Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
File: IMgTB9QVShV5wAQJACMAaCWVvTU.mft (raw, json)
Hash identifier: NXp/b6wZ4SQKIjxErgZwSmIJT0lymVrmVnSK0z5dVYA=
Subject key identifier: E7:52:4E:D4:37:A2:1A:74:FB:67:E9:51:0A:15:EC:9D:97:50:7D:BF
Authority key identifier: 20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
Certificate issuer: /CN=F36DD00FAF/serialNumber=20C81307D4154A1579C00409002300682595BD35
Certificate serial: 036E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
Manifest number: 036C
Signing time: Thu 31 Jul 2025 03:44:00 +0000
Manifest this update: Thu 31 Jul 2025 03:43:59 +0000
Manifest next update: Sat 02 Aug 2025 03:43:59 +0000
Files and hashes: 1: IMgTB9QVShV5wAQJACMAaCWVvTU.crl (hash: N/EVy/x1gJkYIcgn1uFFB9JSxpeIakXDW9c6oKT34iE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 878 (0x36e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DD00FAF, serialNumber=20C81307D4154A1579C00409002300682595BD35
Validity
Not Before: Jul 31 03:43:59 2025 GMT
Not After : Aug 2 03:43:59 2025 GMT
Subject: CN=688ae680-d2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:49:19:ee:c0:39:95:d8:cb:1a:34:e8:7f:be:
35:2a:b9:f5:1a:ad:1c:e8:a9:5f:d3:0b:17:47:04:
1e:4c:86:fe:28:24:17:2e:fe:56:8f:aa:d4:b2:d0:
94:1c:9f:7a:38:dc:b6:d2:1c:99:9f:f2:23:dd:30:
29:82:60:61:9b:7b:52:cb:1d:54:2d:7c:0c:d7:03:
06:7e:6f:28:99:20:9c:af:79:08:80:74:72:cc:db:
20:fc:b2:56:25:4e:6f:15:35:24:42:b6:8b:41:36:
28:6a:98:5e:bc:5b:1c:d8:51:68:b0:7f:a6:fe:0c:
af:e8:26:0a:46:cb:61:85:fe:ad:f2:c0:e4:3d:01:
84:88:c9:c9:66:58:22:b6:04:08:1f:44:8c:4e:c7:
71:6f:a2:97:47:75:e7:9c:21:d0:74:b8:3f:3e:ac:
f5:bb:a4:59:ce:91:c2:5a:71:9a:ca:c3:57:32:b4:
47:57:a8:e5:fe:b8:81:3a:50:47:39:cd:e1:2f:24:
41:66:f4:ac:ad:2b:a1:29:40:29:cc:43:5a:00:d8:
42:97:83:8d:79:65:0e:a6:c7:e2:6d:16:4b:80:6e:
79:ce:52:9a:40:21:43:04:f1:0c:8d:92:40:31:97:
be:0f:27:3c:41:d4:af:3a:53:7c:87:30:6b:bb:7b:
19:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:52:4E:D4:37:A2:1A:74:FB:67:E9:51:0A:15:EC:9D:97:50:7D:BF
X509v3 Authority Key Identifier:
keyid:20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ac:f1:6b:30:f3:2b:fe:89:1c:5a:03:dd:e8:30:56:c7:6a:
32:c6:1c:6e:e7:7d:c1:6b:70:c3:2a:97:09:41:7e:73:02:58:
7d:04:15:9f:3b:1d:04:47:0e:65:f8:4c:1f:90:58:5e:24:f3:
37:22:29:6a:a0:98:8c:a8:87:9f:9b:04:49:c0:f8:63:1b:a8:
ea:7c:16:f7:59:3b:76:ea:d9:29:66:1c:36:df:3d:eb:8b:51:
eb:7d:2d:ed:8f:82:32:f4:9d:de:d3:20:87:d7:ea:8a:c8:f2:
6a:01:c3:7a:51:30:96:66:b1:02:41:2b:29:ce:36:a9:cf:21:
9f:7a:5c:85:38:41:81:9b:00:80:75:7b:d0:e7:26:58:25:b7:
a0:d8:a8:c2:b4:d2:9e:7d:1b:c3:e6:32:cb:59:58:18:07:17:
1b:48:15:3a:c6:f8:f2:01:e0:ab:04:3f:06:8d:4d:2b:e9:68:
25:40:c6:b7:4b:89:cc:6f:64:de:c0:48:92:85:93:a0:0d:1a:
8a:d1:e1:7d:f6:2e:0c:8f:3f:a0:99:f8:d9:04:6e:7d:49:21:
2a:0c:14:95:37:91:ab:1d:50:6e:5a:db:5e:e0:79:b0:6a:2f:
09:dd:90:b8:b1:8d:92:ec:93:4a:67:f5:66:25:8f:57:7c:33:
28:00:ed:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:21:55 2025 by rpki-client