Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
File: rhKLIvUdxljVXiFW669z1satdio.mft (raw, json)
Hash identifier: WnugwSmnggUdzJAP8UvE2SEOiH59fCbgHMHBqb3Dpzo=
Subject key identifier: 50:7E:44:4B:8E:81:0F:75:ED:EA:EE:58:73:D5:65:61:33:8C:A3:76
Authority key identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
Certificate issuer: /CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Certificate serial: 046A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
Manifest number: 046A
Signing time: Thu 26 Mar 2026 03:55:38 +0000
Manifest this update: Thu 26 Mar 2026 03:55:37 +0000
Manifest next update: Sat 28 Mar 2026 03:55:37 +0000
Files and hashes: 1: rhKLIvUdxljVXiFW669z1satdio.crl (hash: EMC1x5lzqCcc4yKI6eUydIVnxYhZhqR+T0Goz7T4pRE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1130 (0x46a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656B95AF, serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Validity
Not Before: Mar 26 03:55:37 2026 GMT
Not After : Mar 28 03:55:37 2026 GMT
Subject: CN=69c4ae39-4ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:5e:05:8b:02:88:0b:9c:8a:9b:0e:cd:c0:
29:d2:f0:e8:4f:2f:2b:52:c1:5e:a6:46:96:9c:1f:
75:ff:08:11:9b:ee:29:2e:1c:63:9f:83:8a:09:74:
47:6e:8b:99:96:e6:b2:45:eb:eb:ed:04:34:43:57:
5b:51:7d:fa:44:e1:00:82:b2:98:64:de:7a:56:83:
66:a6:d9:4b:9b:01:aa:a2:95:04:ce:72:df:37:61:
5c:8e:df:29:66:98:cd:c9:2f:d0:f5:bd:2c:43:47:
c6:21:c8:4b:b6:e2:d9:6a:5c:be:be:d8:11:c8:7e:
ea:6c:a8:fc:d1:f7:f5:eb:72:7c:0d:3b:b5:9e:52:
e1:61:d8:ab:4b:e8:2c:b5:2d:1e:2e:9f:e3:90:7c:
a3:95:2e:31:22:d9:4a:60:01:e8:86:0d:cd:32:83:
be:a2:10:04:48:56:e0:ef:60:4f:2b:f5:79:1c:f4:
f8:fc:b0:b3:2d:08:b7:d8:6d:26:12:39:e8:24:8f:
c0:77:d4:b6:c0:da:c2:ec:8e:6b:36:ed:00:10:2c:
88:05:a9:25:45:fd:c2:da:df:ad:91:62:d9:6d:a1:
75:27:9c:7b:30:dc:60:5d:5e:14:8a:42:68:3d:c2:
38:d8:84:b4:c8:18:2c:b0:14:09:27:77:94:7a:4a:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7E:44:4B:8E:81:0F:75:ED:EA:EE:58:73:D5:65:61:33:8C:A3:76
X509v3 Authority Key Identifier:
keyid:AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:fc:43:60:5c:71:18:e4:d5:0d:48:ec:ff:18:31:dd:fd:63:
a1:00:ec:21:a0:38:13:5b:12:f5:bd:5e:b8:ea:43:09:96:c4:
f5:ce:ce:16:b7:2a:e0:96:07:b9:86:c3:e9:9a:72:da:0f:3d:
d6:83:a7:9d:01:67:7d:e6:d0:81:3d:e6:dc:0a:f4:5c:cb:22:
b7:52:db:2b:0b:d7:0e:d4:02:57:1f:bf:36:23:64:60:90:58:
4b:2e:ba:c0:51:96:68:b8:ba:a4:da:15:3f:e7:8d:44:8d:aa:
71:59:36:e4:d1:38:78:a2:a3:83:cd:0a:cb:0d:77:80:52:0f:
8a:24:ac:c7:10:b6:95:8d:d7:5a:f4:ce:84:75:60:18:7f:30:
ae:6c:f9:86:6d:80:33:37:54:73:d1:3b:dc:d3:a1:83:00:fd:
a2:c3:cb:1a:80:73:89:69:16:59:ac:42:80:27:f7:76:26:4e:
31:17:d0:42:86:65:47:68:ca:7e:4b:70:a6:3a:53:c0:ce:44:
68:0e:85:71:d2:6e:81:f9:a3:87:30:17:12:0c:ad:ef:87:d4:
5d:61:47:83:57:e8:d0:34:26:f9:c7:34:94:0e:47:a3:85:f9:
e9:fd:93:32:50:c9:d4:52:76:04:6b:84:12:61:a0:a7:12:19:
31:bd:c2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:32 2026 by rpki-client