Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
File: XulhNES2heRACvJQMvMjaKxzhgo.mft (raw, json)
Hash identifier: wnkKF46a9QiBZz2OvedECTOLhkbjc+8noGh5cOLfgmI=
Subject key identifier: 8E:AC:3A:95:1D:F4:12:B0:2E:7E:EC:9F:05:84:7D:60:9D:D1:5D:94
Authority key identifier: 5E:E9:61:34:44:B6:85:E4:40:0A:F2:50:32:F3:23:68:AC:73:86:0A
Certificate issuer: /CN=F36EE763AF/serialNumber=5EE9613444B685E4400AF25032F32368AC73860A
Certificate serial: 32
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
Manifest number: 31
Signing time: Sun 01 Mar 2026 03:38:35 +0000
Manifest this update: Sun 01 Mar 2026 03:38:35 +0000
Manifest next update: Tue 03 Mar 2026 03:38:35 +0000
Files and hashes: 1: XulhNES2heRACvJQMvMjaKxzhgo.crl (hash: s6A2MJ7BXLksG6bA7GbDBu5Cx1RZqux7HJ5YxrkMjn4=)
2: 8CF50C7EF09C11F09220C691DAE4EC9C.roa (hash: RBXfrMLemnAtHw5865OVdIO7wWh6V9X2nw9Mms9JBjU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EE763AF, serialNumber=5EE9613444B685E4400AF25032F32368AC73860A
Validity
Not Before: Mar 1 03:38:35 2026 GMT
Not After : Mar 3 03:38:35 2026 GMT
Subject: CN=69a3b4bb-a634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8c:5e:0c:11:7c:db:cd:dd:b6:fe:a4:d4:d3:
03:78:56:0b:da:61:a1:8e:29:43:6f:fe:f7:1b:dd:
d1:e4:f2:06:25:61:9f:29:aa:ec:cf:47:f3:02:ac:
25:d8:d7:52:c2:ea:3d:0c:3c:13:5d:99:25:7c:4d:
14:16:25:6c:c3:b5:a5:33:24:d7:c3:95:ed:94:bb:
4c:ce:6a:49:3e:47:4e:9f:8f:c1:87:56:99:bb:8f:
0d:17:df:bf:6a:4b:fc:f5:e9:6d:f1:e7:d2:a0:96:
88:6f:58:c2:42:05:6d:19:47:05:06:c3:2c:b1:c3:
be:b4:1e:5c:b0:ab:aa:cc:7b:c2:51:b8:08:96:7f:
ea:70:7f:ab:c2:71:82:95:dc:f8:33:8d:4d:70:ba:
57:01:2d:0a:a2:db:e8:ba:ac:d5:55:61:6a:b3:18:
70:1d:c7:00:15:8b:e9:6d:d3:4f:da:2a:9f:70:61:
d0:b1:9b:ed:68:7a:08:23:f1:d5:44:78:0e:31:67:
1a:ff:05:f3:47:a9:03:2c:7d:65:4c:f7:eb:a7:1f:
01:3c:1d:59:84:21:6b:c4:f2:a9:86:0b:24:9c:37:
a5:39:bf:7f:9f:e7:5c:b4:ae:42:29:d5:09:16:eb:
b5:df:c4:8e:3d:2f:c6:45:da:a5:41:ce:82:ba:4a:
2c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AC:3A:95:1D:F4:12:B0:2E:7E:EC:9F:05:84:7D:60:9D:D1:5D:94
X509v3 Authority Key Identifier:
keyid:5E:E9:61:34:44:B6:85:E4:40:0A:F2:50:32:F3:23:68:AC:73:86:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:0a:10:75:44:a0:6e:ea:96:7c:a6:6d:a3:54:cd:52:2c:e9:
9a:84:34:a5:79:f0:f7:27:87:2c:7f:40:8c:60:34:f4:dd:a2:
