Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
File: kC4Bh228XGk7_mL7v2fubbanGDE.mft (raw, json)
Hash identifier: ZkuKE81BcHfJQVSAtZFZPZuQcvf3hRXqYoiEXO/Y5U4=
Subject key identifier: 0C:DD:A6:7E:53:14:2D:D0:77:07:E8:0C:6F:C4:CF:C1:00:7B:CB:9D
Authority key identifier: 90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31
Certificate issuer: /CN=F3680E82AF/serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
Certificate serial: 0692
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
Manifest number: 0690
Signing time: Tue 04 Nov 2025 03:20:43 +0000
Manifest this update: Tue 04 Nov 2025 03:20:42 +0000
Manifest next update: Thu 06 Nov 2025 03:20:42 +0000
Files and hashes: 1: kC4Bh228XGk7_mL7v2fubbanGDE.crl (hash: 8bcHaVPaLtFxravqrK2HyWCUM1kEMx3iFKsgKd12oLI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 03:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1682 (0x692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3680E82AF, serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
Validity
Not Before: Nov 4 03:20:42 2025 GMT
Not After : Nov 6 03:20:42 2025 GMT
Subject: CN=6909710b-75a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:da:da:c8:34:75:b9:b5:f0:d3:24:7e:e8:
73:8d:fb:d2:13:74:43:c6:bb:5b:39:5f:a0:51:28:
57:e8:cb:cd:b3:d7:92:93:1e:69:16:74:ba:ad:3a:
fd:63:68:2b:55:c6:c6:25:2a:2d:58:17:d2:9a:ea:
35:97:81:cc:87:c3:d1:1b:3a:b6:59:22:e5:1e:09:
d3:68:35:f6:e4:d0:f4:19:d7:45:c5:f2:0f:1c:b2:
73:47:69:27:c1:8f:a3:16:5b:3f:38:4d:4b:63:e0:
c5:97:09:2b:26:75:b7:05:7d:91:dd:fb:e1:43:c5:
0c:96:db:b7:01:d9:7a:c0:38:79:f7:ce:48:b9:4c:
ae:96:82:11:c6:ef:da:15:57:6e:49:74:1b:b7:44:
28:45:74:45:f5:02:a7:da:c6:25:c9:21:b9:ff:c4:
bd:bf:1e:c1:d4:21:89:0c:19:c0:f0:05:8f:b3:39:
fd:a0:a9:2a:91:d5:fa:14:a3:a5:0f:73:0b:6d:32:
c2:fb:fe:d7:0d:30:5a:dd:16:3a:f2:33:76:b8:b1:
43:78:4b:4f:ce:5c:8f:2e:9e:8d:7f:ff:4b:7b:12:
99:dc:e0:8c:aa:96:56:8a:99:38:46:71:bd:4e:30:
bf:c9:ca:9d:69:33:bf:05:d7:4e:fe:61:3e:4c:ef:
e0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DD:A6:7E:53:14:2D:D0:77:07:E8:0C:6F:C4:CF:C1:00:7B:CB:9D
X509v3 Authority Key Identifier:
keyid:90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:db:a2:7f:5b:a0:44:66:22:54:9b:3c:f6:30:6c:10:28:6a:
e0:f0:58:1b:e9:27:1c:4f:d9:1c:0a:8d:f0:ad:2f:1f:30:d2:
a9:8d:5a:41:ae:db:eb:ea:a4:3b:da:14:1e:09:35:ee:f8:4d:
4c:55:ca:f0:ff:76:3b:70:52:ee:26:5b:46:0a:18:56:38:bf:
f0:a8:59:34:00:a3:08:cb:59:32:41:28:4d:e4:9b:89:87:2f:
82:16:08:be:c0:29:6a:d6:30:75:14:29:90:e2:bb:33:19:43:
f0:cd:15:b9:74:6d:9c:a8:22:1a:d7:68:fb:63:49:9e:a8:92:
6a:4c:ad:01:35:27:76:38:9e:46:33:e5:f2:7d:12:32:cf:8d:
aa:1a:52:6b:54:94:c8:0f:02:c1:ee:49:20:2e:6b:05:2b:6f:
21:ab:32:03:1b:03:24:71:dd:09:5a:fa:a1:4b:d7:01:06:ff:
34:d2:8b:79:86:bd:26:47:3a:4b:4b:d3:1b:6f:bd:0e:a4:62:
d1:e8:d2:1e:39:8e:49:ae:ab:ab:44:7a:74:9f:0f:47:bf:cf:
4e:e6:67:db:9e:fd:4d:e6:ab:a3:ce:a8:c6:bf:c3:0d:f1:08:
ff:44:58:d8:5f:3a:03:34:a2:97:a4:2e:c6:53:87:4c:26:ff:
b2:6b:0b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:38:27 2025 by rpki-client