Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.mft
File: AAXJbaZmm3B_OK0bxYUpxT44q_0.mft (raw, json)
Hash identifier: Gs1h6aE8HVjX0bVON5qxpUVUbf6Y9v0AZFOJwIXtlWM=
Subject key identifier: 28:54:5F:DB:3C:F7:AC:62:F7:4C:E5:7D:EB:B5:CE:D0:35:A7:B7:FA
Authority key identifier: 00:05:C9:6D:A6:66:9B:70:7F:38:AD:1B:C5:85:29:C5:3E:38:AB:FD
Certificate issuer: /CN=F36412BEAF/serialNumber=0005C96DA6669B707F38AD1BC58529C53E38ABFD
Certificate serial: 25
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/AAXJbaZmm3B_OK0bxYUpxT44q_0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.mft
Manifest number: 24
Signing time: Mon 23 Mar 2026 06:35:10 +0000
Manifest this update: Mon 23 Mar 2026 06:35:10 +0000
Manifest next update: Wed 25 Mar 2026 06:35:10 +0000
Files and hashes: 1: AAXJbaZmm3B_OK0bxYUpxT44q_0.crl (hash: EpvM5rN/etZVulLnzWJu9k5UdcfQ/VwG90/3oIjQ2wM=)
2: 30569F3C0C9411F1BE9799E5DAE4EC9C.roa (hash: SaqHcwD+guZ1feoju2N/bp3ZmAIiJzcI5uUiy12YasU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.mft
rsync://rpki.afrinic.net/repository/afrinic/AAXJbaZmm3B_OK0bxYUpxT44q_0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 25 Mar 2026 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36412BEAF, serialNumber=0005C96DA6669B707F38AD1BC58529C53E38ABFD
Validity
Not Before: Mar 23 06:35:10 2026 GMT
Not After : Mar 25 06:35:10 2026 GMT
Subject: CN=69c0df1e-c059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:ea:d7:b4:06:78:21:57:b1:af:8c:44:f9:
28:cc:93:c8:4b:9d:7a:5e:58:75:86:4c:8e:a4:6f:
fc:22:1f:13:bd:db:c8:ed:d3:68:51:ee:3e:fa:43:
10:cb:dc:28:f9:08:2d:de:a6:85:07:32:ed:76:b2:
06:b8:e5:ab:fe:aa:fe:44:89:af:76:f4:e7:2c:04:
0b:10:9e:a1:9f:da:34:6d:ff:ef:0b:56:41:d3:f4:
55:7e:01:20:fb:88:c5:71:4a:68:4a:17:ca:dc:c7:
40:82:3f:73:ee:18:94:23:b8:51:be:d8:18:00:92:
ab:24:5a:c2:11:ae:dd:63:8c:00:22:76:85:aa:9e:
11:63:a3:ea:dc:8d:78:36:08:5b:29:10:d0:ed:7f:
ae:fe:4b:cf:a5:46:80:db:3f:06:cb:ac:97:45:ab:
56:a1:9f:cd:8f:77:cf:b1:4a:c1:60:24:45:7f:62:
49:83:79:74:87:94:a2:3c:12:87:76:ca:b6:1c:7c:
28:6b:cd:b9:5c:13:a8:4e:0d:49:ee:53:1a:6f:92:
b0:7c:d0:d7:3d:56:a8:9a:bd:4f:d4:34:c4:fe:ce:
f6:ec:8d:6a:f4:04:0a:c9:75:e7:8d:df:9b:1c:53:
18:5b:46:4c:10:2b:98:2d:60:21:97:ec:dd:65:a6:
ae:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:54:5F:DB:3C:F7:AC:62:F7:4C:E5:7D:EB:B5:CE:D0:35:A7:B7:FA
X509v3 Authority Key Identifier:
keyid:00:05:C9:6D:A6:66:9B:70:7F:38:AD:1B:C5:85:29:C5:3E:38:AB:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AAXJbaZmm3B_OK0bxYUpxT44q_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36412BE/7DCA410C0C9311F1950F7BE1DAE4EC9C/AAXJbaZmm3B_OK0bxYUpxT44q_0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:d9:e5:fc:e3:3a:ed:f1:33:d0:59:5d:6d:72:11:57:5e:11:
2e:76:10:ac:4d:79:fb:d6:73:13:b6:95:a5:68:9c:5c:93:57:
af:af:fd:27:8a:c0:41:93:e4:91:f4:a8:de:a3:fc:6d:18:c7:
c3:cf:19:33:9b:55:41:01:15:81:1a:b4:e7:57:74:33:78:91:
f0:2b:a9:ac:9f:11:ee:13:b8:cf:cd:a5:71:09:45:5a:e6:0d:
3d:0a:9f:a8:77:c3:15:94:36:6b:eb:17:5c:d2:47:f5:a2:26:
fd:a7:e3:fb:65:54:c5:3d:bb:0b:c3:4e:87:7e:c4:f5:26:c6:
a5:02:27:b9:d2:79:25:78:f7:a3:88:35:b0:7d:87:0b:5d:04:
73:d3:2e:98:fa:72:02:a5:73:7c:a4:be:52:df:ff:ef:40:53:
35:40:08:08:9e:73:a1:c9:c1:6a:b9:e3:59:24:6a:d4:0e:14:
e6:29:ac:68:05:68:5a:a1:ed:cd:fd:78:9e:1e:34:99:3d:6b:
d1:67:70:3e:55:c4:32:af:27:6a:37:55:46:b7:8e:62:a2:30:
9d:e3:8e:0e:9c:c6:2c:8c:56:88:33:87:25:cb:1c:12:92:fc:
84:c3:fb:6c:d2:e6:83:68:63:2f:12:b9:ee:60:05:9c:8c:b1:
7f:bb:2a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 10:30:44 2026 by rpki-client