Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
File: IMgTB9QVShV5wAQJACMAaCWVvTU.mft (raw, json)
Hash identifier: Hzayht0ZNnoZ7xF8jD/Brc2h3QgQAO5u63TVJ/42wPg=
Subject key identifier: 66:D6:5A:52:F3:A0:32:FB:DA:C7:F2:58:7A:FE:82:CA:80:DD:00:73
Authority key identifier: 20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
Certificate issuer: /CN=F36DD00FAF/serialNumber=20C81307D4154A1579C00409002300682595BD35
Certificate serial: 03BF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
Manifest number: 03BD
Signing time: Mon 20 Oct 2025 03:28:11 +0000
Manifest this update: Mon 20 Oct 2025 03:28:10 +0000
Manifest next update: Wed 22 Oct 2025 03:28:10 +0000
Files and hashes: 1: IMgTB9QVShV5wAQJACMAaCWVvTU.crl (hash: 98gE2kuASwCvQlqW2IXCb9Lxdjk32YEb3PaC05QjwNE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 959 (0x3bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DD00FAF, serialNumber=20C81307D4154A1579C00409002300682595BD35
Validity
Not Before: Oct 20 03:28:10 2025 GMT
Not After : Oct 22 03:28:10 2025 GMT
Subject: CN=68f5ac4b-ea66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d7:66:33:7c:fe:a8:70:03:68:5f:49:ce:05:
cf:59:8f:6b:5f:e3:c9:59:14:7a:5c:4e:15:f2:46:
cc:10:ab:95:82:cf:44:79:93:ba:d2:c9:a9:a2:0b:
9f:85:af:d5:07:72:eb:de:de:ec:46:7e:5f:a5:cd:
31:07:82:5d:04:40:62:80:1a:f1:ee:54:dd:cb:6d:
f6:96:aa:11:69:c2:51:a0:38:42:a0:64:10:22:7d:
6a:8f:c2:7c:34:ab:6a:d4:aa:1a:39:da:57:38:0c:
88:e9:0b:65:e0:59:21:0d:33:02:dc:0d:cf:60:23:
6e:40:68:22:61:65:2d:00:ae:c8:b1:31:78:2f:7e:
be:a5:7d:b5:8e:ee:6a:78:f3:ea:bc:ee:d9:1a:5a:
29:a5:cc:6d:30:74:74:90:23:bb:27:b3:8f:d0:9b:
71:9d:5f:bf:76:03:f8:36:04:0f:e5:5b:b7:14:f1:
4e:e9:18:25:2e:94:be:a5:f0:9b:8e:45:47:39:60:
98:0f:98:31:ed:04:cb:6b:26:46:d6:75:68:10:5f:
7b:1c:39:c2:72:42:76:d5:ea:48:01:19:2e:99:54:
d3:c9:3d:f8:d3:bc:7a:d5:c8:0b:83:d2:5e:33:1f:
e5:b2:58:44:75:1d:38:b4:42:c8:9d:89:57:08:a6:
2a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D6:5A:52:F3:A0:32:FB:DA:C7:F2:58:7A:FE:82:CA:80:DD:00:73
X509v3 Authority Key Identifier:
keyid:20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:41:84:ce:a1:c6:61:77:3c:db:1b:bf:6f:3d:65:38:14:76:
66:52:6c:9a:24:ba:ce:d2:9f:fe:3e:70:59:97:67:8c:97:af:
69:d2:85:9b:7d:ba:0d:aa:a5:58:3b:61:73:5f:d7:e5:88:a3:
1f:0a:4c:fb:58:f3:83:a4:fd:e0:4e:36:42:ad:b2:e6:45:c7:
ae:2e:43:c1:28:b0:9a:26:a9:e3:c2:71:a9:f9:d3:5e:21:60:
57:00:31:f1:07:11:2f:c3:47:1b:e7:5d:5f:26:e1:cf:98:cc:
28:e0:92:01:b6:a6:b3:93:5c:52:53:00:96:d0:ed:ce:94:a9:
77:b3:62:f2:13:38:14:43:5f:52:f8:bc:69:4e:47:64:b6:2a:
e8:51:e6:8f:ef:89:13:a1:f9:f3:e5:d5:26:72:88:71:c0:44:
ea:98:b7:bf:2f:b1:e2:47:a8:19:91:b8:58:0c:1d:7b:2c:e0:
81:6c:fa:22:5e:97:23:e3:de:30:79:15:72:87:38:ef:bb:f6:
42:9f:a5:41:e7:e1:d0:ff:7a:fd:a5:d5:66:8b:0d:4b:c9:d6:
c4:20:4d:e8:b6:2f:5f:61:b6:2d:b8:d1:5f:02:ea:aa:87:e5:
0c:4e:e2:07:e2:e7:bd:19:39:cb:53:bc:13:dc:b4:65:69:85:
88:01:54:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:30:49 2025 by rpki-client