
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
File: KSWEoez-KvMJMi1y5i2NXGpe968.mft (raw, json)
Hash identifier: cZt+tbd4HIs7BUQoNfrZWJH81MA/xlJ8Hb6EfPW1RMA=
Subject key identifier: 5C:C7:60:1B:5D:6B:97:37:E5:62:84:7A:D0:E2:81:9F:4D:B9:9D:56
Authority key identifier: 29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF
Certificate issuer: /CN=F364791EAF/serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
Certificate serial: 034D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
Manifest number: 034A
Signing time: Mon 20 Oct 2025 03:42:18 +0000
Manifest this update: Mon 20 Oct 2025 03:42:17 +0000
Manifest next update: Wed 22 Oct 2025 03:42:17 +0000
Files and hashes: 1: KSWEoez-KvMJMi1y5i2NXGpe968.crl (hash: hbvFfwT4b4EY+2MqkL5r+JlK1Q/KSliH5t3tU1IaFzM=)
2: 9DC8C2C82CAE11F085B92DEADAE4EC9C.roa (hash: s4BJx/7blgbPVpMP6/xtoHDTm3C4tHe27u7Cb4Hry2k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.crl
rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 845 (0x34d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364791EAF, serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
Validity
Not Before: Oct 20 03:42:17 2025 GMT
Not After : Oct 22 03:42:17 2025 GMT
Subject: CN=68f5af99-ea87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:56:a4:7e:0c:21:a8:f0:88:06:b5:82:87:
c5:1f:d2:a6:48:97:8d:a5:9e:5e:f2:77:d6:6f:6f:
9b:e7:88:3e:14:9e:b0:dd:84:14:37:27:9a:a8:59:
75:74:f5:f6:d8:d0:a0:1e:2b:d8:69:6c:20:aa:06:
93:b2:13:2f:28:5c:30:ed:3f:67:48:c4:54:df:97:
f5:ed:c2:2f:e0:85:2d:a1:b3:e8:ff:da:93:e3:1d:
88:ac:c8:51:1c:6a:ed:fd:02:c4:a9:78:9c:1d:43:
4d:f8:31:af:ad:03:40:11:b7:fd:9f:14:40:b7:e3:
98:29:6d:33:6d:18:5a:9b:3c:8d:b8:ec:0a:e8:54:
45:59:83:46:f8:4a:a8:f1:5c:30:d2:aa:25:2d:be:
ca:c2:2d:27:2e:79:32:97:af:1d:19:c6:e1:e2:05:
d2:c5:bd:4e:f0:c5:f0:96:82:8f:3a:5f:e9:c6:d5:
f6:00:de:31:b5:2c:0e:d0:98:4c:b8:1b:9d:5e:27:
eb:40:57:2a:70:7f:bd:0a:1c:0d:91:17:d9:d4:6c:
7c:54:f9:2b:e0:c6:b0:83:01:da:2b:39:fd:aa:78:
07:71:47:36:1e:0b:b4:66:3b:f4:8c:c3:1b:5a:78:
c8:99:55:bb:92:81:cb:b5:86:03:6a:5a:0a:2c:67:
02:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C7:60:1B:5D:6B:97:37:E5:62:84:7A:D0:E2:81:9F:4D:B9:9D:56
X509v3 Authority Key Identifier:
keyid:29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:cd:25:66:91:e8:6d:5a:dd:56:b1:54:d3:da:41:2c:31:60:
3a:bd:56:e6:86:af:3e:a6:d3:ae:a4:7b:ed:dd:82:71:f9:a8:
37:39:13:06:d4:13:46:00:87:c6:48:8c:23:47:bf:a6:6e:eb:
7a:f4:b1:57:6c:71:29:32:47:e5:10:7e:3d:07:1f:6c:33:ed:
e0:ff:9f:7e:04:ab:fd:1a:4c:13:9a:1f:a7:26:a4:be:8d:bd:
b1:cf:3d:92:1d:c4:7a:c8:82:b7:98:3d:99:23:29:ec:32:a8:
d5:c3:4b:65:b5:51:8e:a4:65:93:07:ed:03:72:28:84:7c:c3:
64:f6:90:7b:ee:60:01:aa:bc:cc:c3:81:cd:d8:2c:27:02:9e:
e2:b7:e7:68:cb:05:aa:d5:25:18:e8:96:5e:65:5d:30:de:c9:
4a:44:2e:29:f4:b7:e5:ce:b5:ca:3e:a8:f5:10:57:52:61:a0:
a4:46:1a:7a:5b:28:34:7f:56:0d:e8:34:64:11:c6:3a:0e:4c:
2e:27:27:fb:0f:8c:5f:46:33:ca:c0:f6:3f:f4:ca:da:40:00:
36:fb:ee:0d:42:c5:3a:e4:26:de:fd:a5:b1:a8:70:57:58:f1:
82:61:a8:e5:df:0b:3a:cc:7c:fe:de:50:60:64:80:58:81:49:
cd:b5:cf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:26:05 2025 by rpki-client