Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
File: IMgTB9QVShV5wAQJACMAaCWVvTU.mft (raw, json)
Hash identifier: qvLGxFNkFbeT+cHx05iLfDbFqMfijhuHxok9FHJ4oZU=
Subject key identifier: 7E:1A:B4:DB:2E:5E:4C:C9:60:D8:2A:E1:1D:F3:B5:D4:B9:D4:D2:6E
Authority key identifier: 20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
Certificate issuer: /CN=F36DD00FAF/serialNumber=20C81307D4154A1579C00409002300682595BD35
Certificate serial: 0476
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
Manifest number: 0474
Signing time: Fri 17 Apr 2026 03:21:20 +0000
Manifest this update: Fri 17 Apr 2026 03:21:19 +0000
Manifest next update: Sun 19 Apr 2026 03:21:19 +0000
Files and hashes: 1: IMgTB9QVShV5wAQJACMAaCWVvTU.crl (hash: tAr7NqkSA9TQSlu2jkVgVZtrHXEmSL9kibfhb4Hu9Ic=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1142 (0x476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DD00FAF, serialNumber=20C81307D4154A1579C00409002300682595BD35
Validity
Not Before: Apr 17 03:21:19 2026 GMT
Not After : Apr 19 03:21:19 2026 GMT
Subject: CN=69e1a730-816c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:4d:ca:bc:1c:f2:63:2e:63:6c:8d:66:85:
47:47:16:f4:29:65:eb:7f:60:dd:8c:1f:72:5a:c6:
f2:a3:09:eb:1b:71:8f:69:29:fd:49:c8:cd:ab:8d:
d9:b5:9a:fc:e9:8a:b8:ee:11:e2:32:41:9f:38:ef:
d5:24:76:80:95:c1:b9:b5:47:8d:db:a5:d9:aa:7b:
c1:c1:7f:63:0f:ea:23:fc:9f:35:d4:1c:43:cd:43:
f3:66:10:1d:07:64:eb:3a:2b:4b:42:c0:6b:f1:e7:
b4:18:a5:c6:44:66:09:4b:86:86:0b:b7:32:ce:f1:
7e:6e:ef:8d:57:4c:fe:af:77:5e:2a:cc:8c:05:93:
c1:c9:48:0b:13:b5:65:a4:7c:cb:60:26:18:a7:c0:
35:72:70:49:44:a2:00:f9:b3:fd:fe:4d:5d:ca:d2:
c7:c2:19:00:ad:4e:81:e8:39:e6:f5:bc:b4:66:1a:
0f:37:b9:0b:0e:c5:70:3f:43:c0:d8:f3:e9:81:91:
d4:b7:76:79:4d:60:48:dd:36:3c:5a:36:da:67:5c:
bf:c8:ee:af:81:eb:a2:65:1f:3d:9d:85:23:cb:c7:
13:15:4e:78:4e:05:4a:2b:7e:2b:b1:a9:9a:b8:b9:
9d:c8:02:60:86:66:4a:ea:61:c4:e1:53:9e:15:f7:
52:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1A:B4:DB:2E:5E:4C:C9:60:D8:2A:E1:1D:F3:B5:D4:B9:D4:D2:6E
X509v3 Authority Key Identifier:
keyid:20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:26:91:82:cb:24:94:64:d7:f3:75:c8:13:76:17:70:95:d2:
fc:34:ad:a4:52:28:4a:76:a1:55:2b:1a:ee:8c:81:4b:48:f5:
a4:60:1c:df:88:a7:8c:8e:a6:f7:58:35:14:f0:f0:28:58:0b:
35:86:93:28:bb:9e:46:cd:23:02:e6:02:41:84:fe:83:a8:c3:
45:c3:57:d5:34:b4:d2:a7:2b:0c:7f:99:5d:b0:89:e4:56:77:
e9:f5:54:d2:5c:52:6d:85:21:04:b7:21:3b:c3:82:e3:ac:49:
ee:75:85:98:08:eb:33:db:e0:19:b7:15:0f:40:7e:8a:c1:58:
91:97:5d:6f:a8:01:43:72:77:fb:3a:0f:bd:30:7a:f2:76:1a:
ff:fb:13:88:5f:e9:37:9e:5f:7c:26:80:38:49:62:04:26:2f:
6b:34:69:49:0e:c9:11:03:dd:0b:35:f0:3b:ca:aa:1e:06:f1:
3f:37:ec:bd:19:67:b7:6d:04:03:c4:d7:5f:ca:14:8b:44:0a:
a8:36:b4:7c:b6:a6:ce:f1:a4:b2:82:2c:e7:ab:02:aa:f4:30:
de:de:d4:12:32:83:4a:00:bd:2b:a8:1b:60:29:b3:83:d8:38:
ab:53:b2:14:15:f4:b4:ee:09:01:48:a1:31:53:b0:61:48:cd:
87:06:16:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:06:53 2026 by rpki-client