Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
File: h4TuSgLa-JcmVvEkUr8npJEcNik.mft (raw, json)
Hash identifier: uvbmyz0a/XKoYYChKLXbk8Zd77hCYCPKYcL8dizLMVg=
Subject key identifier: 4D:F9:96:A5:74:FE:F6:5A:6C:01:9B:64:C7:3D:03:F1:AF:30:25:E3
Authority key identifier: 87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29
Certificate issuer: /CN=F3651E73AF/serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
Certificate serial: 0DEC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
Manifest number: 0DE7
Signing time: Mon 02 Mar 2026 00:58:22 +0000
Manifest this update: Mon 02 Mar 2026 00:58:21 +0000
Manifest next update: Wed 04 Mar 2026 00:58:21 +0000
Files and hashes: 1: h4TuSgLa-JcmVvEkUr8npJEcNik.crl (hash: R/+QaM0nT7YLdMmD430MUEx2iqongGQPFnw+DEJhz2Q=)
2: B1757762C48911F0B5A12AF6DAE4EC9C.roa (hash: b5Wcnn4AFWyn401Xj8s2haIgucvxNhp1qnKFpV0Gekw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl
rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3564 (0xdec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3651E73AF, serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
Validity
Not Before: Mar 2 00:58:21 2026 GMT
Not After : Mar 4 00:58:21 2026 GMT
Subject: CN=69a4e0ae-5b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5f:5c:20:37:b8:ef:81:ac:49:8c:8d:e8:92:
61:94:b7:72:a1:ec:5d:c0:4c:19:9e:71:66:d1:ee:
28:87:cd:d5:a9:0b:4e:66:43:9f:5c:b3:4f:e5:32:
29:be:fb:78:ad:f3:0a:9a:ce:9f:4e:92:5e:ca:5a:
7f:fc:4e:93:e6:33:bb:38:d1:c4:2b:7b:27:1b:72:
52:ae:21:ba:ab:b9:fb:5e:4a:59:d6:1e:55:9b:27:
4f:31:fa:69:e9:f7:d4:af:b4:ec:1a:e7:85:b6:b4:
3e:0b:d3:04:61:f3:85:3e:92:95:25:1d:39:30:6f:
21:5c:ac:95:83:57:aa:98:51:e3:06:b9:03:71:45:
32:ae:f3:93:e8:da:ee:20:4d:f8:04:dc:af:f9:88:
c5:61:6b:fe:06:86:a6:15:32:c5:36:5c:7b:ef:74:
8c:11:d8:9f:2c:7b:99:0a:0a:01:0f:02:cb:02:90:
da:2d:90:5a:fc:eb:5a:0c:53:9d:c9:23:fa:a3:dd:
1b:90:c7:98:af:cc:5c:68:b6:f0:40:5f:9a:fe:b0:
00:3b:bc:2b:dc:08:04:18:d6:7a:9f:09:16:e9:da:
f8:00:22:2a:47:0d:1c:19:4b:9c:79:72:5e:78:7e:
50:dc:29:ce:03:b9:93:9e:92:3c:7a:bb:d3:e4:1d:
eb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F9:96:A5:74:FE:F6:5A:6C:01:9B:64:C7:3D:03:F1:AF:30:25:E3
X509v3 Authority Key Identifier:
keyid:87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:05:d7:43:dd:4f:54:eb:da:06:0d:67:3b:20:84:0a:7c:cc:
31:22:22:71:a2:86:04:b0:43:5b:87:d5:58:b4:b4:fd:6b:15:
