Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
File: hXm8J-c9eykQjr_zl_ts_VxrAkc.mft (raw, json)
Hash identifier: lv3j/OkhHKymizUeqqEOLw8NJE3g4BrMKFwWayVo17Q=
Subject key identifier: 8E:97:E8:18:4E:B2:90:F6:72:67:A7:C1:E3:09:4D:3F:66:22:DE:F6
Authority key identifier: 85:79:BC:27:E7:3D:7B:29:10:8E:BF:F3:97:FB:6C:FD:5C:6B:02:47
Certificate issuer: /CN=F3675292AF/serialNumber=8579BC27E73D7B29108EBFF397FB6CFD5C6B0247
Certificate serial: 032E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
Manifest number: 0329
Signing time: Thu 26 Mar 2026 04:42:31 +0000
Manifest this update: Thu 26 Mar 2026 04:42:30 +0000
Manifest next update: Sat 28 Mar 2026 04:42:30 +0000
Files and hashes: 1: hXm8J-c9eykQjr_zl_ts_VxrAkc.crl (hash: 41uQpZiIsxZ+7MBNRA5vFn9zJ5ebJxGlP13WaxTVM9g=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 814 (0x32e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3675292AF, serialNumber=8579BC27E73D7B29108EBFF397FB6CFD5C6B0247
Validity
Not Before: Mar 26 04:42:30 2026 GMT
Not After : Mar 28 04:42:30 2026 GMT
Subject: CN=69c4b937-ec3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:c2:84:f1:45:4e:67:50:54:c5:8d:9e:6d:
cb:07:19:31:46:2b:7d:0d:1a:19:8e:b2:8b:c3:47:
52:6c:59:64:9c:be:80:ed:dd:89:28:4f:ff:a9:10:
b9:db:ac:d0:99:56:c5:9a:82:ee:b2:9f:8c:87:75:
2d:64:e6:ab:65:50:50:a0:46:6b:6c:0c:d6:7f:8a:
82:e7:81:3d:e5:d4:78:70:64:5c:66:d7:ee:50:9c:
5c:2f:d9:b6:67:bc:08:a4:bc:70:46:4f:fc:95:6b:
ab:cd:1f:39:89:ed:42:1d:de:5b:77:a3:30:62:92:
04:96:77:44:8b:36:a8:bf:69:f6:0a:65:3f:d0:40:
7d:e1:1f:42:1f:86:e1:e4:b6:07:61:b4:67:9d:06:
d2:7a:32:49:66:d0:8b:52:d2:96:26:eb:4f:f0:be:
58:d2:da:ca:f6:e4:60:58:4f:48:08:f6:70:5b:58:
a3:32:96:54:6e:35:f9:08:8f:b4:f1:39:24:56:40:
94:71:fb:26:a4:5f:db:22:77:c6:bc:ee:8a:a9:a8:
c0:8c:3c:d2:da:91:9b:43:dd:30:b8:c8:da:ec:05:
f8:e1:62:02:55:c5:0c:68:e1:32:b3:1b:c8:8b:73:
f0:2d:2b:97:47:0b:94:38:72:14:19:f0:93:05:d7:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:97:E8:18:4E:B2:90:F6:72:67:A7:C1:E3:09:4D:3F:66:22:DE:F6
X509v3 Authority Key Identifier:
keyid:85:79:BC:27:E7:3D:7B:29:10:8E:BF:F3:97:FB:6C:FD:5C:6B:02:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:63:ee:a4:fc:a3:5b:43:50:9a:e0:d2:42:89:b8:87:48:8a:
11:ee:e6:1f:1b:9f:a8:c4:c2:6b:58:7b:cb:04:3c:82:42:12:
