Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
File: D4kdL9FUeF3D5rPHlmdkbAu09W0.mft (raw, json)
Hash identifier: OjUR/RZlEt7DADMxt+SKOl0mtsfVEgeCj3QChuxDKjk=
Subject key identifier: 5E:6C:22:70:02:92:0A:DF:07:08:89:16:7F:5D:09:66:26:90:7A:FA
Authority key identifier: 0F:89:1D:2F:D1:54:78:5D:C3:E6:B3:C7:96:67:64:6C:0B:B4:F5:6D
Certificate issuer: /CN=F3641110AF/serialNumber=0F891D2FD154785DC3E6B3C79667646C0BB4F56D
Certificate serial: AB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/D4kdL9FUeF3D5rPHlmdkbAu09W0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
Manifest number: A2
Signing time: Tue 28 Jul 2026 05:30:03 +0000
Manifest this update: Tue 28 Jul 2026 05:30:02 +0000
Manifest next update: Thu 30 Jul 2026 05:30:02 +0000
Files and hashes: 1: D4kdL9FUeF3D5rPHlmdkbAu09W0.crl (hash: it9zNi69cSrAXY7nQBEJsmpT1mk9KLf9CFVRrj9Xilo=)
2: 70AA590E1E2B11F196DC24ADDAE4EC9C.roa (hash: uMkdtVFtuvQqxiv3P3QzJvhJoUMANuEicE2OUjLsOMI=)
3: A90F75EA1E2B11F1A74454ADDAE4EC9C.roa (hash: l0pI77i/3rExThBukFhyhrFHwyUmiyAZc83nnRzr++8=)
4: F6E916CC1E2B11F1B79D80B0DAE4EC9C.roa (hash: C6BbRAJGJhQ26iah4zjRl/7QOH2SLtDjfPiGNF+cAyk=)
5: CBEEA3561E2B11F1961C59ADDAE4EC9C.roa (hash: pvY9TQ8JUnIxht52zhSA0rWfrxaSQC/iSnp5NKbibUM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
rsync://rpki.afrinic.net/repository/afrinic/D4kdL9FUeF3D5rPHlmdkbAu09W0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 05:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3641110AF, serialNumber=0F891D2FD154785DC3E6B3C79667646C0BB4F56D
Validity
Not Before: Jul 28 05:30:02 2026 GMT
Not After : Jul 30 05:30:02 2026 GMT
Subject: CN=6a683e5b-5871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:f5:a1:a0:9d:53:9d:6d:a0:11:09:4b:23:
db:13:a2:6a:8d:5f:d1:29:d3:ea:1d:01:54:d6:76:
9a:6f:76:74:1c:e3:99:09:25:ad:13:fa:1b:08:fe:
68:48:2f:d4:f6:f0:05:bf:e5:7c:09:4f:c0:a5:8e:
76:24:dd:df:55:15:e7:85:b0:b6:5d:61:33:72:7a:
d2:a3:45:ab:37:f7:e7:68:23:74:73:a6:9d:f0:64:
68:f1:ea:65:25:72:81:ca:0a:0b:94:51:fd:ff:01:
81:c1:19:10:d9:8a:f0:c8:f5:70:61:ca:f7:3a:2f:
35:d7:ba:af:de:4e:ae:64:9a:cb:dc:1f:1c:f7:f7:
ae:3d:99:67:4d:da:64:fd:c0:0f:c4:92:56:85:90:
51:68:86:5d:4d:6e:d0:3a:7a:c9:8f:8e:ab:12:0e:
6a:6f:ad:5c:36:fc:f9:9d:d9:fc:03:33:e5:11:85:
55:0c:e2:76:82:ab:7d:41:3f:0d:8f:5b:a7:cd:99:
81:56:c8:ca:e4:bd:3f:0b:ae:0b:a3:f6:5c:f2:73:
a2:1e:dc:11:cc:ff:96:98:b4:f8:5d:07:2a:c8:a4:
a1:55:3c:ac:15:71:75:04:46:27:19:df:8c:d7:93:
d2:71:08:62:dd:82:9d:1e:94:a0:37:7b:d2:95:16:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6C:22:70:02:92:0A:DF:07:08:89:16:7F:5D:09:66:26:90:7A:FA
X509v3 Authority Key Identifier:
keyid:0F:89:1D:2F:D1:54:78:5D:C3:E6:B3:C7:96:67:64:6C:0B:B4:F5:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/D4kdL9FUeF3D5rPHlmdkbAu09W0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:49:31:90:94:50:5d:2a:98:e2:80:42:a3:04:33:15:75:cd:
4f:fd:78:cd:56:80:2d:25:21:ba:e6:1d:8a:4e:2b:f3:6e:10:
a1:30:8f:c0:6d:2d:4d:3e:75:3d:9e:38:cd:e7:ae:ff:4a:dd:
74:0c:ac:62:0f:5b:44:c5:1e:fc:b1:31:c5:2d:21:28:03:4c:
d4:62:a6:d0:a4:53:91:ee:b5:90:62:b9:1f:85:2d:51:1d:79:
66:6b:70:2e:be:dd:58:92:16:c2:e5:e8:3f:6c:a1:cd:f2:3c:
32:c2:b4:eb:91:ae:e5:2a:61:d7:87:f8:03:7d:e6:ae:ef:31:
a8:10:b0:06:02:1c:93:aa:5f:e9:46:e2:b7:c5:27:a4:85:7f:
b4:5c:3c:53:86:f1:bf:df:6f:75:a9:54:32:40:5e:5d:bf:e0:
29:6c:61:1b:37:42:2f:84:ed:d0:d6:2b:58:f2:2e:43:83:66:
87:02:64:3e:f9:df:85:c3:b7:1b:4a:6e:63:3a:b3:02:0b:44:
1d:da:71:58:fc:4e:8c:36:a1:dc:d6:f1:a7:be:2e:a3:cb:d3:
98:e5:2a:52:ff:ab:c4:62:db:2f:fc:80:f3:c4:33:63:ef:44:
c2:5e:7f:0d:8a:ad:e1:ec:52:f9:c9:71:36:1d:b0:50:b7:ca:
93:77:dc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:16 2026 by rpki-client