Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
File: KvCNgqXIimbwBbMcgOhymuKM11U.mft (raw, json)
Hash identifier: HBj9Siu0NH+LLwammGs1riS+2hZgOmCgLiYU5WOKf5s=
Subject key identifier: 29:C3:08:95:CA:66:02:8C:07:87:17:AA:94:FE:AD:42:C3:64:27:A5
Authority key identifier: 2A:F0:8D:82:A5:C8:8A:66:F0:05:B3:1C:80:E8:72:9A:E2:8C:D7:55
Certificate issuer: /CN=F36406D3AF/serialNumber=2AF08D82A5C88A66F005B31C80E8729AE28CD755
Certificate serial: 091F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
Manifest number: 091D
Signing time: Sat 23 Aug 2025 01:29:19 +0000
Manifest this update: Sat 23 Aug 2025 01:29:19 +0000
Manifest next update: Mon 25 Aug 2025 01:29:18 +0000
Files and hashes: 1: KvCNgqXIimbwBbMcgOhymuKM11U.crl (hash: DwfAokBQ4M3mYr/Ikdq/sVV4P1WG7JYt+svUR/fJXIc=)
2: E0B7E5C6AE2111E98F04DF3CF8AEA228.roa (hash: DsX+R5lwZz5IbPxYwdbT3HKP4x8lgrMkS5VZBHtyCkQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.crl
rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2335 (0x91f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36406D3AF, serialNumber=2AF08D82A5C88A66F005B31C80E8729AE28CD755
Validity
Not Before: Aug 23 01:29:19 2025 GMT
Not After : Aug 25 01:29:18 2025 GMT
Subject: CN=68a9196f-2e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:c1:4b:8f:b1:b9:ed:84:a4:b0:01:54:a4:
91:4b:a5:e4:f9:60:28:6d:ae:85:7d:7f:d8:ed:d5:
45:36:72:71:12:14:cb:e2:44:1b:e1:02:7b:3b:61:
56:3c:bb:54:fb:c5:dd:cf:4f:88:15:2c:55:c1:e3:
24:61:a4:ed:fc:a0:e4:3c:0b:50:25:a7:f6:b4:ee:
f9:53:2d:78:56:4c:bc:ec:ae:ff:d9:6e:96:9b:79:
9a:a7:82:b9:85:d8:c9:65:fb:ce:45:25:04:2c:2a:
51:15:eb:4b:8c:84:21:b7:d6:f8:d6:98:f7:79:6e:
5e:5e:78:b7:ea:a7:94:22:0a:e5:c9:ae:6f:8e:8d:
66:bf:96:7b:5a:54:ac:e4:e3:84:c2:1c:d6:c0:31:
6f:42:bc:09:f7:27:e2:c3:c5:e7:7a:2a:2a:a1:1c:
6a:54:80:60:e8:a3:99:6b:35:96:40:9d:91:b9:4a:
a8:95:8a:a6:52:33:67:72:72:56:3a:7a:89:8a:7a:
80:53:cb:27:27:34:ec:bb:83:56:07:37:44:32:97:
1a:77:95:17:96:ae:2d:c6:ee:71:c0:ee:38:ae:9c:
f0:9d:4a:a9:03:b8:5e:a1:e1:41:a7:e2:3c:7f:32:
04:ed:7d:a7:20:0e:ec:c3:c4:ae:ab:72:9d:dd:f3:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C3:08:95:CA:66:02:8C:07:87:17:AA:94:FE:AD:42:C3:64:27:A5
X509v3 Authority Key Identifier:
keyid:2A:F0:8D:82:A5:C8:8A:66:F0:05:B3:1C:80:E8:72:9A:E2:8C:D7:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:bd:de:a4:05:6b:50:92:be:5b:41:4c:30:c6:34:47:3e:e4:
27:14:78:b5:7a:fd:36:39:01:a4:94:ff:87:5c:c4:96:d3:18:
65:ae:88:22:b6:20:dc:63:a9:3c:93:5c:8d:05:44:66:23:0d:
f5:9c:e4:49:09:ed:8c:ae:74:fc:5c:f7:01:78:9e:47:9b:eb:
f5:05:ad:50:f7:89:01:30:c5:6b:ff:e6:d1:12:00:ab:94:9b:
6f:03:d2:43:50:e8:16:d3:5a:81:be:c7:22:1c:8a:61:0e:6c:
e3:50:ed:d0:c6:78:b9:2f:43:3a:82:a7:e8:0c:71:43:2d:f4:
c5:c1:c0:b2:3e:36:c0:e0:ca:1a:0f:77:73:4f:46:4d:42:ac:
01:22:64:b4:97:3d:3f:9c:64:8d:ad:54:96:98:e6:7a:5c:d6:
8a:91:bc:c6:75:ff:84:e0:ed:69:44:9a:ed:27:92:ab:76:5a:
b5:fb:af:14:3a:9b:96:a1:2a:23:4d:d3:5c:5c:23:48:c5:33:
23:16:61:21:18:5f:a0:e3:b3:a9:82:d8:29:f4:b9:a3:a8:38:
a1:b9:5d:89:b7:2a:3e:a0:82:7a:0e:9f:01:3c:22:5f:91:25:
f7:57:9f:4e:38:b0:bd:f3:40:bc:26:00:f3:a4:00:ad:15:03:
6e:46:4b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:34:09 2025 by rpki-client