Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
File: XyKMRr7ytMupTLKfEMNoDuKIPbM.mft (raw, json)
Hash identifier: TvBbGRnIeH/ZHuWeFYvjXwK5O10+8zttltZluzxDJDg=
Subject key identifier: E7:01:30:EB:60:51:FE:F7:A6:54:C6:AA:60:BC:28:1C:69:2D:84:06
Authority key identifier: 5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
Certificate issuer: /CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Certificate serial: 0413
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
Manifest number: 0409
Signing time: Mon 02 Mar 2026 02:28:15 +0000
Manifest this update: Mon 02 Mar 2026 02:28:14 +0000
Manifest next update: Wed 04 Mar 2026 02:28:14 +0000
Files and hashes: 1: XyKMRr7ytMupTLKfEMNoDuKIPbM.crl (hash: 9rqOvJSZizqMNnn8leyA1KCIfLCKKJnNe944bv/axq4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1043 (0x413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A41A0AF, serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Validity
Not Before: Mar 2 02:28:14 2026 GMT
Not After : Mar 4 02:28:14 2026 GMT
Subject: CN=69a4f5bf-5ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:af:87:52:2c:cd:e1:3c:f8:2f:12:54:b5:21:
cd:0c:34:c4:f4:20:53:f6:ef:f0:3d:95:2b:2e:be:
0f:f6:09:5f:3e:6c:10:77:e4:1f:4c:9c:1a:5f:02:
5d:b8:d1:d2:67:fa:b0:5d:2f:a9:07:82:57:b9:9b:
ce:bb:fb:0c:c3:5b:c0:9e:8f:1d:17:de:5a:36:0e:
7a:50:61:e3:54:09:e2:35:2b:30:0c:fe:06:6f:ed:
80:d0:b0:af:4a:c9:12:b0:fc:1b:66:d1:f8:2d:fc:
fb:84:1c:e0:3a:83:aa:98:b1:d1:c0:7b:7b:c8:13:
ff:33:0b:4f:9d:8a:76:3e:eb:77:9f:9c:05:7d:c2:
4e:ca:17:f6:55:9a:07:54:16:b7:b3:90:6b:c9:18:
d7:28:19:d4:ac:de:6b:32:50:e0:4c:73:b5:9d:e4:
91:9e:a4:6a:5b:ad:87:2d:4a:a4:8b:1f:6f:13:39:
b6:71:17:aa:8b:56:49:ff:44:8e:24:a5:f4:9d:71:
e2:17:6e:d2:1e:f6:74:5e:2d:e6:cf:4b:f8:5a:6a:
45:6b:8a:22:ce:0c:d5:37:9a:99:45:91:51:f9:a2:
10:98:fb:84:1b:4f:02:99:eb:2c:61:22:ac:c1:9b:
96:a0:ea:4b:84:94:a2:f9:13:8a:2a:43:91:36:36:
22:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:01:30:EB:60:51:FE:F7:A6:54:C6:AA:60:BC:28:1C:69:2D:84:06
X509v3 Authority Key Identifier:
keyid:5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:05:9f:d2:fe:9c:cd:a3:19:56:77:ef:72:8e:37:f6:a6:c8:
a2:75:07:76:f5:f3:17:2a:77:7d:8d:76:ff:38:72:21:d6:87:
38:05:e9:9d:9b:87:2e:6d:b7:d7:ea:74:15:fb:03:5a:dd:df:
d8:3d:0f:8b:c5:e8:3f:b9:66:ec:75:75:6d:06:5f:63:f1:2c:
6a:dc:50:f1:77:30:fb:d8:87:95:f3:e7:e3:73:ac:9b:c5:0d:
72:31:d1:86:df:85:1b:cf:00:bd:b1:71:96:44:0c:cf:f4:b6:
30:01:22:a3:17:eb:1b:27:2d:1b:09:b1:65:91:7a:c9:85:dc:
a2:74:4d:62:fb:c8:75:e1:d6:7b:44:9d:cf:12:f4:be:44:b8:
3b:d2:2e:5a:d3:64:d1:e4:b8:67:f9:61:7b:31:b2:cc:68:fa:
51:67:c3:8b:22:96:0b:95:42:df:61:c0:f7:24:b3:a7:f2:48:
40:f4:a2:1a:e3:5e:e5:d8:bb:3b:85:86:7e:f9:05:00:df:95:
68:1d:fc:f5:01:0d:dd:44:1c:76:a7:37:34:86:ba:bf:8f:14:
d9:1d:ad:b7:7c:39:a5:03:84:6a:d8:b6:7a:98:d8:96:62:dc:
a2:88:ca:02:24:b8:b9:3a:16:32:0a:4f:fd:79:b6:8a:aa:a2:
32:5f:46:34
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQxQTBBRjExMC8GA1UEBRMoNUYyMjhDNDZCRUYyQjRDQkE5NENCMjlGMTBDMzY4
MEVFMjg4M0RCMzAeFw0yNjAzMDIwMjI4MTRaFw0yNjAzMDQwMjI4MTRaMBgxFjAU
BgNVBAMTDTY5YTRmNWJmLTVlZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDrr4dSLM3hPPgvElS1Ic0MNMT0IFP27/A9lSsuvg/2CV8+bBB35B9MnBpf
Al240dJn+rBdL6kHgle5m867+wzDW8Cejx0X3lo2DnpQYeNUCeI1KzAM/gZv7YDQ
sK9KyRKw/Btm0fgt/PuEHOA6g6qYsdHAe3vIE/8zC0+dinY+63efnAV9wk7KF/ZV
mgdUFrezkGvJGNcoGdSs3msyUOBMc7Wd5JGepGpbrYctSqSLH28TObZxF6qLVkn/
RI4kpfSdceIXbtIe9nReLebPS/haakVriiLODNU3mplFkVH5ohCY+4QbTwKZ6yxh
IqzBm5ag6kuElKL5E4oqQ5E2NiJ/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU5wEw
62BR/vemVMaqYLwoHGkthAYwHwYDVR0jBBgwFoAUXyKMRr7ytMupTLKfEMNoDuKI
PbMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0MUEwL0YwNjNDRTMyMEE5NzExRUVCOUI0MjUyMzRBRDlFNkZDL1h5S01S
cjd5dE11cFRMS2ZFTU5vRHVLSVBiTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1h5S01Scjd5dE11cFRMS2ZFTU5vRHVLSVBiTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTQxQTAvRjA2M0NFMzIwQTk3MTFFRUI5QjQyNTIzNEFE
OUU2RkMvWHlLTVJyN3l0TXVwVExLZkVNTm9EdUtJUGJNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKBZ/S/pzNoxlWd+9yjjf2psiidQd2
9fMXKnd9jXb/OHIh1oc4Bemdm4cubbfX6nQV+wNa3d/YPQ+Lxeg/uWbsdXVtBl9j
8Sxq3FDxdzD72IeV8+fjc6ybxQ1yMdGG34UbzwC9sXGWRAzP9LYwASKjF+sbJy0b
CbFlkXrJhdyidE1i+8h14dZ7RJ3PEvS+RLg70i5a02TR5Lhn+WF7MbLMaPpRZ8OL
IpYLlULfYcD3JLOn8khA9KIa417l2Ls7hYZ++QUA35VoHfz1AQ3dRBx2pzc0hrq/
jxTZHa23fDmlA4Rq2LZ6mNiWYtyiiMoCJLi5OhYyCk/9ebaKqqIyX0Y0
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:35 2026 by rpki-client