Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
File: KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft (raw, json)
Hash identifier: BEd8dZVJK3cyKflfH238ofw3VniVihAy5p+7XVCYC24=
Subject key identifier: 9E:B3:F4:21:7C:21:F8:31:48:ED:FC:08:8C:C0:5A:98:7B:06:8F:3B
Authority key identifier: 29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
Certificate issuer: /CN=F36B49FARI/serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
Certificate serial: 0DB6
Authority info access: rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
Manifest number: 0DB6
Signing time: Mon 20 Oct 2025 01:01:36 +0000
Manifest this update: Mon 20 Oct 2025 01:01:35 +0000
Manifest next update: Wed 22 Oct 2025 01:01:35 +0000
Files and hashes: 1: KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl (hash: aT0w5Xk1xTlCVdlWkYt7U5TCk8F64PdOfoJvZRNdtm4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3510 (0xdb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B49FARI, serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
Validity
Not Before: Oct 20 01:01:35 2025 GMT
Not After : Oct 22 01:01:35 2025 GMT
Subject: CN=68f589f0-2dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:95:68:04:f6:fb:d2:f9:cf:12:75:07:12:
d5:d1:1b:48:68:5e:fb:23:e9:85:4a:ee:09:81:4d:
ba:cc:2c:ef:6d:ff:9a:54:d1:10:2e:16:f6:35:f4:
3a:b2:af:b7:3d:a9:b6:71:9e:a6:45:de:aa:e1:59:
dc:c9:11:d3:54:71:f2:cb:0d:a1:bd:e9:c5:66:09:
00:cf:2e:5d:f6:b1:34:88:82:fc:7d:b2:8c:b9:4c:
e6:6f:ba:85:bc:5e:8c:71:02:68:d9:9b:cc:bb:7c:
a2:2f:2c:71:22:59:b1:47:c2:d7:88:61:ca:ea:b0:
45:1f:ee:8b:86:25:cf:37:c3:09:6f:0b:3f:f4:0a:
2c:ec:4f:5e:61:c6:ef:1e:a1:0b:81:60:59:55:c2:
98:2a:3c:9f:eb:32:03:9f:e2:00:f8:6a:d5:91:32:
c6:90:93:8e:f4:ef:ba:9e:28:b9:c4:de:6c:a3:ca:
1d:74:b3:ef:bb:48:11:81:27:75:55:54:5f:3b:14:
a9:f6:62:df:86:07:5e:0f:ce:65:1d:e4:52:03:fd:
38:80:84:7d:66:a3:49:fa:aa:19:8e:5d:ee:85:3b:
9f:d7:04:33:55:fe:5e:15:a1:87:17:d6:f3:43:78:
08:05:d2:21:be:f1:e3:7a:af:3a:5a:b9:90:69:1c:
b6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B3:F4:21:7C:21:F8:31:48:ED:FC:08:8C:C0:5A:98:7B:06:8F:3B
X509v3 Authority Key Identifier:
keyid:29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:5a:3a:4e:da:d9:52:5f:59:48:61:0e:00:89:5b:58:1d:d5:
f4:54:c2:ac:91:04:2f:4e:61:e8:3d:4a:a4:5a:1f:17:4b:e4:
f8:b0:07:1a:b6:98:45:de:43:d4:b0:8d:1d:2a:bd:4c:a3:7c:
67:0c:d0:b0:80:3c:09:a7:1e:c3:bc:66:69:ab:ab:d3:b1:64:
6f:e4:04:1d:47:51:d3:68:ee:39:21:36:a6:7c:dd:20:05:3a:
b4:dc:9e:44:70:06:36:07:41:8e:c8:fb:68:0b:08:40:5a:6b:
c5:10:b6:2a:d2:4a:ec:8f:38:8d:b2:df:4e:52:19:b0:3e:64:
9c:27:c0:40:bd:80:5d:d9:10:e2:d2:59:30:da:dd:dd:d7:c7:
2a:bd:c0:a4:47:b6:90:3d:b7:4a:7f:9f:3e:95:26:1a:8b:fa:
5e:b9:d1:30:46:46:de:3c:cb:c5:93:f1:bc:2a:9c:93:63:98:
fe:df:0d:31:fc:a2:f6:cf:e6:82:4a:56:dd:de:d4:9f:3b:4c:
e2:07:9d:37:0d:38:07:b5:ac:4f:85:8e:fe:1e:78:e0:af:fe:
20:0e:cf:18:f1:25:5e:07:27:63:ec:da:ec:9b:a8:95:ba:e4:
c1:41:6d:bb:42:77:a5:fb:a5:5c:1f:c2:68:df:2e:5e:7e:3e:
8c:05:b7:0c
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDbYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjQ5RkFSSTExMC8GA1UEBRMoMjlDMERERTI0MzA1RjIwRTRFNUFEMEJCRkRDMDBG
RjE3NDhDQTY2NTAeFw0yNTEwMjAwMTAxMzVaFw0yNTEwMjIwMTAxMzVaMBgxFjAU
BgNVBAMTDTY4ZjU4OWYwLTJkZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/H5VoBPb70vnPEnUHEtXRG0hoXvsj6YVK7gmBTbrMLO9t/5pU0RAuFvY1
9Dqyr7c9qbZxnqZF3qrhWdzJEdNUcfLLDaG96cVmCQDPLl32sTSIgvx9soy5TOZv
uoW8XoxxAmjZm8y7fKIvLHEiWbFHwteIYcrqsEUf7ouGJc83wwlvCz/0CizsT15h
xu8eoQuBYFlVwpgqPJ/rMgOf4gD4atWRMsaQk47077qeKLnE3myjyh10s++7SBGB
J3VVVF87FKn2Yt+GB14PzmUd5FID/TiAhH1mo0n6qhmOXe6FO5/XBDNV/l4VoYcX
1vNDeAgF0iG+8eN6rzpauZBpHLYFAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUnrP0
IXwh+DFI7fwIjMBamHsGjzswHwYDVR0jBBgwFoAUKcDd4kMF8g5OWtC7/cAP8XSM
pmUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI0OUZBLzhFOTcyRUNDMUMxQzExRTY5OUVBNDUwQ0Y4QUVBMjI4L0tjRGQ0
a01GOGc1T1d0QzdfY0FQOFhTTXBtVS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L0tjRGQ0a01GOGc1T1d0QzdfY0FQOFhTTXBtVS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QjQ5RkEvOEU5NzJFQ0MxQzFDMTFFNjk5RUE0NTBDRjhBRUEy
MjgvS2NEZDRrTUY4ZzVPV3RDN19jQVA4WFNNcG1VLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjWjpO2tlSX1lIYQ4AiVtYHdX0VMKskQQv
TmHoPUqkWh8XS+T4sAcatphF3kPUsI0dKr1Mo3xnDNCwgDwJpx7DvGZpq6vTsWRv
5AQdR1HTaO45ITamfN0gBTq03J5EcAY2B0GOyPtoCwhAWmvFELYq0krsjziNst9O
UhmwPmScJ8BAvYBd2RDi0lkw2t3d18cqvcCkR7aQPbdKf58+lSYai/peudEwRkbe
PMvFk/G8KpyTY5j+3w0x/KL2z+aCSlbd3tSfO0ziB503DTgHtaxPhY7+Hnjgr/4g
Ds8Y8SVeBydj7Nrsm6iVuuTBQW27Qnel+6VcH8Jo3y5efj6MBbcM
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:48:25 2025 by rpki-client