Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier: 3eKF8F+DRmUgFBW1D1pMDt5NUWPrikIc6YbzGuk6lss=
Subject key identifier: 62:46:D7:A4:74:B7:ED:FD:EC:77:2D:29:54:AC:75:26:62:2F:98:6C
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer: /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial: 0758
Authority info access: rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number: 0753
Signing time: Sun 26 Oct 2025 01:55:35 +0000
Manifest this update: Sun 26 Oct 2025 01:55:35 +0000
Manifest next update: Tue 28 Oct 2025 01:55:35 +0000
Files and hashes: 1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: VGG3qTg5bjobjFal5OjmVKq6SsnxWstlv83ysOrPZLY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 28 Oct 2025 00:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1880 (0x758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A991DRI, serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Validity
Not Before: Oct 26 01:55:35 2025 GMT
Not After : Oct 28 01:55:35 2025 GMT
Subject: CN=68fd7f97-fb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:8a:a5:07:40:9b:79:a7:d7:c4:58:27:7d:
63:f9:2b:aa:20:28:f5:14:2b:b0:ac:e4:79:d0:6c:
73:61:b1:b7:b0:9c:df:af:37:38:33:38:f5:21:4a:
36:f4:7d:d8:6a:e9:2e:33:61:98:c7:3a:4a:08:3b:
0b:5c:00:3a:be:94:0b:b5:8d:d0:0c:88:3b:7c:0a:
55:b6:4d:83:9d:c3:88:08:1b:20:ee:b1:8d:e5:bb:
1b:df:5e:8c:d8:91:1e:8c:af:51:6a:e9:17:47:f6:
08:ba:e4:fc:51:3f:e7:a4:75:e8:b5:77:d9:c3:f8:
99:7c:d9:65:ef:57:05:b7:12:9d:39:d8:d2:66:28:
93:02:9e:75:bb:7d:1c:dd:02:c1:a4:a0:f0:d5:ad:
d6:bf:a1:37:5a:cf:88:86:ac:47:10:5f:44:e6:59:
a6:30:6d:71:c6:65:6b:eb:a4:e9:46:1f:ee:19:23:
be:1b:f4:76:f8:6c:ac:d7:e5:ea:64:52:11:a0:5c:
43:08:5a:05:6d:c6:be:cf:16:dd:54:e6:28:cb:e0:
ea:bc:87:3c:3c:3e:97:d6:c5:5a:fc:ef:ba:44:95:
e9:65:76:ff:76:b7:e5:f4:e8:18:76:79:bf:8a:79:
17:20:0b:9d:b9:43:77:ec:11:7c:20:37:d3:67:73:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:46:D7:A4:74:B7:ED:FD:EC:77:2D:29:54:AC:75:26:62:2F:98:6C
X509v3 Authority Key Identifier:
keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3e:ad:9b:cd:2a:72:ac:cd:fe:eb:a7:eb:12:21:c7:96:be:
94:5c:67:06:a4:fc:a6:97:ee:65:fd:70:bd:40:81:af:5b:96:
89:e3:20:dd:a4:c7:2a:d2:95:c3:6c:8c:3b:36:dc:d3:3c:24:
41:2f:bc:39:62:2c:29:d9:2d:ec:d5:7d:37:81:3d:c6:2b:85:
29:d9:00:8a:87:7b:55:9a:21:d8:36:b3:11:47:8c:a8:68:53:
9e:9a:4e:df:6f:2a:c2:40:7d:a4:27:fe:52:34:8a:36:ee:51:
36:a7:0a:55:90:71:5b:51:fa:f6:73:7a:b9:3f:2c:01:2f:e7:
6f:28:d6:b4:9f:e3:9f:0e:88:6f:e7:5b:78:e4:2b:ac:06:f5:
99:f7:7c:67:62:92:20:a6:3b:7a:e8:6e:76:9c:0e:31:29:bb:
3e:a2:5a:9b:4c:4d:fe:79:11:e7:98:67:9f:d0:35:7a:ef:90:
1b:c0:f2:09:f5:f8:e7:1b:3a:0f:3c:10:4e:79:5a:11:2e:f4:
21:e8:c9:e8:27:74:30:52:38:53:d7:c0:61:f9:d9:53:81:80:
c3:c7:2a:5f:b9:ea:c6:97:33:01:d9:df:0e:bf:d8:f5:4b:57:
b4:64:1a:04:29:fe:c0:1e:9c:51:13:50:f2:07:f8:a5:6f:f2:
a7:e1:c2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:35:56 2025 by rpki-client