Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
File: xaUP22PDxb0fR0h14JTxitF-H5Y.mft (raw, json)
Hash identifier: jO0tMEOQyTxNSbVF+DsZ1tm70QKiPrGmIakK6psml6E=
Subject key identifier: 32:62:D3:52:EC:C2:14:3E:26:03:2D:F4:AC:EE:F3:3B:F0:0B:7C:59
Authority key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Certificate issuer: /CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Certificate serial: 0345
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
Manifest number: 0344
Signing time: Mon 02 Mar 2026 02:43:12 +0000
Manifest this update: Mon 02 Mar 2026 02:43:11 +0000
Manifest next update: Wed 04 Mar 2026 02:43:11 +0000
Files and hashes: 1: xaUP22PDxb0fR0h14JTxitF-H5Y.crl (hash: kQidaB87XX9HdHgwuxm3EfwIV1SIkMeZQ/omxXjHzaA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 837 (0x345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365F7E8AF, serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Validity
Not Before: Mar 2 02:43:11 2026 GMT
Not After : Mar 4 02:43:11 2026 GMT
Subject: CN=69a4f93f-1f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:57:b9:b9:57:b9:88:7a:60:63:5e:66:f3:
f4:24:41:62:83:bb:0a:67:bc:6f:82:87:f3:e3:d2:
93:00:1e:25:43:9c:93:18:64:18:36:69:16:db:49:
cd:3c:33:5b:4b:29:26:39:fb:83:b4:c5:9f:ae:eb:
23:7e:80:55:a6:96:0e:96:8b:cc:b1:ea:94:c5:07:
44:6c:ed:23:b6:bc:75:a2:dc:0a:5e:83:7b:73:cf:
b9:ba:f9:cc:53:81:3e:b1:8c:42:fe:f2:16:ed:ea:
44:bd:bc:1e:25:19:7f:7d:57:52:77:66:b4:d1:8b:
36:c7:66:b5:27:57:25:7c:b6:57:c9:f7:25:47:a0:
c8:91:ac:d6:4b:af:48:0c:4c:ea:98:c3:76:22:80:
87:f5:89:e8:b7:97:8f:4f:c5:0d:a5:98:c0:53:16:
58:a6:64:99:a9:d9:e7:a5:ad:94:4f:b1:91:26:cc:
43:fe:da:2a:97:47:31:10:28:e2:c9:12:4b:9e:d3:
2d:40:09:91:eb:98:7c:a1:98:ad:22:ee:7b:81:fd:
f8:55:a9:3e:98:fa:69:94:c2:f8:f9:8f:83:20:a2:
4b:4b:78:68:17:ca:32:d5:83:95:a8:61:f8:a7:b6:
cd:e6:69:6b:43:f4:ce:66:d7:70:8a:b9:db:5b:ea:
2a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:62:D3:52:EC:C2:14:3E:26:03:2D:F4:AC:EE:F3:3B:F0:0B:7C:59
X509v3 Authority Key Identifier:
keyid:C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:4e:f8:5e:4b:e8:5a:7d:86:ce:98:ee:a1:a1:50:fa:b8:ed:
ef:33:d1:7c:95:d4:17:2e:f4:b0:84:b9:37:ee:bf:c8:ea:b0:
91:4a:89:e8:b4:c2:1d:e9:0a:5d:a4:62:1d:6b:f2:d9:00:52:
6d:46:ef:5f:8d:90:3b:eb:13:d9:85:bb:66:4e:78:d3:9c:76:
00:b2:9a:14:b0:88:a8:30:a5:d7:76:4a:c9:83:8e:ea:64:d0:
d9:e0:0e:41:10:cf:2b:50:61:11:4b:4c:b0:3f:28:6b:91:ab:
8e:39:33:59:00:f9:82:b6:d6:65:10:65:b8:cf:c7:13:28:40:
0f:93:6f:d2:ba:f9:79:d4:f8:6c:9c:06:ff:3e:61:8d:52:42:
ac:54:b2:8d:a7:b9:02:49:7e:c2:9a:25:60:b3:6c:83:cd:8d:
95:a9:96:d5:e7:57:90:d9:36:cb:c9:3d:20:40:7f:65:4b:46:
b7:da:df:f0:b5:06:0d:75:aa:40:9e:c7:39:54:ab:20:4c:cf:
0f:d9:e3:d9:19:3d:8b:3b:e2:6c:30:3e:3c:06:17:d6:30:34:
9a:2f:2b:57:36:f6:c2:4a:2c:e8:17:9c:b5:6b:07:a1:d0:f1:
80:90:4d:6a:e9:34:da:37:fe:45:7f:a4:19:e6:ce:a1:65:cc:
84:a0:57:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:42 2026 by rpki-client