Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
File: HjBtERG9MU9g94_Cmxf7xqsItYk.mft (raw, json)
Hash identifier: 2Dq7zNtwC3R/h+lDAuVm50eBf3DlHh+XwF2tXHwbaFY=
Subject key identifier: DD:AC:AC:48:5E:5E:8C:F0:A9:64:31:92:C1:2B:94:8E:2B:80:03:34
Authority key identifier: 1E:30:6D:11:11:BD:31:4F:60:F7:8F:C2:9B:17:FB:C6:AB:08:B5:89
Certificate issuer: /CN=F3679AE6AF/serialNumber=1E306D1111BD314F60F78FC29B17FBC6AB08B589
Certificate serial: 22
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
Manifest number: 21
Signing time: Sun 01 Mar 2026 03:40:25 +0000
Manifest this update: Sun 01 Mar 2026 03:40:25 +0000
Manifest next update: Tue 03 Mar 2026 03:40:25 +0000
Files and hashes: 1: HjBtERG9MU9g94_Cmxf7xqsItYk.crl (hash: 29nJBjytfXLOTkW6tIcBByrmzDcip1Vn4wfkssFG/As=)
2: AE231146010611F1AF8CD7E0DAE4EC9C.roa (hash: yvsopJgiAqmvk1Zehyi6+Dx0DeQD4j/R7erpIreDPxk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3679AE6AF, serialNumber=1E306D1111BD314F60F78FC29B17FBC6AB08B589
Validity
Not Before: Mar 1 03:40:25 2026 GMT
Not After : Mar 3 03:40:25 2026 GMT
Subject: CN=69a3b529-b52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:23:f5:25:11:d2:7d:e6:e6:f1:49:85:11:7f:
00:9f:c4:78:49:d7:39:0c:5b:d7:ff:34:aa:ae:df:
45:d8:9c:79:65:52:95:ae:dd:7d:13:22:7c:bd:3c:
a0:4e:0f:72:12:f0:4f:db:f0:6a:47:7c:7c:b0:02:
56:67:65:26:fa:33:9c:e9:b5:c9:dd:30:6b:0f:30:
f5:3d:c6:76:31:ea:e6:ed:45:a2:c8:79:f7:f2:af:
a0:2f:0c:e1:81:d9:af:4b:9e:c6:7b:96:a5:84:6b:
87:47:d4:a3:13:90:da:d3:f4:cc:17:95:cd:65:82:
26:d0:5b:bc:8c:5a:c9:72:98:3e:dd:f5:39:41:69:
e9:c4:28:5f:59:29:0d:cd:01:46:f6:f9:69:60:33:
e6:ea:10:40:56:ad:74:ea:19:ad:ae:21:c1:04:af:
24:d1:a4:a2:21:9a:5a:96:40:05:7b:c0:91:4f:c6:
74:85:65:df:ab:7b:74:04:09:ef:71:05:74:c1:c9:
55:17:19:9c:39:51:a1:fa:2f:2c:25:c7:86:56:f5:
f1:3d:3e:20:2e:58:91:f5:58:6e:ce:e0:c8:b0:9f:
97:ac:b6:e6:dd:aa:6a:d1:c9:51:b4:49:2e:47:0d:
75:e8:1a:05:40:90:41:07:c5:4b:8f:f8:75:b6:78:
48:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AC:AC:48:5E:5E:8C:F0:A9:64:31:92:C1:2B:94:8E:2B:80:03:34
X509v3 Authority Key Identifier:
keyid:1E:30:6D:11:11:BD:31:4F:60:F7:8F:C2:9B:17:FB:C6:AB:08:B5:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d1:88:19:9f:8c:6f:33:52:86:ae:c9:20:69:19:d9:fc:d0:
53:fd:6b:00:79:55:54:fb:a9:57:82:31:f1:35:f7:94:31:e7:
46:33:c2:ab:f1:ac:76:d4:b6:a2:51:58:9b:1a:77:3b:4c:84:
3b:62:1f:2c:a6:a6:86:d7:04:e7:bc:d3:4d:cd:96:4b:50:56:
37:8a:1b:1e:c5:4b:ee:f8:ad:18:fa:33:c9:23:b5:ad:f4:61:
70:66:ce:fd:e5:0b:b9:e4:1b:68:c7:eb:c9:12:f5:c1:7f:e4:
1f:e8:b4:73:b8:b2:c2:ed:82:8a:31:ce:23:7e:bf:81:23:1d:
bb:e0:4b:79:7f:91:95:c1:23:d9:64:09:a2:82:60:bf:d8:eb:
6f:e3:f6:60:9d:d9:c4:5a:0a:a5:ed:5b:2a:eb:04:fe:77:77:
53:44:5f:b2:68:50:d8:20:08:20:df:d0:7a:6f:87:f1:86:d7:
de:64:53:a1:55:58:a0:fc:db:2f:0b:1e:18:c7:50:c2:84:c3:
15:6e:ee:e3:d0:67:0e:8f:c7:12:36:cf:53:59:fb:bb:85:1a:
bb:44:5e:2c:38:3e:74:59:77:b8:3b:ea:7f:b6:07:61:69:71:
02:12:c1:18:ae:ee:92:cd:d5:80:d2:44:82:9a:60:2f:6d:5d:
ce:4f:cd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:19:10 2026 by rpki-client