Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
File: QS0Z-aThegTQm63JAqsLCQgk6tc.mft (raw, json)
Hash identifier: P5StDOwzjn57GLC8wCgXfmZkBklcMMS033C2FXZTK9U=
Subject key identifier: 4C:26:C1:32:77:80:59:61:B7:5C:81:0C:B2:5A:1F:74:F5:E2:D5:01
Authority key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Certificate issuer: /CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Certificate serial: 0F6E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
Manifest number: 0F6D
Signing time: Mon 02 Mar 2026 00:51:43 +0000
Manifest this update: Mon 02 Mar 2026 00:51:42 +0000
Manifest next update: Wed 04 Mar 2026 00:51:42 +0000
Files and hashes: 1: QS0Z-aThegTQm63JAqsLCQgk6tc.crl (hash: bs8P6qxuoflMu8BQXBMY2S6vNVFmbbDifpcwcEUugfI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3950 (0xf6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FFD1EAF, serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Validity
Not Before: Mar 2 00:51:42 2026 GMT
Not After : Mar 4 00:51:42 2026 GMT
Subject: CN=69a4df1f-cd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:de:0c:d3:fa:e6:4a:96:2d:66:ea:fe:ba:fb:
3b:d8:c3:e2:38:84:f7:ac:1a:aa:c2:2f:e0:9e:88:
2e:bf:25:4c:96:dd:4c:c4:8d:c6:7f:b8:28:2f:f9:
10:22:58:1e:fe:e8:4d:50:78:bf:3c:c8:f9:2d:4f:
9c:3c:79:ea:31:a4:db:d4:36:89:af:24:32:fc:c4:
ef:5c:bb:6d:0d:51:88:8b:62:a2:a9:7a:0d:88:c4:
b8:71:33:b7:f3:08:f0:18:f6:9e:57:c9:41:a6:c1:
6a:94:5b:78:ea:b4:1f:94:3c:1d:05:8f:06:92:8e:
e4:e2:09:31:56:3b:85:96:71:2b:42:68:a2:a4:4d:
71:c6:6d:61:03:ca:cd:ba:a9:6e:c2:14:43:2a:92:
8d:74:31:d0:9c:44:8f:d9:11:b8:18:e7:47:04:39:
66:01:d8:69:6d:77:3a:d9:51:4a:b3:62:09:c3:a8:
c5:35:62:09:e8:a3:c4:4e:e2:da:a9:c8:59:27:68:
ee:6e:0a:70:b0:ad:2c:33:00:4d:07:94:b5:62:f5:
cb:95:c8:30:7e:84:8d:0a:58:8e:f3:87:b2:64:f6:
87:b2:f1:d3:1b:0f:ac:ed:aa:ea:d6:31:7a:b5:50:
44:b4:74:d5:08:70:b8:f9:c6:a9:ff:cd:dc:37:97:
6c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:26:C1:32:77:80:59:61:B7:5C:81:0C:B2:5A:1F:74:F5:E2:D5:01
X509v3 Authority Key Identifier:
keyid:41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ab:5a:42:d1:d4:e3:6d:68:6f:58:10:82:8b:76:6d:a7:8d:
61:5f:a2:e8:85:e2:8e:8a:cc:38:2a:61:b2:71:9d:4d:2f:bb:
59:5c:ca:26:11:b6:75:75:b2:06:b5:2a:3a:dd:c0:fe:e2:39:
b2:af:0d:60:d8:d2:66:94:b3:81:cd:e8:a7:6b:d4:36:a2:33:
b1:34:81:a8:a4:9b:33:74:a2:35:e5:5f:6d:47:f9:b9:73:25:
80:fd:fa:51:a8:bf:45:2d:84:06:dd:d6:23:ed:3f:53:43:28:
ef:63:3c:5d:86:7f:50:c2:1e:6a:0b:ae:41:5f:94:c4:03:0f:
0a:d1:9b:7a:32:32:c6:08:43:64:d8:d6:34:0e:e8:97:cd:ab:
43:85:53:e9:db:eb:b1:5e:d9:19:45:db:c4:d6:46:85:48:74:
ff:e7:2b:55:b7:22:2f:a7:68:4e:37:04:0e:58:c2:d3:fd:01:
b1:42:15:0f:b4:a5:77:38:80:2c:13:4f:fb:70:b9:ba:ad:1b:
a3:a3:64:ea:63:d7:5e:1a:c5:a0:21:51:bf:ef:24:17:5d:3c:
c3:74:0a:9a:c8:4a:9e:31:92:55:6e:3b:6c:ad:16:b3:90:9f:
58:18:22:15:43:16:68:52:f9:ec:a7:e6:b6:0d:12:f0:fe:21:
65:b3:f4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:36:14 2026 by rpki-client