Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
File: 7heW4OxZE9jIj7q68fgKRZzuOTk.mft (raw, json)
Hash identifier: SQTH2pWU8x9Kc5pkKn5eHCOfGbEn7kAHnQPv7kmQzto=
Subject key identifier: 09:F5:04:44:7A:AB:E9:22:91:3D:BB:F9:28:F0:1F:CF:FA:D9:80:37
Authority key identifier: EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
Certificate issuer: /CN=F3687682AF/serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Certificate serial: 0354
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
Manifest number: 0351
Signing time: Tue 28 Jul 2026 04:09:27 +0000
Manifest this update: Tue 28 Jul 2026 04:09:26 +0000
Manifest next update: Thu 30 Jul 2026 04:09:26 +0000
Files and hashes: 1: 7heW4OxZE9jIj7q68fgKRZzuOTk.crl (hash: vJbXAqjJ08HXbkkO4tXdixblf2FEb5U1RF8kFjjB8x0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 04:09:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 852 (0x354)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3687682AF, serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Validity
Not Before: Jul 28 04:09:26 2026 GMT
Not After : Jul 30 04:09:26 2026 GMT
Subject: CN=6a682b77-27fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:42:2b:66:60:3d:c6:f1:d2:35:26:67:2b:
48:72:34:ca:9f:4a:3e:e6:ba:fa:3e:03:0c:a5:10:
39:28:11:2d:90:2e:71:2c:c0:28:9f:ed:b9:8f:d2:
d6:33:ef:67:da:55:05:88:c2:30:dd:0e:3e:3a:79:
f0:60:a5:41:d0:84:80:5f:d1:90:d5:c1:1d:58:b4:
70:fd:61:f5:df:da:84:c5:d4:52:af:4f:1a:07:d2:
63:f4:21:94:2a:c5:b8:60:28:71:87:22:80:35:d9:
2d:09:13:e4:e6:0a:df:0a:0c:49:5c:61:d9:18:9d:
d4:88:de:c2:6c:b5:4c:32:d7:72:a2:ae:61:71:d4:
f2:fd:56:03:bb:85:78:4a:f1:6b:7c:0f:f8:f5:27:
c3:71:e8:2c:70:32:33:9a:8b:d6:c0:c5:f5:b6:97:
c9:c9:b6:88:84:d9:3f:84:8a:df:ff:dd:dd:d8:b0:
34:d1:a4:39:84:15:22:57:41:08:64:00:ad:4d:68:
fc:dc:0c:56:b0:76:36:c1:af:78:f5:75:3d:b1:c5:
2f:49:63:58:5c:e3:dc:6a:07:1d:71:8e:62:e3:e0:
c5:71:c3:51:1e:0a:bb:3e:3f:6d:0e:6b:00:89:0c:
26:81:5a:0d:ec:fc:97:7d:49:a8:c7:35:d3:95:f3:
f8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F5:04:44:7A:AB:E9:22:91:3D:BB:F9:28:F0:1F:CF:FA:D9:80:37
X509v3 Authority Key Identifier:
keyid:EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:85:f8:3b:ac:43:84:68:72:73:81:bd:5c:b1:6b:3a:91:55:
17:b8:cb:19:db:5f:5d:b9:bf:d1:42:fe:0f:0a:10:1b:0b:c4:
1e:8a:b2:62:68:8f:e5:e4:bb:8b:90:3b:49:34:5b:2f:c7:b4:
17:48:09:f6:19:5d:52:48:7a:de:7f:7a:0e:89:24:ce:bd:a6:
6c:05:bb:20:80:41:f1:57:43:51:f5:26:6d:2f:43:cd:aa:96:
35:65:0e:37:ce:41:f1:85:b4:ca:e6:34:67:62:c6:63:c2:40:
34:7e:de:1a:f0:43:12:36:75:5c:16:6a:1e:64:1d:fe:b2:29:
2d:92:99:6d:78:c7:db:ee:e8:e6:5d:2a:2d:6a:f7:91:ef:5a:
c8:65:98:a3:30:27:bc:4f:77:f6:2f:06:d7:65:48:14:77:e1:
15:8c:05:34:5a:c1:65:93:3c:fc:11:37:c8:3e:8a:5d:71:b6:
ce:25:bf:62:3d:3e:30:78:e5:43:84:4f:1f:7c:0f:cd:1c:7d:
30:1d:73:a7:92:64:2f:0c:fb:a1:74:85:55:6a:e7:15:03:d8:
59:ba:4c:70:a5:8e:2f:07:22:df:83:49:5a:8a:99:23:a5:fd:
90:8e:18:63:51:f0:96:5b:c6:19:bd:6d:1e:68:4f:b3:87:11:
8b:ef:10:ac
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA1QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODc2ODJBRjExMC8GA1UEBRMoRUUxNzk2RTBFQzU5MTNEOEM4OEZCQUJBRjFGODBB
NDU5Q0VFMzkzOTAeFw0yNjA3MjgwNDA5MjZaFw0yNjA3MzAwNDA5MjZaMBgxFjAU
BgNVBAMTDTZhNjgyYjc3LTI3ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMs0IrZmA9xvHSNSZnK0hyNMqfSj7muvo+AwylEDkoES2QLnEswCif7bmP
0tYz72faVQWIwjDdDj46efBgpUHQhIBf0ZDVwR1YtHD9YfXf2oTF1FKvTxoH0mP0
IZQqxbhgKHGHIoA12S0JE+TmCt8KDElcYdkYndSI3sJstUwy13KirmFx1PL9VgO7
hXhK8Wt8D/j1J8Nx6CxwMjOai9bAxfW2l8nJtoiE2T+Eit//3d3YsDTRpDmEFSJX
QQhkAK1NaPzcDFawdjbBr3j1dT2xxS9JY1hc49xqBx1xjmLj4MVxw1EeCrs+P20O
awCJDCaBWg3s/Jd9SajHNdOV8/iZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUCfUE
RHqr6SKRPbv5KPAfz/rZgDcwHwYDVR0jBBgwFoAU7heW4OxZE9jIj7q68fgKRZzu
OTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg3NjgyL0RCODBBREI4MDA5MjExRUY5QkMxNEQwRDAxNzAwMUIxLzdoZVc0
T3haRTlqSWo3cTY4ZmdLUlp6dU9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzdoZVc0T3haRTlqSWo3cTY4ZmdLUlp6dU9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODc2ODIvREI4MEFEQjgwMDkyMTFFRjlCQzE0RDBEMDE3
MDAxQjEvN2hlVzRPeFpFOWpJajdxNjhmZ0tSWnp1T1RrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBChfg7rEOEaHJzgb1csWs6kVUXuMsZ
219dub/RQv4PChAbC8QeirJiaI/l5LuLkDtJNFsvx7QXSAn2GV1SSHref3oOiSTO
vaZsBbsggEHxV0NR9SZtL0PNqpY1ZQ43zkHxhbTK5jRnYsZjwkA0ft4a8EMSNnVc
FmoeZB3+siktkplteMfb7ujmXSotaveR71rIZZijMCe8T3f2LwbXZUgUd+EVjAU0
WsFlkzz8ETfIPopdcbbOJb9iPT4weOVDhE8ffA/NHH0wHXOnkmQvDPuhdIVVaucV
A9hZukxwpY4vByLfg0laipkjpf2QjhhjUfCWW8YZvW0eaE+zhxGL7xCs
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:40 2026 by rpki-client