Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
File: -kNarmNKJJQBjFzfiFcJr1vONro.mft (raw, json)
Hash identifier: 27dJGypQOPgMeQREvgMavNbHA8rN93BSgwXuMZeM1lI=
Subject key identifier: 78:E5:02:73:89:06:D5:8C:BB:E4:A7:0A:DD:2C:20:CA:C6:65:58:84
Authority key identifier: FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
Certificate issuer: /CN=F36B1FB2AF/serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Certificate serial: 086D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
Manifest number: 086D
Signing time: Mon 02 Mar 2026 01:26:38 +0000
Manifest this update: Mon 02 Mar 2026 01:26:38 +0000
Manifest next update: Wed 04 Mar 2026 01:26:38 +0000
Files and hashes: 1: -kNarmNKJJQBjFzfiFcJr1vONro.crl (hash: KvpCkq+jc99G1CyN1LU7y9A28vQU6hTl9moMoXw1GqY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2157 (0x86d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B1FB2AF, serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Validity
Not Before: Mar 2 01:26:38 2026 GMT
Not After : Mar 4 01:26:38 2026 GMT
Subject: CN=69a4e74e-09d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:df:2f:2f:7b:48:16:b7:2a:46:42:fa:94:
13:4b:37:d8:5d:94:16:08:a1:30:b1:95:a5:3f:b3:
85:09:73:a4:1a:e9:b0:6f:63:82:1e:0e:de:49:8b:
1d:42:b2:41:ec:f2:89:26:54:b1:98:e3:b9:7b:a2:
3e:56:2c:30:95:89:86:83:5f:86:ef:82:d6:44:c1:
e2:a7:be:7d:9e:53:6a:1e:16:51:c3:a6:31:84:91:
45:b1:d6:75:e8:2b:e5:ec:d5:a4:c1:79:c1:8a:b3:
9d:cd:6e:65:af:b4:77:c3:05:be:ed:4f:e9:7c:34:
2f:dc:b9:0f:88:11:90:8a:a1:06:a9:2c:35:c8:d1:
b7:51:24:33:e4:8a:53:ea:4e:cd:c2:03:9e:13:fa:
9b:55:09:af:a3:ac:e3:6c:2e:48:6e:c9:04:29:e8:
86:dd:a7:ca:ff:85:77:5e:f4:8c:33:2d:49:6c:54:
82:45:50:87:52:10:c7:f2:40:e8:78:3c:73:6d:f6:
41:9e:28:b2:66:15:00:8e:b5:85:9d:a0:81:66:e3:
e7:aa:1f:e2:78:27:fc:ef:8e:c8:6c:91:b5:71:e0:
64:7e:6a:d3:f4:7e:f5:42:89:8d:9c:82:ef:4d:1e:
93:23:4d:1a:38:4b:c5:d0:c2:95:ee:68:ef:01:ef:
36:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E5:02:73:89:06:D5:8C:BB:E4:A7:0A:DD:2C:20:CA:C6:65:58:84
X509v3 Authority Key Identifier:
keyid:FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:35:d5:d6:f1:02:d4:cf:05:f5:0f:24:09:d4:b9:db:b8:6f:
78:08:97:fa:27:c0:76:06:47:fd:f8:7d:a0:a2:a0:eb:b8:9f:
7b:b5:26:a8:c5:20:52:da:be:7f:92:c5:24:0a:0e:cb:ac:ac:
de:2c:a6:8c:38:fc:2e:03:8f:4a:74:fa:90:d2:26:c2:5c:0a:
03:11:df:54:0e:ae:ef:d8:a0:30:0b:69:51:a1:df:09:3f:66:
d0:f2:ea:d3:d2:bb:a2:5e:68:7e:ab:0b:50:47:8d:6d:5f:63:
3d:69:ff:ac:36:d5:1f:33:b2:a6:b8:b8:60:09:55:a0:b7:e2:
dc:e7:b5:f7:f1:9f:65:20:b5:f0:4f:45:c8:f6:8c:58:12:31:
3d:e9:15:92:3c:2c:10:67:67:77:db:32:03:69:c9:68:c2:c2:
cd:a7:d4:0a:bc:f3:9c:a2:89:a1:00:fa:52:25:ff:c7:a7:08:
07:8b:73:da:2d:89:56:32:88:98:f9:bc:f2:5b:74:97:36:a9:
81:82:14:d7:4d:a8:5a:39:b5:c4:9e:3a:1d:1a:ec:d3:a8:89:
3f:c0:c8:11:60:66:4a:6c:71:52:60:5c:20:fa:1b:7d:80:39:
3d:d0:a3:75:5f:ea:61:22:0c:ab:d0:05:af:1f:9f:b7:5a:3c:
ca:7b:eb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:34 2026 by rpki-client