Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File: rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier: P/qSoZXunVO2QcMun53/LKhLjXw5q9vvwHfa+csCSIo=
Subject key identifier: F9:D6:13:A0:D2:CB:E8:B8:93:3B:1B:EB:FA:60:78:85:40:FE:1C:D2
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer: /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial: 09D9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number: 09D9
Signing time: Thu 26 Mar 2026 01:40:31 +0000
Manifest this update: Thu 26 Mar 2026 01:40:30 +0000
Manifest next update: Sat 28 Mar 2026 01:40:30 +0000
Files and hashes: 1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: c4UJsShF+YozMCPlskztmM5+cQ+0STFjnP0RBHAyK8k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2521 (0x9d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3660C14AF, serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Validity
Not Before: Mar 26 01:40:30 2026 GMT
Not After : Mar 28 01:40:30 2026 GMT
Subject: CN=69c48e8f-e60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:5b:10:c4:e3:22:bd:7b:a8:ab:a3:67:d0:
06:4d:52:6e:ee:05:23:91:f2:22:32:4e:9e:b6:8b:
19:6d:c2:da:f8:d5:10:f9:6c:4f:b7:44:22:c1:4e:
88:d1:d7:83:a9:a5:8c:00:97:b4:55:e7:b2:8f:6f:
b4:11:f8:e5:da:91:e6:b7:1e:03:00:bf:e9:bb:df:
0c:5f:dc:52:07:67:95:aa:63:af:04:37:cb:05:84:
b2:cc:13:16:ef:95:30:4c:ad:4a:f9:1b:3f:08:8c:
bf:57:75:ac:bc:35:6c:72:63:bc:e8:1f:1d:0c:33:
2c:cb:44:27:b9:8d:8c:ba:94:5f:ad:eb:6a:88:2b:
bc:6a:87:f6:54:d6:26:bd:06:ed:7e:5e:8a:20:46:
8e:9d:96:49:68:7a:ed:4e:51:51:ea:17:8d:94:02:
79:eb:18:e8:23:a9:4b:37:c8:78:5e:a0:ec:e3:0e:
99:99:2f:db:71:6d:28:ff:d6:aa:79:7f:ec:b9:74:
33:84:40:45:21:00:f7:33:4a:48:6e:ac:01:9b:20:
2d:45:69:c1:3c:d4:ca:08:8d:88:4b:b3:89:ce:2f:
d3:79:7c:d3:4a:bc:03:d7:eb:a8:72:b4:46:8d:8d:
a5:ea:ed:9b:73:0e:43:25:55:87:f5:f5:4c:0e:09:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D6:13:A0:D2:CB:E8:B8:93:3B:1B:EB:FA:60:78:85:40:FE:1C:D2
X509v3 Authority Key Identifier:
keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:20:ea:82:c3:f9:ed:17:97:ee:c1:fe:78:42:70:2b:7c:9e:
c9:07:17:f0:61:3a:c1:bc:24:75:3d:aa:ed:18:25:62:18:95:
2e:4f:53:e2:29:31:f5:99:05:fe:d1:3f:55:10:37:86:b1:7d:
fe:c8:0f:df:1e:7a:ac:86:55:ac:06:c2:79:00:be:0f:dc:e2:
a8:2c:0f:14:2a:d2:78:fe:bf:d5:66:b5:10:da:94:67:4c:41:
54:e6:c0:a6:84:de:7f:6a:3f:ca:81:20:55:af:2e:c3:04:c6:
d6:83:3f:c0:24:32:43:69:62:16:8f:49:cf:e3:a9:9c:6f:77:
7c:e2:da:2a:5c:34:bc:43:f8:93:61:20:b7:89:e8:dc:4a:d7:
5f:1d:55:b4:9f:22:59:53:bc:d1:48:e0:e6:28:46:b7:7e:d6:
b1:eb:5b:d7:87:2f:c4:fb:9f:89:43:22:4f:fb:6b:83:0b:fb:
09:e6:5a:64:23:73:6a:63:65:2e:23:a3:0b:38:f1:e8:47:95:
eb:fb:fe:43:7f:da:66:5a:bf:b1:58:64:13:64:cc:e5:66:65:
c3:b0:8a:e6:47:97:26:54:b4:ea:f5:ba:62:04:34:b8:1c:57:
b8:ff:4a:b5:c9:f1:2a:e4:95:0b:f5:3a:a5:a8:b3:eb:a5:55:
32:27:19:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:37:50 2026 by rpki-client