Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
File: XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft (raw, json)
Hash identifier: HkE3IDX0nPrxLqbZ7hEtCiDy71OoKxbyg+DcJNPpmfg=
Subject key identifier: 7F:B0:E4:7E:F6:EA:33:F0:F0:BF:8A:FD:79:54:28:75:D9:A3:4E:82
Authority key identifier: 5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
Certificate issuer: /CN=F3678967AF/serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Certificate serial: 08C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
Manifest number: 08C2
Signing time: Thu 26 Mar 2026 01:57:38 +0000
Manifest this update: Thu 26 Mar 2026 01:57:37 +0000
Manifest next update: Sat 28 Mar 2026 01:57:37 +0000
Files and hashes: 1: XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl (hash: pkmryYELgIMM5ElRcerXHl1omrY8WVOEqN/cS6AvH+U=)
2: 420B22A27D0111F0BA56A0A5DAE4EC9C.roa (hash: FgbgmTnolN1lRJKNhlZr9zZr69rYAV0zr0aJY9PwsCo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2247 (0x8c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3678967AF, serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Validity
Not Before: Mar 26 01:57:37 2026 GMT
Not After : Mar 28 01:57:37 2026 GMT
Subject: CN=69c49291-d682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:09:96:d5:54:b9:45:3a:c6:9a:3c:4e:ca:
3e:27:62:55:bb:55:65:bc:01:2f:81:bb:67:84:68:
7d:7f:67:a0:84:80:c4:87:84:ac:30:98:ca:59:37:
f8:e4:d5:64:29:22:63:f9:78:05:3e:9e:20:58:6a:
57:e6:cc:63:a0:ab:4a:20:0e:5a:1e:9c:fd:50:2a:
ec:cf:5f:79:8d:b3:f2:11:f8:66:96:13:18:47:a7:
80:a0:03:33:1a:cb:f0:ce:9d:48:b9:c6:e2:46:7c:
b7:87:18:4c:45:f3:98:73:74:e2:7f:61:70:2f:93:
d6:3e:34:c4:4f:5f:66:62:c3:6a:fc:88:d0:b6:6f:
50:d9:e3:c9:72:4b:bc:b6:f4:3c:95:d9:6d:93:e3:
89:36:b1:84:9b:08:44:1f:e9:74:fb:fa:a6:6a:58:
7f:aa:bc:d8:fe:40:12:6e:4d:d2:90:53:46:99:5e:
6b:0c:0c:4f:d5:1c:6e:83:ff:d2:cb:a8:b9:9e:92:
c8:79:b2:cf:2c:78:ed:34:77:a1:0b:f9:ce:90:30:
24:2d:2d:ee:e2:25:6b:59:da:86:ed:eb:45:c4:78:
d3:db:87:77:44:c8:83:35:ac:85:de:7e:07:93:59:
7f:7c:c1:cf:48:8a:64:16:2c:fd:d6:44:bb:d0:65:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B0:E4:7E:F6:EA:33:F0:F0:BF:8A:FD:79:54:28:75:D9:A3:4E:82
X509v3 Authority Key Identifier:
keyid:5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a0:c9:b5:3c:26:c4:fa:f2:26:e0:72:b7:a0:1b:6a:05:f7:
ef:e7:87:fc:07:28:ef:d9:64:31:ed:3a:5f:ef:be:33:18:9e:
2b:9a:ef:de:c0:ce:6b:87:36:0b:e3:2c:70:8c:be:78:8c:36:
52:ce:85:cd:37:da:9e:8c:7d:9b:b0:fb:fb:2e:20:03:4c:c8:
69:6d:64:c4:ed:45:48:6f:e1:28:39:17:8f:12:f3:30:29:2b:
d2:30:06:95:75:ce:57:c4:3f:ce:99:43:8e:6e:ce:38:a6:da:
11:83:86:4f:e0:60:35:9d:e8:07:f8:3e:f7:78:83:5a:c3:b0:
c1:5b:2b:10:19:37:45:84:c3:9e:39:d4:8e:4f:e9:2d:c0:bc:
55:78:3c:71:19:ae:52:74:9a:9c:1f:82:4b:f6:16:eb:6a:4d:
20:ee:87:97:9b:24:36:f3:ce:b9:9d:01:29:40:e1:eb:ab:a1:
e4:c3:e8:19:b6:dc:65:2b:3d:4c:43:19:23:fe:d5:8f:1c:ed:
42:af:4c:f9:71:fb:6a:82:f2:11:8a:61:2c:23:99:b6:7c:58:
58:2e:9d:c6:68:08:53:0c:a3:47:3f:12:bb:5d:a9:5d:6b:2b:
1c:1d:e3:b6:6c:91:17:60:94:5c:fb:f2:b0:dc:93:c5:07:1c:
80:0e:36:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:00:57 2026 by rpki-client