Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
File: -kNarmNKJJQBjFzfiFcJr1vONro.mft (raw, json)
Hash identifier: XWv85QzodT108KqOAu1cxQmZcLvtuA250WrWpEGaOGU=
Subject key identifier: 38:17:26:C9:37:5F:1C:10:D6:64:A1:C8:65:4C:71:0D:DE:2B:4B:BD
Authority key identifier: FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
Certificate issuer: /CN=F36B1FB2AF/serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Certificate serial: 079A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
Manifest number: 079A
Signing time: Thu 07 Aug 2025 01:55:47 +0000
Manifest this update: Thu 07 Aug 2025 01:55:46 +0000
Manifest next update: Sat 09 Aug 2025 01:55:46 +0000
Files and hashes: 1: -kNarmNKJJQBjFzfiFcJr1vONro.crl (hash: F0uKo38pKd0oNY2sbNemaSnXvHICivqwYcP1MU9Ngkc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 01:55:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B1FB2AF, serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Validity
Not Before: Aug 7 01:55:46 2025 GMT
Not After : Aug 9 01:55:46 2025 GMT
Subject: CN=689407a3-90f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9a:ed:dc:52:50:05:88:e9:e6:67:ea:83:72:
b4:2e:2d:54:0d:95:9b:5e:cf:94:65:19:41:19:94:
67:36:63:63:93:0a:eb:31:83:68:76:59:ce:ec:ad:
d8:52:16:02:fe:0a:21:a2:15:51:6d:9d:87:e8:a5:
23:ec:75:7f:b2:f2:01:6b:80:f0:d8:8b:c7:5e:c4:
b5:1e:93:41:42:79:7f:73:08:b2:b2:7b:c5:d7:30:
59:e2:dd:3d:80:6f:49:d0:bb:51:24:62:2d:55:76:
54:e4:38:32:45:73:34:a5:5e:81:fd:ef:6f:93:f4:
9c:ad:bf:a2:7e:3f:39:4b:02:ea:df:de:4a:0b:8b:
84:3b:68:9b:a7:a3:88:0f:ba:bb:04:9a:f0:88:18:
d5:ca:5e:19:a9:d1:ec:2d:62:f8:2e:59:e4:88:90:
ff:a3:93:da:11:b9:e2:d4:8d:fe:d8:c5:dd:30:89:
b8:46:19:28:8d:f1:ad:91:a7:af:20:f7:c4:dc:19:
cf:06:83:43:0a:1c:ab:78:17:f4:b5:14:c4:b8:83:
2c:57:c8:53:52:8d:65:1a:ed:ea:15:5f:b7:0e:05:
98:60:34:8f:ff:35:fe:e9:d4:fe:f2:be:54:e3:d9:
a4:60:90:81:59:8b:94:f6:25:de:53:22:24:7e:d8:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:17:26:C9:37:5F:1C:10:D6:64:A1:C8:65:4C:71:0D:DE:2B:4B:BD
X509v3 Authority Key Identifier:
keyid:FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:15:e1:ae:84:ad:89:73:7f:ae:4e:3d:96:f6:5e:01:6a:d7:
1f:ed:97:25:d9:cf:54:ce:38:4f:f1:81:30:64:b9:53:e9:13:
cf:f6:85:c7:10:76:b8:08:fc:3b:8f:e1:0a:98:ac:a9:e7:19:
d2:cc:08:91:a8:92:38:f8:f8:41:ae:42:e9:80:ad:69:85:6e:
b6:66:cb:e8:b0:b2:9e:62:ba:fb:ed:da:e4:51:5e:4b:df:9c:
0a:1f:08:1e:44:e6:a1:be:36:59:67:1f:a8:ba:b7:36:fb:cb:
31:8d:14:71:0c:0d:46:75:f4:0b:83:b2:76:89:6f:7d:fa:67:
14:e8:01:24:bc:62:ba:1e:22:9d:e2:82:17:cc:22:b4:59:0e:
ac:5e:c6:cf:ff:8f:c0:1f:98:09:7f:47:fd:81:64:76:bd:90:
58:b4:1c:41:d3:72:0e:ab:27:37:c7:30:24:5c:28:3a:5f:71:
b0:15:71:3d:e9:bd:ce:99:67:89:2b:d5:f3:b4:55:d1:57:f6:
43:f9:a9:5b:d9:bf:bf:34:18:de:a0:f2:7b:b1:38:02:25:66:
da:35:9e:f9:fd:d8:ca:62:4c:d5:5a:fb:f0:44:ef:9d:b2:5c:
6d:a5:f5:b1:01:30:25:a4:f7:90:5a:48:79:42:b2:db:ae:8e:
f6:f8:c4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:33:29 2025 by rpki-client