Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
File: LJfYJaoVfLyDVnkqObq3O2s8epE.mft (raw, json)
Hash identifier: NqH2xYyBZNo6HQ5oDaY+gPQDUR+HQ2d7ILDngU1N9jk=
Subject key identifier: DA:AE:1E:F5:95:40:DC:F8:2D:CA:87:2E:0B:67:96:63:6A:4E:0F:DD
Authority key identifier: 2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
Certificate issuer: /CN=F3614F54AF/serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
Certificate serial: 06E5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
Manifest number: 06E5
Signing time: Thu 26 Mar 2026 02:35:15 +0000
Manifest this update: Thu 26 Mar 2026 02:35:14 +0000
Manifest next update: Sat 28 Mar 2026 02:35:14 +0000
Files and hashes: 1: LJfYJaoVfLyDVnkqObq3O2s8epE.crl (hash: gfpCAWXbqhiIGYCxjc+QkLHKLJFJKZA3WmlBsZIRV7o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1765 (0x6e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614F54AF, serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
Validity
Not Before: Mar 26 02:35:14 2026 GMT
Not After : Mar 28 02:35:14 2026 GMT
Subject: CN=69c49b63-35c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:80:6a:45:9a:a9:47:51:6f:3e:25:e0:ab:cf:
49:d3:43:1e:13:43:2a:e4:84:f6:08:d7:56:ff:f4:
dc:9c:92:ad:72:54:37:c6:97:75:58:15:a5:b7:e1:
a6:61:4f:7a:31:6c:03:22:ef:62:ed:b1:50:e2:08:
33:86:f2:88:f2:51:61:70:27:b4:7d:85:6e:22:ce:
da:ec:a1:a4:43:90:38:4e:4f:03:21:4e:1b:a5:bb:
9c:27:07:35:25:73:fc:09:a3:36:f0:78:2e:58:e3:
b8:9f:dc:78:12:de:0b:9f:eb:5b:d0:be:cc:c3:5a:
c6:6e:e5:df:d4:d3:35:5d:bc:bf:ba:ca:a2:ba:44:
57:57:1c:25:85:1c:d2:32:42:47:d9:8b:6c:f3:1f:
22:03:e3:14:f0:8a:67:f7:6c:bd:03:1e:24:05:b5:
54:c7:c1:be:d3:6c:34:6e:46:c7:96:8d:cf:62:01:
ef:4c:43:c4:87:11:18:71:c2:4a:35:9d:c2:f6:14:
3d:46:68:c0:ff:1a:c5:57:ac:0a:f9:8c:90:b4:a3:
f6:39:4b:8a:73:cd:bd:0f:fd:5a:f3:ee:4d:a1:d8:
70:bb:31:40:32:2a:de:9c:fd:78:67:28:d3:78:56:
73:04:4b:d6:48:db:dd:87:5d:07:e2:ad:e2:9b:db:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AE:1E:F5:95:40:DC:F8:2D:CA:87:2E:0B:67:96:63:6A:4E:0F:DD
X509v3 Authority Key Identifier:
keyid:2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:31:fc:4b:79:1d:f7:58:76:72:d9:01:59:9d:2b:f6:b9:b3:
82:45:06:a6:2b:4b:6f:72:f5:98:5c:63:81:56:2a:a5:05:29:
36:19:e2:db:64:95:37:aa:94:e5:13:61:1e:c3:5e:28:af:9b:
7e:7d:d3:f9:b8:28:96:e9:75:ff:e2:78:03:84:11:3e:a4:13:
be:41:a6:38:18:c1:e0:5c:3d:7e:43:b0:c0:2d:f7:1c:9d:92:
ab:fc:1a:fd:b3:d3:be:e0:cd:cb:7c:a3:a6:e0:2c:f1:f0:41:
d4:f5:61:f3:bc:92:3c:be:7c:3f:4a:c7:a9:29:de:c6:fc:67:
5f:7d:05:96:f5:c3:ec:4d:8e:49:d9:be:0a:2d:2e:4b:af:40:
97:b2:fb:08:b9:02:47:d5:3c:31:3a:b3:c0:b7:ac:f4:36:32:
34:05:d7:38:0a:00:12:33:a3:9c:32:90:ba:6d:28:ef:4b:57:
05:10:93:8a:df:01:90:69:73:49:8d:c0:e7:a1:f5:f1:e3:73:
4d:64:d3:75:1a:cf:ff:f6:73:b6:87:ca:f4:0d:f7:40:89:a9:
d8:e5:97:2a:65:34:86:96:55:a9:f7:b1:39:b7:06:25:f3:5b:
fe:dc:c2:e5:98:53:8d:7e:a7:58:ed:36:9d:85:98:e2:2d:88:
f7:40:cc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:50:38 2026 by rpki-client