Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
File: XulhNES2heRACvJQMvMjaKxzhgo.mft (raw, json)
Hash identifier: uaQl2sJBu8W4xE+KI8Adpw2wa3kibEM+kZP2/9odZh4=
Subject key identifier: C2:97:EE:DB:CB:A6:20:88:79:02:02:A5:CA:29:E2:E4:3F:EC:9A:E1
Authority key identifier: 5E:E9:61:34:44:B6:85:E4:40:0A:F2:50:32:F3:23:68:AC:73:86:0A
Certificate issuer: /CN=F36EE763AF/serialNumber=5EE9613444B685E4400AF25032F32368AC73860A
Certificate serial: 4B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
Manifest number: 4A
Signing time: Thu 26 Mar 2026 06:29:02 +0000
Manifest this update: Thu 26 Mar 2026 06:29:01 +0000
Manifest next update: Sat 28 Mar 2026 06:29:01 +0000
Files and hashes: 1: XulhNES2heRACvJQMvMjaKxzhgo.crl (hash: kY6iU2lfj3syVzeKc3J0e9QumPnaZVv74rFiz35hsJM=)
2: 8CF50C7EF09C11F09220C691DAE4EC9C.roa (hash: RBXfrMLemnAtHw5865OVdIO7wWh6V9X2nw9Mms9JBjU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EE763AF, serialNumber=5EE9613444B685E4400AF25032F32368AC73860A
Validity
Not Before: Mar 26 06:29:01 2026 GMT
Not After : Mar 28 06:29:01 2026 GMT
Subject: CN=69c4d22e-0789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:52:e6:e8:70:be:c1:9a:ae:53:20:0d:42:
64:60:74:c8:fe:6c:a0:45:c7:c1:8f:27:72:cb:56:
7c:5c:ec:79:15:c0:94:e0:22:41:7f:9b:88:42:d3:
de:b8:b2:67:e7:33:86:2a:e5:59:22:d2:06:0a:e5:
50:9a:23:fa:f8:46:83:78:3d:33:b8:61:ec:79:2a:
3c:bd:b3:92:c8:d1:a4:20:16:fb:81:60:6e:de:9b:
89:76:1d:39:24:f1:58:80:6c:ab:47:25:dc:96:13:
e1:07:a1:22:e4:55:d9:25:ec:88:10:5d:c9:a9:80:
1a:24:7f:81:5a:4b:42:e4:e0:4b:e9:e8:76:87:59:
cb:be:a5:b1:78:04:ef:47:76:fc:5d:28:9c:ff:d1:
08:37:47:42:a6:2d:40:99:f4:ef:73:23:d5:8c:81:
6c:05:ba:ff:6c:30:d3:3f:7f:80:62:41:ab:c7:1e:
ea:ad:82:a8:51:03:23:c3:dc:02:09:e9:85:ea:38:
82:02:2d:99:97:e0:89:0c:e8:ac:f9:d2:25:46:2a:
88:6e:fa:0f:11:01:a4:ee:f3:cc:cd:ba:4d:d7:45:
4b:8a:ea:f6:68:64:11:c0:10:51:ac:60:fa:11:69:
8c:26:43:2b:6b:7d:bb:35:cd:ba:44:5d:ad:c6:fb:
52:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:97:EE:DB:CB:A6:20:88:79:02:02:A5:CA:29:E2:E4:3F:EC:9A:E1
X509v3 Authority Key Identifier:
keyid:5E:E9:61:34:44:B6:85:E4:40:0A:F2:50:32:F3:23:68:AC:73:86:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:02:1a:e2:3d:d8:20:97:85:a2:e6:53:31:0f:5d:3f:8c:b8:
db:97:18:98:4a:a0:fd:87:07:be:c1:fc:3a:f8:04:8c:52:41:
39:47:8a:02:c2:4c:81:f8:2c:ce:f7:3a:23:4a:a8:9f:4e:ee:
fb:b9:94:ae:1a:90:4f:4c:79:1c:13:d5:28:f2:d2:66:a0:3f:
45:06:02:98:55:0b:e5:ef:bf:1c:95:ff:47:4c:87:f5:20:cd:
d2:48:f9:43:70:eb:6e:a8:de:db:10:ae:df:1b:df:a0:b5:cb:
db:48:9b:d9:0d:b5:4b:6a:34:4a:ed:eb:cc:87:d4:bf:b4:61:
42:cf:47:18:37:0a:b2:ab:15:a3:eb:37:03:ad:58:a9:12:40:
fb:99:3b:1d:22:28:de:d2:82:97:68:d1:46:9d:be:d8:41:b7:
e9:4f:4f:85:89:53:03:56:17:5d:ef:ee:04:ea:27:78:8e:24:
a3:68:fb:77:64:f4:54:b4:35:67:52:c9:e0:b2:c9:a1:67:97:
29:2e:3f:2c:31:bb:74:f2:8b:b5:db:43:06:b3:e5:ae:29:d6:
47:85:7c:89:6a:0b:f6:1b:ba:a4:82:3c:4c:31:a6:67:ac:cf:
db:b7:9e:8c:ce:b7:5f:d5:b6:60:a3:36:1d:46:2f:e0:5d:95:
d0:5d:e1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:42 2026 by rpki-client