Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
File: Py4lhz-TCj4vdaXCxhVisCIN5ls.mft (raw, json)
Hash identifier: GA/E/mVTerWyieiNLYDZ6GnhEypBpRSYVb36nr6W9go=
Subject key identifier: 41:56:F1:4B:78:80:72:10:95:DC:84:87:11:DA:76:FB:F7:54:3A:A6
Authority key identifier: 3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B
Certificate issuer: /CN=F365F31BAF/serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
Certificate serial: 04CD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
Manifest number: 04CB
Signing time: Sun 19 Apr 2026 03:10:11 +0000
Manifest this update: Sun 19 Apr 2026 03:10:10 +0000
Manifest next update: Tue 21 Apr 2026 03:10:10 +0000
Files and hashes: 1: Py4lhz-TCj4vdaXCxhVisCIN5ls.crl (hash: b09mcHFG13MKAvNQCD/bb2mz4QsyUrAeIqJlc22ng+g=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl
rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Apr 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1229 (0x4cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365F31BAF, serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
Validity
Not Before: Apr 19 03:10:10 2026 GMT
Not After : Apr 21 03:10:10 2026 GMT
Subject: CN=69e44793-2961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ab:a7:3d:bc:db:2a:8e:5b:76:1a:bc:b4:16:
e2:7c:22:b1:2e:08:a9:ac:bb:1e:92:f1:05:cd:3b:
90:d6:b6:a7:44:95:27:fb:5f:ee:d6:e8:9f:88:9b:
9e:7a:4d:36:9c:aa:47:84:59:e0:00:f7:4d:e6:e5:
d9:9c:e3:cd:bb:2b:66:58:b7:0a:37:0a:99:19:c6:
ab:df:ab:d7:52:16:91:12:c4:40:2e:ca:64:93:68:
48:9c:0e:48:7f:84:88:3c:25:e1:11:c5:52:34:b7:
05:92:9a:2d:94:92:e6:3b:d6:18:b1:c5:4d:e4:29:
bc:09:58:48:39:0b:0d:48:2f:bd:30:7f:1b:5b:40:
2c:c5:3f:c4:37:5a:ef:b3:a0:d8:e2:53:4f:7f:70:
1a:2d:bd:fb:52:0c:5e:98:bc:0e:cd:24:03:4b:76:
8d:84:42:eb:d6:26:14:be:8e:59:87:14:14:5a:4b:
04:ee:fe:23:3f:2d:e1:8f:8e:2f:91:ef:3e:f0:e7:
92:1f:6b:0d:4c:73:df:4b:64:e5:ec:4f:64:57:69:
26:ec:5e:66:9a:e0:3c:4d:2c:ee:9c:99:e3:a2:b0:
c6:ea:02:22:c6:bf:f3:a3:1e:ff:20:b1:d8:c8:0d:
a0:b7:44:bc:7c:9f:2f:28:11:1a:e2:33:61:d6:2e:
81:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:56:F1:4B:78:80:72:10:95:DC:84:87:11:DA:76:FB:F7:54:3A:A6
X509v3 Authority Key Identifier:
keyid:3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:56:50:bc:72:d9:ae:82:cd:15:4c:ca:31:1c:f8:83:5d:8c:
ea:f4:ff:8b:9d:92:46:23:9b:41:5a:ac:75:6a:09:00:3f:ef:
e9:86:10:4c:b7:42:01:ff:48:6b:fd:34:82:74:65:45:03:4f:
d4:75:9e:97:e5:7d:ba:6a:d3:69:5c:7a:e5:39:19:65:80:e8:
95:63:00:c1:68:de:19:ce:2a:f3:eb:d0:7d:ba:0c:27:89:86:
49:3d:99:7a:41:c2:94:16:21:40:c5:52:d4:a4:44:87:35:0d:
6e:a3:76:6c:19:13:de:73:ab:4a:ef:b7:4c:b8:15:3f:f9:9d:
1a:c1:92:de:7d:c1:b7:5d:ce:5c:2d:a0:cd:6c:e3:67:09:ba:
9c:9b:92:67:b2:a2:07:60:da:a8:48:d0:bc:69:34:c0:4f:0c:
6b:43:96:cc:25:fe:7a:95:75:2b:d1:f4:29:8d:e4:f3:6b:02:
97:ff:d1:b7:6d:81:c5:14:e7:4b:49:37:fd:0b:3f:82:ce:00:
90:a1:97:35:fc:c1:4e:e8:49:97:50:0c:2f:7e:4a:be:f0:13:
cb:82:ac:da:5b:73:86:f5:a7:63:17:7a:33:ad:13:0b:8b:29:
4b:8f:77:20:c3:0f:54:0d:77:5e:67:34:72:6c:37:03:09:5d:
75:a5:87:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:09 2026 by rpki-client