Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
File: KCVggNQ6BNgSOO9T0xFu1kewbhw.mft (raw, json)
Hash identifier: sKbWI4CFK2OEn6512xoJ5F4vkLBwjdDbkstpRDOT9KM=
Subject key identifier: 37:F1:94:7E:38:54:6F:9A:DC:BC:24:78:78:66:23:94:F7:AA:8B:85
Authority key identifier: 28:25:60:80:D4:3A:04:D8:12:38:EF:53:D3:11:6E:D6:47:B0:6E:1C
Certificate issuer: /CN=F3662DABAR/serialNumber=28256080D43A04D81238EF53D3116ED647B06E1C
Certificate serial: 042A
Authority info access: rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
Manifest number: 0429
Signing time: Tue 04 Nov 2025 04:27:31 +0000
Manifest this update: Tue 04 Nov 2025 04:27:30 +0000
Manifest next update: Thu 06 Nov 2025 04:27:30 +0000
Files and hashes: 1: KCVggNQ6BNgSOO9T0xFu1kewbhw.crl (hash: vggBpQb9Wrc0iPlJuhNFg5jJj/7tRm7DCZ5NMZjW6KU=)
2: DB993B728F4F11ED982ED088F1222468.roa (hash: zmof4qkrG67Fqj/AA24Lhy1I6eBvEWQSDaesv5Uqj2o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 04:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1066 (0x42a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662DABAR, serialNumber=28256080D43A04D81238EF53D3116ED647B06E1C
Validity
Not Before: Nov 4 04:27:30 2025 GMT
Not After : Nov 6 04:27:30 2025 GMT
Subject: CN=690980b3-806a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:ca:e6:ff:24:8e:b1:ff:46:26:db:7c:39:
66:97:0c:f1:2f:55:35:a9:05:0e:64:ba:a5:d8:5e:
a2:9b:06:6c:3a:66:69:a1:0d:16:c2:80:47:37:1d:
fd:42:c8:37:bd:f3:2a:4b:09:ed:4f:d8:a7:a8:ee:
85:03:96:b3:d2:40:a6:f8:45:c6:88:48:d3:30:c8:
1b:49:2c:de:41:42:19:47:3b:6a:4e:97:c7:e5:69:
b2:90:23:46:b4:f0:d7:02:9e:38:84:d9:48:67:2e:
6d:40:60:10:55:a3:ad:ac:a0:f1:d9:6f:a5:c4:36:
f5:6a:55:c2:82:ad:29:eb:8b:11:be:10:d0:73:10:
90:71:e2:a3:86:4c:c9:87:99:54:3e:a4:9c:09:c7:
f3:3d:9e:7b:48:fe:e6:a7:d4:e8:aa:49:3e:a9:74:
90:1e:02:e7:32:8e:42:45:fc:e5:7e:0b:3e:a0:1e:
cc:d5:a2:01:80:2d:eb:0c:fe:1f:53:3b:96:3c:9c:
55:64:04:89:f8:d3:f3:6c:73:3c:98:6a:cf:d7:6a:
7d:36:10:f9:89:fd:c7:9b:39:84:59:bf:1e:cf:39:
b2:25:62:23:6e:40:cf:63:3e:ff:0e:37:e0:96:60:
58:f6:04:af:31:28:0a:1e:15:11:b4:cd:f0:06:e3:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F1:94:7E:38:54:6F:9A:DC:BC:24:78:78:66:23:94:F7:AA:8B:85
X509v3 Authority Key Identifier:
keyid:28:25:60:80:D4:3A:04:D8:12:38:EF:53:D3:11:6E:D6:47:B0:6E:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:93:2e:a5:96:e6:0c:89:65:cc:18:a3:76:10:bd:27:bf:d2:
fd:0b:99:42:7e:0e:3d:fe:e3:fe:09:df:70:a0:5c:91:b8:8d:
f2:90:81:90:a7:0e:26:91:bb:3c:f0:6e:2b:6b:4f:e8:bf:13:
3c:d0:bb:29:9f:11:e8:53:66:f6:75:7f:71:3e:db:23:fb:c4:
88:80:99:4e:bc:aa:ed:69:a5:4a:6c:4c:6b:60:31:75:38:42:
9c:80:52:aa:5a:2e:fa:77:d6:40:3c:43:d8:03:8c:66:c4:67:
96:77:8a:36:4f:8b:22:de:a8:71:fc:2e:9e:72:21:33:f1:d8:
d4:fb:9c:35:6d:6c:4d:fc:c7:7a:6f:cd:be:43:dd:33:df:3f:
93:3c:4d:3c:4d:b4:db:8c:0a:d5:32:5d:79:fe:e1:2c:be:ad:
05:26:e8:fe:91:87:c1:b2:39:13:98:a0:6d:cb:03:78:f0:79:
ce:9a:46:4e:57:37:04:0c:3c:0b:1a:9e:16:e1:fd:7f:00:ae:
08:86:5b:8d:f3:16:b7:b3:a0:71:88:68:7a:02:a1:a5:58:85:
f9:80:a0:f4:fc:5c:31:3a:75:b9:9f:de:5e:2d:de:40:91:ed:
2c:dd:4c:0c:c0:02:f6:62:5f:64:d9:37:f7:cd:b7:d3:2f:72:
64:0d:51:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:10:28 2025 by rpki-client