
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.mft
File: kL4BhbknyIKl6feqNl6TXL9FWfg.mft (raw, json)
Hash identifier: Sso61X+7tFMVvZ4H1ftvjj1QV1g4CLIY3GRSj3BNYG0=
Subject key identifier: C6:D9:5E:9A:94:27:EE:7A:37:A0:C4:E6:4E:68:35:A7:D4:5D:C9:9E
Authority key identifier: 90:BE:01:85:B9:27:C8:82:A5:E9:F7:AA:36:5E:93:5C:BF:45:59:F8
Certificate issuer: /CN=F361CA27AF/serialNumber=90BE0185B927C882A5E9F7AA365E935CBF4559F8
Certificate serial: 33
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kL4BhbknyIKl6feqNl6TXL9FWfg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.mft
Manifest number: 33
Signing time: Thu 26 Mar 2026 06:33:36 +0000
Manifest this update: Thu 26 Mar 2026 06:33:35 +0000
Manifest next update: Sat 28 Mar 2026 06:33:35 +0000
Files and hashes: 1: kL4BhbknyIKl6feqNl6TXL9FWfg.crl (hash: A6qw1kSosPBx8wVf/kBdB8lCLVWY0yQe5O8RhPRpgdA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.crl
rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.mft
rsync://rpki.afrinic.net/repository/afrinic/kL4BhbknyIKl6feqNl6TXL9FWfg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361CA27AF, serialNumber=90BE0185B927C882A5E9F7AA365E935CBF4559F8
Validity
Not Before: Mar 26 06:33:35 2026 GMT
Not After : Mar 28 06:33:35 2026 GMT
Subject: CN=69c4d340-0157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:e2:bf:80:ce:48:b6:1f:ff:78:76:da:20:
30:b7:5e:a0:a6:b7:5f:fc:7f:1d:22:4d:c3:83:0f:
65:03:e8:92:0a:64:ab:cf:cc:33:d1:37:b3:18:a9:
e6:82:95:15:04:bc:fe:61:d8:e7:8a:93:00:d5:a8:
4d:f2:fd:2b:45:91:10:b8:dc:60:86:f9:31:92:61:
7e:a5:67:3d:a5:f3:78:19:8f:d1:8a:94:c1:ba:e7:
52:53:a6:27:58:d2:2e:66:1a:7d:ef:6f:1d:dc:cf:
da:a0:db:aa:76:f8:0b:66:52:b2:89:e0:98:de:89:
49:4a:a6:9b:a7:1a:72:9a:ec:9e:9c:4b:26:84:d7:
2a:9b:80:a2:4b:e2:32:10:31:82:6f:cf:67:41:be:
90:f6:a4:2e:b0:a3:73:14:5e:e7:dd:9e:62:48:23:
3d:a5:04:5c:9a:65:96:52:a4:bc:70:fb:89:d6:9a:
da:da:0b:05:8a:00:b9:a6:58:ce:97:1d:bf:c9:70:
d0:82:72:fe:fe:87:7a:56:a1:5b:d4:37:5b:5b:b6:
71:e5:f8:33:ab:2f:79:63:91:26:aa:03:6a:36:fb:
8e:8c:54:aa:a5:da:06:37:04:c7:fb:07:d6:09:85:
1d:39:f2:c0:5b:2b:f7:77:88:ff:51:90:46:98:f2:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D9:5E:9A:94:27:EE:7A:37:A0:C4:E6:4E:68:35:A7:D4:5D:C9:9E
X509v3 Authority Key Identifier:
keyid:90:BE:01:85:B9:27:C8:82:A5:E9:F7:AA:36:5E:93:5C:BF:45:59:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kL4BhbknyIKl6feqNl6TXL9FWfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361CA27/65AC04E001C911F1AF2D178EDAE4EC9C/kL4BhbknyIKl6feqNl6TXL9FWfg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:34:84:2a:99:35:d0:3d:fb:85:43:59:60:b9:e5:ab:2e:17:
d8:39:f4:35:72:1e:7d:34:00:e0:c7:df:f1:bf:cf:00:be:6e:
72:c5:a4:c7:10:82:50:07:f2:bf:d2:59:15:5b:c2:d2:54:72:
b3:89:a6:f7:14:d1:9b:d3:16:b4:aa:ba:99:a9:1a:b0:01:dd:
15:5b:4d:dd:e6:22:6e:7b:57:d7:7e:48:0f:08:c3:1b:09:c5:
86:52:63:8e:b1:c0:48:65:83:c8:01:16:b4:e9:83:fc:68:b6:
4f:b7:50:74:03:17:b5:f8:e2:42:0b:5d:c9:82:d0:ad:1d:25:
15:b8:2a:cd:86:fb:da:a0:b5:ec:80:7b:a2:cf:3d:a1:ee:28:
7d:55:e5:b7:06:7a:2c:71:53:bb:6a:11:43:64:0f:18:5e:f4:
c5:09:8e:28:46:f8:0c:b8:da:46:65:e5:c7:b1:1d:d4:ff:06:
9c:23:ec:3d:77:88:02:5a:81:d2:b3:ef:86:88:48:69:10:6f:
4a:52:f1:b4:fa:5a:4c:d4:93:40:8d:58:13:34:d4:06:22:4e:
78:19:10:0a:03:79:d8:de:45:7e:a2:75:72:a4:4c:5b:da:54:
e4:fe:af:06:68:8b:0f:ce:62:37:b9:a8:0e:04:4b:16:cb:45:
b0:1e:46:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:39:17 2026 by rpki-client