Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
File: kkLGCS_iI5rNMMSPNawbxN313L4.mft (raw, json)
Hash identifier: TIp2jw0zfaYOQzVcAJE7H+u0b3Mpfo0ABNA3PdWlbt8=
Subject key identifier: 13:59:60:AB:3F:F0:DC:55:5C:DE:09:FD:B0:4F:FD:A2:F2:E3:F2:86
Authority key identifier: 92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
Certificate issuer: /CN=F36ECAA2AR/serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
Certificate serial: 0335
Authority info access: rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
Manifest number: 0334
Signing time: Sun 06 Apr 2025 02:20:11 +0000
Manifest this update: Sun 06 Apr 2025 02:20:11 +0000
Manifest next update: Tue 08 Apr 2025 02:20:11 +0000
Files and hashes: 1: kkLGCS_iI5rNMMSPNawbxN313L4.crl (hash: qCwiINU9aDDqPWPSPEjztBbV5756ZoEWkCi2lcBk+lw=)
2: 77776CF68DDF11EE9554951A4AD9E6FC.roa (hash: P/s62KTUxEoG/rgkYrfYli6201mLv2NV6jxtdASDzgE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 821 (0x335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36ECAA2AR
Validity
Not Before: Apr 6 02:20:11 2025 GMT
Not After : Apr 8 02:20:11 2025 GMT
Subject: CN=67f1e4db-162b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c0:8f:e5:0d:7e:c9:bd:c3:77:36:9f:c4:96:
7d:0a:08:c0:ea:db:60:9b:76:e3:71:4d:2f:03:65:
03:dc:e4:b7:1f:ff:ef:97:75:20:3a:39:76:d1:47:
d9:0a:06:c6:cb:3c:42:16:9b:f6:cd:e1:f1:59:0a:
5d:ee:90:ed:1a:91:89:cd:bf:7f:ad:16:24:23:e4:
aa:5d:2a:9a:ef:8e:b0:02:44:bc:62:6c:82:d9:96:
f4:bb:0c:d2:6a:30:b6:2c:b1:d8:d0:20:d8:1f:a7:
26:64:6c:ad:53:e7:6c:14:7c:10:6d:63:0b:c0:89:
d1:3e:64:7e:74:42:2d:05:b1:56:44:2a:3b:df:9e:
14:03:16:c3:d0:cf:93:eb:1b:0d:96:e7:81:5e:04:
07:5e:4c:c8:c7:08:46:23:a0:eb:ba:b5:9a:89:fb:
b5:39:01:84:d8:67:03:bc:75:d9:db:1c:51:ce:1f:
1b:a5:c9:6e:a2:d3:34:86:c6:73:f3:d5:fe:d1:50:
41:c4:53:1a:8e:a0:dd:d1:a2:e0:93:3b:2b:55:fb:
23:83:b3:bd:10:d0:df:9b:bf:6b:5c:4e:5e:2d:f8:
c3:55:30:8d:43:b1:08:c9:52:e7:3e:43:f7:30:e3:
57:0e:2a:2d:7d:cb:2c:a9:7c:08:aa:60:aa:10:19:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:59:60:AB:3F:F0:DC:55:5C:DE:09:FD:B0:4F:FD:A2:F2:E3:F2:86
X509v3 Authority Key Identifier:
keyid:92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:4b:29:4e:8f:6a:e3:85:14:1a:6a:d0:07:65:04:c1:af:87:
6a:4a:eb:75:e0:25:11:d9:05:df:2f:0e:0b:5f:38:81:28:34:
