Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
File: ai026HfXJSbET24AT680-ZBPIxE.mft (raw, json)
Hash identifier: PJlyflvabTlizbQxAOACnYbGRo7nAPkriDwVyyxQwJM=
Subject key identifier: 53:F0:DF:A6:AE:C7:80:E2:3E:9D:F5:F5:63:6D:23:D0:45:21:B2:A9
Authority key identifier: 6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11
Certificate issuer: /CN=F36A991DAF/serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
Certificate serial: 0748
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
Manifest number: 0748
Signing time: Mon 20 Oct 2025 01:58:17 +0000
Manifest this update: Mon 20 Oct 2025 01:58:16 +0000
Manifest next update: Wed 22 Oct 2025 01:58:16 +0000
Files and hashes: 1: ai026HfXJSbET24AT680-ZBPIxE.crl (hash: D5Jw5UFPz5KABn09pHl02w2q1N2MPNn/YpPgxO8Gnmc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1864 (0x748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A991DAF, serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
Validity
Not Before: Oct 20 01:58:16 2025 GMT
Not After : Oct 22 01:58:16 2025 GMT
Subject: CN=68f59739-5ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:81:09:fa:6d:34:39:57:29:9b:34:33:1a:14:
03:c2:ac:95:b0:39:3f:a7:59:7f:91:d8:25:0b:d8:
eb:26:77:cc:78:2d:99:35:1d:58:6e:74:c9:9a:72:
49:4c:66:f2:56:65:d7:3b:df:03:f8:1d:62:4a:32:
da:65:30:92:81:ce:db:ec:54:ab:64:8e:6d:25:bd:
63:bc:1e:9a:d0:88:77:bc:b6:c6:fe:ab:26:2b:6d:
ab:71:fb:79:7f:a0:fa:ca:de:f1:95:82:c8:94:ed:
cc:38:4b:19:c3:13:f8:ef:64:9e:01:69:b8:d3:66:
4c:f9:63:09:b5:7d:20:2a:f9:47:b1:9c:40:5f:6a:
fd:ec:77:0e:45:78:eb:b9:0a:74:03:70:9a:f0:b4:
c1:e6:c2:cd:33:6f:65:8a:0d:ee:0b:25:c5:ba:9c:
18:8a:9d:c9:c6:b1:6f:2a:ef:78:7e:59:45:24:53:
50:8a:df:cd:b1:4c:6f:f9:0c:fb:13:f0:47:26:71:
41:05:a9:f6:ce:98:48:ce:cd:aa:a9:38:fb:3a:ac:
23:4f:29:b2:3a:96:97:62:ad:f7:f3:0e:6b:63:5d:
41:dc:d3:ae:e2:df:7e:4e:40:b1:27:ab:95:6b:de:
a5:82:83:e1:a8:01:b9:73:9b:b4:e0:34:9a:2e:5a:
8e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F0:DF:A6:AE:C7:80:E2:3E:9D:F5:F5:63:6D:23:D0:45:21:B2:A9
X509v3 Authority Key Identifier:
keyid:6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:e6:d3:91:8b:57:b8:98:cb:1a:5f:a8:aa:3c:ad:a2:06:23:
0f:46:30:cd:2e:98:ce:4d:94:1a:fd:98:95:e9:7c:62:90:5a:
d8:c9:a3:34:47:76:51:43:e0:52:d4:17:29:64:f9:12:9f:66:
85:d7:a4:85:58:75:8f:e6:10:38:bc:df:a9:b5:e9:ec:72:a2:
fa:6c:5e:d7:75:14:51:ec:8f:3e:93:9c:08:26:69:7a:74:4a:
2a:78:87:d4:1e:73:16:06:f4:84:f4:e9:aa:6b:26:77:23:a1:
df:03:3b:d1:9a:70:4f:1e:18:6a:89:52:ea:05:3c:80:e3:6a:
bd:1f:a7:b8:93:7e:c3:39:c9:90:cd:0e:ab:46:7f:b8:a9:12:
1e:12:0d:a1:6b:f6:16:43:41:8e:8a:e7:91:6a:b1:69:0d:0f:
82:ec:81:d5:be:4f:2a:d9:bb:62:5a:28:9d:87:1f:04:d3:8c:
35:7a:a7:d9:cd:d8:0e:78:5a:5f:80:f0:68:99:3a:68:a6:3f:
2d:63:94:9e:95:5e:2c:47:66:38:94:68:31:11:f6:95:4d:c4:
71:2d:02:56:6f:2f:b2:c6:73:6e:38:4a:26:45:bb:7b:43:96:
33:f8:cc:f1:63:95:2e:f0:90:a5:ac:c5:da:e2:74:cc:94:16:
27:eb:e3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:40:58 2025 by rpki-client