Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
File: QiUOABGQATIiltvNEo4jCi0GSmM.mft (raw, json)
Hash identifier: rnx1/JSsU/FmXeg+eKHNBjdBX/vzpeBrKauABY3e2so=
Subject key identifier: 62:94:14:D5:73:12:25:D1:DB:D0:43:10:D9:60:F5:6E:1F:D5:A8:E3
Authority key identifier: 42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63
Certificate issuer: /CN=F36D8020AF/serialNumber=42250E00119001322296DBCD128E230A2D064A63
Certificate serial: 84
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
Manifest number: 84
Signing time: Thu 26 Mar 2026 06:20:31 +0000
Manifest this update: Thu 26 Mar 2026 06:20:30 +0000
Manifest next update: Sat 28 Mar 2026 06:20:30 +0000
Files and hashes: 1: QiUOABGQATIiltvNEo4jCi0GSmM.crl (hash: wRkDHHzlmiqpGuiCnZeNc9k3PfAnEHoOjAqCzcIGjCg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8020AF, serialNumber=42250E00119001322296DBCD128E230A2D064A63
Validity
Not Before: Mar 26 06:20:30 2026 GMT
Not After : Mar 28 06:20:30 2026 GMT
Subject: CN=69c4d02f-0a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:73:1d:65:77:ff:44:b7:1e:a9:33:13:1b:
a8:21:56:e6:a6:5c:8e:b3:3f:63:62:96:3e:77:a0:
0e:10:15:c1:c6:3d:48:ee:8e:ec:b1:ce:bb:c7:6d:
95:30:3d:16:46:18:e1:b6:84:fb:60:df:f8:2f:f3:
81:38:01:bb:76:7f:e9:57:40:54:0e:28:e1:3e:48:
b3:29:ff:32:96:6c:29:c1:91:76:f5:5b:f4:4d:af:
64:dc:82:82:cd:8e:ce:42:0f:7a:50:2c:43:4c:7a:
ef:40:a0:58:bf:78:4c:3f:81:43:11:0b:f0:4c:fa:
f3:a7:f0:72:84:df:c4:af:82:c9:5d:8d:f4:c7:75:
23:8a:d6:97:a2:dc:4e:15:08:5a:67:bf:9c:f6:bb:
6c:d2:c4:2e:9a:64:e3:45:b1:2a:3a:7b:70:ef:bb:
4b:7d:53:dc:9b:9d:f1:79:7f:01:41:9d:db:6b:91:
ef:a7:d1:8c:d1:45:7e:50:68:e1:a9:6c:01:90:4f:
99:8b:8d:5e:4f:69:6c:95:e5:a8:3f:f7:8c:7b:85:
24:8c:dd:cb:a8:e3:b3:fc:9f:d8:06:94:29:68:2b:
50:46:d8:94:08:e3:b0:9f:57:d2:43:be:9d:2e:9c:
cf:ea:1c:b1:9b:ce:8b:66:ae:62:c8:ff:8d:8e:9b:
3c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:94:14:D5:73:12:25:D1:DB:D0:43:10:D9:60:F5:6E:1F:D5:A8:E3
X509v3 Authority Key Identifier:
keyid:42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:6f:10:72:e7:c2:71:de:60:e3:a1:93:e1:3e:64:cf:b7:5a:
06:4a:96:a2:65:58:23:71:dd:35:7d:30:60:97:1f:65:42:4e:
6c:2f:c6:06:40:6d:cd:cc:fa:65:c0:01:a9:45:a4:18:1a:87:
df:57:dc:96:b4:15:11:a9:cd:01:31:9d:55:34:4b:bf:17:b4:
7c:e6:36:15:ac:68:d6:88:4e:55:cb:0a:31:07:ef:c9:ee:66:
1a:36:1b:f8:75:7b:94:5e:9f:24:cc:b7:1e:61:39:7f:7a:d4:
6d:32:38:08:af:2b:0c:b0:a4:de:a9:da:a3:e6:9a:2c:e7:8b:
13:37:ab:3a:a7:8c:7b:6b:28:1f:00:c7:1e:75:c2:bb:a7:5c:
dd:16:53:fd:c8:10:db:43:3d:3a:bf:b2:90:65:cb:2b:41:3c:
4c:52:7f:25:45:89:4d:a5:73:fc:1f:34:d2:35:d4:45:a3:03:
52:c0:70:12:63:ab:e6:1a:1e:34:f2:00:8e:b0:93:d3:dc:19:
9b:c5:2b:e6:b8:b4:4f:7c:3a:a2:e9:b2:06:d2:d1:ad:a4:82:
9e:30:89:50:3d:28:8f:bb:8d:bf:50:b9:32:e1:48:8a:37:ad:
4a:95:24:80:46:03:38:62:d0:65:cd:c4:97:04:a2:34:e7:8b:
d3:c7:b4:a5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDgwMjBBRjExMC8GA1UEBRMoNDIyNTBFMDAxMTkwMDEzMjIyOTZEQkNEMTI4RTIz
MEEyRDA2NEE2MzAeFw0yNjAzMjYwNjIwMzBaFw0yNjAzMjgwNjIwMzBaMBgxFjAU
BgNVBAMTDTY5YzRkMDJmLTBhNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsOnMdZXf/RLceqTMTG6ghVuamXI6zP2Nilj53oA4QFcHGPUjujuyxzrvH
bZUwPRZGGOG2hPtg3/gv84E4Abt2f+lXQFQOKOE+SLMp/zKWbCnBkXb1W/RNr2Tc
goLNjs5CD3pQLENMeu9AoFi/eEw/gUMRC/BM+vOn8HKE38SvgsldjfTHdSOK1pei
3E4VCFpnv5z2u2zSxC6aZONFsSo6e3Dvu0t9U9ybnfF5fwFBndtrke+n0YzRRX5Q
aOGpbAGQT5mLjV5PaWyV5ag/94x7hSSM3cuo47P8n9gGlCloK1BG2JQI47CfV9JD
vp0unM/qHLGbzotmrmLI/42Omzz/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUYpQU
1XMSJdHb0EMQ2WD1bh/VqOMwHwYDVR0jBBgwFoAUQiUOABGQATIiltvNEo4jCi0G
SmMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ4MDIwLzBBRjUxQUJFQzM5OTExRjBCQkNFMTg4OURBRTRFQzlDL1FpVU9B
QkdRQVRJaWx0dk5FbzRqQ2kwR1NtTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1FpVU9BQkdRQVRJaWx0dk5FbzRqQ2kwR1NtTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDgwMjAvMEFGNTFBQkVDMzk5MTFGMEJCQ0UxODg5REFF
NEVDOUMvUWlVT0FCR1FBVElpbHR2TkVvNGpDaTBHU21NLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBGbxBy58Jx3mDjoZPhPmTPt1oGSpai
ZVgjcd01fTBglx9lQk5sL8YGQG3NzPplwAGpRaQYGoffV9yWtBURqc0BMZ1VNEu/
F7R85jYVrGjWiE5VywoxB+/J7mYaNhv4dXuUXp8kzLceYTl/etRtMjgIrysMsKTe
qdqj5pos54sTN6s6p4x7aygfAMcedcK7p1zdFlP9yBDbQz06v7KQZcsrQTxMUn8l
RYlNpXP8HzTSNdRFowNSwHASY6vmGh408gCOsJPT3BmbxSvmuLRPfDqi6bIG0tGt
pIKeMIlQPSiPu42/ULky4UiKN61KlSSARgM4YtBlzcSXBKI054vTx7Sl
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:35:15 2026 by rpki-client