b4:fe:ca:66:67:13:c9:f0:84:1a:b0:69:62:b4:4b:6f:f0:a8:
b6:0e:62:0d:84:01:96:4e:75:bc:21:5e:89:ec:04:00:28:ae:
4d:04:17:48:1b:f7:2d:ef:8f:fa:97:75:d0:f0:fc:1e:9e:6b:
82:71:75:fc:12:05:e7:8e:16:1a:ec:a0:3b:f3:45:c7:a7:83:
63:7a:55:fa:a9:b4:9f:c4:e1:b2:15:7c:74:fc:3d:c4:8a:4e:
28:41:a0:55:36:e0:61:c7:06:36:f2:ba:e2:8b:09:27:95:4d:
00:1e:86:d6:3f:10:b9:6a:50:fc:5c:4b:7a:34:fd:22:d0:a1:
53:51:18:5e:6b:f5:a3:46:48:00:56:3a:4f:d4:35:19:7c:fd:
a6:ae:b0:cf:60:a9:e7:52:78:22:6f:a4:f6:b0:a3:c2:0d:9c:
19:91:6d:a2:ab:cf:42:ca:d4:8d:84:bb:97:c8:d3:e8:da:76:
4b:e4:16:0b:55:93:f4:a3:65:9f:cd:66:db:e0:8d:a6:2c:70:
e6:cf:46:09:f8:d7:90:38:17:13:49:86:d9:8c:a5:f4:88:c2:
de:44:aa:29
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAzUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUNBQTJBUjExMC8GA1UEBRMoOTI0MkM2MDkyRkUyMjM5QUNEMzBDNDhGMzVBQzFC
QzREREY1RENCRTAeFw0yNTA0MDYwMjIwMTFaFw0yNTA0MDgwMjIwMTFaMBgxFjAU
BgNVBAMTDTY3ZjFlNGRiLTE2MmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDxwI/lDX7JvcN3Np/Eln0KCMDq22CbduNxTS8DZQPc5Lcf/++XdSA6OXbR
R9kKBsbLPEIWm/bN4fFZCl3ukO0akYnNv3+tFiQj5KpdKprvjrACRLxibILZlvS7
DNJqMLYssdjQINgfpyZkbK1T52wUfBBtYwvAidE+ZH50Qi0FsVZEKjvfnhQDFsPQ
z5PrGw2W54FeBAdeTMjHCEYjoOu6tZqJ+7U5AYTYZwO8ddnbHFHOHxulyW6i0zSG
xnPz1f7RUEHEUxqOoN3RouCTOytV+yODs70Q0N+bv2tcTl4t+MNVMI1DsQjJUuc+
Q/cw41cOKi19yyypfAiqYKoQGfshAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUE1lg
qz/w3FVc3gn9sE/9ovLj8oYwHwYDVR0jBBgwFoAUkkLGCS/iI5rNMMSPNawbxN31
3L4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVDQUEyLzNDNUUwQTYyQTYwOTExRURBMkU3OTJCOUYxMjIyNDY4L2trTEdD
U19pSTVyTk1NU1BOYXdieE4zMTNMNC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2trTEdDU19pSTVyTk1NU1BOYXdieE4zMTNMNC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RUNBQTIvM0M1RTBBNjJBNjA5MTFFREEyRTc5MkI5RjEyMjI0
Njgva2tMR0NTX2lJNXJOTU1TUE5hd2J4TjMxM0w0Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCDSylOj2rjhRQaatAHZQTBr4dqSut14CUR
2QXfLw4LXziBKDS0/spmZxPJ8IQasGlitEtv8Ki2DmINhAGWTnW8IV6J7AQAKK5N
BBdIG/ct74/6l3XQ8PwenmuCcXX8EgXnjhYa7KA780XHp4NjelX6qbSfxOGyFXx0
/D3Eik4oQaBVNuBhxwY28rriiwknlU0AHobWPxC5alD8XEt6NP0i0KFTURhea/Wj
RkgAVjpP1DUZfP2mrrDPYKnnUngib6T2sKPCDZwZkW2iq89CytSNhLuXyNPo2nZL
5BYLVZP0o2WfzWbb4I2mLHDmz0YJ+NeQOBcTSYbZjKX0iMLeRKop
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:34:00 2025 by rpki-client