
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
File: kgRBKh8SvNXSs845kazvaXbIhl4.mft (raw, json)
Hash identifier: XYgqRSa8hB0/OgvhkJKj6Nf3tx+a/VJX1h+IQx0Y1cs=
Subject key identifier: 95:B4:23:96:61:0D:43:DD:D5:AA:A4:8A:3E:3D:89:CD:50:77:B6:DF
Authority key identifier: 92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E
Certificate issuer: /CN=F3647FF0AF/serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
Certificate serial: 049B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
Manifest number: 0497
Signing time: Sun 19 Oct 2025 03:02:00 +0000
Manifest this update: Sun 19 Oct 2025 03:01:59 +0000
Manifest next update: Tue 21 Oct 2025 03:01:59 +0000
Files and hashes: 1: kgRBKh8SvNXSs845kazvaXbIhl4.crl (hash: orOrvbIjj2C9I0hEwIrW0PAZXyx0VAXUlUBADvrEs2M=)
2: C1B630EE8D6B11F08834F6ACDAE4EC9C.roa (hash: dgSYZC5D+KjnOh21ksdGPfjeg//i1eX1fXXuJxMe2OM=)
3: 401D27E081C711F0830BC9C9DAE4EC9C.roa (hash: nJPUmahtOqiPFAxwPDfnodDi2p2b719GESj2IRhzuSA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1179 (0x49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3647FF0AF, serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
Validity
Not Before: Oct 19 03:01:59 2025 GMT
Not After : Oct 21 03:01:59 2025 GMT
Subject: CN=68f454a8-7ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:2c:41:5b:63:04:a4:8f:12:b8:43:de:e4:
29:a1:99:b6:e8:34:1c:c2:6f:61:80:93:63:a2:36:
49:01:59:80:ac:8e:11:17:80:ae:fa:f3:ff:ec:68:
49:20:70:b5:7e:6d:92:06:84:3d:c7:d5:2c:09:1a:
58:b6:a0:dc:ec:a3:ab:54:5a:b4:14:c3:58:f5:64:
4a:c9:cf:52:79:8a:16:2e:a3:9b:f7:1d:e0:26:a6:
16:b9:39:cc:dd:a3:a6:aa:ad:4a:f7:0b:73:da:06:
ac:78:2d:ae:ce:bf:d7:cc:ba:38:40:73:90:b3:0c:
5c:cf:33:c2:67:79:9e:7b:de:c4:33:e2:68:ef:2b:
68:99:35:8d:3e:4c:46:16:3d:f9:65:59:c6:56:9f:
4d:d2:e5:86:93:fb:71:7c:c8:75:dc:ac:51:e2:06:
6c:bc:e4:91:d0:20:ae:00:16:e2:86:e4:96:70:c6:
17:1e:b3:f1:cc:9f:49:19:28:22:96:92:f0:fa:bc:
6a:75:85:e1:17:48:5d:12:fd:91:78:50:54:a6:5b:
42:6b:5e:b2:08:a7:00:c0:ab:53:4e:db:af:f7:fc:
f1:c4:ee:13:a5:04:ad:ad:e7:26:a8:ae:fc:7d:2c:
07:09:19:93:76:dd:9e:25:35:39:c4:a4:c2:3a:70:
1a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B4:23:96:61:0D:43:DD:D5:AA:A4:8A:3E:3D:89:CD:50:77:B6:DF
X509v3 Authority Key Identifier:
keyid:92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:44:ce:af:b8:1a:c2:0a:7f:b7:7c:79:67:07:86:6d:a1:d2:
0b:26:33:67:7d:b2:02:41:d8:cf:4d:5c:56:74:4f:a6:a2:8b:
6c:bf:1c:7c:30:80:16:51:f9:0a:1f:e0:c3:66:cd:87:83:98:
0d:40:b4:07:d7:81:ef:ef:11:75:2e:26:02:8e:ae:97:a2:53:
59:33:52:5d:5b:5d:1f:aa:fa:92:6b:4d:2f:56:89:a7:c5:e8:
39:10:f4:62:69:e2:d5:2e:c7:18:8c:7a:21:ba:67:41:03:49:
5f:1f:50:84:f8:ec:7e:c6:f4:a9:cb:00:ea:54:f5:08:87:c7:
79:9e:44:79:4a:95:c7:34:e1:fe:81:ce:c7:ef:33:e7:de:08:
85:4a:02:39:0b:87:5f:e4:ed:ac:f6:c7:f7:16:c4:6e:35:a6:
cc:96:87:e2:a0:22:46:cd:e9:0c:7b:9a:2c:77:c2:cc:b3:bc:
1f:83:1d:d5:35:ea:36:7f:7b:bf:e5:87:29:c4:08:57:d0:3f:
cf:eb:04:62:2c:b9:28:35:b5:a8:ce:56:fd:99:eb:6a:d5:61:
1c:50:01:48:0e:b0:ba:b4:e5:94:f0:b4:ef:21:dd:84:4c:11:
0d:c7:11:0b:e4:8b:da:74:84:34:53:cb:51:5c:ab:6f:b4:eb:
c6:bd:e6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:11:01 2025 by rpki-client