Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
File: ih_PKB86N6VQ5kE32QhVCuiQIzo.mft (raw, json)
Hash identifier: qmfAPGDFX4dutuR3D6aQ5ACKNgLh+vuCw6cv/AjB7K8=
Subject key identifier: 68:19:0A:30:3F:80:B3:FD:9C:82:58:20:5F:D1:E2:25:2D:53:12:34
Authority key identifier: 8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A
Certificate issuer: /CN=F36A3983AF/serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
Certificate serial: 021D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
Manifest number: 021C
Signing time: Fri 17 Apr 2026 04:35:59 +0000
Manifest this update: Fri 17 Apr 2026 04:35:58 +0000
Manifest next update: Sun 19 Apr 2026 04:35:58 +0000
Files and hashes: 1: ih_PKB86N6VQ5kE32QhVCuiQIzo.crl (hash: A/j6HWreztn3Dx0gxwJKXLdd55Fgj29no7xblumSKe8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 04:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A3983AF, serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
Validity
Not Before: Apr 17 04:35:58 2026 GMT
Not After : Apr 19 04:35:58 2026 GMT
Subject: CN=69e1b8af-c0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:e1:6c:9b:ce:6f:9d:18:d9:d9:4f:ca:1e:
ef:64:c5:58:5f:72:75:3c:89:f4:bb:2a:a2:23:13:
69:3e:dd:37:85:a5:d2:81:18:76:d4:1e:ec:b7:16:
2d:85:5d:fd:d7:1a:1c:08:11:ec:82:69:92:50:23:
72:7d:84:09:d4:57:60:71:90:fa:16:9b:c7:23:8b:
77:25:9e:16:88:78:83:90:a1:31:66:b2:aa:52:56:
7a:ed:5d:aa:04:8a:6d:2d:20:32:10:fc:53:c1:00:
17:9c:68:c2:38:33:06:cb:d2:5b:cb:33:da:5b:46:
10:30:d9:6e:f0:45:1e:ba:cd:ce:48:79:9a:37:ab:
cd:93:27:2b:ad:22:3c:1e:70:d1:5f:ee:45:0e:cf:
22:d6:5f:42:c4:78:c2:8c:83:ee:ad:cb:9c:c2:42:
58:77:9d:96:fc:38:b4:97:32:bc:89:4a:71:bd:ee:
bd:c4:db:08:e8:c6:64:63:62:96:09:81:52:3d:6f:
ae:a7:b3:93:2d:73:ad:7a:23:d3:38:c9:5f:6a:c2:
7e:f6:12:ea:0a:2b:1e:61:d9:3e:b2:81:b7:7d:b1:
09:75:77:8e:dd:de:2b:7c:c0:22:50:df:a6:eb:4f:
9f:56:d3:dd:20:25:80:70:40:08:2e:e7:b5:a1:88:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:19:0A:30:3F:80:B3:FD:9C:82:58:20:5F:D1:E2:25:2D:53:12:34
X509v3 Authority Key Identifier:
keyid:8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:f3:c5:c1:2f:b2:61:41:9e:99:6a:c7:6d:e3:19:35:77:83:
59:e7:5e:16:54:08:51:14:17:92:07:ec:b4:a7:5a:02:2f:6c:
09:bb:1f:b3:67:8e:57:96:12:2f:e5:18:57:b1:3b:6a:00:87:
0b:db:9a:27:b6:59:af:a9:46:e1:1b:2b:07:14:18:19:62:5f:
c5:89:f7:b8:37:d4:c6:94:f4:82:35:f5:4f:dd:51:3b:a9:9f:
25:9c:6e:de:59:9b:d0:78:29:23:b0:6d:4b:87:9c:e5:8d:fc:
8b:43:fc:84:12:5d:5d:d8:c2:f1:fa:13:dd:ed:01:c5:3d:8b:
72:1d:7d:1e:9b:23:dd:79:e6:87:d0:f7:0b:74:b9:41:42:06:
52:92:20:1d:7d:c5:7c:62:af:88:54:65:25:b7:55:ba:1d:5b:
30:47:60:b5:7f:2f:9a:06:c3:1e:f9:2c:0d:e4:d7:d8:30:da:
f2:1c:a3:e1:4f:f8:bc:75:8f:43:13:95:b0:f2:12:b4:5e:4a:
83:7a:97:c5:4b:47:63:31:4f:18:63:67:9d:1b:46:02:58:61:
33:57:aa:42:c0:5e:06:f3:c5:a8:48:c9:2a:ba:00:ba:84:6b:
b7:22:54:01:ea:fd:59:1e:b7:96:d5:1a:fe:07:a2:1d:e4:d4:
82:8a:b5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:19:15 2026 by rpki-client