Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
File:                     kkLGCS_iI5rNMMSPNawbxN313L4.mft (raw, json)
Hash identifier:          AIcNDYH9iZG1juryF2u1N2r4UkInNoQDNKX++/2dBGs=
Subject key identifier:   46:DF:80:F5:9C:5E:BC:5D:28:89:00:1A:93:8C:94:5A:85:1D:06:4D
Authority key identifier: 92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
Certificate issuer:       /CN=F36ECAA2AR/serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
Certificate serial:       049C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
Manifest number:          049B
Signing time:             Wed 25 Mar 2026 03:47:46 +0000
Manifest this update:     Wed 25 Mar 2026 03:47:45 +0000
Manifest next update:     Fri 27 Mar 2026 03:47:45 +0000
Files and hashes:         1: kkLGCS_iI5rNMMSPNawbxN313L4.crl (hash: FXBtBn/LD0qS3+NAo5XZlP+vWRm1JrE3IbVgnyx4ojY=)
                          2: 77776CF68DDF11EE9554951A4AD9E6FC.roa (hash: P/s62KTUxEoG/rgkYrfYli6201mLv2NV6jxtdASDzgE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
                          rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1180 (0x49c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ECAA2AR, serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
        Validity
            Not Before: Mar 25 03:47:45 2026 GMT
            Not After : Mar 27 03:47:45 2026 GMT
        Subject: CN=69c35ae2-cb0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:12:0e:f1:19:05:2a:7f:e4:19:7c:07:13:0d:
                    73:ee:0b:f7:a0:c6:4f:f8:c5:72:76:42:bc:0c:1b:
                    54:92:77:ae:61:9a:04:4e:26:74:11:c8:4c:89:94:
                    80:9e:ea:c9:7f:8c:d5:c4:a6:67:ae:55:83:85:68:
                    57:f1:84:ee:a6:f1:ae:8d:fd:af:9b:bd:5d:83:d8:
                    8e:e2:66:68:7d:bb:91:f7:8b:25:d3:d7:bf:ac:4b:
                    3f:c2:38:01:08:63:f2:ae:90:ad:b1:19:70:95:d6:
                    55:2a:a9:af:4b:02:99:7a:79:96:a2:f7:fe:29:6f:
                    4c:d7:bd:a1:96:7a:87:60:ad:d2:ec:28:bf:6e:35:
                    f9:4c:45:a0:da:62:62:dc:d3:3e:c8:d0:89:76:a8:
                    b2:bf:08:ca:f1:9d:db:34:f6:0f:f4:49:9a:d7:33:
                    9b:da:e5:4f:3e:99:7e:21:88:19:c2:74:de:e6:a2:
                    c0:b7:6a:dc:1e:fb:f2:c4:16:cb:0c:38:7e:a6:74:
                    cd:3a:26:c5:d0:17:06:c8:43:6d:b5:37:53:32:41:
                    f1:52:e7:bf:c5:48:e1:b3:49:d2:48:a9:10:f0:6d:
                    bd:9b:20:40:ca:11:79:c3:4d:35:80:a7:52:fe:c4:
                    16:72:87:0a:f5:23:ef:69:a3:a4:b2:07:a5:ec:5d:
                    0c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DF:80:F5:9C:5E:BC:5D:28:89:00:1A:93:8C:94:5A:85:1D:06:4D
            X509v3 Authority Key Identifier:
                keyid:92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:de:ff:aa:d4:cc:42:4c:aa:1b:cf:94:66:dd:d8:b1:b6:f9:
         d7:46:b1:92:20:71:61:37:85:34:1e:de:05:33:10:e8:84:f9:
         52:ac:a2:89:06:3d:4d:35:70:e9:91:04:f1:ed:63:c5:cd:a3:
         bd:b2:47:c3:0d:37:c6:1d:6f:af:07:6c:90:18:1b:10:02:3a:
         65:0e:9b:9e:b3:87:83:38:9d:21:17:64:c8:b2:18:d0:36:27:
         18:97:b5:25:ae:b7:48:22:8e:18:56:2e:39:e7:f5:f9:ea:23:
         be:88:db:c2:fb:6f:99:e7:7e:f8:83:5d:62:de:1a:5b:6d:6d:
         ec:8f:9a:79:e0:1a:45:94:51:ff:52:fb:49:02:f8:cb:01:09:
         84:ac:04:7e:71:1d:c9:63:37:0f:35:ee:55:b1:e6:7c:ad:d6:
         77:af:b0:60:ef:5a:fc:27:59:e5:49:7a:ac:9d:e5:3e:d6:81:
         1b:75:c7:64:7f:db:c4:47:98:83:88:e4:9e:4b:cf:de:92:01:
         ca:2d:a0:71:c5:45:8c:6c:30:53:85:6f:51:17:3b:1e:cf:be:
         bc:ec:ce:24:a6:91:81:de:5f:aa:5c:1e:42:cf:a4:6b:bb:a8:
         c0:70:99:c8:ed:b6:35:7c:12:37:3b:55:c0:ab:69:31:69:f0:
         fe:cb:5e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:57:26 2026 by rpki-client