Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
File: D4kdL9FUeF3D5rPHlmdkbAu09W0.mft (raw, json)
Hash identifier: 4h0U8N/rMV0Zh+FStElI79O2KQIDtKQ0ccMsb4nVz0Y=
Subject key identifier: 11:66:F6:F8:BE:42:AA:60:8C:53:A2:F8:A2:5D:71:81:46:10:43:D7
Authority key identifier: 0F:89:1D:2F:D1:54:78:5D:C3:E6:B3:C7:96:67:64:6C:0B:B4:F5:6D
Certificate issuer: /CN=F3641110AF/serialNumber=0F891D2FD154785DC3E6B3C79667646C0BB4F56D
Certificate serial: 2B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/D4kdL9FUeF3D5rPHlmdkbAu09W0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
Manifest number: 22
Signing time: Mon 23 Mar 2026 06:36:55 +0000
Manifest this update: Mon 23 Mar 2026 06:36:54 +0000
Manifest next update: Wed 25 Mar 2026 06:36:54 +0000
Files and hashes: 1: D4kdL9FUeF3D5rPHlmdkbAu09W0.crl (hash: mN82VzyuYnEynL3E8RFZE/8J3efIlevVZZ8Owi+wDzo=)
2: 70AA590E1E2B11F196DC24ADDAE4EC9C.roa (hash: uMkdtVFtuvQqxiv3P3QzJvhJoUMANuEicE2OUjLsOMI=)
3: A90F75EA1E2B11F1A74454ADDAE4EC9C.roa (hash: l0pI77i/3rExThBukFhyhrFHwyUmiyAZc83nnRzr++8=)
4: F6E916CC1E2B11F1B79D80B0DAE4EC9C.roa (hash: C6BbRAJGJhQ26iah4zjRl/7QOH2SLtDjfPiGNF+cAyk=)
5: CBEEA3561E2B11F1961C59ADDAE4EC9C.roa (hash: pvY9TQ8JUnIxht52zhSA0rWfrxaSQC/iSnp5NKbibUM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
rsync://rpki.afrinic.net/repository/afrinic/D4kdL9FUeF3D5rPHlmdkbAu09W0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 25 Mar 2026 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3641110AF, serialNumber=0F891D2FD154785DC3E6B3C79667646C0BB4F56D
Validity
Not Before: Mar 23 06:36:54 2026 GMT
Not After : Mar 25 06:36:54 2026 GMT
Subject: CN=69c0df87-77cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:74:e0:ba:a7:b3:f8:0d:83:31:55:51:68:20:
92:ea:e3:4d:e0:9c:9c:aa:26:53:f1:37:47:fb:2f:
0b:3c:c5:5d:5e:59:b2:ca:ee:dd:85:55:e1:6d:68:
a8:7f:f0:2d:8a:06:d6:ca:db:9b:c0:69:26:de:fd:
8f:6f:11:31:bc:39:47:41:0c:57:db:f8:ce:f1:d4:
bf:7c:8c:03:08:03:7f:78:1c:4b:2c:6b:0f:6b:56:
07:dc:b5:8d:a2:b6:46:52:1a:96:a0:6b:5b:f6:a6:
ff:e8:5d:36:f8:44:cb:b9:fd:bd:54:35:31:07:77:
0d:40:bb:be:bd:1b:47:ee:e4:9b:df:20:23:b5:17:
e8:9f:f9:53:29:54:d1:fe:98:dc:ff:a5:64:92:ca:
ec:75:5e:24:2b:b5:a6:54:81:83:a6:db:be:0e:9b:
b7:e0:06:17:23:d0:72:9f:db:d6:fa:31:cd:ed:e8:
c2:78:04:cc:aa:3b:b1:a5:3d:8a:d8:87:cb:74:50:
8b:ae:74:50:69:d4:b5:34:21:10:16:f6:c2:2c:21:
bc:6e:18:a4:db:79:88:d6:13:0d:dc:c1:79:c1:a3:
c9:74:55:6d:3d:c3:ed:3f:c5:a2:e7:aa:71:53:d2:
72:13:9c:a4:6c:95:ee:45:53:15:38:e7:83:a4:95:
2f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:66:F6:F8:BE:42:AA:60:8C:53:A2:F8:A2:5D:71:81:46:10:43:D7
X509v3 Authority Key Identifier:
keyid:0F:89:1D:2F:D1:54:78:5D:C3:E6:B3:C7:96:67:64:6C:0B:B4:F5:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/D4kdL9FUeF3D5rPHlmdkbAu09W0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4d:d1:9d:9d:b3:84:0e:da:d2:ef:1e:16:00:5a:e1:cf:ab:
6f:76:2e:ac:3e:7c:97:00:27:a6:c1:7f:f0:97:4f:1f:55:96:
8a:dd:e8:b9:9b:f5:e8:ed:d6:c7:2a:df:0e:5d:34:c7:b0:d2:
dc:66:97:f7:ab:3d:35:15:90:ab:bc:c5:b8:81:e0:a4:79:67:
86:71:b6:e7:f2:da:47:ad:18:c6:45:a1:7a:3d:c3:b1:a2:04:
cc:a5:04:ea:c2:09:e4:6c:5a:6f:34:58:3b:20:59:fc:a6:2d:
8b:6a:87:22:4e:d1:aa:9e:b3:35:46:c2:26:6f:05:82:4a:60:
84:13:19:a6:98:fa:7f:18:74:7e:79:96:05:22:ac:82:ef:ec:
39:8f:c4:cb:34:9f:6c:e3:82:a8:1c:b6:0a:ea:d5:5b:c4:ab:
92:79:8f:d9:50:e5:6c:6d:66:1c:94:05:75:13:09:40:70:b6:
cf:3f:9d:64:83:b0:0c:9d:55:e7:f2:2e:08:bb:90:12:f8:ba:
25:5c:b8:11:ee:21:d4:4d:5f:2f:76:ed:93:e1:7a:77:b1:e2:
50:51:46:69:a6:cc:e1:e6:fe:03:7d:2b:ea:21:46:4e:10:fc:
2a:71:8c:fc:28:55:cc:04:42:2e:31:ab:e3:b1:98:54:f8:37:
5f:e6:8c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 10:21:01 2026 by rpki-client