Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639B8C/81FF998E8EF311F0B1EF4DCEDAE4EC9C/KrDy-gyWo3s8ZFOURZffPfDF0bc.mft
File: KrDy-gyWo3s8ZFOURZffPfDF0bc.mft (raw, json)
Hash identifier: /C4HO/8BrU6gIqF9acgoO4EbEwk0DwCxro1baKW7IWM=
Subject key identifier: 6F:89:CF:43:C5:40:9C:96:E8:F4:82:F0:42:49:1D:67:51:5C:15:B7
Authority key identifier: 2A:B0:F2:FA:0C:96:A3:7B:3C:64:53:94:45:97:DF:3D:F0:C5:D1:B7
Certificate issuer: /CN=F3639B8CAF/serialNumber=2AB0F2FA0C96A37B3C6453944597DF3DF0C5D1B7
Certificate serial: 3B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KrDy-gyWo3s8ZFOURZffPfDF0bc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3639B8C/81FF998E8EF311F0B1EF4DCEDAE4EC9C/KrDy-gyWo3s8ZFOURZffPfDF0bc.mft
Manifest number: 3A
Signing time: Wed 05 Nov 2025 05:43:35 +0000
Manifest this update: Wed 05 Nov 2025 05:43:33 +0000
Manifest next update: Fri 07 Nov 2025 05:43:33 +0000
Files and hashes: 1: KrDy-gyWo3s8ZFOURZffPfDF0bc.crl (hash: OmvYbstAstFUni1ZFHXvzMagpI3AUJqUnwaDU8f1C8o=)
2: 224E010A8EF911F08110F6F0DAE4EC9C.roa (hash: q4S/Fbxq3yG0xFEOwYvKuxGf0Ynd7Ff6WDMdEih5OjM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3639B8C/81FF998E8EF311F0B1EF4DCEDAE4EC9C/KrDy-gyWo3s8ZFOURZffPfDF0bc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3639B8C/81FF998E8EF311F0B1EF4DCEDAE4EC9C/KrDy-gyWo3s8ZFOURZffPfDF0bc.mft
rsync://rpki.afrinic.net/repository/afrinic/KrDy-gyWo3s8ZFOURZffPfDF0bc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3639B8CAF, serialNumber=2AB0F2FA0C96A37B3C6453944597DF3DF0C5D1B7
Validity
Not Before: Nov 5 05:43:33 2025 GMT
Not After : Nov 7 05:43:33 2025 GMT
Subject: CN=690ae407-014b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:60:09:c7:58:be:02:1e:79:a3:53:65:2f:4e:
5b:47:4a:7c:41:ce:79:cd:aa:af:45:13:85:10:bc:
4e:76:98:60:cf:63:e0:1e:7c:72:63:37:23:94:14:
28:73:82:77:66:fc:6d:b2:ad:20:50:38:ee:01:ce:
ae:ca:e2:25:71:c3:a8:1f:28:7e:4d:e4:76:ad:12:
c4:7a:83:d2:c1:c2:2a:32:ea:5d:f4:0f:8a:e8:40:
69:05:5c:61:4e:cf:82:75:32:c3:f2:f0:2f:49:a1:
31:02:0e:0b:2e:fb:51:8a:a0:ee:ad:31:68:43:60:
0a:da:2d:b4:e4:02:7f:e3:ca:5e:55:7f:e1:c4:9d:
98:d3:ff:8a:b0:e6:16:cb:e0:ef:9f:76:83:e9:9d:
b4:d8:7a:14:dc:2b:82:ee:e6:ba:92:62:e9:03:76:
9c:c7:1f:08:ab:9d:3f:ce:83:01:ef:3d:a4:ae:3a:
73:ee:84:ad:bb:5d:6f:3c:a3:2f:32:fb:a4:77:48:
bb:7c:6e:aa:38:c1:7f:04:6d:24:5e:20:aa:38:a7:
b0:db:6d:a3:54:2a:52:83:31:cb:19:f6:aa:3e:83:
19:4c:fd:af:67:fb:90:99:6b:3c:16:18:38:94:96:
f4:54:ca:0a:26:17:b5:25:4e:ab:cd:70:ec:9c:a6:
98:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:89:CF:43:C5:40:9C:96:E8:F4:82:F0:42:49:1D:67:51:5C:15:B7
X509v3 Authority Key Identifier:
keyid:2A:B0:F2:FA:0C:96:A3:7B:3C:64:53:94:45:97:DF:3D:F0:C5:D1:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3639B8C/81FF998E8EF311F0B1EF4DCEDAE4EC9C/KrDy-gyWo3s8ZFOURZffPfDF0bc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KrDy-gyWo3s8ZFOURZffPfDF0bc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639B8C/81FF998E8EF311F0B1EF4DCEDAE4EC9C/KrDy-gyWo3s8ZFOURZffPfDF0bc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d8:d7:57:d0:89:80:0d:e5:0b:31:95:a5:1b:17:8b:b7:a1:
e0:57:95:87:bc:38:e1:dc:cb:b0:8d:a2:93:9d:76:79:a3:09:
84:34:9a:00:25:a4:f2:13:52:21:c5:e2:64:8c:9c:f3:66:f7:
00:26:27:65:fa:00:48:89:73:80:36:93:60:94:d3:79:15:cc:
74:12:71:7e:bb:b5:e7:f3:69:7f:57:81:4d:a4:55:8b:9c:c7:
fa:6e:5b:fa:99:5e:38:60:da:83:3f:ba:df:4a:0a:a2:3c:82:
7f:a4:72:1c:66:05:b3:3f:b6:5a:bb:6d:0b:1e:fe:17:be:54:
6b:37:13:d5:db:33:99:c9:4d:e9:d7:a9:8e:32:55:72:d4:fe:
08:52:89:8f:a3:9e:f7:10:98:bd:92:b2:da:02:b3:eb:cc:db:
2c:4b:14:ef:5c:50:59:9a:bc:91:94:31:7c:9b:a9:bd:0c:5d:
cf:47:56:e9:c5:34:e0:9d:5d:47:8a:27:52:c5:9a:70:86:09:
8d:96:02:18:f6:88:ee:7e:e6:2a:e0:6b:42:9d:81:34:c8:71:
3f:5e:67:13:35:c9:74:46:3f:36:44:46:b3:05:d0:ae:0b:15:
60:26:1f:6e:94:77:6b:95:89:cd:14:39:c4:d0:e8:1d:90:2d:
90:86:f5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:52:26 2025 by rpki-client