Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File: rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier: xDmDrKnx3zDPl085Ao5bzH/VfoGbAtzzeq21LfkV99Q=
Subject key identifier: D0:15:B8:F4:D4:D8:13:5D:75:0B:B0:56:69:31:E1:4B:6A:CC:33:62
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer: /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial: 09E3
Authority info access: rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number: 09E2
Signing time: Mon 02 Mar 2026 01:11:28 +0000
Manifest this update: Mon 02 Mar 2026 01:11:27 +0000
Manifest next update: Wed 04 Mar 2026 01:11:27 +0000
Files and hashes: 1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: 3yRRHLomX62ZVTi5RzVPDZ0n9+phY9M1pFtX5n5E4uI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2531 (0x9e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Validity
Not Before: Mar 2 01:11:27 2026 GMT
Not After : Mar 4 01:11:27 2026 GMT
Subject: CN=69a4e3c0-f852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:34:df:69:42:11:1e:a4:10:0d:78:cd:39:1e:
cf:7a:fc:73:92:08:42:56:b7:ee:6e:99:a1:c9:78:
9b:d4:26:cd:ab:d2:5d:02:33:6e:fa:83:60:91:f6:
a3:61:0b:47:33:79:c4:6e:0f:7e:18:41:9d:7c:e5:
27:6f:02:0d:6f:09:36:49:ed:29:4f:61:28:79:fd:
e5:16:ef:1a:da:7e:34:2c:fa:13:9a:8b:b7:18:e9:
3d:3b:89:ef:ef:d7:c8:06:db:2a:68:77:98:7d:7e:
5f:85:68:df:5e:6d:14:c8:54:5a:5b:e1:18:0d:41:
87:57:ba:99:60:fe:5c:20:b4:82:e5:b6:63:c4:d8:
5d:62:95:2c:c7:e4:47:f6:4b:80:b2:6e:84:fc:b7:
d4:b7:8e:e3:12:03:25:8d:b7:4b:44:15:5c:80:a0:
a8:1b:99:2c:50:40:89:64:2d:ce:07:43:d4:37:d2:
cf:98:79:2d:8c:bd:a2:11:17:b8:d5:e7:ea:13:52:
bf:d2:93:96:30:14:9d:b9:c6:e8:68:5e:69:f4:0b:
a2:bf:bb:af:e9:80:a9:ae:51:08:f4:54:b6:b9:56:
b6:cd:f9:25:93:c7:54:00:98:06:a3:ea:7d:3b:09:
70:aa:43:20:9b:4e:6d:4a:f5:9f:62:69:f3:8c:be:
73:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:15:B8:F4:D4:D8:13:5D:75:0B:B0:56:69:31:E1:4B:6A:CC:33:62
X509v3 Authority Key Identifier:
keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ef:ac:c9:c2:1a:88:b8:09:0f:d0:b3:de:91:d1:a5:f5:99:
f9:a8:2f:f3:39:b8:54:ec:aa:a1:11:9b:a3:69:c5:e6:18:7d:
6f:50:fe:a9:52:29:5b:47:6e:74:9a:2c:36:e3:a2:e1:e8:ce:
68:81:c0:54:90:46:22:b3:51:a2:78:f3:48:ce:53:44:b4:f3:
8f:f7:aa:27:a1:a8:96:b1:b8:69:12:13:82:e9:cc:88:4e:15:
fc:e5:bb:d9:31:25:39:28:7c:d8:8d:fc:b2:b9:2e:16:51:e6:
97:1a:2f:c2:b4:a7:ba:1d:9d:68:83:4b:32:0b:0b:80:ab:fd:
0d:9d:1b:c7:d2:29:82:2b:c2:82:e4:d9:83:77:bd:a8:a6:d0:
0f:10:b9:45:2b:a2:60:ac:2b:cf:1d:d7:05:79:6c:41:14:90:
8e:81:6f:38:b3:b5:ae:97:37:6e:76:8b:a2:a8:2d:ef:f9:b9:
64:6d:3e:3f:0e:55:be:08:c1:8c:80:00:11:11:65:7c:29:1b:
a0:4a:29:80:2b:73:09:0c:42:e5:9f:a0:e5:f7:07:da:d6:9d:
8f:d8:71:88:9d:32:aa:95:0b:ad:3a:be:0f:e9:90:7e:73:4b:
ed:cd:66:59:c2:aa:5f:ed:fb:56:44:e9:9b:30:17:de:3f:35:
cd:fa:04:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:07:08 2026 by rpki-client