f8:88:83:d1:7c:49:8b:8d:03:77:38:58:d9:46:cd:03:d4:75:
ae:2f:6d:6b:48:3c:d8:d3:9e:6a:66:c6:00:1e:c9:fc:e2:71:
56:b8:89:99:5e:d7:77:96:2d:19:bc:60:26:47:f8:b1:a7:59:
95:ac:08:0d:ab:4b:f1:cc:98:a4:d7:94:c4:f3:42:2c:bc:03:
e3:c3:e9:eb:73:de:7a:bd:5b:67:ce:50:3a:eb:55:9f:d1:a7:
0d:6f:e5:44:73:8c:3b:7e:f5:b6:cd:55:46:17:f1:02:06:d0:
ae:e2:d2:0c:1d:9b:bc:14:65:ad:9c:86:8a:b7:03:04:4f:65:
7c:79:85:fe:e2:5f:99:13:4b:de:38:68:25:2a:40:38:2e:71:
05:7f:e5:e8:4d:62:44:41:a9:23:17:1d:17:5b:17:4b:74:a9:
da:60:70:be:69:d0:29:66:72:41:9e:a6:c1:06:84:1f:3d:2e:
0c:dc:d9:3b:aa:d3:b8:6a:82:f0:86:7f:b4:35:de:21:7f:21:
35:89:69:ba:5c:01:29:b3:03:84:cf:c4:a6:2a:40:48:90:4f:
8c:2d:f0:b0
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBMjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF
RTc2M0FGMTEwLwYDVQQFEyg1RUU5NjEzNDQ0QjY4NUU0NDAwQUYyNTAzMkYzMjM2
OEFDNzM4NjBBMB4XDTI2MDMwMTAzMzgzNVoXDTI2MDMwMzAzMzgzNVowGDEWMBQG
A1UEAxMNNjlhM2I0YmItYTYzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANCMXgwRfNvN3bb+pNTTA3hWC9phoY4pQ2/+9xvd0eTyBiVhnymq7M9H8wKs
JdjXUsLqPQw8E12ZJXxNFBYlbMO1pTMk18OV7ZS7TM5qST5HTp+PwYdWmbuPDRff
v2pL/PXpbfHn0qCWiG9YwkIFbRlHBQbDLLHDvrQeXLCrqsx7wlG4CJZ/6nB/q8Jx
gpXc+DONTXC6VwEtCqLb6Lqs1VVharMYcB3HABWL6W3TT9oqn3Bh0LGb7Wh6CCPx
1UR4DjFnGv8F80epAyx9ZUz366cfATwdWYQha8TyqYYLJJw3pTm/f5/nXLSuQinV
CRbrtd/Ejj0vxkXapUHOgrpKLMMCAwEAAaOCArgwggK0MB0GA1UdDgQWBBSOrDqV
HfQSsC5+7J8FhH1gndFdlDAfBgNVHSMEGDAWgBRe6WE0RLaF5EAK8lAy8yNorHOG
CjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RUU3NjMvMjgzNTIyNjJGMDU0MTFGMDkyQkU2RURDREFFNEVDOUMvWHVsaE5F
UzJoZVJBQ3ZKUU12TWphS3h6aGdvLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWHVsaE5FUzJoZVJBQ3ZKUU12TWphS3h6aGdvLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZFRTc2My8yODM1MjI2MkYwNTQxMUYwOTJCRTZFRENEQUU0
RUM5Qy9YdWxoTkVTMmhlUkFDdkpRTXZNamFLeHpoZ28ubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAJcKEHVEoG7qlnymbaNUzVIs6ZqENKV5
8Pcnhyx/QIxgNPTdoviIg9F8SYuNA3c4WNlGzQPUda4vbWtIPNjTnmpmxgAeyfzi
cVa4iZle13eWLRm8YCZH+LGnWZWsCA2rS/HMmKTXlMTzQiy8A+PD6etz3nq9W2fO
UDrrVZ/Rpw1v5URzjDt+9bbNVUYX8QIG0K7i0gwdm7wUZa2choq3AwRPZXx5hf7i
X5kTS944aCUqQDgucQV/5ehNYkRBqSMXHRdbF0t0qdpgcL5p0ClmckGepsEGhB89
Lgzc2Tuq07hqgvCGf7Q13iF/ITWJabpcASmzA4TPxKYqQEiQT4wt8LA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:37 2026 by rpki-client