
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
File: KCVggNQ6BNgSOO9T0xFu1kewbhw.mft (raw, json)
Hash identifier: G4K6qAvwefS9X9XNdu9LaUHldbJIBMMloj5Bnv57f54=
Subject key identifier: 37:D1:B5:01:F3:DA:76:0D:00:AA:33:A5:22:8C:58:F9:35:3E:33:7A
Authority key identifier: 28:25:60:80:D4:3A:04:D8:12:38:EF:53:D3:11:6E:D6:47:B0:6E:1C
Certificate issuer: /CN=F3662DABAR/serialNumber=28256080D43A04D81238EF53D3116ED647B06E1C
Certificate serial: 041A
Authority info access: rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
Manifest number: 0419
Signing time: Sun 19 Oct 2025 03:11:30 +0000
Manifest this update: Sun 19 Oct 2025 03:11:29 +0000
Manifest next update: Tue 21 Oct 2025 03:11:29 +0000
Files and hashes: 1: KCVggNQ6BNgSOO9T0xFu1kewbhw.crl (hash: xePKKaINdDFoTAO633CCOmCEOrNBw3gReDF5hg0sP40=)
2: DB993B728F4F11ED982ED088F1222468.roa (hash: zmof4qkrG67Fqj/AA24Lhy1I6eBvEWQSDaesv5Uqj2o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 03:11:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1050 (0x41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662DABAR, serialNumber=28256080D43A04D81238EF53D3116ED647B06E1C
Validity
Not Before: Oct 19 03:11:29 2025 GMT
Not After : Oct 21 03:11:29 2025 GMT
Subject: CN=68f456e2-e8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ee:50:de:4a:88:82:59:3c:06:e5:05:83:2e:
4f:f3:a3:60:57:4e:af:ea:2a:e1:db:fa:ee:4e:5c:
22:46:fd:01:89:6e:03:5b:19:3d:dc:0e:0b:54:57:
a8:ff:19:e1:82:75:1f:38:54:6a:e9:e8:28:12:96:
0d:71:05:43:c7:23:43:df:3b:81:39:4c:e5:6f:27:
c8:56:24:9e:54:7d:53:6b:bb:1f:e2:9d:fc:3e:20:
70:4f:93:4f:4b:41:15:35:86:c2:bc:ca:2f:51:ac:
2f:f6:fe:78:43:5d:5a:42:e1:ae:c1:bd:b1:a6:02:
7b:39:28:9c:66:29:18:a3:87:5c:6f:78:d0:76:d3:
57:4c:10:50:50:0e:be:e8:b4:89:34:8a:6e:bd:79:
bf:bd:90:86:4a:23:0a:b9:e5:02:c0:b8:8b:f5:10:
a0:22:ad:4f:d1:1c:2a:19:b9:7e:a0:9f:da:49:d8:
f9:03:bc:2c:17:40:11:37:f0:9a:94:54:c0:1f:03:
f6:6f:ce:1e:f1:18:dd:b1:56:ac:44:40:dd:50:7c:
ef:1f:e9:85:10:12:47:9c:11:fe:fd:84:ac:3e:0f:
14:8e:57:e3:28:b0:eb:7e:2e:17:89:70:10:d4:e3:
5a:e9:20:c4:3e:90:e9:58:16:ab:59:97:08:14:8b:
cb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D1:B5:01:F3:DA:76:0D:00:AA:33:A5:22:8C:58:F9:35:3E:33:7A
X509v3 Authority Key Identifier:
keyid:28:25:60:80:D4:3A:04:D8:12:38:EF:53:D3:11:6E:D6:47:B0:6E:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e2:0f:c1:3b:a2:42:8c:21:81:73:83:3e:59:34:f0:27:93:
19:6f:02:00:82:e2:21:db:07:28:f0:d5:10:62:00:e4:e5:35:
35:7a:4b:0d:4b:f6:1f:03:dd:aa:12:b0:7a:cb:a6:87:d4:91:
f3:a9:84:8c:d6:8f:d4:fb:d9:88:3a:e7:17:fe:88:13:c3:55:
42:05:c0:bf:89:32:f5:c2:d5:05:8b:06:39:d4:24:34:db:68:
7f:98:e7:2f:49:66:d3:96:dc:aa:10:b9:cd:1d:a0:f8:4c:36:
9c:7a:39:1a:7b:28:be:94:e9:a5:c3:e0:dd:e2:a9:57:96:ba:
1a:e3:bf:96:c9:06:e7:ff:75:4c:82:45:68:c5:6d:6a:3b:92:
cb:df:7a:78:92:aa:16:8d:a5:ce:b0:31:f1:b1:80:63:83:bb:
4b:14:27:2f:d8:3d:9a:fd:b2:e0:70:32:6b:99:f4:b0:85:ef:
33:2b:21:41:0c:a8:e5:eb:50:05:1a:0f:df:8b:a3:9d:8d:19:
e6:61:37:e8:55:3f:5a:87:87:3f:62:0c:fd:b3:fe:0c:d2:4e:
bd:d8:81:9e:04:36:64:45:dc:d4:6b:87:b8:a9:17:fe:3f:99:
8e:da:41:ec:94:10:97:be:45:48:6c:48:21:8e:47:af:c9:da:
5a:35:3e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:42:32 2025 by rpki-client