Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
File: yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft (raw, json)
Hash identifier: MRnaX07J/6H2jDnaQQMz6s/lst2O30CjWJeSJePZ15Y=
Subject key identifier: 1B:06:A8:CD:5D:35:D3:35:F4:DA:42:A3:4F:2F:04:57:E7:2A:55:19
Authority key identifier: CA:F3:25:BC:7E:48:D9:7C:A3:A1:74:09:35:1A:8A:F2:74:76:51:1F
Certificate issuer: /CN=F36B905AAF/serialNumber=CAF325BC7E48D97CA3A17409351A8AF27476511F
Certificate serial: 9F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yvMlvH5I2XyjoXQJNRqK8nR2UR8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
Manifest number: 9F
Signing time: Mon 20 Oct 2025 05:01:18 +0000
Manifest this update: Mon 20 Oct 2025 05:01:17 +0000
Manifest next update: Wed 22 Oct 2025 05:01:17 +0000
Files and hashes: 1: yvMlvH5I2XyjoXQJNRqK8nR2UR8.crl (hash: 4t3TRjg6ZIcaqaDBWcOOoTPP5B5r5khN9dHg1RGiG/A=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
rsync://rpki.afrinic.net/repository/afrinic/yvMlvH5I2XyjoXQJNRqK8nR2UR8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B905AAF, serialNumber=CAF325BC7E48D97CA3A17409351A8AF27476511F
Validity
Not Before: Oct 20 05:01:17 2025 GMT
Not After : Oct 22 05:01:17 2025 GMT
Subject: CN=68f5c21d-25b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:c3:41:3a:cb:c4:4f:2c:c0:3f:10:50:2f:
19:06:47:b5:dd:e1:22:70:92:96:1b:ac:bd:8d:d5:
46:58:77:56:b2:3e:f1:02:77:61:5c:ea:e9:52:98:
02:7b:26:8e:08:a0:85:85:60:3e:07:9b:0e:9e:db:
89:bb:32:53:ea:90:7c:f1:dd:3e:60:13:ab:3f:28:
d3:06:b4:07:62:94:85:ac:d5:18:8f:9a:fa:75:4b:
ba:b1:66:09:55:e1:f9:cd:8e:1e:aa:47:dc:cf:33:
d0:fd:40:03:1f:8e:6c:0b:f6:31:ea:63:00:56:81:
de:64:16:0d:40:a2:85:2e:85:6c:51:7d:23:18:0e:
50:6a:ee:37:ad:dd:6c:02:14:d9:5c:a2:71:0b:85:
84:5c:96:94:a3:52:56:26:32:44:c1:70:c4:b9:df:
32:71:bd:6c:a7:07:a1:29:c2:f2:48:99:c3:b7:37:
44:84:42:65:ea:44:52:19:9a:50:bb:50:a7:55:3e:
0a:9a:6d:18:4d:ab:1a:50:17:c3:89:aa:6a:2b:06:
02:5b:31:57:07:58:d3:92:c6:04:33:01:cb:90:24:
b3:1e:dd:46:d5:31:71:30:e1:85:2b:a0:15:c3:5c:
7c:74:b1:59:e5:c3:b0:a9:a9:3d:c9:05:5f:aa:62:
c7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:06:A8:CD:5D:35:D3:35:F4:DA:42:A3:4F:2F:04:57:E7:2A:55:19
X509v3 Authority Key Identifier:
keyid:CA:F3:25:BC:7E:48:D9:7C:A3:A1:74:09:35:1A:8A:F2:74:76:51:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yvMlvH5I2XyjoXQJNRqK8nR2UR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:e1:40:84:d6:cc:4f:ec:4f:1a:3d:87:23:4f:03:26:39:aa:
60:3a:1c:1b:a8:48:b8:05:b1:a7:94:23:ea:be:e7:64:34:9c:
7a:52:d5:63:3b:80:d0:ac:74:3d:8a:2c:1b:c3:7a:c3:18:36:
1e:7f:c3:b3:07:2a:a9:e0:d4:98:7f:26:c3:e2:4d:bb:47:a2:
bd:79:0c:e1:90:17:3a:e4:e7:2d:6a:93:91:e8:3a:de:9e:f7:
64:77:bc:ef:97:67:05:f8:69:50:d2:e0:28:0d:b5:7f:4e:a0:
74:5a:95:50:39:56:a6:40:43:45:61:90:c5:3f:f9:e0:44:0c:
80:ce:9a:c6:3a:d0:58:de:ff:6f:45:ec:90:5b:49:fe:a0:c7:
ad:b2:0f:e7:8b:cc:05:aa:4f:67:9e:6b:f3:f6:b7:7e:12:98:
f3:27:00:3d:8d:52:e3:71:00:97:22:d6:d1:7d:99:2e:0d:54:
3e:ec:f3:57:6c:dd:2a:e4:e4:8a:a9:31:24:2a:da:a7:fc:7e:
0b:82:5e:30:07:67:72:ad:76:68:43:0c:87:69:35:d9:01:a6:
84:57:18:c4:0a:b4:23:60:2c:3b:71:91:90:87:eb:59:d5:fe:
30:91:17:13:93:71:e0:51:d0:37:07:41:87:ec:cd:32:7f:c0:
e7:74:cf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:53:39 2025 by rpki-client