Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
File: -kNarmNKJJQBjFzfiFcJr1vONro.mft (raw, json)
Hash identifier: Y5p3GnpVXqBfDjm0jbJho0EpOCjhnjKoeegrcO3687g=
Subject key identifier: 8B:0C:B4:9B:B2:E1:E8:A6:E6:E9:56:54:C5:7E:04:2D:0B:AD:7F:37
Authority key identifier: FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
Certificate issuer: /CN=F36B1FB2AF/serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Certificate serial: 07AA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
Manifest number: 07AA
Signing time: Sat 23 Aug 2025 01:55:05 +0000
Manifest this update: Sat 23 Aug 2025 01:55:05 +0000
Manifest next update: Mon 25 Aug 2025 01:55:04 +0000
Files and hashes: 1: -kNarmNKJJQBjFzfiFcJr1vONro.crl (hash: pvO3ITHfb0mIDq7hnK0LGxpe0AQrlaZmoCTv2U997lM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1962 (0x7aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B1FB2AF, serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Validity
Not Before: Aug 23 01:55:05 2025 GMT
Not After : Aug 25 01:55:04 2025 GMT
Subject: CN=68a91f79-e9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8d:4b:d3:e0:88:6f:b5:3b:aa:2a:43:ab:d1:
76:7c:ae:37:0f:a7:0f:83:5b:d3:91:bb:47:b4:05:
98:a8:2f:ff:ba:03:97:1d:fa:6c:27:56:c3:d6:85:
b8:52:11:c9:a0:ec:2e:df:b1:20:33:14:a9:7b:26:
d4:e2:6e:ed:a1:28:18:56:a1:75:5e:7c:c6:ce:7a:
7d:0c:22:0a:c0:8c:58:26:a4:8f:fa:74:22:9b:e8:
7a:39:05:cf:41:3b:ec:ac:ea:a0:72:42:e8:8c:8d:
ba:d6:2e:8e:b1:f8:1d:f4:c0:38:ad:48:61:94:ce:
4b:5c:bb:f4:db:09:3a:85:45:ef:b0:96:81:38:cc:
ef:43:07:c3:79:42:1c:33:4b:0e:84:9b:60:06:c6:
05:d1:d5:c4:bf:0b:4d:6c:3d:d0:a3:16:f6:0b:05:
54:63:42:26:c5:20:4c:8b:92:b2:73:c6:95:fc:d9:
cc:49:08:16:62:2a:39:a7:24:46:b2:bf:42:a0:5b:
cc:d0:2f:6a:a6:0a:25:fc:12:8e:a2:e9:e6:d7:ba:
02:4d:bb:9a:2c:49:31:25:18:76:15:fd:8c:dd:27:
57:12:5c:19:37:99:73:a2:e6:f2:0c:77:63:a8:65:
68:26:2b:93:83:fa:c6:fc:fe:49:bc:02:9c:f0:c4:
28:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0C:B4:9B:B2:E1:E8:A6:E6:E9:56:54:C5:7E:04:2D:0B:AD:7F:37
X509v3 Authority Key Identifier:
keyid:FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:5c:6b:d5:c0:7a:bd:f2:93:7a:fd:4a:07:b7:61:c7:1e:7a:
38:b1:75:cc:f8:fe:7e:d2:08:85:e7:8c:61:67:02:cf:5a:56:
09:22:93:1d:c8:93:71:91:9e:3e:91:38:d0:32:f9:83:97:06:
9f:45:e6:9e:55:5d:16:05:d5:d0:51:a5:83:18:9f:69:9d:c3:
bf:c9:2a:3e:33:3f:68:79:67:02:6f:f5:58:7d:30:5a:ce:ae:
5e:c5:0f:e0:58:d0:4c:80:08:b3:17:f1:95:27:b7:ee:56:98:
f3:4e:f8:f0:5f:54:ce:f8:c8:35:56:be:6b:f1:e2:7d:2f:3e:
a2:0d:3e:81:8e:75:fc:79:c0:ea:9b:4d:4f:f9:9d:73:ec:6c:
4a:4b:a6:40:30:13:77:7e:49:0b:21:ca:bf:c7:48:86:2c:32:
6c:05:59:e4:67:50:4e:2f:5f:3b:fc:62:d4:81:c8:b4:c6:25:
1d:21:7b:f1:cf:ae:45:5d:d3:18:ae:2e:a6:72:62:fe:5d:0d:
e1:cb:00:b6:8f:bb:81:bb:ee:9a:23:0b:c6:91:4f:5f:a2:b1:
6f:81:8d:11:c0:78:30:d7:63:29:28:63:b4:f5:a8:93:49:a7:
b5:e5:ec:8b:6d:de:d1:99:76:cf:7e:2b:12:05:e7:5f:a7:24:
10:b9:7f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:42 2025 by rpki-client