Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.mft
File: jslBzFrhaLO7xSJOt19628St-As.mft (raw, json)
Hash identifier: J1ZIN4SLG7KnGtB0iJ94cs1yAnUgftzHgqNqq1tnWCU=
Subject key identifier: D4:A8:75:F7:84:A9:95:48:DB:80:D0:49:CD:A0:B6:73:57:70:2A:38
Authority key identifier: 8E:C9:41:CC:5A:E1:68:B3:BB:C5:22:4E:B7:5F:7A:DB:C4:AD:F8:0B
Certificate issuer: /CN=F3640700AF/serialNumber=8EC941CC5AE168B3BBC5224EB75F7ADBC4ADF80B
Certificate serial: 0FA9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jslBzFrhaLO7xSJOt19628St-As.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.mft
Manifest number: 0FA9
Signing time: Thu 26 Mar 2026 00:52:28 +0000
Manifest this update: Thu 26 Mar 2026 00:52:27 +0000
Manifest next update: Sat 28 Mar 2026 00:52:27 +0000
Files and hashes: 1: jslBzFrhaLO7xSJOt19628St-As.crl (hash: 8mvyM1FayRBIK2ovwg5+ONzWX7u0+RkKcjSciRVqZk8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.crl
rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.mft
rsync://rpki.afrinic.net/repository/afrinic/jslBzFrhaLO7xSJOt19628St-As.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4009 (0xfa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3640700AF, serialNumber=8EC941CC5AE168B3BBC5224EB75F7ADBC4ADF80B
Validity
Not Before: Mar 26 00:52:27 2026 GMT
Not After : Mar 28 00:52:27 2026 GMT
Subject: CN=69c4834c-1767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:20:e0:57:bf:7a:c0:fe:c3:8c:a7:58:8b:
2c:fb:5c:2c:b2:91:8a:da:04:15:b8:84:2b:a3:f9:
47:d4:9b:53:4b:41:1c:d9:7d:fe:41:94:78:4e:cc:
09:a0:d9:9b:65:89:93:9d:02:3f:82:aa:aa:54:de:
c6:9b:82:b4:46:6a:43:a0:95:37:30:bf:f0:09:7f:
ae:6c:58:b1:3d:c1:35:6c:75:4e:98:f7:fc:5c:5e:
10:4b:91:b3:48:03:3f:ea:1d:27:35:6c:e0:86:f7:
5c:93:e5:9a:dc:1b:83:1f:ce:9a:64:40:8c:65:95:
9a:d8:3a:54:97:f2:23:86:fe:c3:79:90:d8:ca:90:
2b:ed:d4:54:e3:c8:51:06:80:d0:ab:c4:3e:1f:2a:
da:8c:3d:07:d6:f9:2e:22:3f:2e:b8:bd:62:a2:02:
d3:4e:eb:52:27:14:d8:86:b4:40:ee:eb:a2:d3:52:
07:26:ed:23:38:7d:18:ee:75:84:76:0b:bc:4f:32:
49:24:58:85:4e:e6:70:07:4f:97:4e:dc:9b:f4:b4:
80:70:c3:80:31:0d:3c:6a:a8:5d:c5:b3:b4:de:3c:
81:52:f8:f6:73:3c:07:59:f0:fb:f2:6c:3b:5a:96:
29:a3:70:e8:f3:7d:04:40:8c:2f:bb:9d:4a:eb:4b:
f0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A8:75:F7:84:A9:95:48:DB:80:D0:49:CD:A0:B6:73:57:70:2A:38
X509v3 Authority Key Identifier:
keyid:8E:C9:41:CC:5A:E1:68:B3:BB:C5:22:4E:B7:5F:7A:DB:C4:AD:F8:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jslBzFrhaLO7xSJOt19628St-As.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:27:60:34:3d:3b:aa:f0:b0:e0:ff:5a:67:ae:fa:a1:c3:d8:
23:44:23:ed:57:90:c1:12:4a:66:3f:48:9e:3f:27:53:38:d1:
fe:44:15:13:8a:75:95:e0:24:b4:b1:e1:d6:d5:07:bb:7a:ad:
c5:0a:05:61:c4:67:d1:10:cd:a0:7a:98:5f:49:44:3e:b0:42:
a8:e7:dc:60:9f:3a:05:48:26:05:e2:4f:30:b6:df:3c:ed:91:
90:7c:92:0c:a2:9a:7a:14:e7:d7:d8:00:5b:b3:8f:a9:e2:b5:
e2:90:3b:c5:43:57:9b:fe:15:f2:cf:1a:c9:c0:d0:7f:52:33:
95:dc:ad:f1:0d:96:87:33:8e:6b:76:74:2e:41:bd:11:34:f1:
0c:72:06:8d:7c:b0:ff:ab:7d:bf:62:8e:73:2f:34:63:f6:c1:
3f:8c:55:5b:7f:af:8c:c1:4e:dc:c0:a8:bc:15:a1:c4:d4:4f:
7b:5c:49:d1:8f:e8:91:ab:42:fd:a0:e0:23:da:f5:6f:58:a1:
98:8e:9e:9e:f1:7c:99:3a:60:59:8a:b2:bf:f3:b4:ad:d0:a5:
2e:d1:50:88:64:89:c8:ad:81:62:b5:95:cf:83:b6:50:77:8a:
da:d5:5e:18:15:fd:6e:c1:98:70:0f:43:9f:01:36:7a:59:41:
76:5f:77:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:33 2026 by rpki-client