Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
File: TFQzRWcaPQxAiChKkfx3-2zGsGg.mft (raw, json)
Hash identifier: B8414BuOJemUcLSJD2MaS4xHvM3Dy8VvpGJPgcrmuOw=
Subject key identifier: 52:3C:D0:47:76:F4:CB:14:FC:BF:40:2F:1A:46:38:8C:C1:C1:23:7D
Authority key identifier: 4C:54:33:45:67:1A:3D:0C:40:88:28:4A:91:FC:77:FB:6C:C6:B0:68
Certificate issuer: /CN=F3668231AR/serialNumber=4C543345671A3D0C4088284A91FC77FB6CC6B068
Certificate serial: 0CAE
Authority info access: rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
Manifest number: 0CAD
Signing time: Sun 29 Mar 2026 01:09:11 +0000
Manifest this update: Sun 29 Mar 2026 01:09:10 +0000
Manifest next update: Tue 31 Mar 2026 01:09:10 +0000
Files and hashes: 1: TFQzRWcaPQxAiChKkfx3-2zGsGg.crl (hash: aCHYaa7JlpYMXaHrdKIacETgX/3s8Qvxzje3oo7bGcA=)
2: DA08B89A6B8E11E7952D2166F8AEA228.roa (hash: rve7QOec9FqmRJKLI6WNqhqnq4CSIGF+XgPlE64aa9A=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 31 Mar 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3246 (0xcae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668231AR, serialNumber=4C543345671A3D0C4088284A91FC77FB6CC6B068
Validity
Not Before: Mar 29 01:09:10 2026 GMT
Not After : Mar 31 01:09:10 2026 GMT
Subject: CN=69c87bb7-a5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:03:87:78:be:6b:12:91:42:ff:05:ad:12:
c8:76:6f:0a:59:e2:bb:ab:ef:c6:ee:5c:a1:83:c3:
92:99:0e:eb:e2:bd:8c:73:28:af:8c:06:37:f3:8a:
d3:d9:70:f5:1a:fd:b2:06:e8:e5:93:1c:3b:c2:39:
c3:d1:f0:69:40:bd:52:a1:c6:4a:ff:3c:46:c7:c6:
34:4b:e1:2b:12:83:69:d7:2e:5f:44:5c:34:ad:c2:
2c:fd:e9:36:82:d4:67:e6:8b:45:2f:19:56:3d:ed:
a6:77:38:a4:bf:49:28:ba:34:15:4d:8a:39:d4:42:
fa:38:a4:10:a0:79:60:51:db:92:96:1d:36:83:a0:
16:3e:79:3e:43:d3:8d:0b:58:86:ed:2f:0a:d7:b7:
84:f9:78:90:66:e8:ea:b4:88:7e:a6:38:bc:63:09:
5a:bf:c0:ee:6a:14:0e:85:3e:6d:0b:4a:2a:4c:81:
1f:64:73:88:a4:c7:db:ba:ea:5f:ff:63:3a:e6:f9:
1c:8a:e2:20:b0:20:75:7f:2d:31:e2:78:3d:b6:88:
a4:75:51:47:ac:97:ae:b6:7f:8b:5e:a3:07:d7:62:
e6:aa:ee:9e:56:29:c5:a3:9b:9b:20:d5:a2:81:ec:
3c:21:23:6c:4e:d2:24:e2:96:aa:b9:f8:8f:90:13:
92:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3C:D0:47:76:F4:CB:14:FC:BF:40:2F:1A:46:38:8C:C1:C1:23:7D
X509v3 Authority Key Identifier:
keyid:4C:54:33:45:67:1A:3D:0C:40:88:28:4A:91:FC:77:FB:6C:C6:B0:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:30:35:56:06:fa:60:23:8f:cd:1f:44:d5:76:74:d7:8c:42:
10:0d:09:69:f4:0d:80:c2:f1:40:2d:36:9d:ab:bd:79:25:b1:
f0:59:ef:84:b9:05:40:ba:89:1d:53:b7:c6:b7:3a:fc:f9:2f:
40:44:23:bd:b3:6d:36:59:df:24:29:07:3e:66:ed:25:5a:f2:
94:2a:bf:f6:16:37:72:f3:03:9d:0e:8c:2f:6f:6a:50:32:39:
80:c8:82:9d:ca:a6:14:d6:71:dd:43:3e:d0:38:ca:4b:d1:59:
4b:fa:4d:d0:57:2f:53:d4:b1:c7:72:d5:df:49:9a:19:3c:ec:
df:19:8d:46:8d:cf:e8:44:cc:5b:db:02:bf:5a:14:42:b9:a6:
bb:21:62:15:20:fb:7b:66:f7:9b:42:3f:44:bc:04:4a:ff:0a:
0c:06:47:a2:a4:29:cf:04:30:dd:01:18:c1:e7:f4:ad:4e:3d:
ad:2d:6a:6e:22:89:e0:3c:79:9e:d5:49:56:8b:5b:34:ff:97:
80:8b:0b:a2:cd:85:78:f1:fd:22:31:05:f1:33:da:0c:d7:b2:
59:4b:08:9a:c9:e2:d3:cb:f7:36:bd:1a:3d:11:db:7a:d9:1c:
74:7f:b5:a2:29:87:73:6f:e6:fa:3b:33:f7:7b:3e:a1:f6:90:
99:5b:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:38:34 2026 by rpki-client