Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
File: XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft (raw, json)
Hash identifier: Y+aH98x2MNJmcWUuN6o5ZQe0xyx5LTKVZbkm0VbqxR4=
Subject key identifier: C9:51:DF:94:5C:CF:29:C6:FC:B5:D0:76:A0:3D:D4:3C:2A:AE:9D:90
Authority key identifier: 5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32
Certificate issuer: /CN=F3644DABAF/serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
Certificate serial: 0572
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
Manifest number: 0570
Signing time: Sun 01 Mar 2026 02:03:13 +0000
Manifest this update: Sun 01 Mar 2026 02:03:12 +0000
Manifest next update: Tue 03 Mar 2026 02:03:12 +0000
Files and hashes: 1: XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl (hash: 4Xc7xHbDh5EI0G9a7pj81A3AG8Z4ewXnMvaPgP/0wwA=)
2: 23D327BA3B9111EF8FF3E059762E951A.roa (hash: ZJ3xXOXKk7e28z2xIgECvNbu0qz58iXckPb6BX56yvQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1394 (0x572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644DABAF, serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
Validity
Not Before: Mar 1 02:03:12 2026 GMT
Not After : Mar 3 02:03:12 2026 GMT
Subject: CN=69a39e61-d2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2e:f2:72:04:e9:9b:4c:60:df:66:52:63:20:
4f:2c:5a:9e:ae:36:93:32:7b:33:0e:2e:89:10:a2:
0b:da:a4:8c:c3:91:3a:8e:d6:fc:db:8a:28:90:c1:
ba:12:06:7e:32:e1:75:95:d8:be:60:fc:1a:08:07:
cf:5a:e4:71:ef:25:e2:e3:94:30:f0:87:37:3c:12:
a6:27:03:dc:6b:ab:16:60:87:6f:46:a3:12:33:25:
c2:25:ea:b9:21:6d:68:23:cb:fc:80:e6:8b:cb:f5:
bf:3c:6c:7a:71:7b:18:a3:5d:df:c2:10:4e:8a:d7:
20:b1:13:8b:0f:94:a1:d6:1f:96:59:db:56:bd:39:
05:2b:72:da:6a:e3:89:51:90:bd:84:33:de:d9:12:
e5:bb:72:18:dc:fc:76:e3:2f:56:73:bf:63:06:8e:
0d:63:f6:63:05:2c:56:73:b0:d2:39:63:90:12:85:
42:45:92:07:09:1a:31:b4:0f:48:aa:0c:60:63:28:
2d:74:41:d8:17:5a:09:cf:28:db:e2:bf:70:1b:83:
04:67:24:5d:d6:c5:56:47:7a:05:77:15:f1:b7:16:
b9:a3:24:47:5a:d2:05:16:49:14:d5:d4:a5:93:cb:
f4:57:10:2f:aa:ca:17:0c:b2:9f:1a:24:5f:54:54:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:51:DF:94:5C:CF:29:C6:FC:B5:D0:76:A0:3D:D4:3C:2A:AE:9D:90
X509v3 Authority Key Identifier:
keyid:5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:29:33:ac:bf:45:65:fd:9e:16:5c:c3:6f:36:e7:4f:49:6e:
06:09:bd:e1:c6:9c:a8:cd:c4:ca:f6:ed:dc:46:6c:66:62:ba:
8d:b0:f4:9f:6b:80:d0:e4:a9:37:39:cb:54:21:f0:05:7a:60:
73:d6:30:83:b0:08:8e:c1:3d:62:75:e5:0a:d9:6b:e5:2d:ab:
87:1a:94:c1:70:bc:76:1d:0e:55:94:83:9f:80:5a:40:1c:43:
19:2e:e3:04:f9:77:53:d2:d2:fa:31:f5:ac:9e:91:8e:ee:76:
cf:bd:f1:00:f0:81:29:b4:47:10:5a:41:19:97:0c:7d:ac:a7:
33:9c:b0:ac:fd:9f:40:18:85:80:21:ae:f7:35:15:05:44:6e:
ed:f4:a4:1c:0e:0d:2c:c6:ef:cf:95:a0:66:f6:3e:22:34:cf:
87:b7:ae:ea:f8:3b:d7:ea:02:8e:2c:d6:9c:3d:f3:f8:fa:b6:
01:68:bc:26:38:47:b1:94:d0:36:1d:aa:71:0d:3f:97:ea:59:
49:c1:e2:1c:47:4d:e7:37:30:73:89:ef:60:79:1d:9c:7b:6c:
3e:a1:56:cb:a7:c1:a5:95:db:f3:43:64:97:19:40:f7:57:fa:
3d:96:70:24:13:f9:f6:ca:bb:b4:27:49:86:d4:7c:16:ef:b9:
a2:51:31:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:26 2026 by rpki-client