Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
File: LnFCh3b4tjGvSw1suVUM0cqUVlU.mft (raw, json)
Hash identifier: 7pn6zxXfpT9JPiYI2i0o6fm4z/pVuCtAKTFvsAjaoXs=
Subject key identifier: FE:C4:99:61:B4:11:82:D0:FF:5A:B3:F3:C8:9C:1B:44:8A:6F:7F:F1
Authority key identifier: 2E:71:42:87:76:F8:B6:31:AF:4B:0D:6C:B9:55:0C:D1:CA:94:56:55
Certificate issuer: /CN=F365CA10AF/serialNumber=2E71428776F8B631AF4B0D6CB9550CD1CA945655
Certificate serial: 08A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
Manifest number: 08A5
Signing time: Mon 02 Mar 2026 01:23:34 +0000
Manifest this update: Mon 02 Mar 2026 01:23:34 +0000
Manifest next update: Wed 04 Mar 2026 01:23:34 +0000
Files and hashes: 1: LnFCh3b4tjGvSw1suVUM0cqUVlU.crl (hash: LDeTdsmBjksFGmz6XumSY4Bm3pHQcugqkJ/hJwUXZm4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.crl
rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2213 (0x8a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365CA10AF, serialNumber=2E71428776F8B631AF4B0D6CB9550CD1CA945655
Validity
Not Before: Mar 2 01:23:34 2026 GMT
Not After : Mar 4 01:23:34 2026 GMT
Subject: CN=69a4e696-4822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:50:13:ed:23:54:a0:15:33:a6:6e:be:e1:
b9:b0:a4:8c:c0:79:a3:b6:ad:4c:9d:cb:44:6b:ff:
a5:c6:65:3a:cf:78:e5:d8:bf:c3:2c:75:ca:d6:4b:
28:24:77:28:71:b0:64:8a:7c:97:31:5a:18:0a:9c:
95:48:58:6b:fd:e7:ed:8b:f3:dd:68:d0:ff:6b:9f:
7b:c1:83:e3:5f:95:1b:93:0d:9b:ac:7c:59:77:be:
ce:18:46:9e:6c:6c:e4:bf:da:47:a2:3b:67:45:b2:
26:57:bb:99:0a:a7:16:2a:ab:b4:c0:02:e2:d2:cb:
54:98:e1:52:26:ac:8d:8b:30:7f:26:7e:e4:b4:94:
c9:20:74:41:f3:ab:ba:e8:23:85:f7:51:80:49:da:
36:63:c8:7b:37:3d:b8:f8:a3:4b:34:0a:8c:5e:94:
9c:2d:4d:63:7c:d0:0a:58:07:db:f4:27:14:4c:2a:
70:d0:73:b3:82:54:58:c2:5a:67:9a:a2:f6:9d:02:
3f:0e:9a:82:8d:c3:ad:05:8f:ca:08:d4:ac:45:de:
0a:2c:91:85:41:44:32:1b:13:28:72:31:2c:7a:3c:
1e:48:b6:7f:3c:29:d6:aa:f8:8e:39:72:75:f4:cc:
15:b0:7a:3b:31:a3:d1:b8:0e:1f:74:d0:a5:7f:85:
8d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C4:99:61:B4:11:82:D0:FF:5A:B3:F3:C8:9C:1B:44:8A:6F:7F:F1
X509v3 Authority Key Identifier:
keyid:2E:71:42:87:76:F8:B6:31:AF:4B:0D:6C:B9:55:0C:D1:CA:94:56:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:9c:d0:83:00:03:9e:1e:1f:43:ad:25:02:73:71:84:c3:59:
a9:d5:f1:39:3a:76:a1:91:39:9b:0c:98:b1:b2:81:2a:d0:f6:
