Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
File: kC4Bh228XGk7_mL7v2fubbanGDE.mft (raw, json)
Hash identifier: o1sFOtC7Hy9INorPcm136ozqXhNDD/LMEO6nVv96XUI=
Subject key identifier: A9:18:11:77:6B:BF:01:BD:C3:3F:AB:AC:43:3D:35:0E:61:E9:11:65
Authority key identifier: 90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31
Certificate issuer: /CN=F3680E82AF/serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
Certificate serial: 0648
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
Manifest number: 0646
Signing time: Sat 23 Aug 2025 02:15:45 +0000
Manifest this update: Sat 23 Aug 2025 02:15:44 +0000
Manifest next update: Mon 25 Aug 2025 02:15:44 +0000
Files and hashes: 1: kC4Bh228XGk7_mL7v2fubbanGDE.crl (hash: t3fcMScorgy3VyU5SuzUDtvW44kXx5hmy0RJkQ9ExnU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1608 (0x648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3680E82AF, serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
Validity
Not Before: Aug 23 02:15:44 2025 GMT
Not After : Aug 25 02:15:44 2025 GMT
Subject: CN=68a92450-254e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:9e:53:d3:e6:dc:78:c3:27:28:0c:9e:d5:
97:33:60:2f:8c:b3:97:f3:d8:67:8a:62:c5:11:c8:
c6:94:7e:86:c2:67:be:da:cd:65:fb:0e:f2:1d:52:
57:eb:9e:ca:24:5a:87:b2:b9:e1:d3:6c:f6:ac:2d:
e5:30:b6:dd:24:5a:c6:c9:65:1b:7c:d0:c9:61:ab:
e0:d5:2b:0c:6c:03:a9:f5:ef:64:99:a2:cc:1c:eb:
70:b4:ec:ea:d1:f8:06:f5:8e:26:af:ee:8f:5a:63:
b5:9e:2a:16:51:e1:9b:ed:39:9a:46:71:ee:2a:0d:
21:99:c4:01:d6:bc:4a:8c:62:18:58:29:5b:78:6a:
9b:0f:5a:c2:aa:24:a5:d2:bd:3e:37:34:e7:70:e6:
84:99:29:25:43:22:7d:6d:62:99:5c:f3:80:d8:18:
42:5d:45:91:df:b5:49:87:d2:a0:2e:88:5d:5a:55:
de:f9:7d:1c:09:71:18:4f:f1:4a:70:f4:4f:b1:fd:
9b:cf:5d:03:57:b9:63:7a:c8:3a:77:3c:91:45:52:
25:b0:51:42:53:14:8c:80:58:a4:c1:1a:da:c7:31:
8c:c6:32:72:fc:ba:97:1b:4d:d8:ce:1e:ab:86:8c:
25:05:3a:18:5d:eb:ba:d0:af:44:64:d9:92:99:b8:
5b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:18:11:77:6B:BF:01:BD:C3:3F:AB:AC:43:3D:35:0E:61:E9:11:65
X509v3 Authority Key Identifier:
keyid:90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:35:8a:d0:46:f8:fa:95:9e:1c:f8:61:03:90:28:5a:23:7f:
c1:45:cc:ff:a8:90:71:15:ab:67:ca:fa:24:0c:c8:e6:33:8b:
92:ce:44:ea:bc:5f:7b:3c:5a:be:6d:dc:be:1a:35:b3:e1:c1:
2d:4a:a7:25:61:6a:c3:46:c3:98:2e:55:aa:02:fc:71:f9:15:
9d:ac:75:b9:db:48:bf:5d:1e:02:80:41:30:4d:4e:8f:d5:62:
3a:34:eb:84:56:36:54:ac:4f:cf:2d:09:ae:9c:67:43:4b:a8:
ff:10:2c:37:d0:49:09:83:03:a4:e1:76:49:37:b1:73:78:00:
48:03:46:95:8e:a6:ab:0f:b3:64:02:f5:94:03:69:9c:e9:6b:
bf:a7:38:1a:4c:1d:2d:59:3e:38:0e:4f:51:f4:3c:e4:05:73:
ac:96:8b:44:cb:c7:3a:ca:71:a7:12:37:07:b7:16:03:c7:c1:
06:5b:f9:62:0b:c3:85:5a:c6:3a:ae:27:57:e6:d0:23:cb:4c:
c0:4a:bd:b1:a2:08:ba:eb:b1:10:4b:43:29:89:a2:bc:3d:58:
10:8d:64:30:02:2e:83:e2:f1:ab:33:23:b1:0a:e7:82:f2:e0:
45:e5:6f:26:aa:82:87:56:8c:10:ec:eb:45:5a:d9:5e:4a:ea:
a4:c7:15:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:26:12 2025 by rpki-client