Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
File: KIBrwzr6AQb7b4x0Keq3jBIBolk.mft (raw, json)
Hash identifier: zh6cLa8wu4vJa/NC4LClagm9c3QA06MPia3g+9uwhDE=
Subject key identifier: 76:61:15:CA:9F:B1:F0:3B:95:3A:2C:34:20:A4:2E:45:90:83:F4:E1
Authority key identifier: 28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59
Certificate issuer: /CN=F36E201DAR/serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
Certificate serial: 0355
Authority info access: rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
Manifest number: 0354
Signing time: Wed 05 Nov 2025 03:50:12 +0000
Manifest this update: Wed 05 Nov 2025 03:50:11 +0000
Manifest next update: Fri 07 Nov 2025 03:50:11 +0000
Files and hashes: 1: KIBrwzr6AQb7b4x0Keq3jBIBolk.crl (hash: Wcm4Lz9wgbzwUcfCPRMChM+m5S/+0+hV6viJ+t98Rxk=)
2: 12D945AE311311EEAFAB622D4AD9E6FC.roa (hash: 1y9sdDMI5w0HwUMIMsTMrTkhx4nO8g3B7LIIf0j6KVA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 853 (0x355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E201DAR, serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
Validity
Not Before: Nov 5 03:50:11 2025 GMT
Not After : Nov 7 03:50:11 2025 GMT
Subject: CN=690ac974-17a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3b:f1:20:cc:55:13:50:9f:98:f2:e7:f7:97:
3c:d6:39:be:8c:ae:fa:6d:a0:c7:4b:7a:ee:07:97:
2f:78:ac:a0:07:dd:66:c6:23:62:36:10:fa:3f:25:
0f:b6:ac:b1:aa:23:be:cb:57:0a:5c:c8:45:7c:83:
f9:cc:7f:a2:ad:fb:dc:0a:c9:0e:0d:27:18:55:38:
47:d8:b6:39:e2:8d:15:26:3a:aa:4b:ff:70:50:89:
73:8d:7d:33:bf:a2:2e:3a:c6:88:a5:25:78:3b:89:
5b:32:47:aa:7a:b4:40:4e:5f:7c:19:e6:ce:ac:2e:
d7:ca:c0:f4:04:c3:e3:59:fa:5b:7f:2b:1d:74:d6:
f9:46:fd:b3:de:70:3c:a5:b5:c8:f0:f0:a9:3d:2c:
ed:1e:85:0b:28:8e:0c:9b:08:8b:c8:81:3a:78:fd:
b7:aa:11:8b:5d:42:27:37:a2:24:9d:dd:82:e5:00:
d8:67:90:54:10:2e:f7:4f:e3:32:c6:a4:15:70:3d:
f7:dc:ba:8e:16:c3:70:ad:5f:90:29:60:d5:b8:c6:
6e:dc:6d:26:66:da:30:75:52:e9:03:af:2b:0b:91:
63:ad:c8:80:08:2e:1d:54:b3:bc:3b:27:8f:74:ff:
49:98:3f:03:f5:8b:60:9d:29:56:53:9e:cd:c7:c8:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:61:15:CA:9F:B1:F0:3B:95:3A:2C:34:20:A4:2E:45:90:83:F4:E1
X509v3 Authority Key Identifier:
keyid:28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:5e:b6:d5:01:ce:ea:ae:2a:ff:d4:b0:84:4b:36:83:84:7f:
9e:f4:e5:49:ca:1c:2d:06:ee:b1:5c:c9:43:4d:8e:e2:63:b9:
51:a9:d1:24:df:5d:65:4d:f8:ef:bc:61:5b:8f:5a:67:36:7d:
2d:d1:a4:ea:5f:db:82:82:fb:31:80:cb:38:34:0e:a8:0f:4e:
a8:8a:7f:54:15:f8:49:81:62:67:f3:b2:e8:94:99:41:ca:7a:
a9:ae:7d:f6:10:8a:4d:91:01:08:c7:50:f0:df:83:50:93:0a:
db:dc:82:11:de:95:46:49:93:ba:df:97:00:7c:a9:0f:5c:5c:
ed:b6:bd:ac:0a:81:21:44:11:fe:ae:4f:9a:39:10:56:e7:a7:
2e:6a:54:d7:d9:b2:0b:fa:78:6f:bc:a7:90:2a:e8:d7:c2:c9:
9b:b7:d1:5c:8a:a0:39:cb:28:1f:a0:f0:f4:0a:0f:f3:f4:c5:
d4:1d:e5:d2:4f:d1:99:98:dd:d8:f3:2e:7d:a7:5a:5b:aa:cb:
6c:8a:7a:59:ca:50:f9:29:42:d5:ca:6b:3d:45:e7:35:95:ec:
df:8a:d6:fe:56:ad:79:1c:97:86:8a:d4:67:64:b2:23:d9:d3:
bc:e6:ad:2d:76:3e:d7:f9:3e:1b:23:22:bc:52:be:e2:53:97:
22:9e:26:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:36:58 2025 by rpki-client