23JxV+6Cp0V+QdoJKnDCoKaZOhOc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1166 (0x48e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E29EDAF, serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Validity
Not Before: Jun 8 02:56:08 2025 GMT
Not After : Jun 10 02:56:08 2025 GMT
Subject: CN=6844fbc9-c9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:8d:9c:ac:cb:c0:b1:5c:f9:27:70:19:1c:
ff:be:e1:22:2f:19:69:21:5a:17:2d:ba:fc:54:1f:
9a:9f:92:70:26:e7:99:3f:0f:b5:a7:64:7d:ba:99:
89:b9:75:11:cc:9f:30:ad:fe:6f:a4:ab:b8:f7:da:
56:65:b8:f6:3f:4f:0c:88:48:5d:55:7e:a4:c5:36:
99:6e:a4:5b:4b:11:cf:17:95:3a:d6:84:31:75:89:
04:3c:d4:f4:89:a3:c7:c0:43:2f:c5:08:63:e5:19:
78:f4:62:c7:85:62:f4:f9:85:ee:24:c5:11:3a:46:
0d:d6:ac:5a:82:ef:83:43:e4:37:14:5b:78:41:7d:
fb:5c:24:85:0b:09:9c:4d:49:e4:38:96:fb:6f:63:
0d:2e:f8:75:da:74:92:73:96:6a:fd:b7:59:07:7a:
db:8e:28:8b:5b:8a:af:e5:00:e7:5f:41:53:ab:e6:
93:d3:4e:4d:65:af:82:13:45:d1:43:93:75:83:6c:
da:6d:d2:98:82:5c:24:01:88:5a:9c:df:e2:a8:30:
02:1c:33:46:ab:8f:95:f7:38:c3:03:99:5b:f9:52:
c1:46:29:58:2c:f8:c4:18:b3:11:11:fe:4b:d2:d5:
9d:c9:5a:76:10:03:ef:dc:d6:63:34:0f:3b:a1:28:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:34:84:9C:B8:2F:4C:3B:23:BC:B1:89:78:75:92:85:49:6D:FD:FD
X509v3 Authority Key Identifier:
keyid:2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bb:6c:55:2c:fc:8b:00:44:f1:f9:16:2c:bb:72:d1:90:f5:
82:9e:18:7c:77:90:e5:0c:4a:80:dc:61:1e:9e:5e:18:b4:1d:
2e:d4:55:4e:e1:dc:96:98:8a:22:4d:3f:39:31:f2:5e:2b:c6:
54:1e:22:75:e3:bf:19:83:16:0d:03:4d:2d:2b:f4:06:1d:22:
9a:be:0b:2c:02:76:2f:36:25:16:63:7c:97:f6:51:be:78:ec:
50:ba:b4:30:ed:38:a9:5a:98:5d:21:7a:3c:5c:0d:12:26:32:
10:08:ea:a9:1a:87:10:8e:c5:1a:81:8b:51:57:09:67:e7:f3:
80:e5:cb:0e:a8:92:e2:29:84:b1:2b:5f:1e:f6:bd:f5:af:d8:
0e:4a:0d:5a:1f:b7:bc:ca:95:bb:13:ec:be:d2:dc:f4:8e:8b:
5a:60:f2:6e:6e:fc:bc:63:60:47:82:29:87:5a:bb:f5:e4:f9:
fa:bc:f7:0c:cc:e1:3f:69:08:31:1d:03:28:4e:0a:75:f8:45:
8a:a3:5c:67:96:d8:ad:02:d7:1c:b5:9b:df:06:bf:d4:ca:d9:
37:f2:60:83:fd:1c:a0:a7:97:cf:84:e5:dc:45:3d:24:2a:1f:
ff:f1:29:a8:94:c6:89:62:c9:4b:51:84:7c:e5:d4:70:ab:f2:
61:e7:96:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:46:19 2025 by rpki-client