Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
File: sNdja0QI8KwoxZz1uRZkvYIxQFA.mft (raw, json)
Hash identifier: 2fuY1KfqWocKzfw4IZ3I1tpnUoIn5gDZHXbMO0SqYbA=
Subject key identifier: 2F:4E:23:02:CF:81:2D:B9:25:41:2B:BC:9D:DD:19:DF:9A:54:64:BE
Authority key identifier: B0:D7:63:6B:44:08:F0:AC:28:C5:9C:F5:B9:16:64:BD:82:31:40:50
Certificate issuer: /CN=F36CEA2AAF/serialNumber=B0D7636B4408F0AC28C59CF5B91664BD82314050
Certificate serial: 0124
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
Manifest number: 0124
Signing time: Thu 26 Mar 2026 05:55:36 +0000
Manifest this update: Thu 26 Mar 2026 05:55:36 +0000
Manifest next update: Sat 28 Mar 2026 05:55:36 +0000
Files and hashes: 1: sNdja0QI8KwoxZz1uRZkvYIxQFA.crl (hash: rd8IaEtX19z+qxTf5IhBLcrOWKO9SSbrPipqC3Mc2Mo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CEA2AAF, serialNumber=B0D7636B4408F0AC28C59CF5B91664BD82314050
Validity
Not Before: Mar 26 05:55:36 2026 GMT
Not After : Mar 28 05:55:36 2026 GMT
Subject: CN=69c4ca58-36d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:14:66:a6:2e:6e:a9:8c:11:7e:5b:ee:0d:b3:
fd:6a:91:b2:d8:66:23:c2:b2:ca:91:a4:cc:dc:6c:
0d:f2:42:c9:51:8e:b9:68:6e:1e:86:cb:a5:11:5e:
4e:88:2c:58:0d:e0:4c:08:f3:19:6a:52:39:26:f3:
fc:98:57:16:79:83:55:2d:90:6f:5c:81:ce:d8:75:
55:02:75:c3:52:c6:87:2e:a2:e6:db:9a:fc:04:c1:
3c:1d:5d:bf:b3:28:25:33:e9:0e:eb:c7:ab:1c:5d:
fc:d5:c4:c2:d5:b6:b5:2e:76:67:b8:ca:a6:04:8d:
56:ae:3d:14:3f:5f:11:16:d1:73:2d:f1:51:d5:94:
c8:c6:83:d2:c9:15:01:99:c4:8a:b7:1e:fb:74:60:
80:78:21:89:60:4d:7e:0a:6a:a9:09:b2:ac:df:20:
d2:30:35:55:9d:f9:06:81:8f:c0:bc:71:2f:bb:f8:
9a:79:84:2d:df:47:92:f7:87:ce:c0:d9:3f:62:8e:
d9:87:97:33:21:68:1f:5b:e4:ec:1a:61:ee:fb:3f:
bf:42:c8:98:d6:9b:7b:76:8c:a3:88:3b:49:e3:80:
f3:46:55:24:03:cc:62:d2:de:49:f8:ac:16:5a:f6:
da:02:73:d8:82:0f:b4:dd:46:4e:15:05:50:ea:45:
e1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4E:23:02:CF:81:2D:B9:25:41:2B:BC:9D:DD:19:DF:9A:54:64:BE
X509v3 Authority Key Identifier:
keyid:B0:D7:63:6B:44:08:F0:AC:28:C5:9C:F5:B9:16:64:BD:82:31:40:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:8e:56:cc:ae:fa:99:13:cf:3c:26:c1:52:ac:af:ed:27:02:
81:6a:e0:d0:50:d9:d1:6b:8d:2b:07:8c:29:e5:ed:c5:72:ef:
8f:ce:fc:e1:ec:5d:c6:a0:8f:48:81:49:32:50:01:e8:05:20:
