Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
File: zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft (raw, json)
Hash identifier: qptMLQ+kC9d47NN/Ncre3vfLnnmyJRdNtd1O5kljmoE=
Subject key identifier: 48:25:67:05:0B:71:30:51:74:14:9C:04:1E:53:F9:7B:45:5C:9D:A0
Authority key identifier: CD:74:ED:36:58:33:4C:A2:81:32:D6:96:EF:70:E9:0C:A3:F6:67:C3
Certificate issuer: /CN=F36D70D9AF/serialNumber=CD74ED3658334CA28132D696EF70E90CA3F667C3
Certificate serial: 05A6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
Manifest number: 05A5
Signing time: Mon 02 Mar 2026 01:59:36 +0000
Manifest this update: Mon 02 Mar 2026 01:59:36 +0000
Manifest next update: Wed 04 Mar 2026 01:59:36 +0000
Files and hashes: 1: zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl (hash: ryRmpAuIQ7vNf/1WgGl3q8LbNFgmc6f4xcMjfhwQuaE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1446 (0x5a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D70D9AF, serialNumber=CD74ED3658334CA28132D696EF70E90CA3F667C3
Validity
Not Before: Mar 2 01:59:36 2026 GMT
Not After : Mar 4 01:59:36 2026 GMT
Subject: CN=69a4ef08-3b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:27:47:66:2f:04:b5:38:c0:30:68:b8:dc:11:
bc:60:38:7a:e8:23:8b:df:44:f3:b5:09:c8:0d:74:
de:ef:06:b3:4d:60:d2:d5:92:21:39:46:63:0e:ed:
15:ae:9a:75:28:30:a3:41:33:77:b7:bb:2a:cc:64:
2d:f5:7e:4c:4a:81:1f:99:cf:68:00:57:1c:ad:11:
93:38:a2:1d:1e:d2:99:05:6d:0a:c1:c7:b8:f4:19:
f1:25:72:11:bc:8e:11:b1:b9:fa:96:8f:e4:60:fe:
cb:19:a8:e9:c9:22:08:98:f0:ce:7b:f4:bb:e3:16:
10:73:fa:50:85:e8:e2:0e:23:42:26:fc:e8:32:8c:
ac:a1:81:ad:98:3d:50:62:a3:5d:2d:f5:6c:f1:dd:
f0:a1:27:c8:c6:eb:34:40:87:3d:76:68:b7:cc:02:
9f:8c:c1:01:b0:cc:86:35:26:07:9f:81:15:e3:34:
8c:c2:3b:89:27:8a:cc:ba:bc:8a:46:ff:e6:77:bd:
e5:c2:27:e2:e3:e8:ca:8d:32:7c:f4:17:4c:a8:73:
d4:12:c1:28:49:ac:95:19:8e:1f:52:58:9a:dc:6e:
0b:1a:ab:cc:69:3d:49:1b:f5:be:6d:ad:40:30:1b:
5d:f9:37:de:da:42:b9:92:63:24:03:34:2f:71:10:
75:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:25:67:05:0B:71:30:51:74:14:9C:04:1E:53:F9:7B:45:5C:9D:A0
X509v3 Authority Key Identifier:
keyid:CD:74:ED:36:58:33:4C:A2:81:32:D6:96:EF:70:E9:0C:A3:F6:67:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:41:f8:83:63:45:63:82:27:14:8a:b1:6e:23:2d:ea:f2:83:
74:01:05:7e:fa:f9:a5:88:2f:57:73:81:73:b5:6f:96:1f:0d:
7e:e1:ed:c7:9d:18:94:95:3b:f3:54:44:a3:67:12:74:d5:fd:
d9:3c:47:6e:ba:2a:ad:00:bb:ff:d3:67:a7:92:da:52:d9:f7:
bd:6d:03:4f:9c:37:c2:b5:50:fa:ae:b8:b0:1b:57:14:54:d9:
62:e0:44:fb:fb:3d:cd:48:1a:8b:b8:90:2b:19:a2:c0:1a:83:
4a:1e:09:ce:5c:5c:dc:c2:59:0f:55:8b:50:b4:41:17:28:9c:
f2:26:14:32:b8:21:4a:97:c6:41:cc:92:4b:80:24:8b:50:03:
2e:ad:57:9f:3e:94:50:28:22:9e:e2:fb:c3:40:19:45:0c:46:
16:95:96:c5:47:00:db:6e:3b:d7:27:f0:a2:b8:e0:ee:83:54:
93:5f:f6:2b:22:50:44:92:08:af:c7:1b:fa:30:8d:2b:2a:47:
41:08:2c:a1:14:ab:45:5e:dc:32:b0:80:df:2a:5c:b8:5a:cc:
0f:ad:0d:5f:00:1b:37:d2:b5:28:b8:f2:4b:75:9c:c3:8e:5e:
4c:a3:a3:84:8a:cd:3b:3a:fb:86:dc:96:fb:ff:aa:e2:cb:6a:
ff:f6:77:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:12 2026 by rpki-client