Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
File: ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft (raw, json)
Hash identifier: Q53vSvUkpDADJNTpI8EJFrEtzWVCuga5OtZsSYr/gYs=
Subject key identifier: C8:A7:23:E6:37:EF:99:DE:C5:32:61:97:C7:FF:01:E9:E7:14:DA:A0
Authority key identifier: 67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
Certificate issuer: /CN=F3632159AR/serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
Certificate serial: 04FB
Authority info access: rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
Manifest number: 04FA
Signing time: Sun 01 Mar 2026 02:12:05 +0000
Manifest this update: Sun 01 Mar 2026 02:12:04 +0000
Manifest next update: Tue 03 Mar 2026 02:12:04 +0000
Files and hashes: 1: ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl (hash: xZJyFs5LAXD//CLv7tWfpydTLN/fKRuV+Cq8g2fEMVk=)
2: 1A49A96A7AC911ED812AA695F1222468.roa (hash: ETAi2jqzRi0+AxwIwLa8K/gDxbVP7M/q9PlBlPYnPkY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 02:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1275 (0x4fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3632159AR, serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
Validity
Not Before: Mar 1 02:12:04 2026 GMT
Not After : Mar 3 02:12:04 2026 GMT
Subject: CN=69a3a075-794f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:c2:c7:ab:1f:4a:fc:ee:09:13:16:74:46:
fd:d1:29:ae:12:da:7a:3f:ba:ac:b2:81:d6:0d:76:
03:33:a1:b9:db:db:1b:c1:fb:d3:43:e9:bd:18:0d:
a0:63:57:45:ac:94:7c:fc:f7:83:6a:f8:52:3f:7c:
42:7d:eb:64:60:8a:96:94:6d:61:82:a4:39:61:d7:
b2:1f:f8:e4:0c:c6:f8:52:76:f3:57:64:64:07:cb:
93:df:66:59:ce:6e:8a:f0:71:01:f4:31:26:fa:e4:
01:cf:66:78:42:56:9d:0a:d5:b5:8d:aa:51:f1:ce:
be:db:31:1f:4e:c7:fa:8c:ed:ed:99:40:10:38:58:
bc:18:4c:8b:db:7b:d6:8d:4e:43:d4:e1:5f:8c:c8:
a5:e1:28:39:44:d4:39:9f:9d:3b:d0:15:8b:a6:be:
11:40:af:51:d5:fd:41:a2:e5:21:ca:b6:f8:0a:98:
a7:38:33:61:aa:ad:e0:01:05:d3:61:70:56:de:97:
f0:e2:22:f9:c8:8a:77:02:d9:16:68:b5:a4:39:85:
02:80:87:d1:2b:ca:1d:74:21:54:e7:fd:6b:d7:8d:
31:14:88:f2:c8:f7:6b:38:9d:1c:72:ad:79:58:15:
87:28:63:2d:67:b4:8e:7b:dd:9d:b8:ba:26:bb:4d:
2e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A7:23:E6:37:EF:99:DE:C5:32:61:97:C7:FF:01:E9:E7:14:DA:A0
X509v3 Authority Key Identifier:
keyid:67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:11:02:7d:e8:5e:d9:fb:cf:2f:b1:b0:8d:28:d3:ab:03:28:
db:96:e9:9d:88:25:f0:ba:b2:16:38:e0:11:30:7b:e2:b2:25:
96:f2:ec:90:aa:1c:33:aa:d5:b5:95:05:22:0d:19:c7:8d:b2:
b1:ad:ee:f6:91:61:c2:ce:7e:85:e4:b3:9b:cb:88:ac:41:ba:
a0:dc:55:e9:43:ad:b3:98:91:fe:84:f5:35:c2:07:c0:a0:8c:
87:e5:19:b3:66:39:d4:bb:d9:87:f6:38:ce:bf:81:ed:57:9e:
15:44:7a:6d:0d:56:84:4b:ec:28:2c:98:cd:e0:18:a7:33:2e:
0e:51:cc:ec:44:52:05:3b:bb:d3:58:40:01:88:70:fd:e4:8f:
d7:05:4c:ba:13:25:26:88:80:37:6c:9b:f3:cb:08:80:df:da:
66:fd:af:d5:4e:5b:17:79:de:ef:f0:bf:36:e6:5a:29:a7:27:
08:3d:af:d9:9a:25:57:78:f6:cc:80:93:8e:2e:43:57:73:aa:
b2:42:d0:18:7c:24:33:61:10:da:45:4a:61:ec:78:b3:3e:f9:
ed:5f:d1:e6:cf:87:87:01:43:0e:83:31:be:f8:1e:ea:78:fb:
31:01:ad:aa:80:ec:49:df:1b:56:c3:84:2f:9e:dc:a3:a0:d6:
46:aa:4e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:08 2026 by rpki-client