Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
File: 62gPOPXWxxu0sQa4vQZYUBLaMbY.mft (raw, json)
Hash identifier: b4l16zZR8H1yrZxmUf/8m5SATwNcyHbaBn7hImDpPw8=
Subject key identifier: D0:08:3F:62:0C:08:77:CE:C8:21:12:E8:96:FA:83:BA:5B:4A:4E:46
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer: /CN=AfriNIC-Root-Certificate
Certificate serial: 5D
Authority info access: rsync://rpki.afrinic.net/repository/AfriNIC.cer
Subject info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
Manifest number: CA
Signing time: Wed 04 Mar 2026 11:11:15 +0000
Manifest this update: Wed 04 Mar 2026 11:11:14 +0000
Manifest next update: Sat 11 Apr 2026 11:11:14 +0000
Files and hashes: 1: afrinic-ca.cer (hash: Wtq9S/TCToNDzR5zCQ432t125ZL133dX7t++Fs2NfSY=)
2: apnic-to-afrinic.cer (hash: L+M1jdFRHLxpnoHf4mLQUh89t4Y4/08QKCmlTb9HisM=)
3: 62gPOPXWxxu0sQa4vQZYUBLaMbY.crl (hash: +gVGMypi5ijs8mxSFilHpwimnbao8mHQNsseYlmC80E=)
4: arin-to-afrinic.cer (hash: x2hewth1eCy0DZIq7tv3cRyRyV/vYjnCH3dLwuIKRNo=)
5: lacnic-to-afrinic.cer (hash: wXDAadihYjn4e7vozR6AVuyf4JfRBXGHrhJXTwW+9CY=)
6: ripe-to-afrinic.cer (hash: DecN64svMCGMOUBQs3yiXivanRF3D6oQTlaBFW3exFQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 Apr 2026 11:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AfriNIC-Root-Certificate
Validity
Not Before: Mar 4 11:11:14 2026 GMT
Not After : Apr 11 11:11:14 2026 GMT
Subject: CN=69a81352-fce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:48:b9:8f:00:77:f9:ca:78:0c:60:0a:92:ea:
b8:ca:e9:4b:e5:32:24:73:43:55:01:c3:c1:e0:2f:
e3:27:6c:fd:b9:fd:2d:b5:6f:66:48:cd:d8:b6:fb:
71:f8:07:b4:14:51:f2:3c:32:16:df:f0:43:db:dd:
cd:69:ef:1c:f1:69:4d:fa:ad:17:f0:90:7b:6e:bb:
ec:57:af:d3:50:56:ac:98:50:30:e7:51:72:f3:5b:
01:47:f1:20:d7:86:cf:85:5a:d4:bf:c1:e6:b7:70:
d4:8d:23:b9:1a:d8:74:f6:ce:85:db:1e:a2:b8:32:
c2:6d:b8:8b:bd:15:3f:21:7b:b9:dd:bb:6e:56:91:
c8:26:77:1b:f6:ae:ba:c2:2c:28:95:ec:b5:8c:41:
18:cf:e1:26:ad:c8:db:33:b1:77:27:3a:0d:25:de:
13:e1:89:a4:86:72:94:aa:bf:5f:a8:8b:b0:bf:e1:
00:89:ba:46:7c:d8:55:49:aa:95:11:2f:6c:97:da:
ab:19:56:0e:42:19:96:cc:93:62:52:81:83:08:02:
09:d7:b3:52:03:63:01:fc:7e:47:bb:87:89:60:f8:
2d:da:8a:2a:f2:87:77:8e:71:75:67:5a:e9:c9:81:
b0:7f:c6:e2:de:b2:c5:d6:e0:3d:98:5d:d3:c4:95:
c9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:08:3F:62:0C:08:77:CE:C8:21:12:E8:96:FA:83:BA:5B:4A:4E:46
X509v3 Authority Key Identifier:
keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b8:ea:41:bd:ac:ee:1c:83:53:9b:b5:cf:25:fa:58:2b:31:
4e:06:24:4b:b3:68:5d:71:e2:7f:4d:53:5b:44:f5:43:c6:a9:
34:04:e6:3e:fa:ac:1b:6f:73:2b:47:8a:94:1c:94:ae:04:74:
81:8d:34:07:4e:55:fc:11:cb:c0:54:d4:f6:d4:ec:21:fb:fa:
6b:a3:6d:62:3a:6e:ba:ae:db:32:a3:f6:ac:f8:24:89:61:ad:
87:d1:47:4e:7c:6a:aa:84:ce:81:fc:0c:9b:4c:38:47:d4:fb:
83:7d:5f:a9:e7:b7:2d:d7:a7:95:1c:e0:fe:ac:2f:b5:85:d6:
ba:d4:ba:3e:b0:25:af:9a:29:e0:25:e2:a4:c9:86:62:47:bf:
9a:f3:2a:28:28:e8:88:a0:83:69:35:e2:a6:b1:9e:39:ca:a6:
25:e5:cb:ea:c7:7f:5d:d9:0d:c0:25:66:ef:1b:70:49:78:dd:
ea:21:da:50:5a:35:23:8c:61:fe:12:bd:76:c3:09:88:cb:58:
f1:c9:9e:00:bc:55:e7:f2:82:29:76:97:4e:cf:14:68:12:fd:
93:87:5e:d3:6e:22:c7:9e:8e:5f:03:09:25:7d:59:8a:61:10:
8d:7f:f2:4e:ae:35:7a:29:53:15:f8:dd:c5:19:b9:54:a1:c4:
ff:56:f6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:09:52 2026 by rpki-client