Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.mft
File: AAXJbaZmm3B_OK0bxYUpxT44q_0.mft (raw, json)
Hash identifier: HsgeFYeNpCXVl0Cs7GDumL7qGtM0bSq5sXFRvQrID0o=
Subject key identifier: 9E:8A:3B:F0:1D:A3:93:E3:DA:4E:54:87:19:6A:F6:0F:CD:D7:2D:ED
Authority key identifier: 00:05:C9:6D:A6:66:9B:70:7F:38:AD:1B:C5:85:29:C5:3E:38:AB:FD
Certificate issuer: /CN=F36412BEAF/serialNumber=0005C96DA6669B707F38AD1BC58529C53E38ABFD
Certificate serial: 28
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/AAXJbaZmm3B_OK0bxYUpxT44q_0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.mft
Manifest number: 27
Signing time: Thu 26 Mar 2026 06:36:06 +0000
Manifest this update: Thu 26 Mar 2026 06:36:05 +0000
Manifest next update: Sat 28 Mar 2026 06:36:05 +0000
Files and hashes: 1: AAXJbaZmm3B_OK0bxYUpxT44q_0.crl (hash: RdUGcgJ8wYKG7AvQB737bxpheQfIIUoyzFcTeOzHc88=)
2: 30569F3C0C9411F1BE9799E5DAE4EC9C.roa (hash: SaqHcwD+guZ1feoju2N/bp3ZmAIiJzcI5uUiy12YasU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.mft
rsync://rpki.afrinic.net/repository/afrinic/AAXJbaZmm3B_OK0bxYUpxT44q_0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36412BEAF, serialNumber=0005C96DA6669B707F38AD1BC58529C53E38ABFD
Validity
Not Before: Mar 26 06:36:05 2026 GMT
Not After : Mar 28 06:36:05 2026 GMT
Subject: CN=69c4d3d6-9be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:54:f0:29:03:32:cb:06:9c:eb:38:06:1c:
26:63:60:d1:0d:e6:77:66:7e:6c:d1:03:ae:83:56:
f7:d9:65:11:5d:39:af:da:fc:e4:c3:c3:89:90:aa:
99:e0:74:6b:46:dd:b8:7c:29:ec:39:1b:a3:fc:f9:
9e:a1:62:b8:68:81:a2:30:be:af:48:5b:62:48:09:
77:19:1f:12:a8:fb:8a:7c:a0:2c:62:0c:8f:e5:f9:
a7:3c:fe:9a:64:e0:47:50:c0:01:4d:c0:f6:eb:52:
0e:8a:03:0a:89:be:ef:7b:48:b9:c2:9f:42:33:96:
98:2f:f7:58:6d:2f:cc:f2:e4:05:6e:4a:74:4b:e3:
dd:fa:f8:08:b5:e2:65:99:03:4f:25:39:bf:78:b7:
77:0e:38:41:5a:a1:01:b8:2f:03:0b:43:eb:dc:d1:
88:b5:c9:c5:78:74:98:c3:b0:9c:5b:da:26:70:bf:
11:d8:38:34:98:28:cc:fd:1c:1e:6c:32:5c:ba:96:
9b:81:92:fd:f6:86:de:fa:05:56:a6:5d:08:68:de:
55:46:ab:c1:4a:db:4d:09:f2:85:30:03:b4:88:60:
4b:5d:b9:a0:05:de:dd:5a:4d:ac:d5:e3:80:f6:c7:
d5:76:1e:65:27:8a:74:20:72:ab:55:f2:5d:ab:dc:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8A:3B:F0:1D:A3:93:E3:DA:4E:54:87:19:6A:F6:0F:CD:D7:2D:ED
X509v3 Authority Key Identifier:
keyid:00:05:C9:6D:A6:66:9B:70:7F:38:AD:1B:C5:85:29:C5:3E:38:AB:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AAXJbaZmm3B_OK0bxYUpxT44q_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
df:8a:7b:3d:17:0c:ed:8f:53:63:e6:f5:08:6f:4e:78:3c:af:
35:c5:81:ff:21:91:27:51:c8:8b:8c:60:62:e6:5c:5e:da:37:
50:83:71:25:09:ae:ef:3c:e1:e3:5c:17:e7:0c:90:f4:2c:de:
be:e6:d9:cf:4f:ef:fd:04:d7:26:73:c2:b5:9d:bc:af:98:7c:
b8:a4:df:ad:2a:33:31:10:42:ec:15:8c:e0:54:27:e2:d9:2f:
cf:ee:b4:ae:b2:4d:3e:22:79:fb:3f:29:d8:f5:db:c1:16:c4:
3e:3c:59:43:34:1c:90:1b:38:29:3b:97:de:ee:4b:62:16:7b:
cd:e3:48:3a:4e:f0:15:cf:80:c6:29:89:09:02:06:f8:1d:e2:
ca:9a:72:7b:82:76:99:a2:b3:25:2a:ba:f3:80:ec:78:23:8c:
76:06:9d:56:db:57:78:fb:32:d2:68:d4:e2:8f:b1:11:fb:63:
d5:ee:87:90:f0:94:e1:21:ae:95:93:de:23:b6:ef:5a:f8:1e:
40:55:c9:ee:31:1a:73:19:92:76:9d:ee:e1:23:97:96:ca:0c:
29:f3:12:7e:2f:8f:7b:ae:f0:f3:7d:19:67:69:a5:8e:57:55:
0a:34:a6:a7:43:29:28:20:ab:40:d7:fd:d0:8b:dc:4c:e5:3d:
06:fc:fa:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:53 2026 by rpki-client