Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
File: KyRChIF0qoiURpp3m5_X2klYxmk.mft (raw, json)
Hash identifier: En0BJZxfdDNkEsoypZ2fyxrch5pQpJSHI+sO/ZjH528=
Subject key identifier: 01:EE:25:6A:E0:D3:FF:79:05:63:3D:ED:39:F9:3C:07:D0:A2:59:4B
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Certificate issuer: /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial: 0E66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
Manifest number: 0E59
Signing time: Tue 01 Jul 2025 00:56:30 +0000
Manifest this update: Tue 01 Jul 2025 00:56:29 +0000
Manifest next update: Thu 03 Jul 2025 00:56:29 +0000
Files and hashes: 1: KyRChIF0qoiURpp3m5_X2klYxmk.crl (hash: LTCug4hupU8RmIrSd2uVZgaO2OdeW12517mBdH5fJoY=)
2: 7C0BFD26F4F511EFB3E4B9B5762E951A.roa (hash: 5wXs7RMJiyud6JyXFkR1o4z/jMZs+dRUug3mlkais2g=)
3: 603F44FEF4F511EF825958B5762E951A.roa (hash: Ba8AFZPMa3HGsyKURqI70r5EW0Munyy3hZ7Nh86XhXk=)
4: E90F871CA09811ECA7CC64845A40D577.roa (hash: oxWlZcS9cWEi0+CZBGrhmI9nrUQ78IAE+xwjMFu/v9A=)
5: BE403084F2A411EFA60BB451762E951A.roa (hash: ia48RiXRj/TS/ZIH2z01yABB9uM5rlXdHXcHKIZJfs4=)
6: 30DA2FD2D99011EBB3AFA075F8AEA228.roa (hash: p31uwZZBrdaLtBzico1EAerpqK+JUtNLbRhjPY74axU=)
7: E5D310BCF2A411EF9A7E2652762E951A.roa (hash: ZQkJvtNfrwoPVbwO+rTZ+tWRmqiD9tIx3HghRCOVm/Y=)
8: A66C5B60EEFB11EAB67BB760F8AEA228.roa (hash: FhdIMm+EQ8oEL4UIZyKUV2bOPB0gTKOHcKnmpA8WxzA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3686 (0xe66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361D299AF, serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Validity
Not Before: Jul 1 00:56:29 2025 GMT
Not After : Jul 3 00:56:29 2025 GMT
Subject: CN=6863323e-70a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:75:c0:83:43:af:cc:ef:8d:f5:79:71:41:
b7:5e:42:cc:c2:25:4a:bf:cf:f4:51:b1:db:27:0d:
1a:d9:36:20:64:53:8f:a2:46:6c:40:56:a6:64:0d:
f4:93:6d:65:67:01:6d:5f:a7:d5:28:6f:f6:39:c9:
a1:5e:74:54:75:d0:0f:fc:80:fa:53:b5:16:3f:04:
51:d3:e8:0f:06:97:04:e8:85:8f:72:22:1c:c6:a4:
2a:06:a8:5c:66:db:83:40:83:c7:2c:ff:5e:d0:dc:
64:eb:b8:f6:d8:34:ae:3a:08:b6:05:ad:22:fc:ce:
48:4a:8d:8e:21:3c:8d:9e:e5:71:e8:0b:35:c8:ed:
0d:a8:3e:16:7f:e4:30:7e:be:d7:6e:a9:31:ea:c0:
c9:65:e4:c4:e8:65:6e:c4:1a:18:75:c0:82:d9:1e:
e7:30:b1:ee:ac:5d:ea:79:dc:cb:d0:a0:34:ae:a1:
e8:51:93:85:03:43:ef:31:e0:5a:b8:6f:91:a4:10:
37:8b:3a:50:6e:13:98:67:4b:e2:d1:24:eb:c2:2f:
17:9c:81:0b:e1:25:1d:17:92:72:e9:01:16:ee:25:
d7:43:ce:35:f2:56:51:10:c2:26:6d:0c:3a:28:07:
5b:aa:50:22:fa:70:0d:e0:de:52:8a:61:59:2b:df:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EE:25:6A:E0:D3:FF:79:05:63:3D:ED:39:F9:3C:07:D0:A2:59:4B
X509v3 Authority Key Identifier:
keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:b4:b6:a2:a0:be:1a:38:b1:26:b2:93:b8:0c:12:10:48:e1:
51:77:ea:52:ab:9c:ed:00:dc:4a:9e:c1:83:c9:f7:8c:1d:25:
a8:c6:77:28:67:0e:3d:38:82:93:7f:b5:11:3b:b1:49:c8:d5:
96:1c:13:4f:f9:78:a9:e2:14:24:c9:f9:1a:4d:9d:04:68:9c:
ef:ec:3b:00:7b:17:db:7a:99:fd:10:58:01:b3:87:7c:eb:97:
01:b1:ee:ec:8f:a7:c0:45:21:88:a8:74:be:5c:c2:14:20:4d:
22:fd:ee:c2:3a:2f:63:e7:53:74:53:8a:af:e7:f9:59:aa:12:
b6:62:eb:aa:f7:fe:b0:93:fa:5d:2b:58:07:e0:12:86:1c:1a:
8a:c7:d3:34:a9:43:b6:94:1c:48:6a:99:1c:1a:12:5f:9e:61:
6f:3c:b5:d4:81:8a:e7:d5:ff:96:16:06:f3:63:3d:ee:9b:c6:
b1:50:16:61:30:9f:c1:cf:43:f3:ce:81:2f:07:02:30:73:9f:
6a:69:67:3a:44:60:b2:ac:b3:67:bc:e0:37:21:c9:0d:10:00:
d4:ba:e7:89:b6:5f:c3:e8:1d:0c:cd:22:61:88:95:de:a2:54:
ef:53:e0:2d:3d:29:3a:67:fc:61:00:93:b5:be:ed:aa:ac:81:
5f:3f:f3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:06:23 2025 by rpki-client