af:2a:60:77:c9:e4:d2:e4:d7:fd:ec:ac:2c:37:c7:e1:36:ef:
e2:8a:f8:c3:49:51:72:fa:cf:4b:69:19:61:fc:d2:de:5e:f1:
5c:6e:bf:ca:dd:27:26:66:6c:06:5d:ea:7a:d3:ff:ae:cd:02:
05:18:54:32:c8:de:bd:75:cc:7d:da:9a:71:42:bb:be:39:5a:
87:97:02:0c:0f:6d:b0:1f:7c:3e:0d:6b:b7:58:60:17:92:27:
ba:8a:b9:3d:01:c8:8d:ae:80:af:6c:f9:4a:3c:f1:aa:c0:8f:
ec:6f:af:a7:ec:e5:ea:d3:cb:1c:7c:5d:bf:ab:04:17:25:03:
97:4b:9c:53:2c:86:b1:f8:a3:c9:62:b3:c8:bf:38:d6:f2:d5:
3e:28:13:35:8e:4f:7c:7f:65:fd:94:e7:42:ed:c7:46:16:6b:
45:3e:1d:8a:33:e9:70:e0:5c:c5:4d:a9:64:95:e3:c6:65:c1:
ff:36:32:cf:45:b8:6d:1f:5e:9c:00:1a:52:2a:08:b4:a4:81:
ad:db:53:f9:b5:fd:69:cb:35:bb:8c:4c:b7:d2:0e:f4:f7:da:
8e:35:7e:fb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCKUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUNBMTBBRjExMC8GA1UEBRMoMkU3MTQyODc3NkY4QjYzMUFGNEIwRDZDQjk1NTBD
RDFDQTk0NTY1NTAeFw0yNjAzMDIwMTIzMzRaFw0yNjAzMDQwMTIzMzRaMBgxFjAU
BgNVBAMTDTY5YTRlNjk2LTQ4MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1QVAT7SNUoBUzpm6+4bmwpIzAeaO2rUydy0Rr/6XGZTrPeOXYv8MsdcrW
SygkdyhxsGSKfJcxWhgKnJVIWGv95+2L891o0P9rn3vBg+NflRuTDZusfFl3vs4Y
Rp5sbOS/2keiO2dFsiZXu5kKpxYqq7TAAuLSy1SY4VImrI2LMH8mfuS0lMkgdEHz
q7roI4X3UYBJ2jZjyHs3Pbj4o0s0CoxelJwtTWN80ApYB9v0JxRMKnDQc7OCVFjC
WmeaovadAj8OmoKNw60Fj8oI1KxF3goskYVBRDIbEyhyMSx6PB5Itn88Kdaq+I45
cnX0zBWwejsxo9G4Dh900KV/hY21AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU/sSZ
YbQRgtD/WrPzyJwbRIpvf/EwHwYDVR0jBBgwFoAULnFCh3b4tjGvSw1suVUM0cqU
VlUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVDQTEwLzQzMEQ4QTE2NzRBOTExRUE5NkNDNzkzRUY4QUVBMjI4L0xuRkNo
M2I0dGpHdlN3MXN1VlVNMGNxVVZsVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xuRkNoM2I0dGpHdlN3MXN1VlVNMGNxVVZsVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUNBMTAvNDMwRDhBMTY3NEE5MTFFQTk2Q0M3OTNFRjhB
RUEyMjgvTG5GQ2gzYjR0akd2U3cxc3VWVU0wY3FVVmxVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBlnNCDAAOeHh9DrSUCc3GEw1mp1fE5
OnahkTmbDJixsoEq0PavKmB3yeTS5Nf97KwsN8fhNu/iivjDSVFy+s9LaRlh/NLe
XvFcbr/K3ScmZmwGXep60/+uzQIFGFQyyN69dcx92ppxQru+OVqHlwIMD22wH3w+
DWu3WGAXkie6irk9AciNroCvbPlKPPGqwI/sb6+n7OXq08scfF2/qwQXJQOXS5xT
LIax+KPJYrPIvzjW8tU+KBM1jk98f2X9lOdC7cdGFmtFPh2KM+lw4FzFTalklePG
ZcH/NjLPRbhtH16cABpSKgi0pIGt21P5tf1pyzW7jEy30g7099qONX77
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:12 2026 by rpki-client