Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
File: rhKLIvUdxljVXiFW669z1satdio.mft (raw, json)
Hash identifier: xY4InRwpCkR3/SC7z542lp3prj57hQ9vXmwY7a4Lce8=
Subject key identifier: 34:1E:0B:4F:D5:A6:14:35:76:9B:0E:E1:18:99:7D:FF:58:37:AC:FA
Authority key identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
Certificate issuer: /CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Certificate serial: 0480
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
Manifest number: 0480
Signing time: Fri 17 Apr 2026 03:19:18 +0000
Manifest this update: Fri 17 Apr 2026 03:19:17 +0000
Manifest next update: Sun 19 Apr 2026 03:19:17 +0000
Files and hashes: 1: rhKLIvUdxljVXiFW669z1satdio.crl (hash: qS8OoiDhtLVrUSe+5/40w3vkk4uaXsCoLSLmT0WTZMo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1152 (0x480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656B95AF, serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Validity
Not Before: Apr 17 03:19:17 2026 GMT
Not After : Apr 19 03:19:17 2026 GMT
Subject: CN=69e1a6b6-7c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:43:07:91:6d:e0:18:64:c0:a1:64:2d:20:
1f:0a:25:7f:5e:21:b2:f8:99:28:3c:f4:75:1e:23:
cd:bd:56:1d:2b:93:00:dd:a9:24:55:9e:94:42:5d:
b9:3a:3a:7e:0d:ee:28:42:e4:ea:b5:c5:51:be:af:
b5:66:e4:0d:c5:51:93:fc:2f:3f:1f:de:fd:04:b0:
8d:98:55:22:49:68:24:c5:85:62:2c:b8:05:ca:92:
6b:b1:5c:e4:d9:f7:cd:95:8e:b6:06:0d:19:4b:8c:
64:aa:28:f2:ce:ef:ea:ca:fe:97:ea:1d:a2:1f:f9:
2c:79:13:63:23:fa:74:d2:4f:29:d0:5e:85:b8:bd:
67:d0:59:28:8f:18:2f:d8:92:49:6c:57:18:35:13:
12:4b:d7:80:ed:88:ff:e8:b5:b2:6a:08:e0:5f:fd:
6f:fe:97:89:c0:ef:5e:89:90:c4:5c:2d:50:6c:6a:
25:a7:5a:dd:3a:c7:93:01:86:dc:6f:7c:94:03:c5:
1f:65:9c:f1:82:5f:98:bd:03:39:ff:60:ad:8c:0d:
56:dd:b8:19:08:75:4d:a5:66:48:d6:b2:f2:dc:c7:
3b:9c:25:eb:7b:f5:d5:1f:7d:8f:16:0a:04:a8:fc:
b7:0c:b7:e3:4d:54:ec:ec:09:1b:c4:ab:df:40:98:
9a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1E:0B:4F:D5:A6:14:35:76:9B:0E:E1:18:99:7D:FF:58:37:AC:FA
X509v3 Authority Key Identifier:
keyid:AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:2e:c9:81:37:a8:5b:f9:f1:32:73:3c:05:d8:ea:0c:27:79:
67:54:20:c5:a1:3b:53:bb:45:b8:ad:ff:c6:b6:5e:04:54:91:
39:0d:2d:ed:0c:d9:5b:28:ef:ec:ef:d9:e2:9b:be:77:82:a0:
6b:81:28:53:e9:fd:f6:07:fc:ab:fd:5b:6c:65:a6:f1:0c:46:
d3:c8:6b:f2:ad:da:74:93:50:cf:80:83:f4:c8:ee:0e:a9:3f:
0a:93:48:cc:fc:32:ce:07:f4:4d:68:dc:05:58:ac:5b:e9:93:
db:e6:6c:be:54:8d:3a:ad:c7:1a:c9:d2:6f:9f:15:b4:e6:8c:
98:ac:8e:01:7b:33:bf:92:e4:48:03:74:99:d1:6d:c2:1d:7b:
a7:89:dc:5e:b0:93:59:3e:15:63:33:f7:05:f1:03:2d:31:0d:
0c:6b:36:15:ca:3c:70:05:cf:ae:86:44:ed:36:fa:23:20:16:
30:f9:c5:eb:64:51:26:6d:ed:34:f8:b2:d6:01:0c:5d:83:6e:
fc:4b:c7:8f:51:f0:ee:87:78:aa:2b:7b:24:78:1e:af:5b:30:
78:7e:3d:4f:3f:27:d5:91:e0:f7:ce:2e:6d:17:ca:38:57:1f:
10:91:90:5f:12:aa:0e:ef:81:0f:27:89:13:aa:fd:f2:e8:7b:
c6:3f:9d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:39:18 2026 by rpki-client