Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
File: AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft (raw, json)
Hash identifier: 1OdeBqMOC+tmgR5CRBwX2uMd31U17BgpYBuzFaFb3zU=
Subject key identifier: 65:F5:9D:AC:AD:05:66:37:19:C1:BB:FC:85:97:8B:35:AB:C3:64:A8
Authority key identifier: 00:6E:0B:E2:10:90:79:2D:18:35:61:97:51:0A:D3:40:EC:04:23:53
Certificate issuer: /CN=F3695947AF/serialNumber=006E0BE21090792D18356197510AD340EC042353
Certificate serial: E5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
Manifest number: E5
Signing time: Thu 26 Mar 2026 06:07:40 +0000
Manifest this update: Thu 26 Mar 2026 06:07:39 +0000
Manifest next update: Sat 28 Mar 2026 06:07:39 +0000
Files and hashes: 1: AG4L4hCQeS0YNWGXUQrTQOwEI1M.crl (hash: +Ai0aCYFEZNBJdh34lyP3yVhO/D+l7atbWzoY3+urnA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
rsync://rpki.afrinic.net/repository/afrinic/AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3695947AF, serialNumber=006E0BE21090792D18356197510AD340EC042353
Validity
Not Before: Mar 26 06:07:39 2026 GMT
Not After : Mar 28 06:07:39 2026 GMT
Subject: CN=69c4cd2c-89f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c4:8e:3c:3e:5a:4b:60:fd:59:60:c7:c7:88:
b5:8f:81:3f:31:4f:7f:2d:16:21:3f:e3:02:ed:eb:
ec:07:e6:84:c8:ea:56:64:25:08:c2:9a:9f:b8:c6:
74:81:b0:9f:e5:15:6a:ee:9b:55:b7:39:b6:7a:2e:
09:a2:b3:7d:93:90:30:a9:05:39:fd:0f:eb:a6:ac:
59:d7:91:36:8a:3c:b1:50:99:6a:49:b8:fa:bb:39:
03:1b:4a:e7:2a:5d:7d:2d:0a:e5:c9:38:0f:6b:97:
3b:42:22:f5:b8:60:3b:4d:88:16:a1:89:9e:87:4c:
14:61:5d:ae:cd:d9:a5:af:f3:df:5c:69:25:b6:8b:
ab:d5:f9:20:9f:57:a5:25:e7:b0:0c:5d:9c:db:0f:
ae:7e:41:4e:e9:a2:64:b3:a2:0d:f3:23:de:1d:13:
fa:bb:2d:d6:66:9e:4a:6c:fc:25:3b:8d:b5:25:4a:
cc:14:d7:16:8e:0f:65:ef:de:1a:7d:5b:64:4a:0b:
5d:ac:fa:8f:4a:94:ce:96:ce:c5:f0:2a:a7:81:58:
84:00:5e:ed:c2:69:10:0e:43:ea:8e:2c:c4:39:c5:
12:5f:55:6e:3e:4f:ac:86:86:a4:63:6a:e6:39:47:
0f:2c:16:24:af:45:eb:de:74:67:e0:34:82:5c:75:
0e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F5:9D:AC:AD:05:66:37:19:C1:BB:FC:85:97:8B:35:AB:C3:64:A8
X509v3 Authority Key Identifier:
keyid:00:6E:0B:E2:10:90:79:2D:18:35:61:97:51:0A:D3:40:EC:04:23:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:27:9d:f0:2f:10:9e:dc:22:22:1b:1f:de:d5:0f:81:c7:fd:
6a:ea:33:03:b6:7b:df:bb:12:cc:9f:d1:23:4f:25:83:bd:6d:
ed:80:fa:30:e2:82:5f:5f:7f:b9:0d:d4:eb:6c:ba:0c:2d:4d:
c3:da:af:a4:b0:b4:bd:d0:7a:cc:30:79:39:9a:5f:65:92:07:
50:64:de:7f:9f:74:73:0e:52:3c:f8:56:62:c5:65:ed:a2:f1:
fe:67:4b:4b:36:7d:3a:80:af:ef:a1:22:60:80:cf:2c:58:1e:
a0:e8:aa:bb:02:3c:f6:2a:b1:f5:e6:0c:53:91:03:3f:eb:ef:
76:69:44:a1:ca:af:69:49:d6:f9:79:c6:aa:44:00:2f:8b:40:
e3:d9:9a:cc:05:dc:9c:7e:99:96:43:f7:2e:33:7f:2f:16:ba:
75:31:f4:1c:dc:4a:8c:a2:b0:76:91:d6:d7:4b:8e:9e:64:77:
14:be:6f:40:c7:f8:c9:ea:84:d2:c8:3a:8f:15:07:90:5f:be:
c4:42:c9:51:76:f5:da:40:11:c3:9a:ed:96:ee:3e:bd:48:b3:
6f:4e:80:e2:e9:79:e8:4e:79:91:d2:c4:c6:f6:4b:85:68:df:
2c:be:72:ab:b8:7b:3e:f1:ea:2f:ca:a9:8e:a5:be:12:5f:2e:
47:68:ef:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:47:47 2026 by rpki-client