Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
File: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft (raw, json)
Hash identifier: c486jNXEIhI3HG4IUmFPFZ738SmhXEVkTGarZ9wq8AQ=
Subject key identifier: 17:AB:07:7B:81:1F:43:6C:F6:CC:FB:3C:A4:76:06:E8:65:00:A7:95
Authority key identifier: F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
Certificate issuer: /CN=F3671BB4AF/serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Certificate serial: 08B6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
Manifest number: 08B1
Signing time: Mon 20 Oct 2025 01:39:49 +0000
Manifest this update: Mon 20 Oct 2025 01:39:48 +0000
Manifest next update: Wed 22 Oct 2025 01:39:48 +0000
Files and hashes: 1: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl (hash: bLd4iudD/JJQdgjenkocc1Y/+udXLCM3g1kSGdebcao=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 01:39:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2230 (0x8b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3671BB4AF, serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Validity
Not Before: Oct 20 01:39:48 2025 GMT
Not After : Oct 22 01:39:48 2025 GMT
Subject: CN=68f592e5-6dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:6e:01:ac:c5:99:95:8c:26:19:ed:c2:9a:
6e:db:32:1c:a1:ee:db:25:fd:f4:3c:cb:29:90:30:
3f:30:fb:96:c1:72:72:85:34:2c:51:19:dc:01:b7:
aa:61:4d:4e:af:db:5b:b2:f7:f0:04:51:73:34:80:
a3:3f:ff:c5:bd:cb:eb:bc:c8:0d:96:39:60:0b:41:
1c:8e:11:7f:13:df:99:25:16:42:82:dd:b0:cf:e2:
d0:03:35:d4:ed:53:c4:9c:57:e6:26:6f:dd:16:b2:
fd:63:46:65:37:45:6b:fa:83:9a:db:87:5b:4b:44:
df:03:95:6b:12:db:e3:c1:1e:2f:f4:65:b7:55:bc:
24:c0:7d:dc:f5:8f:a6:74:64:7f:a0:af:d7:52:77:
04:be:f9:48:37:c4:75:ba:d0:e2:d9:64:06:a3:21:
7b:2f:7b:3e:11:46:26:0e:86:c3:58:35:96:cd:df:
1c:2a:af:8d:d1:fc:1f:7c:f7:96:7b:b1:46:3b:26:
1c:07:df:c6:39:7c:a1:98:c5:5d:a5:78:d2:29:65:
39:6a:ce:53:6e:1a:64:2f:53:82:df:ca:c6:85:91:
64:c5:46:26:8d:3a:e1:55:d6:c0:e7:a9:b6:71:b0:
fb:4c:12:fc:4b:f7:b6:97:dc:cc:c5:1e:bc:1b:3a:
6e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AB:07:7B:81:1F:43:6C:F6:CC:FB:3C:A4:76:06:E8:65:00:A7:95
X509v3 Authority Key Identifier:
keyid:F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:fa:bf:7a:fa:c3:e8:d4:d6:4c:c3:62:f9:32:8b:71:42:b1:
b1:1b:35:e1:49:17:6c:4a:ac:01:86:14:d7:af:fe:92:6c:04:
bb:e8:3c:ec:60:9b:1e:bc:41:8e:1c:97:c3:b0:2f:de:5d:b5:
a1:3d:47:16:10:0f:cb:c3:67:aa:52:a0:0e:0a:47:a3:f8:95:
61:4b:16:d5:be:89:00:69:62:9c:30:54:e6:7f:01:7e:15:42:
e6:9e:f3:5a:c5:42:62:5e:aa:42:be:0d:a3:4d:ce:f3:7b:60:
3d:f3:d7:c4:3b:05:29:57:11:c6:c5:a1:b0:9e:58:c7:5c:25:
79:97:04:9e:e7:45:72:5c:41:1b:33:a1:e4:59:f3:e0:25:4b:
e3:03:1a:ee:7d:1a:de:86:94:c9:d3:81:45:14:49:ea:25:b1:
1c:38:e2:bb:e2:dc:8d:6a:87:c2:eb:78:27:79:d0:cf:df:73:
fc:1a:05:b1:c4:4c:a9:f9:6b:4b:31:1a:6f:b6:0c:33:29:92:
5c:ff:36:cd:2b:61:c3:8c:84:cd:45:6e:f1:4e:97:69:8a:ca:
50:44:98:e5:38:55:ee:03:3a:cc:3d:2d:5c:ac:ae:cc:ef:f0:
a5:f6:fb:c1:db:47:e0:0d:d6:09:c3:aa:9c:31:b9:20:7c:89:
98:2c:1f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:00:45 2025 by rpki-client