Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
File: A-IO7xUFA6CxlRGK6Idof1pCecI.mft (raw, json)
Hash identifier: u0h6LMMPtbbdKf0xqh+hGMv997c9ug65AYgPlUDB6dA=
Subject key identifier: 0E:43:9F:72:B0:C8:3F:3F:2A:F1:F3:74:AF:ED:8C:61:0F:00:C3:A1
Authority key identifier: 03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
Certificate issuer: /CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
Certificate serial: 0578
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
Manifest number: 0567
Signing time: Thu 26 Mar 2026 03:24:03 +0000
Manifest this update: Thu 26 Mar 2026 03:24:02 +0000
Manifest next update: Sat 28 Mar 2026 03:24:02 +0000
Files and hashes: 1: A-IO7xUFA6CxlRGK6Idof1pCecI.crl (hash: 1LjB5Fr0U/XVrpX5Kwvl3RVYKGZr5Xuum13ynw5nFtY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1400 (0x578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654397AF, serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
Validity
Not Before: Mar 26 03:24:02 2026 GMT
Not After : Mar 28 03:24:02 2026 GMT
Subject: CN=69c4a6d3-cfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:6a:da:8e:a0:f9:4f:4b:39:b5:d0:4c:c6:
45:3a:b6:13:4e:ae:ba:f4:39:f4:f9:d7:78:be:0f:
b0:86:d4:1b:cb:a8:63:48:4f:6c:ef:b2:8e:95:da:
31:56:bb:8a:10:b4:0f:0a:7a:f1:5a:7d:ed:fa:4a:
bb:85:6c:bc:01:c8:78:0a:52:2b:59:5f:11:70:28:
0e:85:9b:cc:55:2e:b1:6a:be:f1:94:de:a0:5e:e6:
cc:37:5d:0a:7a:3b:bf:94:58:4d:06:c4:20:54:dc:
e5:a9:fc:9c:ee:0e:91:57:c6:25:e7:3d:80:ee:26:
46:d4:d8:a0:8e:d0:73:ca:32:19:91:f3:4d:be:21:
e4:0f:5e:41:c9:78:bd:20:1a:d9:43:64:6d:f3:fb:
da:9b:8d:be:05:92:af:65:fb:a1:2c:0e:d7:0c:ab:
ca:83:0f:b5:89:56:fd:d7:bc:7e:22:40:0b:7e:66:
14:2a:7f:46:98:7c:9b:4a:fb:22:39:64:f6:5f:3b:
61:7a:64:15:b0:9b:72:e1:27:b6:ae:a1:ca:e0:55:
70:5c:55:a6:93:6b:d1:f5:ef:3f:fc:eb:25:cd:b8:
69:28:ac:47:57:57:01:04:27:4f:5d:f8:4b:31:b6:
33:91:6b:1a:ed:67:96:66:ba:d2:fd:96:ea:8e:90:
6b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:43:9F:72:B0:C8:3F:3F:2A:F1:F3:74:AF:ED:8C:61:0F:00:C3:A1
X509v3 Authority Key Identifier:
keyid:03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:c2:52:4b:8c:df:f8:36:71:e4:7a:fc:8e:1a:0e:9d:3b:21:
7b:42:d5:28:a0:d3:ec:10:2c:ea:20:a9:aa:b3:ad:1f:23:c8:
e6:56:00:5f:7b:1a:1d:d1:db:1c:85:e0:c3:b7:94:19:a1:15:
05:e2:a7:89:2e:74:45:a6:f3:a6:2b:bc:bb:92:f9:e1:de:85:
29:88:88:1e:33:b2:3d:7b:dc:73:d2:df:ca:65:f1:5e:dd:dc:
da:0e:ed:83:8e:18:15:05:67:d7:c1:2f:4f:59:4a:11:19:7b:
f8:d6:85:13:ee:af:a7:3e:49:62:42:d1:74:ad:e2:b9:42:2d:
26:45:87:34:42:2f:90:64:f4:c7:f7:82:f5:5e:3a:25:de:36:
7c:44:ca:4f:94:8c:e7:46:bd:68:08:ee:d1:43:70:36:9c:91:
a3:d4:37:6b:87:1a:bb:64:e4:23:7c:cb:1d:4b:4d:98:e6:d6:
63:9b:43:fc:0e:98:4e:25:3a:90:9a:24:0a:fc:a0:e0:c3:a1:
a2:0c:2d:69:72:d9:ea:d9:bb:fa:a5:21:cc:e8:55:1c:24:78:
2c:79:0c:0f:7f:c5:42:09:cd:64:c6:36:a6:ed:f7:e9:9e:c6:
26:c4:b3:4c:52:ba:54:f4:f5:0a:eb:18:61:7d:3b:eb:38:98:
a8:6d:0f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:18:18 2026 by rpki-client