Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
File: yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft (raw, json)
Hash identifier: l+/26jpuAmgTTnNOXmEPXhi4fW5pDG8pO7oKEFNb2X4=
Subject key identifier: 5A:BC:70:D4:6A:6D:53:05:4B:0B:A0:2D:5E:34:C8:67:A1:E7:27:6B
Authority key identifier: C9:A5:9C:63:B7:0A:8E:12:BD:1C:0B:15:77:69:71:71:A3:FE:E0:F1
Certificate issuer: /CN=F36FB15EAF/serialNumber=C9A59C63B70A8E12BD1C0B1577697171A3FEE0F1
Certificate serial: 0271
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
Manifest number: 026F
Signing time: Wed 17 Sep 2025 04:00:22 +0000
Manifest this update: Wed 17 Sep 2025 04:00:21 +0000
Manifest next update: Fri 19 Sep 2025 04:00:21 +0000
Files and hashes: 1: yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl (hash: qsnRJUcd2L2OTFUm9nLHkwgzqyrnlRsa/JmxC4h7dTQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FB15EAF, serialNumber=C9A59C63B70A8E12BD1C0B1577697171A3FEE0F1
Validity
Not Before: Sep 17 04:00:21 2025 GMT
Not After : Sep 19 04:00:21 2025 GMT
Subject: CN=68ca3256-9a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:4d:6a:9c:71:4c:dc:a2:2d:43:1c:21:c1:
96:3c:fa:ac:c9:c3:cf:56:22:bc:98:81:19:63:92:
c9:af:32:92:ae:8d:3f:06:1c:ee:a9:fd:b3:6e:07:
bc:9f:d2:94:06:ff:27:19:a3:48:dc:91:5e:4d:d4:
d6:e1:d1:93:8d:59:7f:a0:d2:fa:71:93:9f:fc:78:
a2:75:50:46:48:d7:54:84:b3:c2:12:f1:c4:63:25:
0b:ed:a0:8a:74:42:81:eb:6c:8e:9c:48:24:79:61:
4a:65:b0:e1:f0:c8:3c:8f:73:cf:b1:e9:19:84:9f:
3b:fc:79:1f:25:40:26:b8:4a:07:db:51:df:e2:53:
4d:5d:03:9b:80:49:cc:83:dd:71:5d:56:44:60:a7:
ef:60:19:a2:45:07:b4:04:ba:34:e3:4f:1b:12:ee:
29:2e:45:67:74:3f:50:0e:90:fd:e0:bf:07:9d:02:
48:3a:cc:99:65:ef:a9:6f:63:66:56:18:ee:ea:4c:
dc:a1:7b:b3:e0:9c:e5:68:25:f9:7a:c3:2e:b0:2b:
06:88:a7:e0:78:9a:e9:cc:0d:28:10:16:61:19:53:
d1:ce:dc:9a:a8:46:f2:8e:ef:b2:3c:aa:eb:b3:1a:
b0:0d:af:e0:5c:f3:25:e7:8d:95:da:47:4b:3d:ce:
d7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BC:70:D4:6A:6D:53:05:4B:0B:A0:2D:5E:34:C8:67:A1:E7:27:6B
X509v3 Authority Key Identifier:
keyid:C9:A5:9C:63:B7:0A:8E:12:BD:1C:0B:15:77:69:71:71:A3:FE:E0:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f4:2b:03:39:73:9f:75:34:a2:9f:7e:e0:ff:b0:35:84:c9:
1d:3c:63:d6:a6:d0:76:4d:1f:5a:f2:c9:a7:fb:e5:31:bd:f4:
a5:13:63:ca:56:20:25:cc:21:f2:70:16:48:58:18:72:13:6b:
5a:9d:b7:e1:42:00:c4:44:99:96:20:cb:ae:07:67:83:d3:00:
20:34:f5:98:09:3d:0b:6a:8c:e7:56:1e:91:f8:83:4b:5e:3e:
7e:9a:d7:ab:37:59:02:de:ec:d1:32:4f:36:23:b5:dc:a6:21:
3a:a4:79:26:44:41:fe:24:a1:60:d7:de:ac:94:5f:f5:7c:4e:
38:f6:64:89:61:16:b5:c8:83:28:38:f2:bd:7f:65:7b:d1:e5:
4b:de:3c:df:f3:3c:c9:d3:69:c6:23:37:e5:87:e3:8e:3e:1f:
82:ed:39:00:36:76:75:01:e3:b4:5c:6f:1e:18:56:f5:e8:59:
23:97:7a:2f:f8:8b:39:25:e9:fa:0f:cb:aa:d2:a9:b4:1c:05:
78:80:2b:51:3a:5f:92:37:f3:9f:07:dd:a8:96:24:81:55:1b:
e7:db:85:2c:95:57:f9:af:81:97:9b:c2:13:4e:05:7a:7d:d7:
e9:af:0b:7b:05:cd:2b:4b:c9:ea:b7:1c:2a:69:6f:7f:bd:8a:
12:17:11:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:29:20 2025 by rpki-client