Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
File: kgRBKh8SvNXSs845kazvaXbIhl4.mft (raw, json)
Hash identifier: TmeZaFrrZU51ryjW5TqTrjMFf7Hjx5KVGXd3MmQo0mQ=
Subject key identifier: 29:0C:11:E9:88:84:2E:50:56:21:52:26:91:B4:4C:10:E6:E2:BA:12
Authority key identifier: 92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E
Certificate issuer: /CN=F3647FF0AF/serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
Certificate serial: 0429
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
Manifest number: 0427
Signing time: Wed 02 Jul 2025 03:12:01 +0000
Manifest this update: Wed 02 Jul 2025 03:12:01 +0000
Manifest next update: Fri 04 Jul 2025 03:12:01 +0000
Files and hashes: 1: kgRBKh8SvNXSs845kazvaXbIhl4.crl (hash: 918xgJrb3rTi4waE/tRx+5zhNcjExHtpVsF3lHhDTYY=)
2: AD72D8203AC511EF8BAB4075762E951A.roa (hash: uGjLeTcQtjvoi+G1lNbi/6hF5oa6IK/lI55KybZViDM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 03:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1065 (0x429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3647FF0AF, serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
Validity
Not Before: Jul 2 03:12:01 2025 GMT
Not After : Jul 4 03:12:01 2025 GMT
Subject: CN=6864a381-5631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3b:f3:f6:f1:b6:2b:ca:db:df:8a:b6:d3:f5:
71:35:16:ee:66:05:c6:59:cc:cd:fb:ef:e5:1d:cb:
bc:0e:08:59:ef:9e:7a:6f:75:b4:30:42:f2:69:13:
61:ff:fc:51:fd:4a:c1:89:0b:fe:66:ce:50:c3:66:
9d:39:ca:0d:bb:db:1f:94:be:f6:dd:5f:c7:b9:2f:
d0:7e:66:70:07:f5:f0:a9:b0:cb:08:57:0d:3c:f4:
0f:bd:e8:66:62:be:68:44:6c:b1:f9:1a:ee:a2:a2:
76:a1:20:d1:a6:53:35:ac:a6:a4:06:b3:f0:27:71:
70:8d:81:4c:80:76:0f:25:36:e2:c3:46:e6:9b:c3:
6a:89:df:96:67:f1:11:4a:8a:63:7f:a8:cb:b2:f6:
26:cf:9e:32:c9:50:5a:6c:a6:54:d7:e5:28:37:ea:
ad:50:a0:15:dc:21:fc:d5:2b:c0:d2:43:fa:cf:5a:
ab:70:bb:9f:c3:b8:9b:99:70:e4:f6:2a:2a:2f:e6:
e8:89:76:c0:11:32:76:36:2b:8c:c5:29:25:9c:11:
07:6a:a5:98:a1:65:f6:3f:81:e9:6b:e3:a8:78:b0:
cc:f2:eb:31:ff:0a:bc:fe:ce:e1:f9:01:72:60:05:
4d:44:ff:8f:21:77:0e:25:cf:e2:d3:8b:7a:61:a5:
23:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0C:11:E9:88:84:2E:50:56:21:52:26:91:B4:4C:10:E6:E2:BA:12
X509v3 Authority Key Identifier:
keyid:92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:67:87:b1:89:0a:66:a5:c8:b0:85:14:ec:e7:dc:30:a5:7f:
e0:a5:1a:26:87:d9:50:31:48:f3:74:40:67:40:0a:53:0c:83:
42:8c:3a:88:f9:f0:86:b7:87:10:38:2b:86:d2:ed:b2:3c:e2:
7f:24:c4:88:c8:8b:df:96:2e:85:34:a4:cf:88:31:36:22:ff:
e9:9f:c8:03:52:a7:24:fc:c4:92:b8:49:6c:65:ad:a9:b2:7d:
31:49:e4:b7:b7:4a:44:09:62:2b:63:e6:fa:84:53:7c:c0:14:
d5:af:77:e8:2f:12:8a:a0:43:c0:fa:1e:9b:0c:0d:75:9b:db:
0d:8a:85:25:ca:e0:85:eb:3a:b2:1a:60:77:10:0b:c8:93:61:
00:2a:71:94:f4:b3:67:84:fc:e6:c1:10:0f:97:d6:b7:ad:02:
b2:6d:6c:27:6c:98:8b:d4:5c:25:df:4b:ff:f5:ff:a1:e3:8b:
ff:df:41:cf:6a:0f:e9:d3:e6:0c:38:bd:5f:db:ec:5a:e9:f0:
8a:6a:40:83:46:a1:a4:0f:af:19:24:4b:25:46:71:75:8b:0f:
fc:16:83:a8:60:ef:c9:cb:1f:86:f6:2d:4a:d7:9a:b9:87:8d:
74:79:a5:e2:78:29:6b:eb:72:63:19:4e:dc:45:1f:97:b3:05:
df:9c:7b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:47:00 2025 by rpki-client