e8:a7:a0:9a:36:df:f9:2d:e7:d8:03:c6:4d:a0:f2:16:54:47:
80:ac:12:78:d5:37:c8:f6:01:ec:43:75:52:63:8b:3f:3e:83:
f7:aa:9d:6c:6c:77:82:b0:fe:22:91:c2:90:af:f5:b0:19:bf:
84:54:1b:38:b8:4d:63:c9:30:cb:7c:af:24:c0:04:12:cc:20:
42:01:2d:3b:75:c8:c9:20:6c:cb:82:ef:25:d3:55:53:25:e1:
0e:af:87:cd:77:7f:81:7d:87:a0:d0:f8:4b:7d:a4:3b:3b:b3:
91:93:70:1d:33:2a:f3:80:73:5b:71:46:75:28:32:61:8d:28:
cc:35:5c:db:62:20:6f:c0:8c:31:22:e3:fb:eb:4f:2a:e6:74:
2d:fa:8f:a2:f7:66:10:d2:31:19:44:0c:30:61:13:5c:ec:2c:
4a:cd:39:c3:8c:9e:de:16:8c:4c:62:f3:32:5a:f0:95:7d:7c:
02:98:80:9a:da:3f:7f:c7:3a:af:dc:7b:07:a2:41:89:52:9e:
1d:7a:e6:fc:93:a5:0a:e2:10:e4:37:78:75:44:e4:64:7d:14:
52:c3:56:be
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAy4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzUyOTJBRjExMC8GA1UEBRMoODU3OUJDMjdFNzNEN0IyOTEwOEVCRkYzOTdGQjZD
RkQ1QzZCMDI0NzAeFw0yNjAzMjYwNDQyMzBaFw0yNjAzMjgwNDQyMzBaMBgxFjAU
BgNVBAMTDTY5YzRiOTM3LWVjM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1EcKE8UVOZ1BUxY2ebcsHGTFGK30NGhmOsovDR1JsWWScvoDt3YkoT/+p
ELnbrNCZVsWagu6yn4yHdS1k5qtlUFCgRmtsDNZ/ioLngT3l1HhwZFxm1+5QnFwv
2bZnvAikvHBGT/yVa6vNHzmJ7UId3lt3ozBikgSWd0SLNqi/afYKZT/QQH3hH0If
huHktgdhtGedBtJ6Mklm0ItS0pYm60/wvljS2sr25GBYT0gI9nBbWKMyllRuNfkI
j7TxOSRWQJRx+yakX9sid8a87oqpqMCMPNLakZtD3TC4yNrsBfjhYgJVxQxo4TKz
G8iLc/AtK5dHC5Q4chQZ8JMF1y67AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUjpfo
GE6ykPZyZ6fB4wlNP2Yi3vYwHwYDVR0jBBgwFoAUhXm8J+c9eykQjr/zl/ts/Vxr
AkcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc1MjkyLzI2NEQxN0ZFQkREQzExRUVCNDFFNDE0RDc3NTQxMkU2L2hYbThK
LWM5ZXlrUWpyX3psX3RzX1Z4ckFrYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hYbThKLWM5ZXlrUWpyX3psX3RzX1Z4ckFrYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzUyOTIvMjY0RDE3RkVCRERDMTFFRUI0MUU0MTRENzc1
NDEyRTYvaFhtOEotYzlleWtRanJfemxfdHNfVnhyQWtjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXY+6k/KNbQ1Ca4NJCibiHSIoR7uYf
G5+oxMJrWHvLBDyCQhLop6CaNt/5LefYA8ZNoPIWVEeArBJ41TfI9gHsQ3VSY4s/
PoP3qp1sbHeCsP4ikcKQr/WwGb+EVBs4uE1jyTDLfK8kwAQSzCBCAS07dcjJIGzL
gu8l01VTJeEOr4fNd3+BfYeg0PhLfaQ7O7ORk3AdMyrzgHNbcUZ1KDJhjSjMNVzb
YiBvwIwxIuP7608q5nQt+o+i92YQ0jEZRAwwYRNc7CxKzTnDjJ7eFoxMYvMyWvCV
fXwCmICa2j9/xzqv3HsHokGJUp4deub8k6UK4hDkN3h1RORkfRRSw1a+
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:39:01 2026 by rpki-client