Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
File: h4TuSgLa-JcmVvEkUr8npJEcNik.mft (raw, json)
Hash identifier: odJHpxi1jUPA+qo1QuC7dzTPxxOkwhHrxWbt2PyhqJ8=
Subject key identifier: F3:FE:49:C4:97:16:ED:E4:F8:2E:B1:E2:7E:A6:61:EA:87:35:74:ED
Authority key identifier: 87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29
Certificate issuer: /CN=F3651E73AF/serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
Certificate serial: 0E04
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
Manifest number: 0DFF
Signing time: Thu 26 Mar 2026 01:08:16 +0000
Manifest this update: Thu 26 Mar 2026 01:08:15 +0000
Manifest next update: Sat 28 Mar 2026 01:08:15 +0000
Files and hashes: 1: h4TuSgLa-JcmVvEkUr8npJEcNik.crl (hash: gm8J0l10a/EZnvFrQp/FpabKF9eIlaWTsUflqA2DyYU=)
2: B1757762C48911F0B5A12AF6DAE4EC9C.roa (hash: b5Wcnn4AFWyn401Xj8s2haIgucvxNhp1qnKFpV0Gekw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl
rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3588 (0xe04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3651E73AF, serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
Validity
Not Before: Mar 26 01:08:15 2026 GMT
Not After : Mar 28 01:08:15 2026 GMT
Subject: CN=69c48700-3892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:74:5e:2f:6b:dc:64:3f:72:43:b2:62:66:31:
fc:0c:3c:22:c3:ac:7f:90:7d:89:22:c6:11:02:2c:
fe:29:50:66:fb:b6:bc:8f:d3:2a:70:a2:b4:e3:8f:
a2:fb:7d:98:e3:32:d6:ed:97:ee:80:81:58:c2:59:
c4:6f:7e:94:56:86:a4:29:53:cd:74:4d:3b:8a:04:
71:39:86:84:4b:ad:01:d7:97:a3:a5:af:47:b7:33:
f2:83:47:81:c8:99:a9:06:9a:32:6c:07:98:63:d4:
d8:6c:dd:b6:27:d5:fc:20:aa:15:19:15:f4:39:1d:
34:e2:5f:f6:48:96:66:00:ed:0c:2a:cc:30:e6:34:
5c:dc:b8:86:66:67:ad:86:00:db:f1:b8:c8:4a:6b:
36:6f:49:6c:70:c8:1f:6d:3f:9b:1f:5f:9c:e5:ee:
86:44:61:c9:85:04:db:2b:8c:34:c0:a2:be:c6:5d:
b9:26:ce:92:16:f9:d9:f8:0f:11:2c:62:f7:9f:3e:
88:9e:fc:34:a5:e2:e3:56:25:d6:a0:d4:c8:f8:b5:
d4:91:70:47:f8:9f:d8:0f:34:1c:ff:fd:84:6b:44:
2d:83:3b:17:0d:e6:bf:83:fb:96:af:52:e0:a7:55:
30:5e:e6:f8:e9:b0:89:b1:e6:b1:7d:3d:a1:6e:a6:
54:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FE:49:C4:97:16:ED:E4:F8:2E:B1:E2:7E:A6:61:EA:87:35:74:ED
X509v3 Authority Key Identifier:
keyid:87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:15:7e:8b:51:39:30:3d:1c:2a:22:f3:b7:9b:d6:6a:c2:92:
7a:81:48:3b:a3:9b:8b:7c:93:43:48:64:5a:8a:5d:e2:36:2d:
c7:16:d7:a5:f3:23:c2:8d:cb:0a:8b:27:5f:e3:e1:3a:5f:4e:
d3:16:d2:94:31:c8:b7:19:f4:8e:52:bf:f3:c2:63:17:0b:a0:
ee:99:21:0c:1c:b1:db:54:a2:b8:c5:ef:40:ba:30:cd:03:a7:
03:c9:a4:65:47:d9:0b:30:74:3d:8f:2a:52:85:e9:37:e7:d1:
e6:ed:e9:03:d4:10:23:9c:64:59:7b:c9:06:10:44:77:28:58:
ce:20:19:83:75:22:1b:8e:9a:97:ee:3d:3b:f3:5f:4c:e8:e1:
f6:54:59:5f:6b:8e:be:7d:22:82:14:8c:e7:43:6b:83:c3:5b:
5d:37:8e:3f:4d:b5:9c:dc:c0:49:0b:8a:88:c8:3c:98:f4:2a:
10:83:f2:30:94:3a:a2:c6:40:d8:5d:93:9b:68:cc:db:11:46:
f2:29:89:f9:f8:d1:81:90:df:70:7d:bf:08:66:4e:cd:d6:19:
3a:f7:67:34:8a:7a:92:6e:6a:34:b1:b2:de:67:5c:02:de:c2:
d7:b6:85:53:d9:2f:a4:cb:c7:be:89:66:cc:7a:5b:4a:0b:f6:
42:69:b5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:23:21 2026 by rpki-client