Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
File: 7heW4OxZE9jIj7q68fgKRZzuOTk.mft (raw, json)
Hash identifier: UmwSi22Ssj+EMZGCdsx80BmwBhrDZgn/ClLcQl5BTb4=
Subject key identifier: 62:1B:9A:96:D3:9D:4B:BC:97:38:6A:08:F1:C9:02:02:74:B5:B8:87
Authority key identifier: EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
Certificate issuer: /CN=F3687682AF/serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Certificate serial: 02B7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
Manifest number: 02B7
Signing time: Mon 02 Mar 2026 02:52:34 +0000
Manifest this update: Mon 02 Mar 2026 02:52:34 +0000
Manifest next update: Wed 04 Mar 2026 02:52:34 +0000
Files and hashes: 1: 7heW4OxZE9jIj7q68fgKRZzuOTk.crl (hash: Qjq3NoiqaPpeHfyQilD16/sbBwIgx8agJJWre+IDGwc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695 (0x2b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3687682AF, serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Validity
Not Before: Mar 2 02:52:34 2026 GMT
Not After : Mar 4 02:52:34 2026 GMT
Subject: CN=69a4fb72-6da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:c5:d4:44:42:b7:b5:65:cf:ee:93:ce:1e:
4d:e9:13:a1:3a:42:31:12:54:49:bc:23:a1:a2:57:
ff:89:29:87:8f:4b:0a:81:82:67:1a:97:a3:2f:f8:
e8:41:5a:52:75:87:d0:e3:e2:ed:4a:8e:44:25:68:
71:b1:58:06:5c:b2:3a:ee:75:90:3d:be:cf:32:e3:
52:74:e1:41:7e:3a:96:10:3e:61:8e:b9:10:ca:a7:
ae:3f:e7:88:50:50:a7:04:7b:e6:73:cd:7b:22:c0:
56:29:60:ae:79:fc:51:dc:74:49:91:ec:d8:22:11:
0f:3e:7e:39:1e:0d:a5:03:7f:0e:0b:52:24:0e:7d:
41:a6:da:c6:28:7a:b4:8a:ff:c2:11:4b:72:79:a7:
b0:61:b2:e5:9c:87:33:bd:e3:8e:58:b2:bf:19:bd:
8f:dc:88:5c:ce:8e:f4:43:54:30:a5:30:ad:65:52:
8b:5b:14:f0:2f:5b:d2:67:0b:98:f5:a4:8d:c0:28:
98:dd:cf:78:a1:a4:5e:14:42:4f:3c:59:d7:c1:4b:
da:49:fa:0f:28:4c:c6:62:81:ec:cc:be:cf:8f:01:
ce:b0:4c:3f:5d:bb:ce:65:e3:91:4d:be:b4:82:b3:
4b:e2:b5:72:1d:1e:d6:42:e7:67:06:01:7f:eb:e5:
01:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1B:9A:96:D3:9D:4B:BC:97:38:6A:08:F1:C9:02:02:74:B5:B8:87
X509v3 Authority Key Identifier:
keyid:EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dd:5b:c2:be:32:7d:ce:7c:d5:c3:6b:a7:0d:c9:4a:32:cc:0e:
b0:de:20:92:8a:b1:3d:12:54:f7:d5:69:54:91:cb:f6:12:06:
b6:1a:f2:51:c6:79:0f:8f:d0:45:d1:c5:6c:ed:52:0c:ec:8d:
af:68:41:69:24:28:91:f2:67:ab:bf:6c:df:02:07:06:5c:1e:
cf:c0:da:8e:cd:f1:22:83:42:f0:b6:b9:e7:a5:55:84:13:fb:
18:c5:f3:20:0c:8a:e0:94:fc:5f:a4:92:72:56:28:49:f4:99:
0d:fd:1b:b0:b8:de:68:bc:ee:bf:e7:66:34:61:2e:77:2f:12:
c6:1f:91:92:8c:4f:0a:77:f8:9c:4a:05:f1:f6:64:61:2e:19:
e9:e2:83:05:67:7b:d1:e7:69:9e:fe:3e:49:c5:bd:21:1f:fd:
4d:16:42:1b:aa:51:7f:89:83:aa:f0:f8:5f:be:9d:4f:c8:ce:
9e:be:b0:54:6d:aa:1b:58:78:1f:18:9d:3d:3a:ee:c0:d2:47:
0a:ae:fb:37:08:72:54:80:f8:14:d5:a0:b8:84:69:21:4e:bd:
1c:52:84:b7:f2:ae:47:03:e7:d7:64:bc:f5:a5:c9:2f:b9:42:
5b:06:37:75:45:4e:d6:a6:74:e8:04:36:1a:dc:e1:9a:fa:d4:
02:b5:7e:3f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICArcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODc2ODJBRjExMC8GA1UEBRMoRUUxNzk2RTBFQzU5MTNEOEM4OEZCQUJBRjFGODBB
NDU5Q0VFMzkzOTAeFw0yNjAzMDIwMjUyMzRaFw0yNjAzMDQwMjUyMzRaMBgxFjAU
BgNVBAMTDTY5YTRmYjcyLTZkYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCt6sXUREK3tWXP7pPOHk3pE6E6QjESVEm8I6GiV/+JKYePSwqBgmcal6Mv
+OhBWlJ1h9Dj4u1KjkQlaHGxWAZcsjrudZA9vs8y41J04UF+OpYQPmGOuRDKp64/
54hQUKcEe+ZzzXsiwFYpYK55/FHcdEmR7NgiEQ8+fjkeDaUDfw4LUiQOfUGm2sYo
erSK/8IRS3J5p7BhsuWchzO9445Ysr8ZvY/ciFzOjvRDVDClMK1lUotbFPAvW9Jn
C5j1pI3AKJjdz3ihpF4UQk88WdfBS9pJ+g8oTMZigezMvs+PAc6wTD9du85l45FN
vrSCs0vitXIdHtZC52cGAX/r5QG/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUYhua
ltOdS7yXOGoI8ckCAnS1uIcwHwYDVR0jBBgwFoAU7heW4OxZE9jIj7q68fgKRZzu
OTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg3NjgyL0RCODBBREI4MDA5MjExRUY5QkMxNEQwRDAxNzAwMUIxLzdoZVc0
T3haRTlqSWo3cTY4ZmdLUlp6dU9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzdoZVc0T3haRTlqSWo3cTY4ZmdLUlp6dU9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODc2ODIvREI4MEFEQjgwMDkyMTFFRjlCQzE0RDBEMDE3
MDAxQjEvN2hlVzRPeFpFOWpJajdxNjhmZ0tSWnp1T1RrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDdW8K+Mn3OfNXDa6cNyUoyzA6w3iCS
irE9ElT31WlUkcv2Ega2GvJRxnkPj9BF0cVs7VIM7I2vaEFpJCiR8merv2zfAgcG
XB7PwNqOzfEig0LwtrnnpVWEE/sYxfMgDIrglPxfpJJyVihJ9JkN/RuwuN5ovO6/
52Y0YS53LxLGH5GSjE8Kd/icSgXx9mRhLhnp4oMFZ3vR52me/j5Jxb0hH/1NFkIb
qlF/iYOq8Phfvp1PyM6evrBUbaobWHgfGJ09Ou7A0kcKrvs3CHJUgPgU1aC4hGkh
Tr0cUoS38q5HA+fXZLz1pckvuUJbBjd1RU7WpnToBDYa3OGa+tQCtX4/
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:26 2026 by rpki-client