Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft
File: YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft (raw, json)
Hash identifier: ppuCWmA/yyQzer5lLkeQ/ZGfkWDkjITstCnYFdZWAlA=
Subject key identifier: DE:26:39:A5:15:8B:EB:DE:80:8B:D2:84:A3:AB:CA:D5:F4:EF:54:33
Authority key identifier: 60:6F:5A:B8:80:BF:25:9D:4D:CB:66:A0:61:E1:53:EC:C8:ED:56:BC
Certificate issuer: /CN=F36426B7AF/serialNumber=606F5AB880BF259D4DCB66A061E153ECC8ED56BC
Certificate serial: A2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YG9auIC_JZ1Ny2agYeFT7MjtVrw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft
Manifest number: A2
Signing time: Mon 20 Oct 2025 05:00:41 +0000
Manifest this update: Mon 20 Oct 2025 05:00:40 +0000
Manifest next update: Wed 22 Oct 2025 05:00:40 +0000
Files and hashes: 1: YG9auIC_JZ1Ny2agYeFT7MjtVrw.crl (hash: GdrH+Stmaz/uZn6654et2fjQSTbvuwBLXXyH7S9OU1Y=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft
rsync://rpki.afrinic.net/repository/afrinic/YG9auIC_JZ1Ny2agYeFT7MjtVrw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36426B7AF, serialNumber=606F5AB880BF259D4DCB66A061E153ECC8ED56BC
Validity
Not Before: Oct 20 05:00:40 2025 GMT
Not After : Oct 22 05:00:40 2025 GMT
Subject: CN=68f5c1f9-b1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b7:3b:1c:b4:d1:62:f2:82:79:d3:75:83:86:
39:c2:54:ab:9d:69:99:09:62:0b:68:e1:1e:80:11:
bd:0d:f2:6e:7a:c9:b1:7f:9f:d1:47:37:42:c8:b8:
2b:1c:ea:45:12:68:2f:bf:18:c0:a9:cf:72:59:4e:
c8:7d:13:9c:dc:c0:63:af:72:8d:d6:95:2d:a0:36:
6d:a2:7d:dd:27:6a:3e:cf:77:3a:6f:38:1c:8c:a4:
d3:44:19:0b:1e:95:88:4f:80:ae:34:f6:90:31:32:
9a:65:de:2e:49:d9:49:43:bc:1e:b5:a2:da:12:b3:
a5:8e:fe:16:ce:da:38:62:d4:45:93:9a:fb:d2:d3:
5e:c7:65:af:de:ec:a7:98:6e:4c:35:5b:99:10:97:
b9:c1:cf:4b:26:79:61:56:e9:6e:1b:b9:74:17:9d:
7d:d1:57:bc:d1:00:f2:a8:34:0e:a2:5f:97:0d:79:
78:6a:14:69:0d:08:d2:3b:bc:89:31:43:80:23:06:
df:5d:33:a6:f7:7c:32:1e:76:80:63:c3:0a:cf:33:
4d:56:fb:24:f4:2f:2e:d1:95:aa:e3:64:89:27:7d:
3b:41:fa:9f:8e:56:d9:e3:b5:5c:df:11:72:db:5c:
85:a6:76:3f:f1:7a:58:80:50:69:4c:3e:8d:51:8d:
b8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:26:39:A5:15:8B:EB:DE:80:8B:D2:84:A3:AB:CA:D5:F4:EF:54:33
X509v3 Authority Key Identifier:
keyid:60:6F:5A:B8:80:BF:25:9D:4D:CB:66:A0:61:E1:53:EC:C8:ED:56:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YG9auIC_JZ1Ny2agYeFT7MjtVrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:08:6f:c6:d7:ce:2e:b7:b0:3d:68:cc:60:ff:e7:b4:86:73:
67:89:0b:a4:c0:d1:95:ea:00:02:d1:d3:ff:90:7c:08:6d:ba:
e7:16:1e:62:8c:ea:8f:2c:28:ac:c5:0c:77:d9:ec:33:fd:c7:
34:64:7c:d5:71:c4:60:3a:a8:c3:de:8f:22:f7:fd:d1:d7:7d:
60:52:7a:c3:ba:4a:0c:c7:e2:58:6c:43:2e:23:06:03:84:40:
e2:dc:20:b0:b9:c0:72:62:0b:57:50:a8:6b:c5:61:fe:4a:2c:
86:cd:38:5e:ad:ad:cc:16:19:23:db:d6:94:82:43:07:7f:ff:
ff:38:7f:ab:7a:b4:9b:c0:9c:ca:ed:12:1d:d4:f7:7e:c2:f1:
b4:df:9c:e8:30:a6:44:df:a9:30:8a:d1:38:b5:4c:98:0a:e8:
ad:98:12:de:d6:c9:cd:17:2a:eb:ec:20:c4:66:4d:f8:7a:25:
fb:f0:7a:bb:2f:d3:6d:1c:d9:58:7b:5d:ab:8a:94:10:1a:92:
c5:2b:ab:a9:88:48:eb:46:b3:e3:fd:57:63:21:fa:33:77:f1:
82:6d:db:3f:3f:cb:4d:cb:f4:44:c3:b8:d2:9b:bf:83:37:87:
03:2d:99:5b:ce:ec:cb:e8:37:45:f6:3a:ea:a1:df:25:11:a4:
c2:dd:bd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:50:55 2025 by rpki-client