
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
File: KCVggNQ6BNgSOO9T0xFu1kewbhw.mft (raw, json)
Hash identifier: C92h0vbKVoZrI818aVpOiSvgdLr0QcUA/jVH7P/SUbo=
Subject key identifier: A9:F4:83:92:AF:51:B9:C7:99:DF:43:55:AB:2D:AF:AA:B0:37:22:FA
Authority key identifier: 28:25:60:80:D4:3A:04:D8:12:38:EF:53:D3:11:6E:D6:47:B0:6E:1C
Certificate issuer: /CN=F3662DABAR/serialNumber=28256080D43A04D81238EF53D3116ED647B06E1C
Certificate serial: 03E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
Manifest number: 03E0
Signing time: Sat 23 Aug 2025 03:20:11 +0000
Manifest this update: Sat 23 Aug 2025 03:20:11 +0000
Manifest next update: Mon 25 Aug 2025 03:20:11 +0000
Files and hashes: 1: KCVggNQ6BNgSOO9T0xFu1kewbhw.crl (hash: BeHc10vjhXKe83WMj3r3qOeIGAXLoVfEWT4OTt5fyU4=)
2: DB993B728F4F11ED982ED088F1222468.roa (hash: zmof4qkrG67Fqj/AA24Lhy1I6eBvEWQSDaesv5Uqj2o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 993 (0x3e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662DABAR, serialNumber=28256080D43A04D81238EF53D3116ED647B06E1C
Validity
Not Before: Aug 23 03:20:11 2025 GMT
Not After : Aug 25 03:20:11 2025 GMT
Subject: CN=68a9336b-8f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:32:09:97:cd:19:b6:84:8f:5b:ab:08:19:d2:
90:75:59:47:ac:c8:60:c2:eb:15:63:fa:9c:06:c1:
44:50:4a:be:64:b0:73:54:2a:f1:97:1f:57:30:01:
5c:55:fd:71:b2:c2:38:7d:fc:39:98:17:6d:79:eb:
24:84:ca:90:e9:b3:30:e6:d4:0b:d3:7f:1a:ff:23:
55:37:22:43:9e:b3:2a:81:80:01:38:e1:3d:50:77:
09:29:e1:9d:86:d2:14:b8:b4:23:c4:7d:5f:20:f9:
e9:98:50:6d:8f:bf:78:3d:2e:30:cd:27:eb:1b:e6:
87:23:a3:b9:44:7c:1b:69:f8:ee:d1:4d:c4:9f:76:
d0:41:7c:ee:ff:d8:0f:ff:2d:0e:1a:92:ee:e5:06:
bc:5c:b2:53:0b:17:d2:cb:1a:11:a7:44:9b:b0:b3:
ee:7b:fa:cf:eb:bc:2e:56:ef:9c:90:89:e9:8d:4d:
99:21:98:28:8a:fd:07:c0:a7:53:38:52:26:98:33:
6f:9d:be:90:df:3d:cf:f0:d9:d9:5e:17:fa:34:ea:
a4:c2:99:f1:3d:c0:43:1b:2f:e4:bb:90:10:0b:3f:
28:71:ec:01:54:1c:e8:b7:08:4c:53:aa:23:de:64:
f2:89:91:0d:76:ca:bb:68:6b:4f:61:79:ca:a1:b9:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F4:83:92:AF:51:B9:C7:99:DF:43:55:AB:2D:AF:AA:B0:37:22:FA
X509v3 Authority Key Identifier:
keyid:28:25:60:80:D4:3A:04:D8:12:38:EF:53:D3:11:6E:D6:47:B0:6E:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:18:58:bf:28:07:2c:bd:76:5d:5d:b5:94:00:d6:64:48:af:
99:2b:a6:a9:35:8a:cb:94:83:71:69:9e:44:cd:51:5e:ed:d6:
be:7f:42:c6:a1:8d:71:5a:a0:e8:0e:55:bf:f3:dc:e7:1e:7e:
dc:d2:04:bd:54:21:d5:2e:da:8f:e5:2e:81:6a:4e:df:6f:69:
51:e5:e5:ba:81:26:88:70:48:9a:fb:20:d7:fc:2a:b0:dd:4c:
8d:0d:10:8b:c1:f6:4a:93:e3:84:c8:e4:db:34:0c:dc:64:04:
1c:39:e7:92:bc:37:d2:fc:07:9b:ff:43:6e:90:93:42:34:da:
4d:48:6d:7e:b9:d5:66:80:d9:5c:7b:b9:33:e4:14:23:6f:fb:
b8:b4:fe:6e:9d:9f:0f:30:ba:a4:cc:ee:e6:a2:ee:43:8f:7c:
92:9e:46:40:44:8a:0c:e6:6d:96:a2:8e:79:42:38:a8:1d:2f:
65:db:69:df:e9:3f:9d:22:b8:e0:18:a2:55:43:e4:89:2f:c0:
c0:84:05:a4:d2:93:33:2a:14:fd:2f:3c:e1:71:67:f6:b8:02:
62:59:03:53:ac:7d:29:da:66:30:60:c4:57:86:c4:be:29:fe:
b0:33:d4:d0:42:0e:4d:20:ba:58:cf:06:31:c5:f2:53:3c:13:
d5:ab:48:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:03:08 2025 by rpki-client