Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
File: CbNOEzY507TuNRYTuKYNaxkCrWM.mft (raw, json)
Hash identifier: 3Dh+cn58kC3GKYvw57xiw+O9R8MTehYPo2eaURycdAo=
Subject key identifier: 62:6B:84:C6:DE:63:C5:46:73:0B:F8:24:85:D4:67:CA:BB:5C:41:D2
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Certificate issuer: /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial: 02C8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
Manifest number: 02C2
Signing time: Mon 02 Mar 2026 02:52:49 +0000
Manifest this update: Mon 02 Mar 2026 02:52:49 +0000
Manifest next update: Wed 04 Mar 2026 02:52:49 +0000
Files and hashes: 1: CbNOEzY507TuNRYTuKYNaxkCrWM.crl (hash: vX5yrADzS8cSeVlewXx8JZetEaQY2CaWbf6bzbcdvg8=)
2: 109E9816058E11EF9F2E082A017001B1.roa (hash: awGoqbBSAx/fCGhKKOOxrJpeJJgZ+sWJhXA1UCAvdvs=)
3: F1372870058911EFB8214008017001B1.roa (hash: t2P1L8ixLWdSZJ4m2IxwLYayMJ240E8hcnHi+YngPF0=)
4: 6A08039C101011EFA385055B017001B1.roa (hash: A6nZPy/mB+rYQKkTcDrcj6TrmIhozwVdv/FBstEbirU=)
5: 7F80E364058F11EFB71B1335017001B1.roa (hash: rJz+n5vELGUm/ZVnAC3v32ehr4m666WbMOKDdNfrYmo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 712 (0x2c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3693AE0AF, serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Validity
Not Before: Mar 2 02:52:49 2026 GMT
Not After : Mar 4 02:52:49 2026 GMT
Subject: CN=69a4fb81-0058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:98:9c:14:ba:41:e8:68:95:3e:4c:9b:60:
f9:57:e6:93:b3:83:d9:6e:53:43:d2:5c:13:b9:c1:
bd:82:b4:1e:94:c5:a7:25:98:d6:4c:9c:05:05:91:
29:73:8a:73:b7:cc:c5:14:73:13:87:78:b2:7f:5b:
2e:f0:9a:c7:a4:5a:79:96:ca:51:f7:20:01:0c:c8:
2e:39:50:5d:23:06:e3:c8:b0:a1:1d:6e:a1:c1:9f:
a7:fa:c1:67:59:ff:50:08:3b:a3:e7:91:dc:c8:7a:
fd:85:fa:f7:75:cb:55:94:44:78:14:1c:77:79:24:
2b:ea:54:5d:ab:51:8a:ad:b0:f7:3a:67:4b:31:c6:
63:35:9a:ca:9a:61:0e:61:a1:76:d7:9d:10:27:e4:
53:0c:35:6c:29:bb:5c:ea:2b:6d:b9:91:58:a3:c4:
13:11:e2:03:dc:7f:4b:f9:c9:73:29:0a:ce:df:d9:
57:05:db:06:b0:96:dc:cf:05:3a:9b:dd:65:ee:f7:
78:98:ae:3b:02:9d:00:e5:75:43:10:3a:da:3a:e0:
97:a9:e5:4e:e5:3d:98:2f:d7:90:48:2f:fa:0c:d8:
6e:b4:0f:29:7d:b9:b5:6d:e6:c8:8e:12:f6:11:66:
d3:6e:07:d9:8c:f4:e5:20:32:7d:e3:19:63:c6:ce:
fe:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6B:84:C6:DE:63:C5:46:73:0B:F8:24:85:D4:67:CA:BB:5C:41:D2
X509v3 Authority Key Identifier:
keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:9f:f1:8d:a9:dc:69:63:2a:d8:c5:bc:d4:cb:62:71:37:02:
4c:2a:ad:34:bf:ba:08:49:df:6a:4a:7b:f9:39:ad:8f:12:b2:
f6:01:2e:d7:6e:1c:19:05:de:bf:6c:d4:bb:31:f7:94:1c:d7:
b6:86:24:cc:d0:64:53:7a:1a:4e:c5:a5:10:0c:4b:e0:d8:2b:
66:4c:66:16:03:41:dd:eb:ff:b9:c7:7b:52:b4:63:b0:47:85:
fb:86:99:66:0d:f6:32:33:a4:0d:b6:d8:5c:39:17:7c:a2:33:
78:34:41:cd:93:fa:06:2b:3a:5e:73:9f:19:6d:6f:11:64:7f:
4a:0a:28:f9:fb:d9:0d:47:ec:94:46:d1:da:db:c1:1b:07:ff:
20:95:cb:fc:d6:9f:14:97:ba:23:0b:af:5b:33:ea:fc:8f:f4:
52:71:2b:5b:0c:aa:d9:00:bd:28:d4:67:2d:69:d7:8b:c6:7f:
54:aa:e1:88:25:b9:b4:4f:7b:59:66:99:e2:0f:23:91:31:a2:
95:19:f8:7c:6c:c5:fa:03:d6:f1:c2:65:9b:52:02:b3:a4:ff:
41:f7:74:cb:4d:0e:8e:8b:2c:f1:07:51:72:19:91:0b:36:64:
39:39:44:a5:e0:44:e2:09:25:0b:2a:04:77:30:dc:84:7a:55:
81:26:f2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:14:54 2026 by rpki-client