Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
File: -kNarmNKJJQBjFzfiFcJr1vONro.mft (raw, json)
Hash identifier: cthiHpAOaS/t8zEjgfZQ5fhV6yaBRbAn/9rz/CTdrHQ=
Subject key identifier: C6:9B:8A:5E:36:D9:2C:A7:FF:C9:6F:B5:9F:96:73:52:6A:28:9A:D0
Authority key identifier: FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
Certificate issuer: /CN=F36B1FB2AF/serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Certificate serial: 0775
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
Manifest number: 0775
Signing time: Tue 01 Jul 2025 01:56:37 +0000
Manifest this update: Tue 01 Jul 2025 01:56:36 +0000
Manifest next update: Thu 03 Jul 2025 01:56:36 +0000
Files and hashes: 1: -kNarmNKJJQBjFzfiFcJr1vONro.crl (hash: FYJFuzjwupSfSRg9NlL5pA/cL1iDeSIJ1tda2RVUJY8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1909 (0x775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B1FB2AF, serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Validity
Not Before: Jul 1 01:56:36 2025 GMT
Not After : Jul 3 01:56:36 2025 GMT
Subject: CN=68634054-e0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:01:28:be:7b:51:cb:54:37:4b:dd:a7:93:
47:9f:0c:85:3e:89:8c:d2:2f:29:3a:c0:97:1e:0d:
84:ab:d3:46:e6:cc:91:f4:0d:03:a2:77:e3:05:34:
a6:ae:3b:14:f7:55:a9:69:d4:2d:a2:15:12:b9:5c:
03:a2:80:5c:ec:ca:3e:b9:d8:9a:e3:20:d1:36:2e:
b8:56:b7:11:fc:25:7e:de:4b:0e:07:55:f5:97:14:
d4:96:cc:d5:fb:84:c1:d3:a5:b0:32:ab:7a:18:7f:
3c:08:99:7a:9c:fe:98:ce:9f:71:82:7c:d0:24:d8:
47:a4:f7:e0:64:cb:4b:6d:b8:49:96:78:47:82:cd:
22:ff:7c:73:51:ef:63:ae:db:2c:be:33:0d:73:f0:
39:fd:b1:53:60:7f:d9:4d:68:4b:62:2e:43:b0:df:
18:ce:d3:bc:b9:12:36:50:2f:3c:05:ca:5f:10:0f:
77:ce:c8:fc:55:56:d4:5d:ba:ab:25:7c:a9:fb:a6:
1e:d4:54:cf:bd:90:3f:85:0c:26:6c:11:87:a8:ce:
86:65:18:cb:cd:3a:dc:2c:89:a4:20:c3:2f:f7:5a:
48:f4:00:14:27:96:e9:20:7a:47:42:2d:42:27:01:
b9:c9:ba:f6:72:60:bf:b5:1c:c4:54:b4:07:34:35:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9B:8A:5E:36:D9:2C:A7:FF:C9:6F:B5:9F:96:73:52:6A:28:9A:D0
X509v3 Authority Key Identifier:
keyid:FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8c:7a:d4:eb:2c:67:9d:83:a8:94:16:57:c6:d4:32:3f:b9:
c2:b8:d7:07:a5:4d:c5:23:21:d8:66:26:85:3b:81:b1:6a:6c:
5d:66:6a:59:e0:ae:48:66:3c:c0:c3:f1:57:f1:97:3c:57:cf:
dd:b5:d6:d9:95:7a:03:56:5a:77:15:f1:fb:a9:cf:09:44:d4:
a4:27:c2:34:43:9c:6c:4d:09:ec:84:95:4d:89:ba:63:31:af:
4a:ba:a8:df:70:75:04:d8:b0:d7:4d:96:b4:98:34:dc:ca:ee:
4f:8d:8c:dd:17:de:b4:ef:b2:7a:05:e0:2f:1a:ac:e6:a1:2f:
8e:9c:c8:2f:94:11:45:29:bb:83:de:34:5b:77:6e:f7:82:4a:
a6:87:1e:30:52:9c:03:fa:b9:2a:5c:4e:a3:56:a0:f3:10:ce:
5c:df:35:66:4b:35:0e:79:1c:c2:67:89:9c:88:b2:6a:bb:5e:
2d:8e:8b:26:0b:7c:a2:a3:01:ab:e7:97:06:c1:e9:d1:0f:2b:
e0:c8:3e:e7:97:2b:7c:b2:92:bf:6e:6d:3a:ca:e2:11:d7:14:
97:f6:7a:9a:f4:b3:3e:d5:d4:6c:29:e8:97:7a:3d:63:8e:0c:
f4:75:f0:45:18:4e:d7:e2:20:68:67:df:7c:5a:d2:4c:10:a2:
4f:01:c7:f3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB3UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjFGQjJBRjExMC8GA1UEBRMoRkE0MzVBQUU2MzRBMjQ5NDAxOEM1Q0RGODg1NzA5
QUY1QkNFMzZCQTAeFw0yNTA3MDEwMTU2MzZaFw0yNTA3MDMwMTU2MzZaMBgxFjAU
BgNVBAMTDTY4NjM0MDU0LWUwYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0AwEovntRy1Q3S92nk0efDIU+iYzSLyk6wJceDYSr00bmzJH0DQOid+MF
NKauOxT3Valp1C2iFRK5XAOigFzsyj652JrjINE2LrhWtxH8JX7eSw4HVfWXFNSW
zNX7hMHTpbAyq3oYfzwImXqc/pjOn3GCfNAk2Eek9+Bky0ttuEmWeEeCzSL/fHNR
72Ou2yy+Mw1z8Dn9sVNgf9lNaEtiLkOw3xjO07y5EjZQLzwFyl8QD3fOyPxVVtRd
uqslfKn7ph7UVM+9kD+FDCZsEYeozoZlGMvNOtwsiaQgwy/3Wkj0ABQnlukgekdC
LUInAbnJuvZyYL+1HMRUtAc0NWQrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUxpuK
XjbZLKf/yW+1n5ZzUmoomtAwHwYDVR0jBBgwFoAU+kNarmNKJJQBjFzfiFcJr1vO
NrowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIxRkIyL0VDQkM3RTgyOUY4MzExRUE4NDU5MTUzN0Y4QUVBMjI4Ly1rTmFy
bU5LSkpRQmpGemZpRmNKcjF2T05yby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLy1rTmFybU5LSkpRQmpGemZpRmNKcjF2T05yby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjFGQjIvRUNCQzdFODI5RjgzMTFFQTg0NTkxNTM3RjhB
RUEyMjgvLWtOYXJtTktKSlFCakZ6ZmlGY0pyMXZPTnJvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqjHrU6yxnnYOolBZXxtQyP7nCuNcH
pU3FIyHYZiaFO4GxamxdZmpZ4K5IZjzAw/FX8Zc8V8/dtdbZlXoDVlp3FfH7qc8J
RNSkJ8I0Q5xsTQnshJVNibpjMa9KuqjfcHUE2LDXTZa0mDTcyu5PjYzdF96077J6
BeAvGqzmoS+OnMgvlBFFKbuD3jRbd273gkqmhx4wUpwD+rkqXE6jVqDzEM5c3zVm
SzUOeRzCZ4mciLJqu14tjosmC3yiowGr55cGwenRDyvgyD7nlyt8spK/bm06yuIR
1xSX9nqa9LM+1dRsKeiXej1jjgz0dfBFGE7X4iBoZ998WtJMEKJPAcfz
-----END CERTIFICATE-----
Generated at Tue Jul 1 05:45:08 2025 by rpki-client