Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
File: 7heW4OxZE9jIj7q68fgKRZzuOTk.mft (raw, json)
Hash identifier: 9KfU933COSGXFuzERk8r2D9E0UPRcBeMwbgxiY8z8lg=
Subject key identifier: E4:FB:00:8E:A1:6E:59:06:56:44:D7:C5:DD:11:57:6A:3F:DC:1A:DB
Authority key identifier: EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
Certificate issuer: /CN=F3687682AF/serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Certificate serial: 02E4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
Manifest number: 02E4
Signing time: Fri 17 Apr 2026 04:07:29 +0000
Manifest this update: Fri 17 Apr 2026 04:07:29 +0000
Manifest next update: Sun 19 Apr 2026 04:07:29 +0000
Files and hashes: 1: 7heW4OxZE9jIj7q68fgKRZzuOTk.crl (hash: D/1x+jlJhpHBYbz8HwrVN90jIxP76VKd8xR3wv8Hz3k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 04:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 740 (0x2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3687682AF, serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Validity
Not Before: Apr 17 04:07:29 2026 GMT
Not After : Apr 19 04:07:29 2026 GMT
Subject: CN=69e1b201-b023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:42:64:b6:ef:42:d7:ed:ca:b6:a8:96:6d:91:
29:57:75:8e:9b:6b:01:5a:08:69:46:23:96:03:58:
75:21:ca:47:9c:af:89:13:49:d6:63:37:ae:fa:5e:
2f:47:6e:73:4e:3e:1b:01:4d:ac:77:8b:9d:ca:48:
3f:dd:2d:07:a4:d4:55:a6:04:3f:92:35:cf:3f:c1:
4c:09:25:a4:9c:97:6e:ad:4b:4b:ef:ec:aa:3a:fc:
f4:98:77:72:41:89:18:0c:5b:08:9b:30:dc:38:d5:
6b:5f:69:d3:f5:7a:7a:e2:ed:80:64:d9:93:f2:1f:
29:d6:80:51:e7:3c:a3:f1:5d:8b:71:9e:75:2a:d0:
77:07:a9:6f:b6:b4:95:11:a5:93:04:78:e9:4c:7a:
19:65:e4:5f:5e:c8:1e:c1:0b:b3:ac:40:fb:bd:b5:
83:0f:6d:75:4d:81:3b:45:aa:d8:4e:6b:18:b1:6e:
0d:25:05:8b:02:79:e4:9a:57:dc:5a:7e:84:ec:53:
a7:ac:63:03:3d:6f:eb:ff:19:dc:65:38:9e:e0:3d:
e4:f4:30:23:59:b7:13:cc:2a:e8:cb:21:7e:aa:f2:
36:48:f6:1c:9f:cb:3e:a2:6d:8f:bf:a0:ba:bc:8b:
d6:18:70:c9:9d:2f:fa:9f:62:4f:c9:26:72:1a:ba:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FB:00:8E:A1:6E:59:06:56:44:D7:C5:DD:11:57:6A:3F:DC:1A:DB
X509v3 Authority Key Identifier:
keyid:EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:7c:d3:28:30:7f:60:2d:83:88:70:d8:06:6f:e6:4a:c1:45:
cc:6a:5f:93:93:5f:34:f9:cb:4c:9d:14:0c:59:ae:55:aa:f6:
4f:fe:c5:19:db:1d:f4:36:2b:78:37:e9:78:4e:e2:1e:8a:67:
72:f0:4d:1f:3e:38:5d:b3:86:2a:e0:50:97:cf:4d:40:0e:2b:
f6:a9:4a:e4:f2:e2:75:6a:39:c4:a4:24:ee:46:b3:b6:d8:2c:
c5:3e:41:30:68:62:ce:84:7d:de:ed:30:9d:22:86:de:20:e1:
09:34:18:51:7c:d1:24:77:9c:7d:5d:93:e0:37:78:df:a9:a9:
ec:6f:84:26:cf:83:2d:98:84:4b:78:9e:26:89:7f:b6:c8:fe:
8e:2d:40:35:39:59:4e:15:3b:62:0a:cf:76:a2:de:fd:00:cf:
0f:af:8f:2b:50:44:5a:36:fa:cf:dc:be:b3:91:f3:0a:4f:5f:
e8:91:80:4d:41:44:6d:ce:c8:f7:2b:f7:73:5f:99:7a:40:b9:
11:80:c3:00:b0:fb:fe:53:a3:e3:ea:dc:2f:0a:f0:97:71:be:
e4:ce:c0:68:f5:42:71:db:64:c3:0a:cb:24:1b:cb:2f:46:b5:
94:dc:b1:75:7f:98:0b:0e:3c:f0:66:5b:d9:a7:7d:e1:68:fc:
34:ca:ca:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:41:47 2026 by rpki-client