Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
File: hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft (raw, json)
Hash identifier: plq80UvxpRi29aCnKeHPKCVJysOX326NFs6YAq48654=
Subject key identifier: FC:45:64:26:F6:41:85:47:EF:6E:CA:8E:CC:BF:79:4A:2F:7F:05:71
Authority key identifier: 86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
Certificate issuer: /CN=F36D8D30AF/serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Certificate serial: 0481
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
Manifest number: 0480
Signing time: Sun 01 Mar 2026 02:19:05 +0000
Manifest this update: Sun 01 Mar 2026 02:19:04 +0000
Manifest next update: Tue 03 Mar 2026 02:19:04 +0000
Files and hashes: 1: hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl (hash: ggCwaxdKxVKqllGX+KOm5YeVSEJVTJWjRgpsKcNXZeQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1153 (0x481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8D30AF, serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Validity
Not Before: Mar 1 02:19:04 2026 GMT
Not After : Mar 3 02:19:04 2026 GMT
Subject: CN=69a3a219-c4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ca:df:9f:96:77:e7:c2:aa:9b:a5:d9:4d:98:
71:c7:60:fb:f9:b9:79:d8:3b:95:90:5a:4a:25:b1:
9a:64:35:6c:49:34:5e:7f:fc:6f:ca:15:5d:5f:18:
62:73:ca:ed:a8:5e:47:cf:e0:ac:88:f5:0b:a8:50:
d0:d8:77:82:a6:36:c0:6a:61:ce:de:f4:37:93:5b:
01:8d:9b:8c:66:41:46:48:07:24:66:c0:93:d2:36:
76:a1:8a:80:ce:3e:90:88:37:e8:4e:f6:cf:15:5c:
f9:2f:d4:e4:7e:a0:a0:a4:77:43:80:12:b0:bb:d9:
07:39:35:23:be:78:c0:47:cb:ff:a8:30:21:2c:a5:
c2:03:93:2f:39:9a:6f:5a:19:aa:ab:f4:46:f3:a7:
42:d2:76:87:51:43:b5:59:d2:dd:40:d7:00:a4:10:
e8:76:d4:e0:01:11:7b:22:7d:56:bb:73:e9:38:67:
78:f8:22:21:dc:61:9c:ac:6f:1c:41:b3:9b:f7:35:
3d:3a:3a:32:c2:7d:37:13:64:33:69:2b:39:e3:c8:
07:2e:7d:b8:fa:fd:75:d7:6e:e9:a1:ca:00:f9:4f:
52:d8:6b:b7:69:94:e5:76:d8:8a:64:6a:8a:6e:ed:
7a:79:7d:30:b1:0c:f3:d8:d0:2d:fa:b9:cc:db:5f:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:45:64:26:F6:41:85:47:EF:6E:CA:8E:CC:BF:79:4A:2F:7F:05:71
X509v3 Authority Key Identifier:
keyid:86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:d0:c9:4e:88:f8:7f:10:8c:6d:d9:65:23:b3:aa:e6:e7:eb:
0d:90:dc:07:1d:d0:b9:7c:b5:4c:f7:6a:ed:c3:95:47:6a:4c:
9b:82:2d:07:18:22:13:9b:19:94:0d:79:34:f8:6e:88:d1:6a:
4a:d5:70:99:3b:f5:d6:8e:ee:5e:83:f8:e4:8e:08:1d:ca:a0:
9c:df:5a:c9:32:20:23:0a:ee:5b:e3:f9:ce:be:64:7b:4e:f5:
72:c2:39:e5:6d:15:71:a4:24:4d:38:b1:9b:f7:a2:71:91:80:
aa:c6:76:d4:df:fc:72:5b:32:ff:55:01:79:5a:43:97:86:c7:
3c:9c:85:db:71:56:2f:ad:a3:b1:58:ba:f9:5e:63:fb:3d:8d:
95:95:78:3d:e5:2f:c0:9b:2d:83:4c:39:cb:81:b1:71:7b:8f:
55:e7:e7:ab:7a:69:d9:3e:20:b4:b6:f5:fb:bf:8c:47:9f:e5:
7a:19:af:58:84:ee:78:49:7b:07:e2:c9:74:c4:c8:91:7b:6c:
2c:3c:9b:d9:e2:78:f8:e1:9d:a8:cf:d6:e7:7a:76:1f:22:0b:
c6:75:90:c3:bf:79:4c:99:b8:be:7b:3a:63:19:c1:93:79:00:
b8:05:0d:bb:22:e0:88:be:2b:52:4d:90:f0:97:fa:2b:9f:37:
c4:f0:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:35 2026 by rpki-client