83:e6:da:ca:d5:04:cd:d8:de:9c:37:c3:f1:41:a9:4e:d2:6a:
04:0f:c9:72:4f:35:ca:5f:47:ca:9d:73:02:94:3a:97:23:12:
6b:d4:bd:86:2e:45:a4:a6:e2:66:67:69:e9:6e:6d:1a:63:02:
6c:31:ed:f7:33:b6:34:f2:10:bb:a0:77:20:2b:8b:0d:7e:79:
e5:02:29:d6:ba:4f:e4:16:be:e4:b4:1f:5f:1a:7e:83:cd:84:
52:85:8a:c3:ce:26:c0:48:00:16:2a:9d:e4:99:e0:4f:be:be:
9e:07:65:70:da:87:9a:9a:e9:e5:75:71:2d:94:2f:55:59:b5:
28:24:8b:51:34:5a:87:6c:57:e4:56:05:bc:d4:2a:e7:9a:d7:
94:fd:ed:9d:3f:78:28:11:30:91:06:96:55:96:95:46:76:fe:
db:1e:6d:07:c7:5e:cc:46:46:fb:ca:96:10:2d:e2:a3:c2:e3:
15:06:b3:94:18:14:4d:65:1c:23:0e:e7:ec:43:6e:f2:2a:a3:
fc:6b:f9:a6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICASQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0VBMkFBRjExMC8GA1UEBRMoQjBENzYzNkI0NDA4RjBBQzI4QzU5Q0Y1QjkxNjY0
QkQ4MjMxNDA1MDAeFw0yNjAzMjYwNTU1MzZaFw0yNjAzMjgwNTU1MzZaMBgxFjAU
BgNVBAMTDTY5YzRjYTU4LTM2ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJFGamLm6pjBF+W+4Ns/1qkbLYZiPCssqRpMzcbA3yQslRjrlobh6Gy6UR
Xk6ILFgN4EwI8xlqUjkm8/yYVxZ5g1UtkG9cgc7YdVUCdcNSxocuoubbmvwEwTwd
Xb+zKCUz6Q7rx6scXfzVxMLVtrUudme4yqYEjVauPRQ/XxEW0XMt8VHVlMjGg9LJ
FQGZxIq3Hvt0YIB4IYlgTX4KaqkJsqzfINIwNVWd+QaBj8C8cS+7+Jp5hC3fR5L3
h87A2T9ijtmHlzMhaB9b5OwaYe77P79CyJjWm3t2jKOIO0njgPNGVSQDzGLS3kn4
rBZa9toCc9iCD7TdRk4VBVDqReGzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUL04j
As+BLbklQSu8nd0Z35pUZL4wHwYDVR0jBBgwFoAUsNdja0QI8KwoxZz1uRZkvYIx
QFAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNFQTJBLzRDNjY5QjJDNDg0NjExRjA5N0Q4NEFEOURBRTRFQzlDL3NOZGph
MFFJOEt3b3haejF1UlprdllJeFFGQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3NOZGphMFFJOEt3b3haejF1UlprdllJeFFGQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Q0VBMkEvNEM2NjlCMkM0ODQ2MTFGMDk3RDg0QUQ5REFF
NEVDOUMvc05kamEwUUk4S3dveFp6MXVSWmt2WUl4UUZBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwjlbMrvqZE888JsFSrK/tJwKBauDQ
UNnRa40rB4wp5e3Fcu+Pzvzh7F3GoI9IgUkyUAHoBSCD5trK1QTN2N6cN8PxQalO
0moED8lyTzXKX0fKnXMClDqXIxJr1L2GLkWkpuJmZ2npbm0aYwJsMe33M7Y08hC7
oHcgK4sNfnnlAinWuk/kFr7ktB9fGn6DzYRShYrDzibASAAWKp3kmeBPvr6eB2Vw
2oeamunldXEtlC9VWbUoJItRNFqHbFfkVgW81CrnmteU/e2dP3goETCRBpZVlpVG
dv7bHm0Hx17MRkb7ypYQLeKjwuMVBrOUGBRNZRwjDufsQ27yKqP8a/mm
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:44 2026 by rpki-client