Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
File: tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft (raw, json)
Hash identifier: 5oikg93KQjsnFjJfn3qwjXXnGOtu0DhlqrlMi2qWCbQ=
Subject key identifier: 4D:F4:BC:8E:CA:B4:A7:82:02:58:FD:70:1C:DF:0E:49:30:5B:1B:1A
Authority key identifier: B4:C0:1C:4D:61:E8:05:90:05:DA:EA:4C:67:7A:16:E4:44:7D:55:2C
Certificate issuer: /CN=F36D26A1AF/serialNumber=B4C01C4D61E8059005DAEA4C677A16E4447D552C
Certificate serial: 027D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
Manifest number: 027D
Signing time: Thu 26 Mar 2026 05:07:25 +0000
Manifest this update: Thu 26 Mar 2026 05:07:24 +0000
Manifest next update: Sat 28 Mar 2026 05:07:24 +0000
Files and hashes: 1: tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl (hash: 6hg1/8E33JPzXb+N8zvIx25+lPifXaAn+IJtSQyz2QM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 637 (0x27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D26A1AF, serialNumber=B4C01C4D61E8059005DAEA4C677A16E4447D552C
Validity
Not Before: Mar 26 05:07:24 2026 GMT
Not After : Mar 28 05:07:24 2026 GMT
Subject: CN=69c4bf0d-abe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:04:4e:33:33:c6:7d:68:c2:cc:1c:87:12:
6d:1d:8b:ca:f5:f2:86:fc:39:e2:2b:c1:f8:ee:80:
ee:66:73:79:73:e3:5c:10:9b:f0:89:4a:58:af:8f:
90:ad:ce:c2:3f:0d:de:d0:e4:9c:33:5f:45:41:19:
58:fc:65:9e:ee:c6:7e:e5:87:72:ea:89:25:3a:65:
4d:da:c6:03:1a:9c:ee:46:60:5e:97:e1:ab:3b:a2:
72:ba:50:33:ea:61:7b:bf:4e:64:47:14:9e:33:b8:
0e:c8:2d:b3:37:49:1f:9b:72:fd:a0:68:55:97:3d:
05:e4:5f:43:2c:d8:7a:d0:c9:82:86:6d:b5:9e:ea:
88:22:ae:79:83:88:a3:e0:02:5d:72:8d:24:21:26:
ab:b5:de:ec:f3:f3:fd:eb:60:d2:c3:c8:47:2e:0c:
54:15:08:e7:58:8e:63:e8:0a:24:b8:e8:5f:7f:d0:
4a:bb:8d:2a:4c:cd:93:e1:93:2e:50:f4:ae:10:d6:
94:e5:2b:29:d4:82:c9:aa:e7:a0:e0:5f:4e:97:39:
58:2b:7f:0d:d9:c8:cf:2e:9f:2a:47:07:3f:d2:ca:
58:ab:25:62:66:c8:b4:7c:9d:b7:62:df:a1:45:53:
b8:6a:e8:ec:11:76:62:71:17:f2:38:fe:ef:7f:38:
7d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F4:BC:8E:CA:B4:A7:82:02:58:FD:70:1C:DF:0E:49:30:5B:1B:1A
X509v3 Authority Key Identifier:
keyid:B4:C0:1C:4D:61:E8:05:90:05:DA:EA:4C:67:7A:16:E4:44:7D:55:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:7a:41:7e:d8:28:0f:67:c6:9c:1c:9a:99:f5:1c:5e:36:b3:
c0:a4:1c:70:1a:85:a9:0e:a1:71:4e:ee:30:fa:7d:cd:72:d1:
c3:ea:4c:53:f1:c0:d8:b2:9d:66:5a:d8:f0:0e:d0:da:9b:52:
50:cc:0e:fe:b2:a1:e2:7a:17:c6:a5:ac:4e:0b:28:93:e9:56:
66:e4:05:da:d3:28:87:98:16:73:31:90:f1:6c:61:01:1d:bd:
d2:e7:22:e4:37:37:96:c4:a8:9d:63:75:c6:c4:05:70:78:f0:
21:11:56:1b:ca:42:d6:1b:13:25:dd:15:e3:0c:1c:aa:b1:93:
20:91:9e:e0:fe:10:af:ce:d0:e0:3f:99:fd:07:2c:26:fb:99:
a7:e9:78:7c:bc:39:04:54:d4:e2:33:71:bb:c9:71:59:3a:f5:
6f:b4:6d:53:21:26:85:7c:65:17:3c:c3:cd:9d:39:91:b2:5f:
cb:e4:c0:e9:b8:64:8e:d8:3c:71:07:ba:f6:e5:87:16:ad:cd:
d6:41:52:b3:b9:45:87:c9:63:25:e4:8d:0e:9b:27:47:8b:fd:
67:08:6a:0c:59:1c:35:b0:7e:42:ce:6c:fd:67:98:45:bc:09:
a3:a7:d0:03:14:6d:32:7c:09:23:0c:a9:31:29:c4:68:08:fd:
5e:a2:f8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:04:32 2026 by rpki-client