Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
File: KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft (raw, json)
Hash identifier: k5BMLhHG8yMkO6WmBCkeZzCG2aIwENUjWz/R3Y0j3JE=
Subject key identifier: 52:B0:09:1E:38:56:0A:CB:8E:07:B5:87:F4:C3:97:D6:67:E6:45:D8
Authority key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
Certificate issuer: /CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Certificate serial: 0525
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
Manifest number: 051D
Signing time: Tue 04 Nov 2025 04:03:29 +0000
Manifest this update: Tue 04 Nov 2025 04:03:28 +0000
Manifest next update: Thu 06 Nov 2025 04:03:28 +0000
Files and hashes: 1: KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl (hash: Pwm4g6uwj+78hiJOfnGOlFxrId1ikBuEiR/+il0/cAw=)
2: 073BD64605C911EE95E74F304AD9E6FC.roa (hash: In9Q3d/Y0USLa0Qt9FonWtXn6zDCpfpzJ3Ey6VoUa4c=)
3: 16A921E4DC0B11EC947D03A2F1222468.roa (hash: vGBFcYwGWSd28shsl6wLto7Mn3qQgY7dKVAEPsi5kBs=)
4: A9F0CED005CB11EEAE1D25384AD9E6FC.roa (hash: zxEwyc9gplQBJFrp7SAoD+b4/1ve107UCm4IoIpj8I0=)
5: BF8426E405CA11EE92157D354AD9E6FC.roa (hash: A+WykTSmvAsx1MAKq+Pb3eSJ+oLcJkndPTp4NaD0n4Y=)
6: 3DA37FA805CA11EE97650D344AD9E6FC.roa (hash: qnjPAnaVGfXdRft23JxV+6Cp0V+QdoJKnDCoKaZOhOc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 04:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1317 (0x525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E29EDAF, serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Validity
Not Before: Nov 4 04:03:28 2025 GMT
Not After : Nov 6 04:03:28 2025 GMT
Subject: CN=69097b11-b96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:04:21:89:44:c6:1b:a7:da:62:0f:e1:5e:
01:60:ae:51:7a:db:1b:f7:b0:1d:2f:f1:3b:1c:01:
d8:f9:ac:f7:0b:c8:27:d8:85:e3:0f:a1:5a:15:7c:
eb:1e:0b:82:d1:0d:97:b8:f3:75:14:5e:43:02:3a:
ac:0b:c9:bc:a1:0a:fa:4e:cd:1e:20:fe:16:f3:64:
d8:84:9f:01:3f:d7:a7:b9:18:f9:d7:c5:f0:82:85:
89:ce:55:92:69:2b:04:12:80:b7:ea:59:c1:ff:67:
7d:4d:c1:82:b5:7f:49:20:9b:ac:1f:5f:51:b0:a8:
89:86:c8:f4:19:83:03:87:95:d4:16:d6:df:ed:30:
8d:18:fb:84:d1:e4:ba:c5:84:07:9b:71:e5:58:2a:
14:d8:c4:60:51:7a:f9:26:3d:4b:87:66:b3:ff:d8:
e8:10:ad:4a:b7:42:72:af:ff:a6:86:4f:8c:3a:57:
55:48:9d:ba:e0:61:c6:7d:c7:80:d2:8e:1d:85:ad:
4b:98:6c:af:15:78:bc:fa:9a:86:a7:c8:5f:87:80:
ba:dc:50:8c:45:d4:37:71:fa:6d:ec:e2:51:82:05:
be:09:4f:49:c5:72:b3:fa:9f:6f:6f:af:f0:e1:76:
45:6e:ba:7c:cd:ec:5b:75:ef:de:33:73:87:ef:27:
f1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B0:09:1E:38:56:0A:CB:8E:07:B5:87:F4:C3:97:D6:67:E6:45:D8
X509v3 Authority Key Identifier:
keyid:2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:2d:6c:16:5c:c9:68:40:93:d9:d8:da:fc:98:1f:fe:c7:1c:
94:1a:3b:87:a3:cc:10:20:02:47:b1:32:e0:92:f1:89:57:98:
c8:b4:b9:f2:3e:b2:04:b0:d7:5e:5c:0d:2f:c6:88:f2:dd:64:
ee:d9:c9:fb:24:0a:d3:d1:34:19:90:70:c9:41:05:9b:92:6a:
ac:4d:5a:19:76:d7:9a:21:b9:cd:67:01:b3:c1:5f:38:66:fc:
de:01:7b:c5:64:bb:1c:58:5e:a8:ff:7d:36:22:af:6d:97:06:
ed:c4:a9:02:f1:ff:4e:a1:a3:eb:56:41:40:21:a8:2b:4a:d1:
6e:77:43:f1:98:7a:f8:d5:de:4c:73:8e:2d:aa:7d:8c:2f:52:
32:14:83:dc:90:0a:7c:17:dc:bd:1d:4c:dd:e6:41:00:04:fb:
92:3b:f3:76:4e:7b:ca:bc:6e:2d:95:94:37:0d:1a:4c:73:18:
cb:d2:03:fd:0d:49:2b:f1:ac:89:cf:63:bf:fc:8e:b1:c2:fc:
95:24:e6:fb:7d:4d:5e:c6:cb:c0:d7:55:cd:3e:95:58:da:61:
2b:31:1a:d1:29:ee:51:ac:94:61:44:48:e3:81:c8:96:57:b5:
70:10:2d:cb:2c:57:f9:08:53:37:23:81:7b:f5:cb:52:23:90:
10:74:a2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:43:17 2025 by rpki-client