Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
File: Ic9mCQ8NCPeTru46mq74zw9BMAs.mft (raw, json)
Hash identifier: 5MLRhiKSIvfUpiqTzuq8RUrDt7YnySvhwGoFkXfAikI=
Subject key identifier: 0D:4A:91:13:77:3A:CC:33:86:D7:E9:D9:A8:14:F7:60:B0:D7:2C:1C
Authority key identifier: 21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B
Certificate issuer: /CN=F36818C8AF/serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B
Certificate serial: 0628
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
Manifest number: 0626
Signing time: Mon 20 Oct 2025 02:15:51 +0000
Manifest this update: Mon 20 Oct 2025 02:15:50 +0000
Manifest next update: Wed 22 Oct 2025 02:15:50 +0000
Files and hashes: 1: Ic9mCQ8NCPeTru46mq74zw9BMAs.crl (hash: 0V4E+LHNQBoPHg50cuP1EkVfUf0Qh1aRaibVzaMo4vM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1576 (0x628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36818C8AF, serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B
Validity
Not Before: Oct 20 02:15:50 2025 GMT
Not After : Oct 22 02:15:50 2025 GMT
Subject: CN=68f59b57-8437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:90:11:84:87:ec:31:57:d2:eb:05:96:ca:
3e:f4:a0:3e:4b:7d:35:fc:5e:cc:e5:c7:a1:23:67:
fe:0f:83:af:fe:b8:42:ce:98:64:b2:48:b3:6b:ff:
bd:b1:7f:71:d9:89:af:2d:a7:d9:c1:c2:33:49:f4:
3b:4e:6c:54:76:7c:af:32:c9:01:72:c8:f7:72:87:
fe:72:17:c3:52:16:ee:3c:03:22:fc:60:50:31:1e:
99:b1:f5:3b:17:69:eb:fa:85:1f:e6:23:1d:03:63:
db:85:30:7d:62:48:19:f6:e3:75:06:0f:22:0a:a9:
b0:99:15:d0:8d:90:1e:11:11:61:e4:2c:80:8a:9e:
52:5e:bf:71:c4:f2:8a:42:ef:a8:0e:bc:3e:e9:35:
77:32:ba:59:f9:10:80:04:ae:0d:e1:2a:44:fe:5d:
77:b9:39:c6:04:29:a9:b7:99:a9:8b:93:9a:e0:af:
d0:69:7a:48:1f:a6:72:b8:19:d4:af:f5:ee:83:34:
c2:4b:78:ae:43:f9:1d:d8:8a:7e:1e:6c:af:c1:23:
66:50:cc:70:7c:49:a1:34:de:af:b6:3d:09:0b:a9:
6c:2b:ca:27:62:37:4f:56:9a:d0:be:e4:12:7f:53:
a1:0b:0c:25:f3:5f:75:08:fc:40:41:f1:0e:e4:05:
21:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4A:91:13:77:3A:CC:33:86:D7:E9:D9:A8:14:F7:60:B0:D7:2C:1C
X509v3 Authority Key Identifier:
keyid:21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:57:6a:95:bc:77:b8:c8:fe:f3:c3:2a:08:1c:af:8b:e8:62:
8b:af:87:6c:ad:ba:de:42:76:34:48:13:f9:9f:dd:a7:59:f9:
49:ac:39:2c:f3:00:8a:b1:4a:bb:01:42:e0:4a:60:cd:18:4e:
89:20:56:64:48:5b:29:64:17:89:a8:7f:15:0f:4e:fb:d0:7e:
ea:55:bc:79:9f:71:8b:8f:24:b5:7e:61:bb:e7:eb:a7:a2:f6:
ca:33:c4:5d:6e:22:dd:c6:2c:c3:07:34:57:a3:83:f6:00:77:
3a:d8:f7:fe:a6:d9:39:2f:59:ae:4b:53:1e:59:de:de:97:0e:
a1:8c:2e:c2:26:64:8d:74:19:75:82:3c:f9:dd:c5:21:b1:05:
08:da:3f:8a:99:e7:bb:d5:33:46:61:63:78:4f:e1:ba:11:74:
cc:13:ad:72:64:c8:3c:01:04:b5:86:49:95:96:d7:90:a3:53:
3d:15:80:e2:4d:13:b1:e2:3b:09:a6:28:f0:03:10:d9:96:38:
bd:29:00:3c:d3:ff:2d:2a:96:4e:c5:6c:c9:ec:20:62:f0:85:
9c:8a:53:74:81:f2:8a:46:52:7c:7f:c8:02:81:3a:44:26:1c:
22:72:07:8f:06:21:6e:1f:6a:e7:bc:6e:75:da:10:d2:98:28:
0a:bb:19:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:27:56 2025 by rpki-client