Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
File: oHAxgIgisopRzqJ21BM9cIqlFO0.mft (raw, json)
Hash identifier: FgpX8/fTr74tAvQ0cdABEI+JrMY2q03GihBm9g6tq7k=
Subject key identifier: B9:D5:83:7A:15:CE:34:FA:82:7C:2C:4D:B6:E9:D5:6A:D3:9C:4A:E4
Authority key identifier: A0:70:31:80:88:22:B2:8A:51:CE:A2:76:D4:13:3D:70:8A:A5:14:ED
Certificate issuer: /CN=F36CC4C5RI/serialNumber=A07031808822B28A51CEA276D4133D708AA514ED
Certificate serial: 4B
Authority info access: rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
Manifest number: 4A
Signing time: Mon 02 Mar 2026 03:36:02 +0000
Manifest this update: Mon 02 Mar 2026 03:36:02 +0000
Manifest next update: Wed 04 Mar 2026 03:36:02 +0000
Files and hashes: 1: oHAxgIgisopRzqJ21BM9cIqlFO0.crl (hash: gBetzhVf8jR+xi+NxhGtOz8wygX1acPOfEHNG2aKArs=)
2: 6BB245F8DE6E11F0A9CDBA7BDAE4EC9C.roa (hash: xOgvdv+bzOxwVoZHfk68mQJwNieIGm7/dHTt7BIs17g=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CC4C5RI, serialNumber=A07031808822B28A51CEA276D4133D708AA514ED
Validity
Not Before: Mar 2 03:36:02 2026 GMT
Not After : Mar 4 03:36:02 2026 GMT
Subject: CN=69a505a2-9933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:82:4c:1d:81:a9:03:48:b7:c5:fa:dd:8b:dc:
1e:ef:29:82:db:f9:a4:20:c7:c2:eb:ff:52:9a:d5:
53:6d:1c:76:d2:f8:f7:67:ad:af:19:08:26:c5:f6:
ef:1f:9d:51:c6:e5:45:79:a0:48:f1:18:d4:de:1f:
c7:88:d1:2d:4e:69:3c:ce:85:89:f8:b6:32:50:e3:
5f:70:d7:d7:3f:ce:2b:7a:fa:1f:9e:a8:36:aa:77:
75:ea:c9:bb:e5:4a:8a:c3:b1:22:b7:70:f5:9d:ed:
0e:a5:39:b4:ea:75:f8:3e:e9:99:bc:cc:17:85:75:
de:33:e9:dc:5a:08:4b:d3:e0:0a:a8:b2:0a:a3:58:
2d:a1:e0:60:2f:ed:3d:cc:ed:3d:7e:59:29:7f:8d:
7b:a8:2b:42:2b:d4:b6:72:37:89:3b:c6:0d:55:63:
69:91:1e:87:4f:4f:87:4c:81:8c:a3:77:ec:f5:46:
f5:91:ff:02:29:f5:c3:a1:a1:84:34:d0:6f:ac:a0:
59:4b:2b:90:95:c9:50:1d:8d:42:91:2f:93:8a:a5:
45:a2:b2:e4:be:53:f6:fb:36:43:31:4e:9f:43:8c:
60:ed:db:cc:49:29:f7:bc:e9:d9:2b:d8:2a:38:0c:
8d:47:38:cb:74:df:7f:fc:a3:37:a8:70:d9:4b:ab:
94:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D5:83:7A:15:CE:34:FA:82:7C:2C:4D:B6:E9:D5:6A:D3:9C:4A:E4
X509v3 Authority Key Identifier:
keyid:A0:70:31:80:88:22:B2:8A:51:CE:A2:76:D4:13:3D:70:8A:A5:14:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:15:e0:f4:e9:70:4f:6a:eb:c4:f2:c0:39:ec:fb:58:6a:59:
96:27:f4:38:8e:26:13:5e:d1:fe:80:db:c6:31:93:ab:19:11:
1a:6e:f1:ec:9a:76:e2:31:a6:15:76:50:70:e3:68:80:bc:5c:
74:e6:7c:eb:a7:88:24:96:d6:1c:c2:ff:1b:8e:a5:a3:0f:77:
78:14:6f:6f:1d:8a:76:68:e1:a6:2e:a4:dd:13:fb:05:7f:bc:
77:d9:f6:c8:ee:ff:14:fb:26:50:7f:0e:7b:32:72:27:77:bc:
b8:40:28:74:af:41:9e:72:9a:3f:28:3f:4f:ad:3b:75:8c:d3:
a3:93:0f:fc:87:bd:d7:17:6d:30:ab:3e:56:12:5e:5b:d9:cc:
67:5e:a5:28:8e:4e:a8:7c:33:3d:c2:b5:ea:d5:4a:e4:f5:ad:
7f:47:99:84:3e:51:95:2c:4b:fb:44:e0:d0:53:21:6b:19:c4:
6a:89:1e:be:f9:6a:5f:bd:c0:3a:94:94:cd:fc:e4:5d:58:9d:
90:2d:27:24:5c:32:50:69:f2:e6:47:07:9c:28:07:1a:03:1d:
ce:5e:c1:15:23:44:88:d4:6f:65:0d:72:54:15:78:f5:70:25:
9b:15:8b:d4:eb:97:75:f1:ae:d8:8c:7e:f9:ce:aa:00:da:0a:
55:e7:86:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:50 2026 by rpki-client