
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
File: IMgTB9QVShV5wAQJACMAaCWVvTU.mft (raw, json)
Hash identifier: KAt3z/q9N/bUE8zThkQwfUoNK4WtNXZAvJ7OmNSvUV4=
Subject key identifier: F9:82:6B:41:75:2E:34:A7:B6:AD:5F:4A:19:FE:43:1A:7A:01:77:30
Authority key identifier: 20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
Certificate issuer: /CN=F36DD00FAF/serialNumber=20C81307D4154A1579C00409002300682595BD35
Certificate serial: 039E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
Manifest number: 039C
Signing time: Wed 17 Sep 2025 03:24:42 +0000
Manifest this update: Wed 17 Sep 2025 03:24:41 +0000
Manifest next update: Fri 19 Sep 2025 03:24:41 +0000
Files and hashes: 1: IMgTB9QVShV5wAQJACMAaCWVvTU.crl (hash: o4ZQY14BU34oVkWjARrtPVh40GiWywNp8DIfZ3uKG5s=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 03:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 926 (0x39e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DD00FAF, serialNumber=20C81307D4154A1579C00409002300682595BD35
Validity
Not Before: Sep 17 03:24:41 2025 GMT
Not After : Sep 19 03:24:41 2025 GMT
Subject: CN=68ca29fa-f11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:82:b0:ba:80:50:a5:55:c8:3f:c5:18:15:2b:
13:13:29:86:ee:03:77:e8:fc:68:2b:af:8a:a1:d5:
d0:51:f0:36:d3:8e:f5:31:c5:65:08:3a:79:5f:72:
82:25:2a:a2:79:53:b2:33:ce:b7:46:f4:05:74:77:
b9:86:47:c5:d2:a2:32:20:24:22:8c:41:53:81:00:
ad:89:f4:df:c3:30:a1:27:da:d0:09:eb:be:f1:cc:
7c:30:ca:e6:9d:b1:42:a4:cb:6a:8e:bd:5f:49:94:
e7:b3:ec:b8:a5:90:d3:28:69:79:1c:6e:96:56:bf:
98:92:60:27:3c:78:d7:87:1c:21:f7:f8:35:df:0c:
38:76:ec:f8:4e:21:e9:6c:5f:cf:b0:12:b4:2c:5a:
2e:a3:10:4e:10:95:47:27:fb:ad:c2:4c:dd:60:46:
0f:47:36:49:23:f2:4f:c5:ff:3a:03:43:5e:c3:38:
da:27:05:24:f7:d4:fd:4d:11:9d:41:c9:34:b9:ad:
b7:6c:ff:2c:19:d3:7f:b6:ce:71:e2:de:f1:4d:07:
ab:7a:45:38:a4:40:cb:2c:6d:82:de:d1:85:d5:8b:
39:27:27:55:d5:07:3d:45:a8:e7:97:81:6b:9b:e7:
6c:fb:28:9b:1f:5d:69:25:e3:da:5a:38:2a:4a:61:
ea:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:82:6B:41:75:2E:34:A7:B6:AD:5F:4A:19:FE:43:1A:7A:01:77:30
X509v3 Authority Key Identifier:
keyid:20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:5b:a0:5a:32:90:1d:81:53:87:a9:af:ef:e9:7c:35:e0:9a:
b8:c2:d9:e9:a1:92:e2:70:4a:05:e6:08:e0:1a:27:96:26:4b:
c7:86:b9:cc:80:f7:be:67:89:e7:02:44:6f:ac:61:25:23:66:
71:19:22:19:e5:03:cd:ec:d6:1a:f3:46:ea:fb:8f:ec:29:ee:
61:aa:1f:ea:b9:16:89:f4:06:e0:c3:bb:c8:00:40:97:fc:e2:
4b:dc:60:9e:4f:47:15:df:ec:ca:22:8e:02:86:fa:d6:81:4a:
80:73:e6:74:5a:11:d9:81:4f:44:ca:3c:ea:eb:5b:00:bf:6d:
8e:de:45:36:73:08:9c:0f:9b:01:17:43:cc:42:b4:80:d4:c8:
e6:a0:71:c8:98:06:5a:96:9c:ad:ca:8d:cb:25:8c:46:03:3e:
c2:45:18:ac:a1:dc:50:0f:b2:bc:25:7e:39:28:62:f3:0d:b5:
44:90:c5:f8:a6:cf:df:d3:e1:16:76:1e:8a:9d:88:a1:bd:b9:
13:18:39:d4:1d:08:ae:54:ef:04:fe:19:7a:a0:85:88:1c:68:
2f:28:79:fd:6f:ef:62:70:bb:d8:f1:94:b9:18:79:37:77:60:
cc:6b:e2:79:34:ef:17:0f:37:3a:b9:77:f0:ba:fe:c9:a0:3c:
9c:19:ef:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:27:19 2025 by rpki-client