Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
File: cfbjXgELx4fYmgtLqTPZlvrU2tI.mft (raw, json)
Hash identifier: fQ6SwdLOoHfqpEuryvgxQgG49pITQyB2Fi1enetHyIw=
Subject key identifier: BF:7D:CA:17:77:D6:D3:84:84:82:0D:28:C6:D8:8E:AF:7E:EE:DD:C1
Authority key identifier: 71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
Certificate issuer: /CN=F36882A1AF/serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Certificate serial: 070A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
Manifest number: 070A
Signing time: Thu 26 Mar 2026 02:31:29 +0000
Manifest this update: Thu 26 Mar 2026 02:31:28 +0000
Manifest next update: Sat 28 Mar 2026 02:31:28 +0000
Files and hashes: 1: cfbjXgELx4fYmgtLqTPZlvrU2tI.crl (hash: p1xwT00TIJ1wykHPKFsRlid+FA3eVOkLZ70d17QBrd8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1802 (0x70a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36882A1AF, serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Validity
Not Before: Mar 26 02:31:28 2026 GMT
Not After : Mar 28 02:31:28 2026 GMT
Subject: CN=69c49a81-c0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:03:21:75:75:1e:ee:ff:0d:90:3c:e8:a5:8a:
a6:a3:c0:f2:9e:c3:47:d2:f7:7d:41:33:89:59:99:
b9:ec:51:56:99:c3:33:8f:44:f1:3d:0e:ef:d6:bb:
1c:d1:0e:ca:fd:76:06:5a:4f:f1:d7:71:22:98:01:
0f:48:c9:ab:4d:8c:1a:04:d2:4b:6d:93:18:cf:85:
25:b2:13:ab:d1:a5:f5:38:20:3b:aa:2c:de:5c:bb:
03:38:dc:64:39:3d:4c:1b:c2:55:dd:c2:ab:36:74:
da:ed:3d:4c:4e:06:f7:e7:d8:6b:19:95:ec:d7:7e:
06:b5:a9:3f:23:8f:52:e0:dd:ee:75:a7:fa:77:11:
86:99:59:81:44:64:4d:c4:b2:34:93:70:a0:0f:88:
fa:80:27:bf:e8:21:70:cf:e0:08:b4:72:26:2d:9a:
6e:dd:8b:e6:ab:db:01:bb:dc:dc:9f:3c:9b:92:c8:
46:20:2e:5c:96:b2:1a:cd:41:e4:70:df:f1:99:6a:
11:ca:4a:43:5e:f4:97:36:97:2a:f6:0e:33:b7:43:
06:43:84:ac:73:76:8a:3a:00:25:53:ce:db:05:ef:
d5:07:f9:85:59:b8:50:d0:4e:c5:bd:61:66:ba:1a:
d1:0f:92:e7:fc:96:2b:b1:9e:0a:d1:a3:91:ca:a9:
64:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7D:CA:17:77:D6:D3:84:84:82:0D:28:C6:D8:8E:AF:7E:EE:DD:C1
X509v3 Authority Key Identifier:
keyid:71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:a1:4f:12:e1:c0:e2:dc:21:0f:7c:29:dc:cc:21:f0:07:9b:
95:2e:d5:32:04:ab:26:5c:ca:e6:d1:94:7c:69:89:d4:ea:18:
cd:9d:59:05:46:4d:0f:b6:82:92:ca:55:37:80:f5:7d:3c:44:
d7:f2:e5:12:eb:1e:0d:45:d7:56:91:d0:b3:75:ba:5e:47:d7:
4c:b6:14:4b:13:91:13:db:4d:24:db:a6:16:9f:c1:c6:62:e4:
ec:93:ff:92:7c:80:63:9d:1c:e7:60:d1:b7:13:40:53:30:8c:
44:8e:8b:dc:75:bc:55:22:6f:7b:eb:ec:3f:c9:00:97:ae:65:
b4:ea:d7:78:bc:50:14:ce:e7:52:dd:01:18:5e:f6:de:69:c1:
dc:34:21:7e:31:ab:05:fd:e8:6c:42:0c:5c:64:eb:5b:de:1e:
18:19:ae:06:04:6c:51:1e:fd:5b:db:63:1c:f6:1e:63:4a:01:
f5:b3:e7:be:b2:a1:5e:4e:2a:7f:63:35:8d:ce:f9:0c:cc:10:
89:6e:d0:10:14:d1:9f:7d:74:26:af:64:56:e3:94:02:8d:b2:
8c:41:09:3b:53:4f:02:66:01:72:e9:a8:5a:cd:7d:a8:e7:4c:
77:29:68:6b:4c:b0:2f:03:e7:4b:df:74:0e:d6:a3:25:09:9e:
9f:a7:e9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:36:41 2026 by rpki-client