Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
File: hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft (raw, json)
Hash identifier: NlAVy6Omcr0mzfGScnfBimquxNR//ansn9EtPrAhiBc=
Subject key identifier: F2:4B:26:13:AF:A4:47:65:8E:52:05:05:71:96:F3:53:79:90:B2:7B
Authority key identifier: 86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
Certificate issuer: /CN=F36D8D30AF/serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Certificate serial: 049A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
Manifest number: 0499
Signing time: Thu 26 Mar 2026 03:48:17 +0000
Manifest this update: Thu 26 Mar 2026 03:48:16 +0000
Manifest next update: Sat 28 Mar 2026 03:48:16 +0000
Files and hashes: 1: hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl (hash: f7JxaOf7TKZ+eNnuQH1G9rwDTacxAtP+hKX0QCLnbRA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1178 (0x49a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8D30AF, serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Validity
Not Before: Mar 26 03:48:16 2026 GMT
Not After : Mar 28 03:48:16 2026 GMT
Subject: CN=69c4ac81-8475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:c9:bd:e8:60:53:95:66:12:ea:59:f9:91:
96:09:74:13:84:07:e3:2d:54:b4:d2:29:32:24:29:
3a:78:db:8c:a1:10:fc:f3:19:f3:05:b3:dc:72:f7:
ff:48:ab:35:ec:2c:d1:26:fc:d8:a3:20:54:f4:94:
2a:b2:8c:1b:73:98:0c:0b:24:17:0d:3d:dd:c8:d1:
e2:86:7a:30:c9:de:0b:16:d6:68:f5:59:3e:e6:44:
89:df:9c:2b:33:b8:33:54:38:fe:12:95:92:5c:35:
7d:de:e7:8d:46:b7:be:4e:83:d9:68:6b:a1:7a:39:
e0:3a:5f:ba:96:ff:c4:3e:d6:5e:ac:70:46:17:9c:
ce:25:b0:87:1c:d0:d8:9a:11:10:cb:90:16:38:3d:
55:ec:ba:95:5e:c0:b3:a8:12:fa:33:15:53:e4:a6:
76:db:b4:11:d3:23:aa:9d:83:cf:ec:75:e4:be:3d:
d0:c3:ff:6c:3d:15:9b:6c:4f:cb:df:61:b4:30:94:
89:0f:f9:a1:34:54:18:03:6e:52:1e:ce:78:5a:3b:
19:1c:d3:23:8d:d8:f9:e6:1c:b3:4f:9f:b8:f5:9e:
60:b2:e9:d6:45:d1:d8:d2:c9:15:c6:5b:7e:03:09:
fc:77:4e:ec:b7:69:13:6b:8e:e7:ec:56:bd:3e:f8:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4B:26:13:AF:A4:47:65:8E:52:05:05:71:96:F3:53:79:90:B2:7B
X509v3 Authority Key Identifier:
keyid:86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4d:bb:29:d9:91:cd:32:4b:e9:92:b0:49:85:5b:c5:4d:59:
e7:fe:ea:11:76:8e:e2:68:7d:18:f4:a5:12:3e:aa:51:b4:7b:
f0:28:9f:0b:3a:34:d7:4a:ed:c2:fc:4a:be:3a:9c:f0:f3:64:
06:99:1c:e7:e2:65:bc:0d:33:01:ac:3e:7f:9a:37:bd:80:ba:
52:1e:5e:0a:26:35:39:fa:d1:5c:3c:9d:a1:e0:69:0d:a7:8b:
86:57:eb:a3:ae:70:fa:31:98:ab:e9:5d:bd:47:cd:ec:91:64:
ec:33:52:3b:e9:fa:4e:df:46:df:bc:03:c2:11:20:1d:e0:15:
78:0d:9b:89:1d:e2:45:6c:20:c8:32:cd:eb:66:51:b6:ee:9f:
5b:96:f9:39:45:9a:ab:68:27:f8:1d:1a:39:4f:ad:3e:06:cd:
43:dd:61:1a:25:79:c5:b5:bc:ef:73:7b:3f:f7:84:15:ce:8b:
87:d9:ac:03:7c:63:91:c9:b2:a5:d9:0f:f4:bc:96:23:4f:76:
32:9c:e3:46:9d:68:f2:55:4b:61:b8:2e:4d:d6:7b:e4:4a:f9:
7f:04:fe:a1:e0:3f:ff:aa:4e:ac:3c:54:a1:6b:67:e4:6f:47:
59:0e:ac:04:88:2d:77:27:19:cb:ce:33:d0:e2:92:f6:36:f9:
3f:c1:da:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:53 2026 by rpki-client