Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier: WA3bs4xzDuFwjB0CqCMHrDDDEdtTsH3b5gpV5aCE3bQ=
Subject key identifier: AD:2C:0E:D8:D7:CC:27:00:0E:FA:40:1F:D0:79:39:76:E4:28:72:F7
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer: /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial: 0752
Authority info access: rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number: 074D
Signing time: Mon 20 Oct 2025 01:58:03 +0000
Manifest this update: Mon 20 Oct 2025 01:58:02 +0000
Manifest next update: Wed 22 Oct 2025 01:58:02 +0000
Files and hashes: 1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: 2tySwF+bj+5dwDTBxd3GKVeZI6G4yWfnMnD12ZH8S6w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1874 (0x752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A991DRI, serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Validity
Not Before: Oct 20 01:58:02 2025 GMT
Not After : Oct 22 01:58:02 2025 GMT
Subject: CN=68f5972b-094b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b8:c3:ed:ca:ef:dc:b8:3f:7c:a8:d0:0d:cd:
4d:28:8e:ef:9b:86:1d:07:7b:d5:73:f9:01:a1:5e:
05:57:af:49:ff:b5:d0:d3:ab:0d:9e:b2:bc:1f:5a:
0b:30:67:26:9a:1c:98:c5:6f:07:a4:63:bf:e5:5d:
65:d4:89:9a:e9:0a:af:7c:07:93:b4:ef:73:00:e3:
9d:5c:8f:04:31:01:c7:e5:93:b1:3e:4a:7e:24:5e:
64:8d:bc:bb:7b:bb:8b:81:13:11:b6:aa:67:5c:ec:
15:2b:f9:a6:21:a8:a3:f5:23:f9:72:bd:a1:36:23:
5e:40:6e:11:cf:ee:35:a6:7a:0f:31:20:a6:38:c1:
69:5d:e5:69:89:af:16:de:3d:e9:ec:6e:c4:44:64:
7e:52:c9:0f:29:b7:d1:df:7e:ab:17:2b:b9:2f:7e:
68:2f:f9:ab:46:de:24:6e:84:c0:f8:b9:82:04:2d:
6c:ff:f2:c3:d9:20:94:97:87:7b:21:95:7c:8c:fb:
d2:d3:1b:d8:ae:31:65:24:44:5f:a9:6d:f6:8f:d9:
22:e2:c9:b7:8a:d8:cf:df:50:fc:e2:2d:67:3c:92:
4e:81:8e:2c:81:d2:13:3f:bd:9a:bc:4d:29:3c:15:
d9:6a:9a:b1:9a:bc:a0:75:d1:8d:00:32:45:92:83:
fa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2C:0E:D8:D7:CC:27:00:0E:FA:40:1F:D0:79:39:76:E4:28:72:F7
X509v3 Authority Key Identifier:
keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2b:d1:62:cd:52:43:91:b5:ac:6f:cd:08:3b:ca:a7:be:bc:
9b:db:69:fb:7b:5f:a1:3c:fa:3d:d1:88:c2:37:33:93:43:1e:
2c:b2:c5:58:74:1a:af:81:a0:f0:83:e9:ca:36:3d:85:09:52:
e3:c1:89:8b:a9:a3:f1:7c:bf:03:8f:c8:64:0c:69:62:cc:8a:
29:45:45:8a:7d:02:7e:43:98:ce:7a:8b:fe:c6:2d:9f:8e:9f:
63:a2:14:c7:45:12:48:02:c8:e4:ef:ac:cc:35:21:54:7f:42:
17:46:70:12:16:60:89:54:07:0c:f9:49:de:0e:b8:d5:27:71:
1f:a7:fb:71:5f:60:68:c9:52:e9:32:37:19:fb:22:1a:3d:9d:
30:ea:6f:60:03:4c:ea:6c:5b:4e:7f:c7:94:b2:6c:88:59:ab:
4e:b9:bf:91:fd:5c:2b:73:27:60:6a:e9:bf:e2:df:a9:e3:96:
ae:0c:62:b1:01:5b:c1:8e:e9:f7:95:2f:fa:5f:27:c3:ff:44:
f7:f1:82:e3:dc:a3:38:9f:58:ce:a5:f0:6b:5f:38:5c:61:f5:
74:34:d3:e2:dc:ee:53:2f:5f:e9:f9:24:56:05:e3:4a:72:42:
4d:a4:24:8b:bf:1e:b8:eb:0b:55:9d:b3:e3:8e:53:9f:da:b4:
10:65:12:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:57:43 2025 by rpki-client