Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
File: pqNDsn-fdirkHPfFvGtRFMKIWnc.mft (raw, json)
Hash identifier: 7JtSCqhLFnY81tnpqRYXU6kGDGZCdPucdjfFyss6dME=
Subject key identifier: 55:5D:9E:1E:A9:16:32:C6:44:90:0D:0E:56:20:13:2B:E0:DD:C2:F2
Authority key identifier: A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
Certificate issuer: /CN=F3642CB1AR/serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Certificate serial: 028B
Authority info access: rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
Manifest number: 028B
Signing time: Wed 25 Mar 2026 05:05:23 +0000
Manifest this update: Wed 25 Mar 2026 05:05:22 +0000
Manifest next update: Fri 27 Mar 2026 05:05:22 +0000
Files and hashes: 1: pqNDsn-fdirkHPfFvGtRFMKIWnc.crl (hash: bclvXQBe9eZEsNR58HdWFtZYIs08/GEVG4kLseHrEZo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 651 (0x28b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642CB1AR, serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Validity
Not Before: Mar 25 05:05:22 2026 GMT
Not After : Mar 27 05:05:22 2026 GMT
Subject: CN=69c36d13-5bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:88:10:29:56:b0:55:8f:4a:e4:41:f1:23:d6:
5e:d6:88:82:47:b6:62:2e:e0:33:db:f0:ab:a4:66:
49:d1:82:12:61:28:7e:e1:9a:e0:f5:2d:b8:b6:78:
1c:94:8a:45:c5:4d:64:29:b5:48:9c:04:50:d4:08:
5d:eb:8a:0e:1b:38:69:11:3d:e0:bd:89:3a:f4:6b:
45:61:3d:21:32:b4:83:6e:2d:db:7f:27:ea:0e:8c:
77:d8:d8:e3:8c:83:57:2e:91:76:72:2b:9c:f4:4c:
14:a4:ed:9e:1d:42:e0:3d:c7:9c:95:70:03:03:70:
cf:f6:dd:21:ad:5c:f3:ad:61:87:01:b1:ce:18:c9:
72:49:79:48:53:61:7d:a2:6f:be:2f:aa:f7:c8:48:
1d:7c:b1:09:b2:5c:2a:84:fe:ad:b1:63:dc:d9:8f:
85:4e:63:c9:59:30:d9:27:18:40:02:ed:42:50:03:
88:94:64:36:1b:6c:0f:05:61:f6:13:ce:6a:26:7b:
e5:0a:d8:ef:fd:40:7f:49:5e:4c:69:ae:a7:3c:13:
a3:cc:a9:d4:86:a5:39:f7:93:2f:8f:5f:f7:b0:7f:
86:d1:0c:fe:47:f0:e8:af:c3:31:84:53:24:8b:48:
2a:c7:49:64:a9:e0:51:26:0f:b6:88:61:fd:27:df:
3e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5D:9E:1E:A9:16:32:C6:44:90:0D:0E:56:20:13:2B:E0:DD:C2:F2
X509v3 Authority Key Identifier:
keyid:A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4b:d4:9f:b1:d2:61:3d:36:e2:8e:d4:82:34:41:24:ee:04:
a6:89:f0:7c:a2:01:57:f8:21:6d:af:c1:e6:70:9c:74:58:14:
49:57:d5:4d:b0:1c:29:b5:ea:43:22:de:f3:fc:23:c5:94:cc:
52:c0:66:de:a5:04:3e:23:6a:74:19:46:ab:06:38:cc:0a:5d:
30:37:83:09:65:ee:d9:d1:52:19:78:34:39:f5:8e:a0:e8:e9:
37:8f:25:ec:14:df:6e:26:0c:29:a0:91:2b:db:63:4b:ed:a5:
3e:bd:ce:1f:2e:9c:6c:84:de:8d:fe:c2:f6:1a:d4:3e:86:3c:
2c:28:8e:be:02:13:f3:34:0a:a8:64:79:69:fe:7e:13:26:9c:
9e:0f:bd:5b:c2:21:db:19:8a:8c:07:d3:83:73:f9:1f:09:d3:
31:b8:ea:e1:66:3e:82:dd:bc:6c:6d:1a:f9:80:88:d8:e1:ce:
f3:8b:14:38:39:58:ac:1b:ce:08:55:25:d6:ae:b6:72:71:94:
5b:31:34:c2:a3:0d:9c:12:3b:49:ad:7f:91:49:92:fc:73:69:
6a:97:b6:21:b5:a1:89:5a:dc:4d:8f:72:40:f9:50:79:c0:6b:
7b:1d:ce:9b:e6:f7:90:22:02:43:fa:0e:32:37:f1:b9:bc:04:
6f:24:40:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:08:08 2026 by rpki-client