Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
File: -kNarmNKJJQBjFzfiFcJr1vONro.mft (raw, json)
Hash identifier: FsLBv8GHG78qIS5duw/jOgKQOlOV2nGXRUtESi63ilU=
Subject key identifier: 6D:EB:42:83:19:0F:B3:B1:9D:1B:4B:92:BF:70:21:9D:7C:09:C3:59
Authority key identifier: FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
Certificate issuer: /CN=F36B1FB2AF/serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Certificate serial: 089B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
Manifest number: 089B
Signing time: Fri 17 Apr 2026 01:48:19 +0000
Manifest this update: Fri 17 Apr 2026 01:48:18 +0000
Manifest next update: Sun 19 Apr 2026 01:48:18 +0000
Files and hashes: 1: -kNarmNKJJQBjFzfiFcJr1vONro.crl (hash: DmCVcuqhOPNXvckLeOLVPy4jYMtIONm6qsCFoVHWDxU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 01:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2203 (0x89b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B1FB2AF, serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Validity
Not Before: Apr 17 01:48:18 2026 GMT
Not After : Apr 19 01:48:18 2026 GMT
Subject: CN=69e19162-0b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:a1:4c:03:37:82:67:bd:27:a1:98:ff:95:
e5:c0:94:2f:93:5a:44:40:87:9f:20:88:6d:e3:dc:
a8:58:7b:9c:c4:e0:34:21:d7:16:72:1d:de:d3:6b:
b3:b0:f2:1b:cb:08:f0:d2:ef:70:03:c5:3b:96:07:
a7:6d:a0:2a:e6:45:63:cc:d8:5f:2e:c0:67:91:f4:
17:70:21:65:d1:60:6b:7e:35:ab:4f:7d:7f:02:d6:
23:6d:23:c2:3d:c7:58:42:f5:c2:3c:ad:5c:1c:fc:
fb:4e:a9:0f:29:a7:1b:af:68:cb:b0:d8:18:8d:6e:
40:37:5e:62:f0:e0:be:c4:71:65:f6:5c:81:6f:5a:
44:7e:7d:44:e7:52:54:c7:fa:7f:8d:72:30:93:1e:
e1:34:b4:b6:e4:63:23:09:7e:7b:42:87:23:73:fd:
10:a2:b6:93:b6:82:66:10:89:b1:66:19:0d:98:80:
33:e9:ee:81:6b:56:5b:a8:82:9e:77:70:42:d1:aa:
3c:6f:13:94:51:3c:06:a3:9e:f2:d5:e6:5d:94:ad:
9f:ef:fd:da:54:a9:00:db:92:8c:37:24:dc:26:0c:
23:c8:fe:17:48:56:a7:e6:72:f7:44:d0:71:12:a0:
11:83:22:ca:41:b8:e9:f7:1f:f6:8b:f2:05:f6:30:
dd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EB:42:83:19:0F:B3:B1:9D:1B:4B:92:BF:70:21:9D:7C:09:C3:59
X509v3 Authority Key Identifier:
keyid:FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:e4:16:a4:14:89:5e:7b:71:76:4f:2c:b3:88:46:08:5b:f3:
92:c0:ac:15:6c:be:59:ac:e9:9e:cd:bd:e2:0e:86:0e:11:7d:
9f:59:23:62:14:29:f7:30:83:8a:d7:97:d4:7d:23:fa:b8:39:
37:a9:21:e2:12:ed:8c:9a:eb:97:0b:cf:b0:e9:96:71:0f:7b:
5f:6d:aa:f0:56:7d:72:d9:13:0c:39:f1:1c:b4:e7:e4:5b:58:
92:eb:43:2b:35:c9:ed:aa:16:fe:f6:08:be:4f:72:28:17:25:
43:ac:06:7b:4c:fe:bf:64:91:07:76:5d:b2:20:ef:18:e5:f8:
3a:1b:56:ca:8d:cd:f3:e1:20:0a:9d:fb:7b:0d:2c:09:03:99:
26:56:17:fb:03:f0:72:43:08:30:0d:21:07:d1:14:fd:8f:6a:
04:9b:4d:ac:e9:cd:64:bc:b6:05:4c:30:c0:bd:a0:05:bb:f8:
39:07:ad:3d:6a:4b:44:58:9f:b0:2e:3c:1f:fa:26:c6:fa:05:
f3:35:4f:24:3d:9b:a9:f9:83:bd:36:46:89:1d:f4:1f:c2:90:
10:b6:3d:10:f9:8f:f0:90:f5:a8:48:37:05:d4:86:0d:b3:41:
9f:5f:7e:50:71:bc:18:75:53:82:b6:62:8a:d9:d3:7b:5d:c3:
be:11:db:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:05:43 2026 by rpki-client