Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
File: Ob52uHZXsJfc7qO0DURSok5WA4I.mft (raw, json)
Hash identifier: SJmjCHjk9AfqQFT6DUk8kVzrfVvSdULO8yA8MtlGcnU=
Subject key identifier: CA:74:B1:EC:83:99:0C:08:01:68:CE:F4:B9:33:AC:CF:57:FD:E9:FE
Authority key identifier: 39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82
Certificate issuer: /CN=F3688321AF/serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
Certificate serial: 02A8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
Manifest number: 02A7
Signing time: Mon 02 Mar 2026 02:54:11 +0000
Manifest this update: Mon 02 Mar 2026 02:54:10 +0000
Manifest next update: Wed 04 Mar 2026 02:54:10 +0000
Files and hashes: 1: Ob52uHZXsJfc7qO0DURSok5WA4I.crl (hash: IXSKnuR/vT7GbKa94pWQVZgMYytwKZm6RSdGscWG3ns=)
2: BCE5E01A0DFF11EFA7C0A7F8007001B1.roa (hash: m39T3fuh7q5xXJaI34cgegPgwSRYyjf0xq3cmG1FBwE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl
rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3688321AF, serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
Validity
Not Before: Mar 2 02:54:10 2026 GMT
Not After : Mar 4 02:54:10 2026 GMT
Subject: CN=69a4fbd3-4b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:2f:5e:01:5d:53:fe:f9:ad:26:c8:cb:1d:
ab:e9:9d:97:83:f7:0a:a0:f6:5d:e3:ba:00:cc:66:
a7:3d:69:9e:20:14:52:3b:b0:b8:12:9d:8e:18:87:
53:ce:5b:4f:ca:fd:69:9f:80:ca:e5:f5:8e:8a:65:
bf:99:93:31:57:1c:21:32:01:d6:b2:fd:8b:f9:9f:
1e:73:a5:b4:1c:b9:e5:f8:05:d8:6f:e3:e6:56:34:
59:db:54:d1:74:65:f3:59:1d:62:ad:5d:8d:7a:1b:
25:41:1d:e7:71:68:91:51:05:97:8b:fc:db:4e:ca:
78:3d:91:e9:35:9a:e8:52:bb:cc:da:3b:69:4b:d7:
17:fa:ae:3b:3c:c8:ca:e2:41:a3:d6:f4:f9:ff:e5:
e9:6f:15:3e:3b:eb:70:4f:37:69:a8:27:a0:a2:e8:
49:60:80:d8:35:42:4b:7d:7b:4d:0a:89:d9:45:9a:
5b:e8:87:1f:e5:4a:97:6e:63:96:eb:73:b9:75:34:
bc:c9:e1:bd:27:e2:f7:82:c5:00:de:66:19:3b:1f:
c5:9c:70:25:a6:1c:c2:96:06:ad:e1:cd:aa:89:ba:
8f:63:b8:27:4a:56:68:12:f4:4a:60:3c:c7:5f:87:
d8:90:66:fe:5a:14:be:15:74:4d:cf:c9:4a:62:7b:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:74:B1:EC:83:99:0C:08:01:68:CE:F4:B9:33:AC:CF:57:FD:E9:FE
X509v3 Authority Key Identifier:
keyid:39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:06:0b:63:29:ea:87:1a:4e:d6:4a:0e:6f:05:d4:97:02:dd:
50:83:d7:d9:65:e8:0a:60:70:59:f2:62:17:a5:02:0f:a9:a1:
43:ed:1a:22:4f:a2:e3:0e:6a:98:d0:60:25:59:b4:86:b0:bf:
a8:0f:92:64:74:01:3d:41:ed:ea:8f:3d:af:ce:a9:31:cf:2f:
4c:9b:b8:59:d3:4d:bd:aa:2e:55:62:df:ca:9f:15:b4:b4:f6:
37:d8:e7:b6:aa:2d:b9:f7:46:d0:7b:63:e1:08:ab:06:fe:64:
54:49:63:bb:85:c0:99:76:d1:7a:a1:a9:08:8e:10:69:4c:db:
4d:e1:cc:c3:f1:1c:b3:72:d0:72:77:9f:25:a0:f1:a4:b6:d5:
bc:0d:70:2d:5d:ea:1c:9c:78:bc:b8:ef:74:7e:11:9b:ce:5e:
62:2a:c6:b6:6a:d8:2d:ff:ad:b9:06:13:7c:43:fc:c2:5b:bc:
6f:40:26:3a:dd:b3:a7:34:6a:ef:34:16:2d:75:7c:a3:f4:37:
fd:28:82:a3:61:16:7a:4d:19:3c:99:48:30:28:bc:dd:b3:55:
5a:6b:af:59:a4:ab:ca:55:36:e7:bc:b4:d2:ff:34:7a:b1:9a:
2a:8d:d2:c1:f0:57:b3:2d:2d:4c:9d:60:7c:30:85:ea:cf:25:
04:38:0f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:21 2026 by rpki-client