
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
File: kkLGCS_iI5rNMMSPNawbxN313L4.mft (raw, json)
Hash identifier: 6KQUoLsYUGdH81vEeYeKNPmbey0ISkjMP7OcUE6S6IA=
Subject key identifier: DC:DC:B9:DE:C8:A1:62:9E:68:29:B3:14:4F:EF:8A:99:B1:D5:A3:60
Authority key identifier: 92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
Certificate issuer: /CN=F36ECAA2AR/serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
Certificate serial: 03DA
Authority info access: rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
Manifest number: 03D9
Signing time: Tue 16 Sep 2025 03:15:34 +0000
Manifest this update: Tue 16 Sep 2025 03:15:33 +0000
Manifest next update: Thu 18 Sep 2025 03:15:33 +0000
Files and hashes: 1: kkLGCS_iI5rNMMSPNawbxN313L4.crl (hash: ap7w4j74gD6dp3v6ErIsCPDZ4mGrsLsO91A5teajot8=)
2: 77776CF68DDF11EE9554951A4AD9E6FC.roa (hash: P/s62KTUxEoG/rgkYrfYli6201mLv2NV6jxtdASDzgE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 986 (0x3da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36ECAA2AR, serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
Validity
Not Before: Sep 16 03:15:33 2025 GMT
Not After : Sep 18 03:15:33 2025 GMT
Subject: CN=68c8d656-1b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ea:41:4b:01:84:fe:3a:86:22:2f:2f:6b:e7:
58:6c:0f:f3:17:c5:e8:c3:2c:f3:97:8f:69:b6:e8:
ea:6c:29:c6:38:3e:62:2d:52:51:dd:03:d1:aa:36:
e9:4d:64:7e:6d:d8:9d:f2:23:ea:af:56:bd:1d:d8:
27:89:a4:8f:c7:86:e2:09:d1:a2:2b:82:87:e3:00:
61:20:18:41:90:8d:12:ff:31:51:b1:02:0a:91:97:
3e:c7:0b:d9:a4:94:1a:3a:2d:3c:f7:ab:01:d3:2d:
d6:89:7f:6c:98:6f:74:cb:79:43:a9:d8:95:86:47:
ff:d0:c4:b1:9a:3c:2a:0e:66:30:dd:f0:61:02:45:
1d:5d:50:84:4a:b4:f1:5c:28:4d:9a:ea:8e:4c:13:
34:83:95:aa:e2:ad:65:c4:5c:a0:c2:8f:06:78:7d:
a5:08:ce:c2:03:ba:f6:78:fa:fb:a9:a4:a4:a8:dc:
27:0c:ba:30:47:33:2f:dc:e7:b8:52:4a:52:cd:c5:
e4:97:39:da:cb:df:ed:b8:94:d2:bf:c0:a5:c8:8f:
9e:46:72:ee:22:2e:55:26:2b:83:8e:87:84:fe:39:
60:2e:b8:69:e3:7b:f7:30:26:68:94:0b:e5:97:53:
fc:6a:48:b7:cb:69:e2:10:d0:4d:12:6b:e3:48:10:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DC:B9:DE:C8:A1:62:9E:68:29:B3:14:4F:EF:8A:99:B1:D5:A3:60
X509v3 Authority Key Identifier:
keyid:92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ff:13:69:e4:dd:d2:d6:7d:e6:94:32:bc:e7:7a:6a:71:9b:
ac:f9:cc:7c:c1:c2:ec:4f:bb:dc:96:3e:bb:8b:ed:3c:57:f5:
e8:18:9b:bd:24:35:f2:b3:49:90:98:38:08:e4:3d:f2:2b:26:
90:39:4f:27:dc:79:f7:05:90:ae:aa:f7:52:c9:63:78:7c:ba:
f5:53:bb:a4:29:5b:9a:8a:0f:6c:26:3b:0d:6d:57:94:98:9d:
2c:af:a2:97:5e:58:c9:d5:c7:5a:b1:fd:3b:df:39:fd:a8:da:
e6:d2:9e:61:23:cb:f5:7c:10:b5:cf:f4:41:0f:32:f5:dc:ae:
a7:f0:4d:e9:2c:7d:e0:72:22:e6:af:c6:7e:d1:78:02:b5:1b:
7d:93:18:eb:8a:9d:a6:2e:39:8f:0c:25:df:5e:c4:4a:8f:34:
7d:b6:45:a0:c3:63:c4:32:5e:3e:56:ef:b5:43:50:66:39:bf:
64:8a:c7:45:c8:db:47:64:81:0d:0d:0e:3a:cd:ae:a1:45:ea:
ac:d6:35:97:98:90:d0:44:77:d2:34:76:af:07:43:75:05:00:
c1:e5:31:91:99:71:5b:24:06:59:5c:e2:c1:7d:bf:a1:30:fc:
4c:d5:da:9c:96:75:28:20:ce:81:cf:79:c0:63:1c:ad:66:a0:
8a:36:1f:7b
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA9owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUNBQTJBUjExMC8GA1UEBRMoOTI0MkM2MDkyRkUyMjM5QUNEMzBDNDhGMzVBQzFC
QzREREY1RENCRTAeFw0yNTA5MTYwMzE1MzNaFw0yNTA5MTgwMzE1MzNaMBgxFjAU
BgNVBAMTDTY4YzhkNjU2LTFiMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDa6kFLAYT+OoYiLy9r51hsD/MXxejDLPOXj2m26OpsKcY4PmItUlHdA9Gq
NulNZH5t2J3yI+qvVr0d2CeJpI/HhuIJ0aIrgofjAGEgGEGQjRL/MVGxAgqRlz7H
C9mklBo6LTz3qwHTLdaJf2yYb3TLeUOp2JWGR//QxLGaPCoOZjDd8GECRR1dUIRK
tPFcKE2a6o5MEzSDlarirWXEXKDCjwZ4faUIzsIDuvZ4+vuppKSo3CcMujBHMy/c
57hSSlLNxeSXOdrL3+24lNK/wKXIj55Gcu4iLlUmK4OOh4T+OWAuuGnje/cwJmiU
C+WXU/xqSLfLaeIQ0E0Sa+NIED6BAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU3Ny5
3sihYp5oKbMUT++KmbHVo2AwHwYDVR0jBBgwFoAUkkLGCS/iI5rNMMSPNawbxN31
3L4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVDQUEyLzNDNUUwQTYyQTYwOTExRURBMkU3OTJCOUYxMjIyNDY4L2trTEdD
U19pSTVyTk1NU1BOYXdieE4zMTNMNC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2trTEdDU19pSTVyTk1NU1BOYXdieE4zMTNMNC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RUNBQTIvM0M1RTBBNjJBNjA5MTFFREEyRTc5MkI5RjEyMjI0
Njgva2tMR0NTX2lJNXJOTU1TUE5hd2J4TjMxM0w0Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCN/xNp5N3S1n3mlDK853pqcZus+cx8wcLs
T7vclj67i+08V/XoGJu9JDXys0mQmDgI5D3yKyaQOU8n3Hn3BZCuqvdSyWN4fLr1
U7ukKVuaig9sJjsNbVeUmJ0sr6KXXljJ1cdasf073zn9qNrm0p5hI8v1fBC1z/RB
DzL13K6n8E3pLH3gciLmr8Z+0XgCtRt9kxjrip2mLjmPDCXfXsRKjzR9tkWgw2PE
Ml4+Vu+1Q1BmOb9kisdFyNtHZIENDQ46za6hReqs1jWXmJDQRHfSNHavB0N1BQDB
5TGRmXFbJAZZXOLBfb+hMPxM1dqclnUoIM6Bz3nAYxytZqCKNh97
-----END CERTIFICATE-----
Generated at Tue Sep 16 17:42:42 2025 by rpki-client