Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
File: ksorQe7D4BoZOJ4iIIisP8OhSO0.mft (raw, json)
Hash identifier: /JIg20/r3wnmxS6+qQJrWHujzFGrlzodTRISupH7Cu0=
Subject key identifier: 09:C7:7B:26:93:FF:A3:04:1E:04:FE:95:45:A1:10:C1:5B:1D:C1:8A
Authority key identifier: 92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
Certificate issuer: /CN=F3624132AF/serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Certificate serial: 01A7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
Manifest number: 01A5
Signing time: Mon 02 Mar 2026 03:14:00 +0000
Manifest this update: Mon 02 Mar 2026 03:13:59 +0000
Manifest next update: Wed 04 Mar 2026 03:13:59 +0000
Files and hashes: 1: ksorQe7D4BoZOJ4iIIisP8OhSO0.crl (hash: xnt3/jpN5VHWjzyr4d5a2utqG/rZZBMtrLBDUiHiYp4=)
2: 2C6E0438D1B111EFAE9F9072762E951A.roa (hash: B0CbiM/bAowuKqrYGTi8MxK8c+r/1xQQXbcFOdolRIY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3624132AF, serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Validity
Not Before: Mar 2 03:13:59 2026 GMT
Not After : Mar 4 03:13:59 2026 GMT
Subject: CN=69a50078-eccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:f6:13:6e:ae:c1:10:88:82:ee:c4:d3:f4:
ce:08:43:1c:5b:9b:0c:a0:66:75:1f:7e:2c:8e:9e:
74:a7:8e:44:d1:82:78:b9:97:74:bb:c0:4c:e8:75:
22:39:bc:12:18:4b:9c:e4:b8:62:23:77:36:08:7e:
60:73:34:c2:3b:3d:a4:b3:cb:45:46:3c:32:2b:7f:
77:f9:c5:01:9f:d8:90:9c:3d:0b:74:f9:4e:58:1e:
42:cd:73:42:1f:09:d6:32:f6:b3:82:13:f2:37:41:
4f:60:4a:08:fc:a7:5d:a3:42:70:2c:4f:4a:65:92:
8b:32:eb:8b:d1:ab:ee:c2:08:18:62:87:1f:54:41:
8a:fc:08:e2:94:01:a9:dc:c0:b9:4d:71:ec:5b:96:
b4:91:12:b7:2d:39:2a:98:44:7d:ee:7b:c1:a6:04:
4e:57:cd:48:86:26:0f:69:35:25:dc:af:f8:2e:32:
e9:e1:12:83:5d:28:c9:cc:b2:9b:48:90:86:67:b8:
12:f3:6e:67:56:7a:56:18:71:b1:d5:6d:f6:61:cc:
bc:b6:7e:e3:ab:0b:c4:3a:bb:73:5b:48:90:64:9c:
c3:77:00:b7:1d:47:c5:38:58:5d:ef:ec:86:e7:11:
76:6f:57:b5:31:f9:9a:f5:b8:0a:c8:6c:b1:40:78:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C7:7B:26:93:FF:A3:04:1E:04:FE:95:45:A1:10:C1:5B:1D:C1:8A
X509v3 Authority Key Identifier:
keyid:92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:bd:11:3d:e1:1e:70:77:13:e2:a2:6c:24:09:28:d1:8c:87:
6d:95:3e:3a:68:d0:1e:0b:76:ba:28:63:45:d2:32:ae:07:28:
7a:1f:9c:31:d1:10:51:f5:c3:83:33:2b:ca:6b:d9:b5:73:39:
2a:12:f1:1a:76:b1:f3:76:fd:09:00:cb:6d:d2:21:59:06:59:
d1:8b:b4:74:13:eb:ba:46:67:3c:b9:1e:7e:6e:66:c6:b8:89:
c5:79:c6:5a:45:83:f7:be:e0:1a:84:48:fa:5c:ca:f8:b7:de:
ba:39:98:e7:2d:ad:c1:4b:46:d2:6c:de:46:85:c1:ac:20:6b:
18:97:a1:48:77:d8:49:aa:36:dc:df:3e:73:fb:24:ac:cf:31:
19:ca:e7:2a:7b:e0:30:91:e9:b0:f4:60:da:93:c6:07:27:1f:
bc:04:84:37:f5:94:15:41:a0:ee:09:22:0a:4f:b2:25:5d:ea:
8e:ec:77:80:ac:33:e7:a5:ff:ae:94:4e:8a:a8:00:68:3e:34:
3b:f6:dd:25:5b:1d:98:b4:1c:de:97:71:ac:1a:86:87:49:d2:
b1:4a:c4:fe:81:ae:9b:79:99:f7:c1:5c:86:7b:c2:81:5a:fe:
e1:ff:6e:c4:d2:4f:c3:bd:a2:41:ec:a5:55:58:2a:b7:98:eb:
cf:b4:7f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:36 2026 by rpki-client