Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
File: kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft (raw, json)
Hash identifier: Ds+G0JN8MdWA1NRShHe5jTEj4OU7VqToV0MfCjB5RtQ=
Subject key identifier: 0D:AB:99:DE:2A:7F:64:C4:01:47:0E:26:CB:FA:4B:DF:16:62:C1:CC
Authority key identifier: 93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
Certificate issuer: /CN=F362AF02AR/serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
Certificate serial: 0977
Authority info access: rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
Manifest number: 0970
Signing time: Wed 05 Nov 2025 01:24:09 +0000
Manifest this update: Wed 05 Nov 2025 01:24:08 +0000
Manifest next update: Fri 07 Nov 2025 01:24:08 +0000
Files and hashes: 1: kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl (hash: 3ZiWoh/+Qhti8YfQJ3/OTuSMEeip/YSZEGPOHQdjxWE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl
rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2423 (0x977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362AF02AR, serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
Validity
Not Before: Nov 5 01:24:08 2025 GMT
Not After : Nov 7 01:24:08 2025 GMT
Subject: CN=690aa739-5c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3b:da:05:8f:89:ca:69:32:29:d5:c4:21:d1:
c2:a3:22:f5:88:c1:7b:e6:32:d1:f9:3c:f1:65:cc:
42:20:f3:11:af:af:ed:b5:2c:bd:fd:27:73:91:31:
88:a4:db:6e:ef:15:01:c0:1b:dc:1a:8f:84:fc:aa:
e3:da:16:35:c2:b9:dc:df:db:57:90:38:00:e1:a2:
17:a9:52:bb:7d:63:7f:df:5e:f5:2c:ec:39:8e:a5:
a2:98:85:ce:f3:f7:ed:e5:64:31:44:e1:83:65:e0:
63:39:2a:13:34:ed:c5:b9:14:78:69:a8:cf:96:38:
c7:fb:49:2b:57:a1:d5:cf:73:a2:e7:e9:75:1d:82:
87:a5:c8:2f:39:d4:e2:ae:7b:f3:2b:89:3f:30:4d:
bf:0a:44:3a:3b:7b:89:09:4a:14:0d:b0:0e:d6:71:
20:5c:e5:9e:4b:90:9f:dc:ea:9b:a9:48:2e:a2:d6:
53:2b:42:ca:92:cf:7e:a3:29:1b:7b:4f:70:64:ea:
b2:4b:93:b8:6e:fe:d8:07:1a:eb:ae:1d:45:c0:81:
ac:4e:48:c0:ab:54:42:a2:f3:f6:3c:fe:da:b2:00:
01:61:7c:70:72:72:ce:b5:48:0c:80:2a:aa:a3:b9:
4c:b6:84:be:61:31:34:08:94:9b:b3:6b:d2:c3:b2:
79:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AB:99:DE:2A:7F:64:C4:01:47:0E:26:CB:FA:4B:DF:16:62:C1:CC
X509v3 Authority Key Identifier:
keyid:93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:80:16:d0:3f:09:f4:93:95:94:75:f7:e2:eb:99:88:4c:ab:
57:30:ae:1c:ab:19:72:b5:25:d7:02:a8:75:3a:70:bf:be:d9:
3b:84:0b:b9:18:30:83:30:09:16:76:ca:97:38:df:6d:56:1c:
de:65:c0:dc:00:34:9f:dd:3e:01:41:03:f3:59:6c:c4:81:8b:
09:d4:58:c8:26:d9:b4:b1:08:86:8f:20:a3:ea:3b:76:0d:fc:
89:03:9f:13:d6:2e:38:82:0b:66:8d:4e:8e:f6:ff:bf:4e:6c:
a3:2b:68:29:53:48:bd:b3:cb:39:9b:65:a9:5c:4b:ce:dd:87:
a7:c6:ab:c2:c3:92:9c:94:8f:3c:b5:ac:f8:d5:7f:66:04:e5:
47:ad:93:f6:f6:d4:42:00:8f:96:76:e3:6c:07:c5:e7:e6:fd:
60:77:34:e0:3b:55:b3:ae:d3:13:37:fc:b9:eb:2e:40:70:50:
0b:a2:25:68:53:f5:f0:94:ed:02:78:95:7f:25:db:4f:a5:87:
a6:df:34:c9:05:a6:50:d7:4b:b9:e4:45:6f:d9:31:e2:c9:9f:
9e:0e:bc:bb:ac:96:7b:1f:f8:ef:5a:0b:e6:a6:fc:72:fc:7e:
3f:12:0d:38:28:f0:fc:50:d0:2b:ef:7d:d6:06:cc:c8:ed:65:
7d:dc:5e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:13:40 2025 by rpki-client