Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
File: l9Y19-2_mFQOYSLJxsIL43gotSY.mft (raw, json)
Hash identifier: tIb4DyRlCIp/yR5j4wpnBxV4Vv/1hOLLv6sPrcMouwA=
Subject key identifier: 35:15:15:4A:8B:15:92:C2:3A:AB:E5:25:DF:C6:DF:47:DA:89:DC:68
Authority key identifier: 97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26
Certificate issuer: /CN=F3624E32AF/serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
Certificate serial: 0422
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
Manifest number: 0421
Signing time: Mon 02 Mar 2026 02:26:17 +0000
Manifest this update: Mon 02 Mar 2026 02:26:17 +0000
Manifest next update: Wed 04 Mar 2026 02:26:17 +0000
Files and hashes: 1: l9Y19-2_mFQOYSLJxsIL43gotSY.crl (hash: yUwv9Pp2kcMzpP02v5v7JBu1p5gJHQrM/ekxW3dzHyM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1058 (0x422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3624E32AF, serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
Validity
Not Before: Mar 2 02:26:17 2026 GMT
Not After : Mar 4 02:26:17 2026 GMT
Subject: CN=69a4f549-92da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c0:20:70:c3:03:66:b1:42:20:0f:c5:c3:98:
1e:4b:b7:31:c1:94:7b:c7:f3:4b:b8:e3:df:83:71:
c4:9d:72:6a:4a:63:d9:a9:c8:22:3c:4c:17:53:2a:
7c:ef:b8:c4:d6:44:21:04:d4:b8:41:20:7a:bc:1a:
0b:a2:7f:d8:19:59:be:aa:ef:ca:e4:85:a9:04:6d:
c9:5a:db:00:13:61:a3:5f:1d:df:3f:6e:5f:df:20:
bf:3d:aa:21:8b:95:7b:d6:7f:ea:81:d5:88:21:ac:
63:ae:2c:81:5d:c0:ef:e1:50:9f:f7:dd:4c:ae:2e:
b7:6d:13:ab:d2:76:b7:77:de:8c:8d:fb:84:cc:d7:
f2:0a:73:4b:97:76:4e:f8:0e:81:a9:be:e1:bd:4f:
97:c4:74:89:93:3c:ee:84:ca:bb:25:81:46:40:3a:
f7:49:f1:19:c4:b7:72:7e:67:5e:f6:23:86:dd:d4:
7b:34:da:c5:a0:51:07:7f:15:8e:22:95:13:ae:41:
84:05:02:87:d2:10:91:03:7a:c6:10:ff:ad:8e:09:
3a:e9:69:f3:90:2d:9a:52:a8:65:eb:fa:2e:51:05:
69:c2:d0:cd:92:80:e6:43:35:2c:92:db:59:d7:6f:
aa:68:79:15:b4:07:67:0c:fc:ad:65:00:90:92:81:
78:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:15:15:4A:8B:15:92:C2:3A:AB:E5:25:DF:C6:DF:47:DA:89:DC:68
X509v3 Authority Key Identifier:
keyid:97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:f2:ea:ef:d3:0b:dd:1b:d8:51:ab:ec:cc:a5:36:64:92:4b:
8e:f1:f5:c7:87:59:79:78:f7:06:b7:99:7e:96:37:68:a0:e1:
79:00:54:67:61:18:39:2e:4a:c8:8a:71:92:6f:0f:46:13:59:
e3:b1:a2:49:5c:3f:90:29:60:53:6b:94:34:ca:8b:5a:37:ba:
56:c9:c7:0e:75:ab:6b:03:e2:ef:a6:c1:c0:0b:b8:e0:00:ef:
de:bb:f5:35:5b:cc:4b:7e:b2:55:3a:3d:85:26:14:c4:99:b0:
63:00:85:a3:94:c1:89:94:91:4f:e4:90:42:f0:6a:43:44:eb:
60:ff:d7:05:91:8c:ab:97:71:e7:c7:4f:07:7c:5f:d0:3f:0e:
0e:2c:76:72:60:74:1c:e1:6c:97:bf:15:e0:24:4c:e7:fe:56:
ae:ed:5a:3d:96:e8:da:fa:5a:ec:c0:dd:c4:57:1c:c0:05:c9:
f0:ab:f4:4c:6b:e8:5b:36:5d:d4:a9:5e:3f:e7:7a:1b:4a:ba:
3e:7f:64:2a:38:98:c2:69:2f:0a:19:f9:56:b6:f8:7d:10:a8:
c0:24:62:ec:8d:d0:4d:cf:6c:e8:27:bc:ae:f7:9e:66:38:fe:
c1:ee:19:2b:2f:1a:89:d7:a2:62:6f:22:0a:64:fb:ba:ed:83:
41:74:bd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:17 2026 by rpki-client