Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
File: LGcfQllwcCcjdUC_YiZaLZfrlcs.mft (raw, json)
Hash identifier: IU/CUk1QbKXSWt3yvZ6D3+kEN6EjqRWc5M/u91O5N4o=
Subject key identifier: B8:B0:D5:A5:49:BA:64:9B:98:43:A4:FD:5D:AE:82:76:AE:82:21:57
Authority key identifier: 2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
Certificate issuer: /CN=F36A34E4AR/serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Certificate serial: 026B
Authority info access: rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
Manifest number: 0266
Signing time: Mon 20 Oct 2025 04:11:36 +0000
Manifest this update: Mon 20 Oct 2025 04:11:36 +0000
Manifest next update: Wed 22 Oct 2025 04:11:36 +0000
Files and hashes: 1: LGcfQllwcCcjdUC_YiZaLZfrlcs.crl (hash: TMroEvMjMJv4BtlchjvIpZSlcEp8mceTxaQ6taDSR6Y=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 619 (0x26b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A34E4AR, serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Validity
Not Before: Oct 20 04:11:36 2025 GMT
Not After : Oct 22 04:11:36 2025 GMT
Subject: CN=68f5b678-23ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:86:74:4c:89:31:2a:e5:04:28:e2:0f:24:
f0:08:2f:50:6e:5d:58:5e:20:4e:d0:40:d9:d9:9c:
57:80:d6:30:b6:09:74:e0:96:8f:91:3e:fd:9d:99:
28:b6:7c:41:8e:be:ce:3c:03:d3:25:94:73:ca:b4:
f5:b7:f3:2f:dc:52:7b:da:04:7b:c6:0c:dd:3c:cf:
33:2d:19:3a:53:41:b3:85:3a:c0:9d:90:e8:35:a0:
b6:dc:01:5a:31:5c:f4:cc:26:6f:67:88:44:9e:bd:
ac:78:03:0d:ee:5c:41:c8:31:28:61:1b:99:1a:db:
d5:2e:67:2d:9e:1c:80:da:5e:08:bd:46:50:e1:2b:
bd:30:a9:6a:36:a0:f9:a9:b0:11:54:5a:93:1a:5d:
7c:89:84:0a:7e:84:34:f8:ec:d1:de:90:b8:a1:05:
db:ea:25:26:c5:6e:4f:6b:52:ac:79:79:0e:fe:32:
1b:d1:68:de:d5:5f:e5:91:fe:b3:be:a6:f5:c9:83:
4e:4f:7f:6c:f1:cb:24:3a:ba:c0:68:15:35:8e:d7:
50:d8:f6:6a:81:52:22:c3:12:00:0f:19:65:b0:17:
e2:55:46:d7:00:9e:af:8f:ae:e9:9c:0c:07:ee:b3:
59:4a:c4:32:30:9f:cd:a4:f8:aa:c5:3d:a6:4a:ec:
3c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B0:D5:A5:49:BA:64:9B:98:43:A4:FD:5D:AE:82:76:AE:82:21:57
X509v3 Authority Key Identifier:
keyid:2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:49:1e:b7:e0:3e:7c:a8:82:b9:12:cb:52:08:17:02:ff:93:
2a:1f:d0:da:96:1b:51:13:39:a0:c4:0e:04:a8:f2:ea:89:5e:
40:35:c3:84:e7:1c:3d:1b:e3:90:8d:3e:29:25:74:a1:61:a7:
4b:2c:db:56:6a:00:32:cf:09:94:fc:a8:da:3e:17:5a:0b:8b:
c7:d6:01:ad:23:24:86:ab:8f:10:7d:e2:a7:80:ed:4e:d4:14:
d1:9e:03:0b:51:3e:e8:55:f9:10:f9:23:db:84:3f:c0:69:47:
ee:e3:b7:8e:66:e6:15:68:fb:80:ed:2d:c7:a6:7a:0e:b3:a3:
82:7f:ec:10:96:fc:3c:87:92:14:bd:d4:05:02:a3:45:ee:df:
42:62:4e:f1:d4:72:d0:d1:e1:79:0e:2e:e4:20:bd:ed:ce:7d:
fe:33:d0:29:b5:96:81:d9:1c:7b:45:f3:a1:65:17:88:87:2e:
00:3e:37:30:6f:0b:f4:97:b3:e2:6f:9b:8b:43:54:0d:7e:c0:
2f:ff:8e:43:06:87:5b:9d:6c:99:3a:21:e8:38:b4:0c:2b:12:
e3:42:98:97:8c:35:d2:3b:78:d0:f6:b6:5c:d4:77:e6:d0:8d:
b8:a5:b1:ae:2f:7f:b9:1a:64:a5:7c:bb:92:a3:d9:a1:ea:41:
18:bb:0b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:49:11 2025 by rpki-client