Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
File: XK2jLPsAGrpuTJ9SE9kodlsVozc.mft (raw, json)
Hash identifier: v8SMcJoLnaGN/wMbDuFS/ni+ZBCkEyi/WJ2ee/f+HaE=
Subject key identifier: 68:AF:00:71:08:E3:5E:B5:BC:2D:15:9B:5F:7D:B9:C7:7A:46:17:E5
Authority key identifier: 5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
Certificate issuer: /CN=F368588EAF/serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Certificate serial: 09A1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
Manifest number: 0995
Signing time: Mon 02 Mar 2026 01:17:25 +0000
Manifest this update: Mon 02 Mar 2026 01:17:24 +0000
Manifest next update: Wed 04 Mar 2026 01:17:24 +0000
Files and hashes: 1: XK2jLPsAGrpuTJ9SE9kodlsVozc.crl (hash: pXgaGwMJfleVkji8gUsauadieU6QXINGBtmlfC3kI8w=)
2: E90920E88E6511EBBF85CD6BF8AEA228.roa (hash: 2lqZqDUQcUKxveTR9cI5M5tuAOp//Ev36g7no9oTmfc=)
3: B45912FE8E6511EB8C41896BF8AEA228.roa (hash: qKKMDXSoDlqwiHmOGrIIdcwys6RCpAU+b2nSH+ukCFY=)
4: 82AA23C48E6511EB87AB596BF8AEA228.roa (hash: Awf3KcwUqHS+Tb+h21An3tUV9Zndn4ovZSX7QkhwLRI=)
5: 314349A68E6611EB8D43336CF8AEA228.roa (hash: Thxt35OuW2OHwRepR9n+aTVJ70XOv0V6vWotqPw7F9g=)
6: 524153BE8E6611EBB85F5E6CF8AEA228.roa (hash: 2hd9ZQH6yn17Npd0+aOdMdIMVFAkEErgQuvgi60v08M=)
7: 5B5AB2F28E6511EB82C6206BF8AEA228.roa (hash: uqU9yrUWC7VxCjK9hx7zhOvnfnJosiQgLAmWL6ofW8s=)
8: 6001068C237F11EFAF71141F7DDC24C2.roa (hash: Fe1hHfr+f3y3JImtSfxXw39BMD+ou4/AEKixzkcLodk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2465 (0x9a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368588EAF, serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Validity
Not Before: Mar 2 01:17:24 2026 GMT
Not After : Mar 4 01:17:24 2026 GMT
Subject: CN=69a4e525-5fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:f4:cb:46:c1:a3:f3:60:e1:8a:58:31:d4:
14:7d:ba:05:00:7d:70:4f:63:f7:f1:d4:f4:37:98:
da:49:98:6b:30:ba:b7:65:19:ee:67:c6:4e:01:08:
ef:11:20:a4:50:c9:71:10:ec:9d:c2:b2:65:9b:38:
eb:05:af:63:a6:c0:9a:01:80:3c:84:0b:27:db:14:
76:c7:3c:f0:71:0c:f5:47:a1:f7:c6:42:82:e0:c6:
2f:bb:ae:5d:0e:c6:bf:05:9d:ee:3b:73:7b:6f:e0:
31:25:a4:c4:d8:66:0b:13:54:73:d1:c1:2f:ee:e9:
80:02:67:5c:b6:92:55:ac:ad:4d:13:8b:8f:27:5f:
1c:b4:b3:b9:5c:f0:1a:83:98:19:f9:70:ff:2e:4f:
e9:e5:a5:25:64:ba:ca:bd:d3:e2:b0:40:fa:10:3c:
fc:49:e7:29:8f:69:2d:4c:c5:c9:92:b3:97:14:d8:
27:93:1e:d1:00:ce:63:dc:35:d7:80:99:cb:03:b0:
b4:c2:3b:77:3c:32:ef:ca:74:94:81:cc:c0:c3:39:
b4:e3:ee:0c:dd:24:0d:5c:a2:58:4e:dd:77:a9:b6:
9e:7d:1e:5d:dd:0e:87:78:1c:fa:32:c0:86:64:99:
f4:1e:61:75:3c:a1:29:eb:5d:c9:93:88:44:61:dc:
de:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AF:00:71:08:E3:5E:B5:BC:2D:15:9B:5F:7D:B9:C7:7A:46:17:E5
X509v3 Authority Key Identifier:
keyid:5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:32:a1:9b:c8:e5:7a:e9:19:7c:47:f8:0e:ad:80:24:94:e5:
65:e7:12:11:45:5b:e6:5c:f1:8d:e8:fa:c8:d1:a6:f6:7c:c8:
91:9c:5e:1f:24:a8:4e:d8:45:60:cc:ef:0c:56:6f:44:65:09:
fb:45:aa:37:04:e0:98:61:46:1f:b5:d3:1a:9d:a5:38:bc:fd:
dd:b0:30:24:9d:04:1b:28:dd:93:50:af:0c:8f:d5:0f:27:19:
f6:95:74:e0:4a:37:76:cc:41:a7:9a:0d:7e:11:1c:fe:aa:43:
d6:8f:1f:70:85:8c:d2:43:16:36:c7:3e:06:c3:eb:92:0c:ef:
85:c1:e9:7b:b9:f4:d9:7b:e6:bc:c8:1e:dc:c4:83:29:fa:bf:
d9:e8:8b:09:c1:1a:c9:21:75:91:c1:c7:5d:a6:43:7f:77:2b:
9a:c4:15:37:2d:6c:85:4b:dd:29:bc:dc:1d:da:20:87:70:ff:
b2:70:db:b5:70:a0:c9:f5:7d:54:90:a3:e6:cc:85:40:79:36:
93:89:8b:aa:fe:d3:c3:b0:14:78:36:41:67:9f:b0:5c:d8:1d:
c9:f4:f2:95:16:9d:4a:e5:16:67:85:6d:cb:43:8a:94:7d:37:
ad:40:3c:05:f5:c2:0a:54:ee:51:91:6a:f5:fc:d0:84:a9:c6:
65:34:05:e0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCaEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODU4OEVBRjExMC8GA1UEBRMoNUNBREEzMkNGQjAwMUFCQTZFNEM5RjUyMTNEOTI4
NzY1QjE1QTMzNzAeFw0yNjAzMDIwMTE3MjRaFw0yNjAzMDQwMTE3MjRaMBgxFjAU
BgNVBAMTDTY5YTRlNTI1LTVmZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbDfTLRsGj82Dhilgx1BR9ugUAfXBPY/fx1PQ3mNpJmGswurdlGe5nxk4B
CO8RIKRQyXEQ7J3CsmWbOOsFr2OmwJoBgDyECyfbFHbHPPBxDPVHoffGQoLgxi+7
rl0Oxr8Fne47c3tv4DElpMTYZgsTVHPRwS/u6YACZ1y2klWsrU0Ti48nXxy0s7lc
8BqDmBn5cP8uT+nlpSVkusq90+KwQPoQPPxJ5ymPaS1MxcmSs5cU2CeTHtEAzmPc
NdeAmcsDsLTCO3c8Mu/KdJSBzMDDObTj7gzdJA1colhO3Xeptp59Hl3dDod4HPoy
wIZkmfQeYXU8oSnrXcmTiERh3N47AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUaK8A
cQjjXrW8LRWbX325x3pGF+UwHwYDVR0jBBgwFoAUXK2jLPsAGrpuTJ9SE9kodlsV
ozcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg1ODhFL0EzODIzOTU2Q0IyRjExRTk4OTBEMUIyN0Y4QUVBMjI4L1hLMmpM
UHNBR3JwdVRKOVNFOWtvZGxzVm96Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hLMmpMUHNBR3JwdVRKOVNFOWtvZGxzVm96Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODU4OEUvQTM4MjM5NTZDQjJGMTFFOTg5MEQxQjI3RjhB
RUEyMjgvWEsyakxQc0FHcnB1VEo5U0U5a29kbHNWb3pjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAIMqGbyOV66Rl8R/gOrYAklOVl5xIR
RVvmXPGN6PrI0ab2fMiRnF4fJKhO2EVgzO8MVm9EZQn7Rao3BOCYYUYftdManaU4
vP3dsDAknQQbKN2TUK8Mj9UPJxn2lXTgSjd2zEGnmg1+ERz+qkPWjx9whYzSQxY2
xz4Gw+uSDO+Fwel7ufTZe+a8yB7cxIMp+r/Z6IsJwRrJIXWRwcddpkN/dyuaxBU3
LWyFS90pvNwd2iCHcP+ycNu1cKDJ9X1UkKPmzIVAeTaTiYuq/tPDsBR4NkFnn7Bc
2B3J9PKVFp1K5RZnhW3LQ4qUfTetQDwF9cIKVO5RkWr1/NCEqcZlNAXg
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:26:10 2026 by rpki-client