Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
File: KIBrwzr6AQb7b4x0Keq3jBIBolk.mft (raw, json)
Hash identifier: ewVRxna6sbLwJZzfHc6IY4geXPWVLaFLTRuTEXzgPOk=
Subject key identifier: 44:4D:00:0A:50:47:9D:E5:3A:CB:1F:98:DB:66:42:5D:42:2C:E6:B1
Authority key identifier: 28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59
Certificate issuer: /CN=F36E201DAR/serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
Certificate serial: 02D4
Authority info access: rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
Manifest number: 02D3
Signing time: Mon 30 Jun 2025 03:56:18 +0000
Manifest this update: Mon 30 Jun 2025 03:56:17 +0000
Manifest next update: Wed 02 Jul 2025 03:56:17 +0000
Files and hashes: 1: KIBrwzr6AQb7b4x0Keq3jBIBolk.crl (hash: y5UkIkj1E+dTBIaNeGwvvR0roMWrDCzSs+VSmi3ugt8=)
2: 12D945AE311311EEAFAB622D4AD9E6FC.roa (hash: 1y9sdDMI5w0HwUMIMsTMrTkhx4nO8g3B7LIIf0j6KVA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724 (0x2d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E201DAR, serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
Validity
Not Before: Jun 30 03:56:17 2025 GMT
Not After : Jul 2 03:56:17 2025 GMT
Subject: CN=68620ae2-3e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:6e:2f:30:c8:87:6e:19:e3:a0:75:3e:6e:
a0:88:2c:74:78:e6:e4:70:98:e6:92:f5:62:b2:36:
b6:44:d8:68:00:8d:56:54:16:db:d8:6f:a8:4f:64:
fa:1f:5d:45:97:13:90:3a:83:24:cc:cf:fe:9d:fa:
6f:a6:f5:7d:8a:bb:f7:3a:fe:a9:2e:32:25:10:24:
0f:36:48:f0:b8:48:15:8d:bb:f1:ff:75:11:e9:1b:
7a:fe:83:7a:48:b8:62:bf:5e:fa:50:62:57:c0:bf:
74:dd:22:f6:7e:17:4a:4e:d1:82:da:5a:54:30:d0:
01:a6:43:3f:52:22:21:cd:3f:a1:67:23:9b:3b:66:
45:c1:1f:94:96:9d:7a:b9:e7:48:f5:6f:7f:39:05:
ff:cf:c7:76:55:15:19:7e:af:1d:a6:b5:9c:a5:01:
30:ab:d3:11:5c:7b:37:64:cb:19:1c:dd:c9:19:fe:
2c:30:af:1e:a0:01:e4:84:0d:5d:a6:90:4a:ee:6a:
cf:48:25:66:7c:13:36:71:b5:32:99:e3:5b:eb:86:
bd:ca:ce:b7:6e:b1:3e:76:dc:d4:b4:90:4a:f2:2b:
66:65:4f:b1:64:4b:e1:b0:3a:9b:3f:48:2e:02:72:
53:72:f6:13:e3:68:5d:78:fe:5b:9b:41:7b:c3:18:
71:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4D:00:0A:50:47:9D:E5:3A:CB:1F:98:DB:66:42:5D:42:2C:E6:B1
X509v3 Authority Key Identifier:
keyid:28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ec:05:fd:b2:73:44:74:75:9d:a8:95:e6:50:70:d8:44:84:
83:12:bc:1e:47:22:09:83:69:96:ce:8f:0f:ec:d2:ec:c3:b8:
21:2c:80:a4:97:1b:92:80:ff:a0:e5:b8:2a:c6:c4:69:99:44:
cb:41:6b:c3:99:8d:8e:14:6b:39:d6:ba:5e:a0:bf:ab:c3:74:
e6:37:5c:7b:0d:86:2f:16:dd:80:2f:b8:5b:14:0b:27:d7:41:
5c:09:92:6c:47:a3:56:3e:5e:83:5d:d1:23:2f:6b:6a:54:04:
1e:43:ed:c6:be:16:5c:77:68:35:47:e1:2a:64:aa:c4:fa:46:
c2:b8:e4:80:da:c9:74:76:49:b8:66:cd:eb:42:3c:d6:58:5e:
ed:96:82:fd:64:06:a2:73:36:6f:f0:b6:2d:2e:40:58:88:df:
32:6f:b8:98:8f:32:22:a9:c8:9a:9a:51:a5:8c:de:ca:ff:d8:
3a:25:5e:10:09:5a:42:14:5a:36:72:60:93:49:99:4d:0e:fe:
b8:79:71:4f:0c:ef:01:60:63:35:16:4b:24:12:39:91:0c:24:
56:3f:0d:4a:7c:2d:3c:38:83:e9:06:6f:d7:d1:76:dd:d7:11:
28:2c:b5:f4:48:ce:36:1e:74:cd:29:1b:a9:34:46:93:d6:87:
7c:97:7f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:47:49 2025 by rpki-client