55:10:17:57:ba:3c:e1:c3:35:35:2b:6a:00:a8:4b:fc:c4:dd:
be:bc:43:8b:9c:48:1a:1c:7b:69:68:8f:69:59:18:84:c2:f1:
b0:80:c1:58:7b:34:97:a2:78:d1:2a:9b:a2:ed:82:b1:22:44:
97:54:19:12:64:4f:ec:f2:36:e6:a8:81:b2:45:5c:56:8b:e3:
74:82:90:77:db:48:ce:76:21:bf:18:7f:84:c7:6d:5f:7b:18:
65:85:34:3a:fe:99:8d:14:09:b0:18:58:86:b4:26:67:54:51:
5b:75:8b:ce:0f:3d:2d:41:f1:ad:37:71:95:40:29:d0:71:5c:
7b:ca:1b:48:39:ee:9d:06:40:94:8a:d4:2b:a1:0c:e6:a3:25:
91:83:44:1a:b4:e7:ab:02:dd:36:95:32:d9:40:30:cf:9e:e9:
33:d9:27:43:43:c1:b7:f7:6f:f7:c5:58:d3:1e:d5:9e:c2:a3:
87:31:3c:0c:3d:3a:27:9f:5a:70:48:44:48:44:a1:d5:8b:81:
15:ae:de:b0:7c:92:e4:8a:2c:11:97:ff:44:42:53:19:e4:12:
be:c3:f6:5f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDewwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTFFNzNBRjExMC8GA1UEBRMoODc4NEVFNEEwMkRBRjg5NzI2NTZGMTI0NTJCRjI3
QTQ5MTFDMzYyOTAeFw0yNjAzMDIwMDU4MjFaFw0yNjAzMDQwMDU4MjFaMBgxFjAU
BgNVBAMTDTY5YTRlMGFlLTViNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDaX1wgN7jvgaxJjI3okmGUt3Kh7F3ATBmecWbR7iiHzdWpC05mQ59cs0/l
Mim++3it8wqazp9Okl7KWn/8TpPmM7s40cQreycbclKuIbqrufteSlnWHlWbJ08x
+mnp99SvtOwa54W2tD4L0wRh84U+kpUlHTkwbyFcrJWDV6qYUeMGuQNxRTKu85Po
2u4gTfgE3K/5iMVha/4GhqYVMsU2XHvvdIwR2J8se5kKCgEPAssCkNotkFr861oM
U53JI/qj3RuQx5ivzFxotvBAX5r+sAA7vCvcCAQY1nqfCRbp2vgAIipHDRwZS5x5
cl54flDcKc4DuZOekjx6u9PkHevbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUTfmW
pXT+9lpsAZtkxz0D8a8wJeMwHwYDVR0jBBgwFoAUh4TuSgLa+JcmVvEkUr8npJEc
NikwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUxRTczLzNDRjBFMDlBNzhDNDExRTY4NDhEM0EzMUY4QUVBMjI4L2g0VHVT
Z0xhLUpjbVZ2RWtVcjhucEpFY05pay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2g0VHVTZ0xhLUpjbVZ2RWtVcjhucEpFY05pay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTFFNzMvM0NGMEUwOUE3OEM0MTFFNjg0OEQzQTMxRjhB
RUEyMjgvaDRUdVNnTGEtSmNtVnZFa1VyOG5wSkVjTmlrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC6BddD3U9U69oGDWc7IIQKfMwxIiJx
ooYEsENbh9VYtLT9axVVEBdXujzhwzU1K2oAqEv8xN2+vEOLnEgaHHtpaI9pWRiE
wvGwgMFYezSXonjRKpui7YKxIkSXVBkSZE/s8jbmqIGyRVxWi+N0gpB320jOdiG/
GH+Ex21fexhlhTQ6/pmNFAmwGFiGtCZnVFFbdYvODz0tQfGtN3GVQCnQcVx7yhtI
Oe6dBkCUitQroQzmoyWRg0QatOerAt02lTLZQDDPnukz2SdDQ8G392/3xVjTHtWe
wqOHMTwMPTonn1pwSERIRKHVi4EVrt6wfJLkiiwRl/9EQlMZ5BK+w/Zf
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:36:11 2026 by rpki-client