Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
File: LGcfQllwcCcjdUC_YiZaLZfrlcs.mft (raw, json)
Hash identifier: gtHd9xdxxwEKEcCnOaxImT9hwatDpPiZhZXvjYb5jWg=
Subject key identifier: AC:9E:BB:E1:95:E5:19:59:B5:3B:32:91:12:E8:CD:36:BD:C0:B5:9F
Authority key identifier: 2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
Certificate issuer: /CN=F36A34E4AR/serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Certificate serial: 0249
Authority info access: rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
Manifest number: 0244
Signing time: Tue 16 Sep 2025 04:07:07 +0000
Manifest this update: Tue 16 Sep 2025 04:07:06 +0000
Manifest next update: Thu 18 Sep 2025 04:07:06 +0000
Files and hashes: 1: LGcfQllwcCcjdUC_YiZaLZfrlcs.crl (hash: gtp5M4x6KxKc+a8tB79hZ2w50dNGo0H5JPSaCd2JMAw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 585 (0x249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A34E4AR, serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Validity
Not Before: Sep 16 04:07:06 2025 GMT
Not After : Sep 18 04:07:06 2025 GMT
Subject: CN=68c8e26b-0c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:88:47:49:66:5a:9b:e7:ad:af:a9:09:73:1a:
96:15:12:bb:96:8b:5e:4a:5e:3a:52:d8:55:51:12:
dc:c3:e8:fa:c3:09:4d:7f:35:0d:5f:e0:69:70:17:
12:a6:b2:57:82:07:eb:b1:c1:b3:c0:20:e5:8a:6c:
75:c8:b8:48:0b:79:b2:30:ef:e6:17:6d:6d:5f:67:
f2:82:62:97:9b:39:86:a9:94:17:07:d5:14:b2:1f:
30:5e:1b:99:d6:1f:2c:a3:70:23:4b:95:1c:95:56:
ec:16:ae:a3:16:4e:86:fa:17:ef:b4:d7:d9:96:c8:
bc:43:a1:fa:ab:6f:c3:a5:78:44:d5:e6:86:b5:64:
40:59:a6:87:1c:41:26:96:46:b5:23:c0:e8:51:cf:
28:27:70:bb:d8:18:47:35:21:13:2e:ad:46:72:f5:
a7:f0:00:65:b6:af:08:06:52:75:51:35:97:a9:fd:
f4:38:1e:42:60:4b:a0:04:cf:c4:15:06:0b:ec:7f:
ba:fd:37:26:5a:50:da:1c:d4:e5:80:5b:43:0e:68:
5b:86:2f:4e:57:32:44:b4:44:ee:fb:0f:bf:6f:1c:
2f:2f:c2:2f:ea:57:24:57:f3:0c:ec:b2:54:dd:1e:
44:98:ae:63:73:3c:3e:b2:1f:50:c3:1f:0c:6b:97:
e6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9E:BB:E1:95:E5:19:59:B5:3B:32:91:12:E8:CD:36:BD:C0:B5:9F
X509v3 Authority Key Identifier:
keyid:2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ba:da:79:21:e7:97:2e:4d:83:7c:04:c8:38:2b:da:91:5b:
e7:62:1b:c1:8c:53:1c:2a:bc:17:38:af:25:33:6f:68:41:63:
fc:00:a5:1a:c8:a7:76:81:bf:9d:24:dd:73:4a:ad:5f:91:5f:
cf:88:3d:9a:88:8c:71:e4:f6:6f:8b:1d:c7:ef:e4:46:7b:cb:
55:f1:0d:58:e6:9a:44:01:6f:ab:fa:d0:70:0d:b5:0e:cf:b4:
3e:7c:58:85:aa:99:a5:6c:ca:18:c7:22:30:d0:d5:db:29:39:
27:2e:fb:be:ff:18:6b:f0:0b:fb:d4:13:0c:bf:24:ae:e2:f7:
55:9d:4d:fd:93:26:37:32:69:33:e6:02:66:9f:37:02:ae:2d:
76:54:4f:06:66:02:a8:97:7b:ad:1d:bb:35:72:42:8d:ec:0b:
4b:f7:e8:4d:a7:f4:1c:22:54:4d:93:00:65:62:dd:64:e4:80:
61:0b:77:1b:a3:cd:77:ac:ea:e5:ae:0b:df:80:7c:0b:38:ab:
94:a7:4c:be:8a:0c:4e:50:36:a0:d3:5d:16:17:90:a6:4e:c0:
c9:51:8d:3f:0d:34:24:a0:fc:bd:dc:36:d6:ae:c2:a8:50:79:
58:f3:32:8e:07:a2:08:e3:55:3f:59:78:3a:cb:31:21:7d:c7:
51:54:05:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:45:05 2025 by rpki-client