Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
File: cfbjXgELx4fYmgtLqTPZlvrU2tI.mft (raw, json)
Hash identifier: p6ALwWDS6v+6SXvMbEZdbnwlK8iByrRuLs3+cWQ3RBU=
Subject key identifier: 66:64:A0:5E:49:B3:05:F8:5F:2F:63:34:D2:30:2E:B1:38:4C:13:9E
Authority key identifier: 71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
Certificate issuer: /CN=F36882A1AF/serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Certificate serial: 06F2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
Manifest number: 06F2
Signing time: Mon 02 Mar 2026 01:41:31 +0000
Manifest this update: Mon 02 Mar 2026 01:41:31 +0000
Manifest next update: Wed 04 Mar 2026 01:41:31 +0000
Files and hashes: 1: cfbjXgELx4fYmgtLqTPZlvrU2tI.crl (hash: QaYhI4KsTf3rWNIM1/Pd1GZ0sX1ZsjgxRjPmf/4nrsM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1778 (0x6f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36882A1AF, serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Validity
Not Before: Mar 2 01:41:31 2026 GMT
Not After : Mar 4 01:41:31 2026 GMT
Subject: CN=69a4eacb-b0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:39:53:f1:06:27:9f:ed:3e:96:e6:e0:da:fa:
61:e2:fb:d7:eb:44:04:9b:82:24:f2:0a:83:3e:2d:
34:68:41:ad:64:98:17:43:21:94:14:b1:63:6f:f0:
19:e4:1a:5a:50:09:20:13:c4:d2:f5:7a:03:7c:56:
4b:01:65:e1:3a:b3:d6:4e:ef:c9:ea:7e:70:b1:9e:
67:22:1a:5b:66:78:af:03:09:7c:b5:ba:8e:25:56:
9f:c5:7f:1e:92:40:d3:c4:bc:3b:1d:51:9a:c3:85:
40:a9:54:e7:44:05:e4:ea:f4:4f:60:92:40:38:89:
80:62:62:16:89:74:3e:c1:9e:d2:2c:b4:04:83:08:
c0:a3:11:f1:2b:b3:17:d1:7d:b0:7a:51:1f:f5:09:
0f:c3:d4:78:1a:08:20:5c:e4:43:9c:49:3d:76:30:
5a:e5:a9:51:9b:a9:35:a4:8a:53:ba:24:f8:e8:cc:
2f:42:5b:8f:92:d3:f6:c7:0c:73:0e:85:76:78:a5:
3a:be:28:ed:8e:c4:70:92:ea:ba:6a:2b:f8:7d:be:
36:ed:38:3e:49:4f:90:27:1b:d8:93:44:a7:70:c0:
c6:30:71:fc:b4:60:83:2b:50:e2:88:41:38:09:a9:
05:75:c2:32:ef:08:13:58:3a:6b:b0:14:18:8d:9e:
0d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:64:A0:5E:49:B3:05:F8:5F:2F:63:34:D2:30:2E:B1:38:4C:13:9E
X509v3 Authority Key Identifier:
keyid:71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:e0:cc:7a:9e:35:6c:9a:27:75:4e:79:b4:ad:34:87:47:7e:
ab:fe:41:2b:49:8f:7a:13:db:16:b0:8e:78:76:38:12:e6:e2:
9a:cb:0e:c9:bf:6e:72:b7:72:da:6c:9b:98:88:5f:8b:cb:bf:
7c:af:e2:12:19:d4:93:a9:b5:f2:ed:7c:2e:97:dd:9c:87:fc:
8b:c9:c2:72:23:7a:b8:f9:40:94:8d:ef:ef:59:b7:c5:ba:65:
86:0a:e3:a1:d0:81:c7:dc:02:c0:4e:41:2a:da:82:df:9f:b0:
cd:00:51:b4:c3:7b:8d:1b:ef:c6:11:73:f0:31:5a:df:6f:7d:
21:5d:74:2f:32:80:a9:d5:73:91:60:22:3c:ef:52:5c:7a:e6:
93:7b:5c:89:27:50:d1:c8:76:91:2f:ec:38:59:8d:05:7e:07:
c1:31:bb:f6:4c:13:ad:45:46:22:0f:3d:15:41:f0:f7:5e:d5:
78:cd:a0:8d:66:df:cb:b4:04:a1:3f:6f:76:82:74:5b:88:56:
68:d9:0d:6e:96:19:b2:49:e3:32:b3:72:a2:ef:6e:41:0e:74:
57:67:2b:35:20:61:fe:dc:dc:d0:cb:fa:5a:f2:ec:6f:c5:6c:
e2:d9:0f:a0:f9:92:34:8d:63:a8:24:12:6e:f0:25:bd:ab:73:
d9:90:4b:35
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBvIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODgyQTFBRjExMC8GA1UEBRMoNzFGNkUzNUUwMTBCQzc4N0Q4OUEwQjRCQTkzM0Q5
OTZGQUQ0REFEMjAeFw0yNjAzMDIwMTQxMzFaFw0yNjAzMDQwMTQxMzFaMBgxFjAU
BgNVBAMTDTY5YTRlYWNiLWIwYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbOVPxBief7T6W5uDa+mHi+9frRASbgiTyCoM+LTRoQa1kmBdDIZQUsWNv
8BnkGlpQCSATxNL1egN8VksBZeE6s9ZO78nqfnCxnmciGltmeK8DCXy1uo4lVp/F
fx6SQNPEvDsdUZrDhUCpVOdEBeTq9E9gkkA4iYBiYhaJdD7BntIstASDCMCjEfEr
sxfRfbB6UR/1CQ/D1HgaCCBc5EOcST12MFrlqVGbqTWkilO6JPjozC9CW4+S0/bH
DHMOhXZ4pTq+KO2OxHCS6rpqK/h9vjbtOD5JT5AnG9iTRKdwwMYwcfy0YIMrUOKI
QTgJqQV1wjLvCBNYOmuwFBiNng0jAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUZmSg
XkmzBfhfL2M00jAusThME54wHwYDVR0jBBgwFoAUcfbjXgELx4fYmgtLqTPZlvrU
2tIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4MkExL0FBNzU1ODJDQzdDNDExRUJCNTIwQTY2OEY4QUVBMjI4L2NmYmpY
Z0VMeDRmWW1ndExxVFBabHZyVTJ0SS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2NmYmpYZ0VMeDRmWW1ndExxVFBabHZyVTJ0SS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODgyQTEvQUE3NTU4MkNDN0M0MTFFQkI1MjBBNjY4RjhB
RUEyMjgvY2ZialhnRUx4NGZZbWd0THFUUFpsdnJVMnRJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAn4Mx6njVsmid1Tnm0rTSHR36r/kEr
SY96E9sWsI54djgS5uKayw7Jv25yt3LabJuYiF+Ly798r+ISGdSTqbXy7Xwul92c
h/yLycJyI3q4+UCUje/vWbfFumWGCuOh0IHH3ALATkEq2oLfn7DNAFG0w3uNG+/G
EXPwMVrfb30hXXQvMoCp1XORYCI871JceuaTe1yJJ1DRyHaRL+w4WY0FfgfBMbv2
TBOtRUYiDz0VQfD3XtV4zaCNZt/LtAShP292gnRbiFZo2Q1ulhmySeMys3Ki725B
DnRXZys1IGH+3NzQy/pa8uxvxWzi2Q+g+ZI0jWOoJBJu8CW9q3PZkEs1
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:03:09 2026 by rpki-client