Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
File: AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft (raw, json)
Hash identifier: w6aDYQR0Mv1CNasgCrfHgmk7e3Jc/2HApZxVgQPJe+M=
Subject key identifier: D3:06:86:C0:00:43:F9:02:5D:14:4B:A9:30:C5:9F:78:54:DB:38:34
Authority key identifier: 00:6E:0B:E2:10:90:79:2D:18:35:61:97:51:0A:D3:40:EC:04:23:53
Certificate issuer: /CN=F3695947AF/serialNumber=006E0BE21090792D18356197510AD340EC042353
Certificate serial: CD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
Manifest number: CD
Signing time: Mon 02 Mar 2026 03:27:25 +0000
Manifest this update: Mon 02 Mar 2026 03:27:24 +0000
Manifest next update: Wed 04 Mar 2026 03:27:24 +0000
Files and hashes: 1: AG4L4hCQeS0YNWGXUQrTQOwEI1M.crl (hash: JFHadv1nd11ZNdzavVXpeav7+fkvkso6r2isIoeR2Yc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
rsync://rpki.afrinic.net/repository/afrinic/AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3695947AF, serialNumber=006E0BE21090792D18356197510AD340EC042353
Validity
Not Before: Mar 2 03:27:24 2026 GMT
Not After : Mar 4 03:27:24 2026 GMT
Subject: CN=69a5039c-4ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:89:a2:55:d8:f6:5f:42:f2:c8:a4:c8:df:
08:61:17:1b:56:93:97:78:01:de:22:35:df:a1:ed:
f9:62:7d:46:f4:fc:82:22:fe:71:50:38:d0:61:a4:
10:c5:30:00:04:02:d7:50:ef:88:03:1e:28:3b:bd:
90:65:78:db:c4:0a:48:df:d1:58:1b:cd:97:1e:fe:
82:bc:c9:f3:e0:aa:b5:7d:aa:da:06:91:b3:fa:88:
ff:ad:40:6a:bf:1a:ae:b6:e6:9a:8d:27:b8:26:53:
c2:f1:03:d8:79:dd:fe:97:a5:4b:06:5c:84:2e:ee:
bc:e3:d5:05:7a:63:10:2e:25:76:51:2e:28:35:d8:
e8:6d:47:ed:15:6d:f2:99:e5:c9:9d:01:08:98:30:
ee:5e:70:3f:41:14:f0:b9:b5:12:df:e3:8b:45:4c:
fc:a8:db:b2:79:e9:15:1e:66:0d:16:b1:dd:01:34:
63:d4:d3:89:cf:bf:63:5a:cc:e3:87:8a:d1:e2:56:
8c:ab:45:52:f7:08:b0:a5:93:de:25:da:16:38:6b:
ad:48:a0:9c:06:ff:14:fb:b7:ff:8a:0b:ab:4d:7a:
5d:dc:c7:26:d1:b3:46:94:ba:c1:2c:b2:de:91:7d:
03:37:8f:01:a8:0a:d8:bc:fe:dc:70:fa:1e:91:cd:
65:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:06:86:C0:00:43:F9:02:5D:14:4B:A9:30:C5:9F:78:54:DB:38:34
X509v3 Authority Key Identifier:
keyid:00:6E:0B:E2:10:90:79:2D:18:35:61:97:51:0A:D3:40:EC:04:23:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:b0:65:10:da:0a:a3:ee:ee:0c:ff:8e:c3:82:b7:ea:2d:3e:
8e:82:8b:b8:0b:c0:f7:cd:95:fa:2c:2b:c2:73:b7:b5:bb:44:
f1:8a:f3:f7:b5:a5:79:a8:30:73:1a:7e:74:97:fa:df:0e:5b:
d3:58:5d:42:13:96:f5:0b:43:ef:0c:63:e5:d0:99:56:bb:85:
68:c7:09:c2:f1:75:af:40:72:44:f0:d0:27:c5:ab:7e:39:39:
5b:ab:d4:93:22:05:7c:c9:e0:e9:36:20:5a:cd:57:f7:a4:01:
37:b9:dd:a8:74:d0:9a:84:70:71:2f:aa:54:88:dc:5c:5d:38:
71:17:b3:0a:a0:95:5f:a3:e2:f4:77:4a:aa:ed:18:24:e2:9a:
85:c3:6b:a7:f7:55:2e:23:e0:36:51:9d:07:d7:a4:98:e3:0b:
94:7c:a1:49:8d:24:56:f8:30:de:d7:51:f2:3e:32:23:20:03:
3d:f2:da:0b:24:d8:9f:bb:2c:c4:b1:96:c2:68:dd:5c:b2:60:
0c:63:fa:78:ea:d4:6b:7f:8e:9a:8f:ef:1e:82:8d:74:d5:95:
e2:e3:8c:83:c2:18:da:25:21:3d:79:14:17:0f:36:da:14:0e:
09:f9:b1:2d:7b:56:72:d3:cb:b4:95:a9:73:62:5c:61:42:8a:
2c:97:8a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:30:23 2026 by rpki-client