Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier: rlYDzTJJBTcYFXfALyuowHfgaeIYx8lBSz/LHay7Gr8=
Subject key identifier: 05:DD:01:3B:D0:45:4C:04:54:72:35:CD:52:84:51:1A:05:B7:B7:BD
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer: /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial: 07DE
Authority info access: rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number: 07D8
Signing time: Mon 02 Mar 2026 01:30:28 +0000
Manifest this update: Mon 02 Mar 2026 01:30:28 +0000
Manifest next update: Wed 04 Mar 2026 01:30:28 +0000
Files and hashes: 1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: AYR4/yGV8+6tJeqjtji50LUDlpOCgJSUQUW0osOrlko=)
2: B3F3B298BD5D11F08B10CDAADAE4EC9C.roa (hash: jybNV3DuqyII4QJXbnrYt3g+0EtzaVGNvEdcE78t6os=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2014 (0x7de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A991DRI, serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Validity
Not Before: Mar 2 01:30:28 2026 GMT
Not After : Mar 4 01:30:28 2026 GMT
Subject: CN=69a4e834-d672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:ad:94:84:f5:7a:91:a5:c4:f4:56:e0:76:
09:79:91:e3:d5:51:aa:0b:63:ef:b3:a9:92:54:6c:
50:5d:34:2b:c4:e6:1b:38:ee:7b:8a:e6:4a:ef:d4:
9c:b5:2b:f1:4d:fa:85:0b:10:d1:7b:fc:14:5b:03:
74:8e:58:32:80:92:fa:6c:f7:03:01:e0:ce:e1:ed:
25:cf:0f:b8:59:b0:88:77:a1:8b:fa:c8:44:93:12:
5b:36:c0:87:a2:5a:6f:d5:50:69:e7:f6:d4:58:16:
8d:15:5d:56:34:21:ee:ee:f8:21:1e:f6:e2:ec:bb:
01:a0:3e:4b:b5:88:ac:d5:d5:38:f7:d0:a2:75:01:
45:30:92:92:2b:a1:13:6b:7a:37:a5:80:b9:f8:75:
a1:c4:be:a6:7e:16:6c:24:ee:29:83:a9:d6:e6:cf:
71:52:0a:fa:76:93:6a:5e:82:1a:f3:d1:74:01:fd:
fa:b9:72:9d:c3:ea:90:6e:4b:68:f9:46:00:ba:c7:
94:c7:a4:cc:94:44:1b:64:05:7d:29:db:bb:34:ef:
e4:1f:3d:55:e6:42:98:4f:ff:f7:59:cf:04:4f:0c:
96:7c:26:2e:7a:b0:e1:4c:8f:58:e3:ae:0d:42:0f:
30:71:79:d6:fd:02:44:76:ac:de:b3:b3:52:d8:93:
73:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DD:01:3B:D0:45:4C:04:54:72:35:CD:52:84:51:1A:05:B7:B7:BD
X509v3 Authority Key Identifier:
keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3b:67:cc:30:20:4b:c4:8f:34:37:ce:40:ac:e7:d6:a8:aa:
c4:13:7b:16:6a:e2:bf:41:f1:4a:db:9c:84:5e:00:52:fa:fe:
a3:42:25:13:cf:81:10:39:b6:a8:51:cd:54:0a:6a:4a:4a:b3:
87:15:c8:8b:d0:c1:10:cb:7f:2c:db:b8:50:4a:43:7d:29:62:
bb:3f:5f:c1:94:84:20:6c:d9:92:74:f3:0e:e9:77:fb:bd:e2:
ff:18:2b:b6:ca:ba:77:19:e1:a1:f2:6f:1c:c6:95:09:1f:4b:
28:4e:a6:83:b3:39:b6:6d:1f:f0:34:c5:95:df:0b:23:47:4e:
70:05:49:e5:40:69:67:ac:0e:96:f8:56:55:68:25:69:9f:c6:
03:96:c1:12:ce:d1:ba:0f:d2:98:d1:03:74:f5:bb:c3:00:cb:
50:71:f0:62:ae:4a:4d:27:09:68:b4:6c:f9:5d:83:bb:eb:fe:
c2:e4:d0:c6:3e:df:36:80:03:23:94:59:b5:26:2f:8d:80:12:
b4:59:96:06:d9:58:94:0d:97:1c:3e:06:f4:02:68:9f:9b:a4:
b6:d7:72:f0:d8:39:28:8e:23:33:7e:0c:04:3f:c2:6a:b3:90:
b8:73:9c:0e:63:22:ba:92:88:c0:56:31:21:dd:79:b2:78:bb:
ab:5b:39:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:52 2026 by rpki-client