Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
File: 4sEXgjtyd70rre-ytXfGz5x2TY4.mft (raw, json)
Hash identifier: Pjl78e7Kv79QI4uZukRQWozq4jaFgW6fvq9hDce1VOA=
Subject key identifier: F9:AF:4E:7C:E0:F8:97:44:44:48:CD:2D:20:1A:13:0C:9C:5A:38:9B
Authority key identifier: E2:C1:17:82:3B:72:77:BD:2B:AD:EF:B2:B5:77:C6:CF:9C:76:4D:8E
Certificate issuer: /CN=F36592B4AF/serialNumber=E2C117823B7277BD2BADEFB2B577C6CF9C764D8E
Certificate serial: 0411
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
Manifest number: 0411
Signing time: Thu 26 Mar 2026 04:09:34 +0000
Manifest this update: Thu 26 Mar 2026 04:09:33 +0000
Manifest next update: Sat 28 Mar 2026 04:09:33 +0000
Files and hashes: 1: 4sEXgjtyd70rre-ytXfGz5x2TY4.crl (hash: H+C96K2OMvVeB2kMYWkdDKjh0SKTiN46j2LWxkUQONE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1041 (0x411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36592B4AF, serialNumber=E2C117823B7277BD2BADEFB2B577C6CF9C764D8E
Validity
Not Before: Mar 26 04:09:33 2026 GMT
Not After : Mar 28 04:09:33 2026 GMT
Subject: CN=69c4b17e-861a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:08:59:61:34:80:b3:de:a2:2d:3c:69:0d:
58:dc:44:0f:70:45:f7:7c:48:42:21:af:34:6c:da:
fa:42:4b:7a:0e:db:1c:0b:f1:89:93:a8:aa:86:66:
7e:76:98:61:6d:4d:3c:d2:05:3a:b5:6a:51:cb:37:
54:43:86:54:bf:63:38:5f:ec:f4:cd:6c:5d:f1:b8:
fd:5f:e1:04:87:cf:5d:10:fc:13:5b:17:65:43:dc:
ef:23:5e:d7:3f:c6:45:35:0f:e0:4b:31:5c:63:ea:
dc:e4:13:6c:b6:a1:0b:0c:40:58:c2:a5:b2:6c:8c:
ca:72:d5:33:55:5d:d9:32:6e:12:f0:76:6b:c2:78:
fc:0e:9d:1f:f2:2e:3a:e3:68:19:eb:15:2a:51:7b:
4b:b0:83:9b:a3:5a:4f:c0:02:2a:47:69:d8:a4:01:
c1:3c:de:40:5c:61:83:07:c8:00:3d:8f:64:3d:71:
1f:25:52:73:90:b7:fc:85:5c:37:81:6e:9a:bf:32:
f2:c4:6a:e1:23:30:80:a5:fd:80:92:bb:b6:97:35:
ec:ce:ef:85:bb:36:72:35:9d:a5:ee:33:02:f1:54:
68:0d:94:25:02:a6:45:c3:d2:91:27:fb:ac:78:74:
a2:95:c3:1a:7d:52:df:a7:47:e3:fa:6e:bf:d4:07:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AF:4E:7C:E0:F8:97:44:44:48:CD:2D:20:1A:13:0C:9C:5A:38:9B
X509v3 Authority Key Identifier:
keyid:E2:C1:17:82:3B:72:77:BD:2B:AD:EF:B2:B5:77:C6:CF:9C:76:4D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:a0:ce:cf:8e:33:0c:0b:2a:c8:f6:05:57:8b:3f:78:02:82:
7a:b1:ce:2c:be:24:de:4c:d4:99:2e:83:46:e1:bb:d3:4e:4f:
74:6b:1e:c0:69:ba:b7:39:37:27:28:9c:04:7e:0f:29:83:39:
15:bd:26:1e:67:32:a5:b4:33:d7:b0:21:30:74:25:15:53:f2:
6f:31:97:c7:15:61:1a:86:de:14:d2:b9:9a:45:8d:a7:56:81:
98:6f:74:d6:8e:32:06:da:ce:49:44:c0:33:6d:29:31:8d:3a:
c6:35:38:35:2e:b1:53:40:1c:82:fb:bf:21:5c:54:aa:f2:ea:
9c:29:38:32:ed:64:b8:d5:35:01:1f:04:d9:ab:c9:e3:b3:c2:
b8:45:fa:5d:f0:76:6b:28:63:22:33:7b:a0:0f:bf:ed:7c:dc:
3d:8e:74:ea:05:f1:e3:97:99:e1:01:1d:a0:b4:68:f0:e7:32:
06:52:78:2f:bf:bc:ca:1a:cf:9f:ad:92:33:f5:6d:56:62:47:
89:01:58:78:1f:e8:2c:8b:04:43:b2:48:14:a3:09:22:4d:77:
e2:71:3e:2f:20:95:64:9c:3e:71:ee:98:ee:fc:cd:2d:a9:01:
b6:53:e7:b3:60:18:3a:04:c8:5b:49:eb:60:38:a0:83:11:ec:
d1:6d:98:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:32 2026 by rpki-client