Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
File: KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft (raw, json)
Hash identifier: uFDcALXWeddE58A89lM5RMl9LA61QQ2QVCNZSZKBdVo=
Subject key identifier: 64:9F:AE:49:F3:73:D4:5F:AF:09:3C:C1:79:5E:99:29:A2:88:EC:91
Authority key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
Certificate issuer: /CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Certificate serial: 04A7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
Manifest number: 049F
Signing time: Wed 02 Jul 2025 02:56:39 +0000
Manifest this update: Wed 02 Jul 2025 02:56:38 +0000
Manifest next update: Fri 04 Jul 2025 02:56:38 +0000
Files and hashes: 1: KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl (hash: PyVO+aqHoAzKWf4nYyrnpylqxcg/XWGjTni+qiY7GbU=)
2: 073BD64605C911EE95E74F304AD9E6FC.roa (hash: In9Q3d/Y0USLa0Qt9FonWtXn6zDCpfpzJ3Ey6VoUa4c=)
3: 16A921E4DC0B11EC947D03A2F1222468.roa (hash: vGBFcYwGWSd28shsl6wLto7Mn3qQgY7dKVAEPsi5kBs=)
4: A9F0CED005CB11EEAE1D25384AD9E6FC.roa (hash: zxEwyc9gplQBJFrp7SAoD+b4/1ve107UCm4IoIpj8I0=)
5: BF8426E405CA11EE92157D354AD9E6FC.roa (hash: A+WykTSmvAsx1MAKq+Pb3eSJ+oLcJkndPTp4NaD0n4Y=)
6: 3DA37FA805CA11EE97650D344AD9E6FC.roa (hash: qnjPAnaVGfXdRft23JxV+6Cp0V+QdoJKnDCoKaZOhOc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1191 (0x4a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E29EDAF, serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Validity
Not Before: Jul 2 02:56:38 2025 GMT
Not After : Jul 4 02:56:38 2025 GMT
Subject: CN=68649fe7-26d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8c:8d:d1:69:f5:91:44:0f:db:76:c4:77:54:
e9:46:2b:5b:f9:09:b1:a2:4a:14:cc:ec:b4:05:9e:
0a:4e:38:76:d8:c6:42:a3:18:60:73:3a:6c:bc:b1:
22:6d:0a:0d:d9:c7:b4:15:c3:af:d7:4a:84:4e:5f:
86:b7:bf:9a:88:7d:97:b0:21:e9:95:d7:49:ca:12:
8e:3f:34:04:84:f6:ca:a1:46:99:b3:92:de:f5:f3:
e6:6a:c9:8b:fd:8d:c8:8a:14:fa:f8:58:83:34:ce:
f0:96:b2:8a:73:95:f1:58:f7:96:b3:69:1a:41:2d:
be:d3:34:3a:e1:37:49:e4:24:53:53:ec:58:ed:eb:
e6:09:5f:c4:fb:77:6d:dc:2b:52:a7:b8:b5:f4:2c:
dd:40:6c:cd:8d:b3:5a:a0:13:63:61:c2:84:2e:29:
67:2f:c0:52:83:ca:1d:4d:30:41:97:3c:25:b2:f7:
9c:50:1b:65:5f:47:d7:89:b5:04:66:31:22:ac:c2:
36:15:37:e4:84:e2:9e:b1:d0:98:60:e4:6b:62:c6:
e6:82:7d:53:76:5b:90:7e:79:32:48:f4:6b:63:5e:
56:38:7f:1b:34:77:e4:ae:fa:e4:2a:16:00:fc:cf:
16:f2:c7:9d:0a:7c:51:c6:e3:7c:e8:b8:61:18:4e:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9F:AE:49:F3:73:D4:5F:AF:09:3C:C1:79:5E:99:29:A2:88:EC:91
X509v3 Authority Key Identifier:
keyid:2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:22:a0:45:3b:c7:f0:63:85:c0:4d:2c:94:87:80:b2:97:be:
1f:60:7c:28:74:b2:11:ba:6d:0e:15:0f:19:88:d7:1c:c6:98:
1c:01:f4:a4:5a:7f:d6:84:d3:55:ed:bd:9e:55:21:9f:9f:81:
8f:fb:e3:e0:80:16:3d:0c:ed:d7:f0:25:ba:a6:1b:5f:4c:b3:
0e:56:1a:b2:d8:dc:44:31:f9:07:fe:36:fa:38:2b:66:4d:4c:
86:c5:81:0b:bd:dd:71:ce:36:e4:04:14:8d:88:44:d5:7c:14:
38:c7:e3:c5:2c:4a:2b:5f:4a:7a:ae:36:17:8f:77:b1:90:08:
d7:d5:1c:d6:a8:b4:92:5e:fd:b3:e0:43:7b:00:f5:ea:88:25:
64:0b:01:a6:95:8d:4a:69:48:c4:ab:2a:6f:7a:02:ba:4d:93:
6e:db:ec:37:9c:cd:90:84:36:ce:e2:03:ea:43:92:f7:25:13:
58:8f:32:13:b6:97:3e:35:d4:87:2b:8c:c1:f5:24:13:5f:bf:
1f:cd:21:aa:7a:d1:44:ce:de:da:97:31:23:31:ac:51:ad:50:
f5:3a:a3:22:84:67:02:76:e1:3c:02:51:d3:1c:6e:3d:27:a9:
58:89:1c:9e:b9:de:04:a5:ab:b3:05:42:6b:e0:7a:b9:42:4e:
fa:9d:8b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:14:54 2025 by rpki-client