Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
File: IMgTB9QVShV5wAQJACMAaCWVvTU.mft (raw, json)
Hash identifier: CoxHagYr61def/numAMyOX8xWaxrcPOwG0LKD1XCMq8=
Subject key identifier: 96:3B:4E:36:2E:35:5D:D0:20:5E:25:F7:3B:21:C0:E7:A3:A0:43:A7
Authority key identifier: 20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
Certificate issuer: /CN=F36DD00FAF/serialNumber=20C81307D4154A1579C00409002300682595BD35
Certificate serial: 0447
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
Manifest number: 0445
Signing time: Sun 01 Mar 2026 02:23:57 +0000
Manifest this update: Sun 01 Mar 2026 02:23:56 +0000
Manifest next update: Tue 03 Mar 2026 02:23:56 +0000
Files and hashes: 1: IMgTB9QVShV5wAQJACMAaCWVvTU.crl (hash: wqDrG+3mhQOLEkeCtxVXfJIaZthDz4J1EzczGetFhCo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1095 (0x447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DD00FAF, serialNumber=20C81307D4154A1579C00409002300682595BD35
Validity
Not Before: Mar 1 02:23:56 2026 GMT
Not After : Mar 3 02:23:56 2026 GMT
Subject: CN=69a3a33d-0fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:09:49:74:17:db:21:3c:91:93:68:42:06:
18:57:3e:88:32:d6:03:e8:71:b2:f0:d5:1e:14:55:
50:a9:32:cf:37:35:96:d2:1e:fd:20:1a:3b:3a:e6:
57:98:61:ca:ac:cb:a6:e1:10:28:27:e2:38:f8:fb:
f0:92:e9:e4:6b:30:bf:a9:54:84:ea:7d:8b:a4:70:
23:cd:ee:58:d3:2c:83:24:be:7b:de:7e:06:78:03:
64:48:2c:31:9d:4f:13:53:57:0a:58:0f:a1:a6:d0:
35:78:38:ea:48:b4:d8:e3:23:eb:18:a4:cf:d8:24:
70:a8:c1:24:34:7c:eb:c0:aa:a6:1a:36:0a:b9:c7:
02:e6:c8:55:f8:e5:77:2f:99:ff:93:12:b6:22:ae:
c4:7b:62:1b:bc:c5:5e:02:02:e5:fb:1a:50:cb:29:
c8:70:27:2a:a6:20:9b:7f:5d:b5:a2:25:28:3d:03:
30:77:19:50:5a:e7:ce:8d:5d:cc:98:8f:17:da:74:
fc:37:8b:4f:85:cd:92:dd:b6:95:67:d4:6e:f8:17:
be:ab:b3:62:43:fc:b8:fe:94:5e:85:11:ad:5b:4c:
44:f6:ab:32:97:01:2f:27:41:46:22:ef:96:de:54:
69:a0:da:be:35:9a:a0:68:43:f2:14:1b:5e:6b:40:
88:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3B:4E:36:2E:35:5D:D0:20:5E:25:F7:3B:21:C0:E7:A3:A0:43:A7
X509v3 Authority Key Identifier:
keyid:20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:25:c1:c0:c0:9c:4d:fc:de:ba:8f:d1:4f:21:2f:f7:9b:d9:
0e:fd:a9:22:5a:98:39:fe:ef:3f:8f:62:e8:15:b9:4e:2c:94:
8b:d8:e2:30:b4:4d:df:fd:a4:e7:82:1d:f4:ae:49:d4:cf:33:
89:93:27:97:6b:19:26:3c:27:42:0d:3d:37:cd:fe:ec:b4:08:
e3:ce:59:e2:63:83:fe:1f:f8:6f:ee:ac:b3:b8:49:f8:ba:79:
6f:38:ec:1a:33:5c:20:93:55:a7:78:ad:93:93:20:9b:ea:6c:
e7:3f:0a:90:10:ef:3f:84:7e:34:ab:18:eb:e4:20:fc:6f:b5:
4b:2d:b3:3b:22:e7:41:92:7d:20:fe:a6:9f:a9:de:cc:2c:67:
05:b4:bd:50:82:79:a9:d8:37:cd:8b:99:50:60:f2:1c:83:b4:
30:c6:da:31:6b:3a:96:77:eb:42:cb:3f:78:2c:32:d7:0b:87:
b3:a0:81:ee:63:1c:40:54:71:20:29:fc:98:79:fe:0f:5d:c2:
e4:b7:69:59:79:62:36:45:f2:75:4f:37:4d:f9:ac:08:2b:6b:
62:25:e5:c5:99:50:2b:36:3e:e4:da:f8:ac:61:70:26:11:6a:
f0:d8:6f:06:c1:00:57:8a:e8:77:43:a0:cb:34:32:16:58:55:
1f:42:4c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:04 2026 by rpki-client