Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.mft
File: heLrQoy_jUsx-aZGYrwHtsPuQRE.mft (raw, json)
Hash identifier: 3CUux6ryUv//sVYrfScYV1tOvZ7sayfI80PTLPa0VQs=
Subject key identifier: 5B:01:23:C6:2C:96:D8:3B:A9:83:77:07:CA:4F:75:3D:C3:AC:0C:4A
Authority key identifier: 85:E2:EB:42:8C:BF:8D:4B:31:F9:A6:46:62:BC:07:B6:C3:EE:41:11
Certificate issuer: /CN=F36A75D2AF/serialNumber=85E2EB428CBF8D4B31F9A64662BC07B6C3EE4111
Certificate serial: 30
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/heLrQoy_jUsx-aZGYrwHtsPuQRE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.mft
Manifest number: 2F
Signing time: Thu 26 Mar 2026 06:34:36 +0000
Manifest this update: Thu 26 Mar 2026 06:34:35 +0000
Manifest next update: Sat 28 Mar 2026 06:34:35 +0000
Files and hashes: 1: heLrQoy_jUsx-aZGYrwHtsPuQRE.crl (hash: ZccSh6hYIWx0EY3LrnqpAn6CBpZ08nlV2zVrriKVLWY=)
2: 5BE72858059411F1AB4403DFDAE4EC9C.roa (hash: 0OaZbwlKspj+/PLiCfmeszFXjMcg4792APuxNjcF8Pg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.mft
rsync://rpki.afrinic.net/repository/afrinic/heLrQoy_jUsx-aZGYrwHtsPuQRE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A75D2AF, serialNumber=85E2EB428CBF8D4B31F9A64662BC07B6C3EE4111
Validity
Not Before: Mar 26 06:34:35 2026 GMT
Not After : Mar 28 06:34:35 2026 GMT
Subject: CN=69c4d37c-d6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:8f:69:2d:78:5f:fe:3e:f1:44:56:61:f6:
43:4a:ca:9d:3e:3e:1b:56:04:63:7a:e9:20:7b:85:
ad:fe:3e:3f:d4:b1:0d:57:6d:b9:be:06:4d:2f:7c:
2a:94:c3:51:02:af:2d:9e:02:25:d0:52:4b:b0:11:
a9:26:f1:c3:17:44:e1:9c:6c:fd:75:82:30:d2:cb:
c8:6a:c9:5b:34:67:80:84:99:c2:a4:24:9f:f5:5a:
05:1b:5e:bb:71:af:4d:ce:1b:cc:fb:12:cc:07:39:
47:8c:50:b9:1b:41:f8:3f:78:ee:44:5e:2e:73:4c:
f5:6a:dc:4e:13:97:70:4c:87:86:a1:11:d0:b0:4c:
d3:70:62:79:b3:07:29:53:54:52:76:a4:67:a7:9c:
c9:1c:ae:a7:d1:e7:c4:2c:ad:6f:85:b0:0b:07:99:
e6:4c:ed:2f:2a:ba:f7:1d:56:89:31:3e:30:3e:9b:
a5:1f:a0:d6:43:88:38:b6:71:13:f6:af:7f:b4:12:
1d:b5:01:16:42:25:92:51:25:2b:cb:5a:c4:07:81:
98:2a:59:c8:28:3e:ea:0d:49:ca:1a:28:97:7e:77:
01:06:57:3a:33:85:41:bf:d7:df:f5:14:ca:05:00:
07:96:03:55:70:21:c7:a0:85:f3:6c:e1:ff:10:28:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:01:23:C6:2C:96:D8:3B:A9:83:77:07:CA:4F:75:3D:C3:AC:0C:4A
X509v3 Authority Key Identifier:
keyid:85:E2:EB:42:8C:BF:8D:4B:31:F9:A6:46:62:BC:07:B6:C3:EE:41:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/heLrQoy_jUsx-aZGYrwHtsPuQRE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ef:7a:64:aa:a7:46:84:3b:c7:2d:22:a1:fd:cb:00:cb:3b:
01:bc:6c:1a:4d:a6:cc:63:58:d3:10:98:8c:94:70:6a:80:ee:
21:c7:a0:41:6e:7a:6a:74:cc:9a:a7:18:1d:00:46:56:e5:ce:
b1:a6:d1:90:42:8c:9b:5b:88:c7:8b:80:44:c8:f2:15:d6:06:
f1:d4:76:66:7a:77:84:9a:a8:b2:d5:d2:78:f2:aa:ef:78:f1:
4c:72:4e:85:e6:c9:59:27:4d:47:2c:62:3b:3a:85:c1:ce:74:
63:9e:a4:9d:25:7b:2f:71:29:2a:20:c6:0a:85:e8:c0:30:30:
f3:69:32:53:d5:85:8e:ea:b5:03:8a:ae:2e:17:b6:13:ad:9a:
17:9b:d0:99:3c:af:1c:a6:24:44:51:0b:43:c5:26:38:d7:b2:
e0:c3:f7:b7:6c:a6:dc:23:97:91:4b:9a:7f:2d:8f:2c:2f:b0:
d7:2a:54:4a:7d:56:92:1c:ea:63:d7:30:d7:e6:02:8c:c6:19:
a8:ea:af:90:da:41:4c:24:1a:86:94:37:3a:ec:a4:66:07:73:
86:31:e0:48:1f:80:ed:e9:a2:40:44:56:36:c0:35:bb:34:0a:
98:9b:75:eb:5f:f1:77:e2:7e:65:8b:08:cd:07:a9:12:2e:82:
a8:7e:dd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:32:17 2026 by rpki-client