Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
File: QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft (raw, json)
Hash identifier: LdmroP0RQsb66OPCvHKiWADBHIghQ5tCt4MES2YUJp4=
Subject key identifier: 26:D3:15:4B:64:7B:A4:5C:99:B2:62:6B:30:1C:82:02:9E:0D:18:D9
Authority key identifier: 41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
Certificate issuer: /CN=F3629B7BAF/serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Certificate serial: 0580
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
Manifest number: 057F
Signing time: Sun 01 Mar 2026 02:01:51 +0000
Manifest this update: Sun 01 Mar 2026 02:01:51 +0000
Manifest next update: Tue 03 Mar 2026 02:01:51 +0000
Files and hashes: 1: QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl (hash: efs4KvWSScnB3YbBw/8oMLgCFCcFduTNKnkimX960oE=)
2: 8923FE84E70411ECB97A00C7F1222468.roa (hash: ef6Udp4f7yAWn4yjb6CIRvJunMzfPBNgWsJ+Z6PTHZE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 02:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1408 (0x580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3629B7BAF, serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Validity
Not Before: Mar 1 02:01:51 2026 GMT
Not After : Mar 3 02:01:51 2026 GMT
Subject: CN=69a39e0f-41e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:71:dd:ca:0c:33:89:26:59:fa:67:1c:f7:8a:
93:88:e5:c3:00:5e:ef:99:ff:ae:d0:9f:58:2d:f3:
16:b9:ea:d3:48:9e:8a:29:3e:b4:27:b3:3e:6f:f6:
1e:ba:a8:4b:4e:34:d7:5a:9b:8f:f2:e9:6b:13:8a:
f9:a3:70:35:6f:2f:f9:9d:20:32:29:14:c3:ca:20:
ab:95:9f:06:c9:6c:cb:18:10:5b:4b:17:3e:1a:bb:
dc:2a:de:a9:2f:4b:bb:99:fb:e4:3e:30:33:a5:70:
3e:87:de:f4:8b:32:a3:df:98:81:37:46:0e:75:00:
72:fe:92:df:06:99:46:3a:27:f8:c3:04:cc:5d:b6:
39:69:4b:74:ff:6c:56:1e:69:20:51:43:bc:2c:09:
98:98:a4:2a:8b:ca:ed:e1:63:f1:7c:93:72:81:87:
94:5b:1a:b8:1b:c8:c4:b0:27:cd:ff:7e:cd:d5:ba:
d8:d6:1f:3e:b8:34:42:72:69:d1:a5:9b:50:81:0e:
04:06:fa:b2:0d:fa:ef:75:ca:44:0e:2a:15:24:27:
9d:60:1c:66:4b:59:c3:59:13:f8:9c:15:93:c9:c6:
10:d8:6b:9c:36:e4:ac:77:cb:74:7f:3f:27:28:63:
fa:21:00:5b:5d:93:c3:19:26:0c:e3:ec:f4:ab:c5:
15:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D3:15:4B:64:7B:A4:5C:99:B2:62:6B:30:1C:82:02:9E:0D:18:D9
X509v3 Authority Key Identifier:
keyid:41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:3d:d4:ce:bd:5a:90:1f:6e:ba:6f:f5:67:dd:de:c1:8e:0b:
0c:1d:20:6f:1c:a5:02:d3:38:54:53:95:7c:eb:01:eb:64:37:
34:d7:5f:19:aa:76:2e:04:d9:dc:2b:b8:d2:3e:56:81:f1:21:
91:b4:bd:0c:3e:84:b4:24:22:ac:49:1c:e8:85:04:3e:bb:32:
e2:6f:1b:ec:fc:d2:92:0b:14:a3:e9:df:6b:eb:33:25:31:ec:
a9:0f:ab:5a:de:b1:62:44:0d:aa:a3:2f:c1:fa:82:b7:d8:b9:
fb:36:02:5e:2e:85:e2:d3:63:55:b6:61:2b:e3:31:f2:7e:49:
d6:13:c2:89:42:5a:e5:4c:37:df:09:72:df:73:2b:8b:a8:71:
07:48:34:df:a1:24:fc:21:01:76:ea:e7:36:50:f0:fc:87:54:
7d:e3:b5:b0:83:44:32:10:54:25:32:b9:ec:9d:a6:b5:67:09:
fc:72:53:03:37:56:9f:b8:74:9e:15:c6:d5:9a:5f:6e:ab:5f:
87:7d:b5:bc:a6:23:5e:f5:11:97:f2:7b:03:44:da:54:52:b7:
a0:3a:e0:6f:28:31:0d:a9:e4:73:93:10:7e:35:f7:df:f9:d4:
63:11:6b:b9:36:a4:6d:11:fd:49:43:d8:11:73:9a:fd:14:42:
d5:33:54:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:37 2026 by rpki-client