Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
File: IMgTB9QVShV5wAQJACMAaCWVvTU.mft (raw, json)
Hash identifier: ZmvtcIqC9aSMt1BbuYMBOLKMZRVgZmaCSptPc1n0LQA=
Subject key identifier: EE:0F:1F:0D:87:69:55:FC:54:56:D3:F1:CC:46:0A:B7:DD:E5:4B:F6
Authority key identifier: 20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
Certificate issuer: /CN=F36DD00FAF/serialNumber=20C81307D4154A1579C00409002300682595BD35
Certificate serial: 03D0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
Manifest number: 03CE
Signing time: Wed 05 Nov 2025 03:35:59 +0000
Manifest this update: Wed 05 Nov 2025 03:35:58 +0000
Manifest next update: Fri 07 Nov 2025 03:35:58 +0000
Files and hashes: 1: IMgTB9QVShV5wAQJACMAaCWVvTU.crl (hash: VnBBIGRGA5CKVxFrEYRnnopOREBEPpYjBruSC8iuwQ4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 976 (0x3d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DD00FAF, serialNumber=20C81307D4154A1579C00409002300682595BD35
Validity
Not Before: Nov 5 03:35:58 2025 GMT
Not After : Nov 7 03:35:58 2025 GMT
Subject: CN=690ac61e-687e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:7e:8b:58:d5:23:2a:98:05:50:48:72:bf:
5c:18:1b:7a:ec:af:82:8b:eb:b2:11:6e:26:60:4a:
d8:02:2e:a7:a2:4d:49:7c:71:58:15:d6:22:9c:67:
04:49:02:5c:74:df:b9:2f:23:6d:f5:c9:91:80:80:
49:70:f0:83:48:e1:71:30:9f:ef:c9:bc:bd:a4:5e:
12:65:38:9f:e7:19:46:8d:f7:66:6e:3a:b6:17:81:
8e:b4:b7:2a:68:ba:87:94:9f:86:e0:79:23:db:ce:
aa:f6:0e:1a:46:d8:63:49:8c:88:ce:d3:3f:9f:45:
cf:a2:cb:e4:a3:fe:b5:8d:cd:04:de:b2:70:37:ab:
66:ae:ed:f0:77:0d:9c:13:63:f8:eb:14:fd:d0:ee:
54:bd:7c:9a:c3:24:a4:d1:fd:9e:fc:ea:75:bb:5f:
3f:9f:21:14:59:f0:52:33:21:99:4a:2a:58:0e:7d:
79:6a:b3:e6:d5:4f:34:3e:d1:48:0f:cf:95:bc:b8:
31:bf:31:1c:2f:e3:2f:e1:8f:f4:56:db:d4:7a:ef:
cb:36:e2:5a:8f:0f:7e:32:e5:04:7b:ac:68:1d:64:
08:d9:94:32:8f:fd:e2:db:88:7c:75:d9:60:4b:60:
28:e6:dc:00:fb:cb:d6:17:8a:cd:01:ad:23:41:2f:
41:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0F:1F:0D:87:69:55:FC:54:56:D3:F1:CC:46:0A:B7:DD:E5:4B:F6
X509v3 Authority Key Identifier:
keyid:20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:59:de:7c:09:4e:02:79:78:e5:4d:7a:3d:3e:ce:8a:91:4e:
55:10:78:92:5a:25:57:20:4d:7d:ab:b7:a9:e9:f5:7f:c3:97:
02:53:6d:83:a4:8d:ea:16:a0:54:6c:9a:76:fb:d2:10:6f:c4:
ff:87:b2:1a:26:55:27:84:cd:62:58:9d:f7:9b:c8:9f:2d:ef:
8a:e8:9b:5e:69:03:be:64:7e:bb:5e:d7:78:9d:28:4f:4f:91:
19:ea:71:d6:e7:17:dd:7e:92:c9:fe:f5:e6:d5:93:3a:11:4a:
e3:79:4a:21:df:5a:95:e6:c2:f9:d1:c4:7d:46:16:70:8d:52:
9d:7e:90:e7:13:9e:7e:79:bc:98:e8:09:21:a9:c4:32:88:4e:
eb:30:3b:61:cf:ea:f3:3e:a9:a2:36:df:d6:fb:ff:fa:ec:17:
f6:8d:20:14:42:dd:f7:20:ea:c6:1d:c5:fa:6e:60:47:71:fc:
90:55:e2:ea:60:27:30:1c:33:99:fd:a7:ac:2e:c2:86:40:0f:
a7:cf:21:a7:3e:53:11:f2:b4:d7:49:24:5d:24:8a:10:3b:15:
96:71:56:89:55:94:d7:4b:29:61:09:e8:f7:e0:2c:2e:cb:8e:
15:5d:74:fe:5c:b9:2f:09:f1:8b:49:4a:e7:e2:6b:3c:5e:14:
00:59:32:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:18:29 2025 by rpki-client