Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
File: 7heW4OxZE9jIj7q68fgKRZzuOTk.mft (raw, json)
Hash identifier: bPpTkK/Tomx9AArqukIIEcaHerUCz3hUtxF9bMRP6ZQ=
Subject key identifier: C2:69:1C:26:41:78:D4:5D:09:F6:54:21:39:AC:49:3F:6A:37:22:B0
Authority key identifier: EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
Certificate issuer: /CN=F3687682AF/serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Certificate serial: 02CF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
Manifest number: 02CF
Signing time: Thu 26 Mar 2026 04:56:09 +0000
Manifest this update: Thu 26 Mar 2026 04:56:08 +0000
Manifest next update: Sat 28 Mar 2026 04:56:08 +0000
Files and hashes: 1: 7heW4OxZE9jIj7q68fgKRZzuOTk.crl (hash: 64wbid/avDtWOephP0YnxPvgJ0TmOob6nzlwt4r7ZN4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719 (0x2cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3687682AF, serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Validity
Not Before: Mar 26 04:56:08 2026 GMT
Not After : Mar 28 04:56:08 2026 GMT
Subject: CN=69c4bc68-4c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:28:db:62:43:bf:69:60:b5:ed:86:7a:96:01:
89:8e:2c:9e:7f:8b:2d:c9:35:6f:80:d1:95:42:5b:
11:80:e5:99:67:cb:3c:f4:25:0a:f1:d2:13:2b:a3:
fc:ba:a0:c9:13:68:3c:80:ed:12:78:f1:2f:75:f5:
4e:51:db:4d:ee:20:8c:12:cc:98:a1:db:ee:04:5e:
07:70:5b:b4:0b:c7:42:69:cb:31:bd:1c:47:50:72:
c6:f8:96:2e:0d:43:24:b2:fc:82:08:4f:05:52:48:
63:af:fe:bc:5c:5a:0f:45:ec:41:9d:5c:04:bd:55:
8c:78:94:bb:30:ff:76:5c:23:37:6d:33:a3:eb:33:
f5:22:02:38:68:ba:5b:d7:ef:bf:98:76:d0:68:20:
a1:60:2a:e2:49:d5:35:90:75:0f:a6:a7:c6:02:2c:
b4:f9:bf:21:56:e8:00:8d:0e:5b:58:32:80:7d:6a:
b1:3c:a5:07:c8:1b:c7:6c:a0:cb:53:8a:ba:19:08:
b3:96:2c:c3:69:35:8b:d2:f2:44:68:07:0e:b8:3b:
f3:05:c4:27:47:70:46:d0:9e:14:7e:6c:f9:a2:22:
99:37:e8:57:29:a6:8a:b4:84:d0:1a:c4:1e:09:e8:
d6:f2:47:a3:71:a7:25:d0:30:c7:a6:93:bc:29:fd:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:69:1C:26:41:78:D4:5D:09:F6:54:21:39:AC:49:3F:6A:37:22:B0
X509v3 Authority Key Identifier:
keyid:EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:09:88:65:fa:26:1b:cc:d7:bf:6f:b7:3e:df:fe:f9:2a:8d:
56:cf:d3:85:c1:62:f6:1d:f9:da:18:e1:eb:7d:fb:3f:6d:fd:
87:fe:69:d8:56:74:30:26:af:11:50:04:49:18:69:11:f4:30:
a8:bb:97:94:f3:07:97:45:03:f1:cd:98:c5:12:15:bf:39:d6:
81:27:cc:e1:2d:74:b9:8f:3e:42:98:68:09:92:4f:88:22:70:
51:00:0c:ed:ce:ad:b3:d5:8b:77:94:2a:66:a7:0d:af:3b:42:
7a:a3:7e:80:13:be:ae:2b:fe:77:36:b7:94:20:f4:7c:3e:82:
71:e1:48:9a:61:64:4a:17:09:4e:91:55:9e:76:3a:37:81:e0:
9a:fd:c1:30:35:8f:1d:f8:63:5b:a9:19:c1:ea:53:bc:07:87:
53:c0:81:e4:67:9f:e8:5a:77:b3:fe:01:60:91:27:85:3c:4c:
33:f7:30:db:25:f1:43:c2:f0:27:2f:be:d2:d1:60:4f:d1:33:
f5:3e:0b:71:9b:bb:6c:9c:5c:38:91:97:3b:23:3e:11:72:5a:
60:d5:76:b4:33:31:b7:b4:be:ca:41:3d:09:98:18:b0:d2:ba:
4b:50:f6:ad:af:ee:80:df:83:97:aa:64:1f:30:ec:ee:c7:f1:
98:2d:30:a0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODc2ODJBRjExMC8GA1UEBRMoRUUxNzk2RTBFQzU5MTNEOEM4OEZCQUJBRjFGODBB
NDU5Q0VFMzkzOTAeFw0yNjAzMjYwNDU2MDhaFw0yNjAzMjgwNDU2MDhaMBgxFjAU
BgNVBAMTDTY5YzRiYzY4LTRjOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCiKNtiQ79pYLXthnqWAYmOLJ5/iy3JNW+A0ZVCWxGA5Zlnyzz0JQrx0hMr
o/y6oMkTaDyA7RJ48S919U5R203uIIwSzJih2+4EXgdwW7QLx0JpyzG9HEdQcsb4
li4NQySy/IIITwVSSGOv/rxcWg9F7EGdXAS9VYx4lLsw/3ZcIzdtM6PrM/UiAjho
ulvX77+YdtBoIKFgKuJJ1TWQdQ+mp8YCLLT5vyFW6ACNDltYMoB9arE8pQfIG8ds
oMtTiroZCLOWLMNpNYvS8kRoBw64O/MFxCdHcEbQnhR+bPmiIpk36Fcppoq0hNAa
xB4J6NbyR6NxpyXQMMemk7wp/SPFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUwmkc
JkF41F0J9lQhOaxJP2o3IrAwHwYDVR0jBBgwFoAU7heW4OxZE9jIj7q68fgKRZzu
OTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg3NjgyL0RCODBBREI4MDA5MjExRUY5QkMxNEQwRDAxNzAwMUIxLzdoZVc0
T3haRTlqSWo3cTY4ZmdLUlp6dU9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzdoZVc0T3haRTlqSWo3cTY4ZmdLUlp6dU9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODc2ODIvREI4MEFEQjgwMDkyMTFFRjlCQzE0RDBEMDE3
MDAxQjEvN2hlVzRPeFpFOWpJajdxNjhmZ0tSWnp1T1RrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1CYhl+iYbzNe/b7c+3/75Ko1Wz9OF
wWL2HfnaGOHrffs/bf2H/mnYVnQwJq8RUARJGGkR9DCou5eU8weXRQPxzZjFEhW/
OdaBJ8zhLXS5jz5CmGgJkk+IInBRAAztzq2z1Yt3lCpmpw2vO0J6o36AE76uK/53
NreUIPR8PoJx4UiaYWRKFwlOkVWedjo3geCa/cEwNY8d+GNbqRnB6lO8B4dTwIHk
Z5/oWnez/gFgkSeFPEwz9zDbJfFDwvAnL77S0WBP0TP1Pgtxm7tsnFw4kZc7Iz4R
clpg1Xa0MzG3tL7KQT0JmBiw0rpLUPatr+6A34OXqmQfMOzux/GYLTCg
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:17:37 2026 by rpki-client