Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
File: l9Y19-2_mFQOYSLJxsIL43gotSY.mft (raw, json)
Hash identifier: 5+v4+jov5Kt4PWj+g9NxpcsdfnVPcdNNGaLPE+oijBg=
Subject key identifier: 31:D6:39:ED:64:68:9B:E8:C1:C6:18:1E:25:67:B5:46:EB:D4:64:29
Authority key identifier: 97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26
Certificate issuer: /CN=F3624E32AF/serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
Certificate serial: 043A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
Manifest number: 0439
Signing time: Thu 26 Mar 2026 04:02:19 +0000
Manifest this update: Thu 26 Mar 2026 04:02:19 +0000
Manifest next update: Sat 28 Mar 2026 04:02:19 +0000
Files and hashes: 1: l9Y19-2_mFQOYSLJxsIL43gotSY.crl (hash: yg05pt10l68BLNfNyC3gYZCrJbHiLCrmsIt7AhdlIRA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1082 (0x43a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3624E32AF, serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
Validity
Not Before: Mar 26 04:02:19 2026 GMT
Not After : Mar 28 04:02:19 2026 GMT
Subject: CN=69c4afcb-627b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:cb:b1:e9:4d:19:ed:7d:55:5e:cf:4b:0d:
0f:2c:83:3a:6d:e3:4b:42:4f:a3:c4:1f:f9:0d:a1:
46:c1:4f:61:60:3a:a0:f8:b6:dd:1f:30:02:15:13:
df:28:2f:3b:af:74:3f:5e:c4:95:c6:01:b3:1f:01:
86:ca:13:da:46:87:80:9f:f6:ec:cc:04:93:5a:a2:
6c:17:bb:67:4c:c6:05:63:15:9f:9b:44:54:a5:23:
df:9f:00:dd:11:23:24:c2:c8:05:2b:5a:3d:a1:4f:
48:9c:0e:ef:73:51:0b:84:81:8a:59:b5:7a:74:7b:
f5:5d:8f:4f:db:9a:a3:9e:63:6c:eb:23:25:aa:87:
a3:e0:19:8e:a5:3c:7e:69:99:22:9b:8b:93:e1:2a:
4d:62:c0:34:2c:e6:2b:7a:99:04:d2:e7:6e:e2:7c:
52:24:00:6a:b9:c9:12:38:8b:db:f3:f5:46:d7:95:
fe:4c:5e:f4:78:ab:0f:9c:5d:ba:28:cc:b4:91:81:
ca:b6:2e:9d:96:a6:09:88:81:44:e4:b6:e6:a1:ea:
5b:aa:a1:bd:df:f5:c8:94:f1:5d:da:6a:2a:d4:46:
bb:bf:12:90:91:99:2d:53:9d:a9:1f:64:a0:29:c0:
1c:ce:d5:28:e9:84:e3:54:99:97:29:97:dc:76:00:
d9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D6:39:ED:64:68:9B:E8:C1:C6:18:1E:25:67:B5:46:EB:D4:64:29
X509v3 Authority Key Identifier:
keyid:97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d6:ab:18:61:7f:92:42:f8:89:eb:d6:32:52:b5:05:2a:07:
47:e7:e1:bd:a6:be:45:17:a7:f2:b1:40:0d:8e:32:84:21:53:
64:27:ab:1f:9c:bf:93:9b:8a:3a:9f:71:d1:68:29:f3:60:16:
7b:6e:8e:35:ee:75:4c:57:a8:18:24:1c:a4:18:36:c5:9b:f2:
c2:09:66:01:72:27:7e:c8:8d:fe:51:09:71:92:40:1b:40:67:
3d:e9:35:b6:f1:d0:81:73:57:f0:a1:95:cd:80:52:63:a9:db:
a0:c2:ac:30:b9:e1:8a:5d:a1:f2:aa:39:d4:52:fe:cd:3d:2a:
27:4e:c9:0d:e2:ce:8c:39:18:0d:5f:48:80:a1:94:76:19:7e:
f0:2d:0b:cf:9a:0e:04:7e:b9:d0:e5:86:a2:9a:82:30:f2:96:
0f:df:3c:74:3e:1b:4f:7d:09:2e:e2:c8:df:b3:8f:3c:e0:37:
9a:29:a5:e4:21:c3:d0:81:dc:06:54:1f:f6:50:b9:9d:2b:47:
f9:ec:4f:dd:37:84:55:1e:85:88:90:0b:c3:6a:0e:f6:ea:8d:
e4:96:2c:7c:42:8e:72:15:08:09:ca:11:5d:ac:6c:84:2c:e3:
1b:5e:a2:20:58:88:2d:8d:75:90:e6:33:db:36:cb:ea:00:f9:
c7:d8:6e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:12 2026 by rpki-client