Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
File: _IwxIe9n77axzoOCjjTdt-4B7nc.mft (raw, json)
Hash identifier: T4P04i3DeybUL4EeUtW0UTyw22mXKMWvI6Jk0zayYWw=
Subject key identifier: 4D:E3:19:CF:D8:7D:3E:FC:AE:6A:63:11:37:87:E8:05:92:3A:7D:60
Authority key identifier: FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77
Certificate issuer: /CN=F36D2FA4AF/serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
Certificate serial: 0301
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
Manifest number: 0301
Signing time: Mon 02 Mar 2026 02:48:29 +0000
Manifest this update: Mon 02 Mar 2026 02:48:28 +0000
Manifest next update: Wed 04 Mar 2026 02:48:28 +0000
Files and hashes: 1: _IwxIe9n77axzoOCjjTdt-4B7nc.crl (hash: CwQpQl8zr69dirGYxFqoDmkr4O7LI/M0/hmgfvH04CE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 769 (0x301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D2FA4AF, serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
Validity
Not Before: Mar 2 02:48:28 2026 GMT
Not After : Mar 4 02:48:28 2026 GMT
Subject: CN=69a4fa7d-5614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:22:b5:02:93:de:31:83:3b:7e:f5:fc:29:
a8:e8:c8:ec:ec:7a:89:98:63:ff:43:cc:66:34:15:
40:38:fa:a9:eb:d4:08:5e:e5:45:74:10:c2:2d:20:
a6:7a:d6:1a:db:a8:43:49:45:20:77:8f:6d:98:10:
70:c1:a2:6d:d2:99:c2:cb:c1:90:82:eb:ee:c6:df:
2f:a9:ee:e4:e6:0b:c6:18:f7:d4:91:4e:17:01:18:
c2:89:91:2c:14:8a:52:43:1b:64:6d:38:83:4e:bd:
21:ad:68:cf:91:c2:4f:6a:d8:be:0e:43:30:f0:0f:
de:75:21:88:4c:87:a3:89:df:47:27:14:39:86:b1:
2e:f8:81:31:10:1a:ae:17:16:4d:b0:41:0b:8d:2b:
36:8c:0b:67:c2:6c:53:61:c6:37:38:8a:65:c3:40:
28:a9:82:58:30:88:0e:fd:c2:d3:de:1b:fd:7e:da:
48:de:75:1a:9a:a1:37:b1:87:4e:72:ba:64:47:cf:
65:b4:64:c9:08:1a:b9:fc:24:34:aa:ee:b7:d8:7b:
22:31:e3:b7:fe:80:d9:a5:c1:c4:12:5f:fa:80:9b:
d0:6c:f7:3c:d8:a7:dd:bb:86:4e:e2:20:49:8e:a8:
10:56:b8:84:ba:e7:7a:77:6f:ef:07:dc:8a:f1:d0:
c0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E3:19:CF:D8:7D:3E:FC:AE:6A:63:11:37:87:E8:05:92:3A:7D:60
X509v3 Authority Key Identifier:
keyid:FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:77:0e:49:72:98:09:07:2f:cc:2b:6d:5a:e1:4c:99:62:c1:
42:37:7a:ee:b0:fe:6a:24:8d:c3:ef:fa:58:41:cb:68:21:fb:
c2:4d:3f:83:d9:ec:6f:f0:a3:ad:67:3a:dc:3c:9f:ca:45:87:
29:ca:61:c0:e9:20:c7:3b:22:a8:ba:ee:d5:97:d2:82:03:78:
1b:6f:cf:10:c4:9f:a7:c9:17:31:a5:5d:e9:0e:52:df:64:e0:
dc:11:61:52:b9:09:c4:a0:2a:a6:ac:a6:9d:9b:db:45:ec:5c:
c7:f1:41:d3:a7:9a:43:56:ec:d9:2a:76:28:5d:5f:48:d2:4c:
e9:ba:99:99:1d:18:d2:f8:81:12:95:01:2e:3e:14:30:c3:b0:
f0:5a:0a:3d:5a:64:66:51:d1:b6:81:43:56:0f:e7:85:99:68:
82:60:56:f8:e4:fa:fe:d1:6b:50:af:c3:c0:eb:c4:c7:a3:1e:
26:fe:0f:c4:84:90:4a:c4:3f:9d:0d:bd:53:c1:60:ab:2f:92:
9a:a3:47:ef:56:38:50:dc:fc:61:32:92:b2:a7:ff:ae:16:7f:
26:41:a2:a2:da:2f:7f:d3:c3:41:4b:fa:a5:4d:aa:c5:c2:ca:
f8:59:35:4a:40:4e:6a:ec:1d:a8:e6:77:d5:8d:ac:98:e6:d6:
43:9b:12:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:17:45 2026 by rpki-client