Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
File: Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft (raw, json)
Hash identifier: Q1AiNLrhUYLuXBnusFfCYIknlB/sfDRfIICkBrchp6I=
Subject key identifier: 4F:25:5C:4C:14:2B:07:EC:44:CC:CB:73:5B:BF:20:D4:63:FD:68:83
Authority key identifier: 57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
Certificate issuer: /CN=F36280C9AF/serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Certificate serial: D2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
Manifest number: D1
Signing time: Thu 26 Mar 2026 06:11:39 +0000
Manifest this update: Thu 26 Mar 2026 06:11:38 +0000
Manifest next update: Sat 28 Mar 2026 06:11:38 +0000
Files and hashes: 1: Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl (hash: RHo1XCJthDqTj6YO4s9dQYU5+NMIA3Z2vX+4oyyvHMM=)
2: A19BA40E895D11F0BE8951DBDAE4EC9C.roa (hash: Et+VW4knLp0d295uH8UgXrH5+8q9h3SexmR3jtKPDNI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36280C9AF, serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Validity
Not Before: Mar 26 06:11:38 2026 GMT
Not After : Mar 28 06:11:38 2026 GMT
Subject: CN=69c4ce1b-1f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:bd:69:c6:60:7f:b8:7b:2e:ef:1c:8b:b4:
d6:7c:f7:f4:6e:a9:55:16:e1:40:a4:e3:d9:a7:0d:
38:51:cf:c9:43:9e:7f:86:6c:3c:a8:20:d1:ab:db:
9e:9f:d0:9c:ba:89:83:6e:f5:71:e4:54:6f:7a:3a:
94:9c:1a:fb:f3:4a:8c:73:da:67:1e:2d:e2:05:9a:
69:93:5f:0f:d2:85:d7:7b:d8:53:90:f2:07:c5:cd:
ad:e8:47:cb:f3:a8:e7:4b:95:0a:26:16:32:b0:ea:
7d:ea:5a:99:cd:02:54:af:f2:e0:26:88:bd:6a:20:
55:c9:c3:fe:2c:4e:cc:e5:56:a6:6c:5b:9c:2f:7c:
0e:61:4e:89:4e:b2:17:36:e3:d2:42:2a:91:bf:9e:
53:fb:c4:d5:7c:3d:ba:da:87:61:12:04:e9:77:d6:
1d:8c:87:07:87:ce:7f:c6:5d:12:d6:e0:6c:88:62:
46:ea:ed:c2:0f:27:cc:b8:4d:5f:02:91:23:78:32:
6d:1a:7e:a0:e9:99:cb:68:5d:b0:06:c4:7f:30:cb:
a0:5f:31:6d:5f:ae:99:c2:0b:c7:2b:0f:f1:d2:f1:
53:17:62:4f:e6:3a:2b:f9:9a:e5:74:ab:c7:0c:22:
d6:37:56:53:84:d4:c1:fb:3b:77:18:6f:92:ee:38:
3f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:25:5C:4C:14:2B:07:EC:44:CC:CB:73:5B:BF:20:D4:63:FD:68:83
X509v3 Authority Key Identifier:
keyid:57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:97:8f:46:0e:c7:16:0f:3d:3d:c0:6b:18:d9:26:b9:1e:5b:
60:f2:6b:5a:8c:ec:34:88:87:23:68:90:55:76:60:dc:3b:b4:
c1:a0:b3:aa:c1:18:68:78:3a:92:ce:f5:5a:4d:f6:6b:b4:ff:
51:fa:a4:7a:5e:85:67:8f:7a:57:c0:41:bf:6c:ae:41:30:f7:
cb:45:db:27:15:1f:24:29:d8:e0:32:8c:b1:34:0d:b5:89:6b:
79:f4:86:2d:22:3d:ac:45:69:18:d1:51:91:7f:23:10:63:60:
ea:d4:4a:7a:c9:5c:60:69:af:a6:e4:af:dc:0f:61:e6:9a:94:
6f:49:19:80:da:38:de:0c:27:f9:31:18:73:77:ba:48:9f:ce:
29:4c:61:4e:e5:08:76:ae:45:68:83:0f:6c:19:14:71:79:87:
03:58:a0:7b:58:48:e7:85:17:e8:7e:c1:c4:2f:6c:6d:e0:36:
55:e4:92:a0:47:23:f1:52:b3:97:a7:9e:dc:c9:46:c4:a3:97:
8c:fa:b7:d9:06:37:a3:d8:3c:bb:da:a7:fd:f7:c2:97:1f:9d:
2d:e5:76:57:72:6c:da:1e:fa:e5:8d:29:3b:26:eb:db:59:87:
22:02:c1:d6:5e:7a:b6:35:be:b8:c8:72:27:d4:06:7f:a9:73:
e1:43:f0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:39:09 2026 by rpki-client