
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
File: GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft (raw, json)
Hash identifier: IzPXX6Tuv1iKy80VMd2iVguZ8ofBbRyvSRIwpl+6foo=
Subject key identifier: 4C:3E:DB:C5:60:32:D6:2C:63:9A:91:90:B4:C9:14:F4:B4:B5:A5:97
Authority key identifier: 18:35:07:2A:22:EF:9D:9C:7C:B8:B5:A3:6C:69:E7:C3:98:13:3C:61
Certificate issuer: /CN=F3683B5BAF/serialNumber=1835072A22EF9D9C7CB8B5A36C69E7C398133C61
Certificate serial: 0425
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
Manifest number: 0423
Signing time: Wed 03 Jun 2026 03:36:29 +0000
Manifest this update: Wed 03 Jun 2026 03:36:28 +0000
Manifest next update: Fri 05 Jun 2026 03:36:28 +0000
Files and hashes: 1: GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl (hash: vWXRn4Sp6wS+hGxE9FEPcE7/CZVBMVV8+k8bfAGYKes=)
2: 87C7C2B035D611EEBE3A3B464AD9E6FC.roa (hash: MtKo8Pihi6475anM5rJMbxhyk73uAQ3ZXlWwhalQKAk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Jun 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1061 (0x425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3683B5BAF, serialNumber=1835072A22EF9D9C7CB8B5A36C69E7C398133C61
Validity
Not Before: Jun 3 03:36:28 2026 GMT
Not After : Jun 5 03:36:28 2026 GMT
Subject: CN=6a1fa13d-3e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:7f:d0:a2:4a:3d:fe:d4:c1:f0:ac:34:60:
4a:69:6d:1c:e0:f3:4d:0d:e0:73:25:2f:94:17:17:
7d:d0:d2:54:0e:bf:f4:a3:bb:92:9f:69:2f:89:2f:
28:48:45:59:cd:5c:f2:fd:ea:ed:c4:68:a7:85:ef:
ac:e4:4e:6b:0c:e8:20:ff:7f:00:d6:13:c8:87:d9:
89:53:37:fb:f0:55:98:df:f9:89:da:5d:45:1f:ea:
7a:a7:c9:64:9a:fb:09:f7:b5:99:f0:09:7e:59:e9:
1b:f6:43:95:64:88:e2:90:aa:d2:cf:ae:c0:ff:e4:
2c:5a:9c:c6:eb:52:27:96:02:70:5d:20:1a:ef:29:
1d:72:4f:53:99:61:cd:6b:a8:06:43:78:d0:24:a8:
9e:8c:c3:e5:00:7b:a7:5b:dd:dc:73:5d:d7:eb:ac:
b7:48:f4:73:4a:94:f9:16:8e:b9:be:8b:2f:73:03:
14:86:00:d8:b4:d0:42:aa:c0:80:73:1f:ad:63:7e:
ed:ff:74:1c:d0:ad:36:b9:c4:b8:bc:e9:b5:af:01:
1c:4c:d6:45:50:76:68:5f:a3:a2:07:92:19:da:1d:
76:75:b3:23:2b:4e:f6:07:92:a9:ae:59:97:c6:28:
09:72:15:2f:a9:32:ea:8a:11:ec:c7:73:20:36:df:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3E:DB:C5:60:32:D6:2C:63:9A:91:90:B4:C9:14:F4:B4:B5:A5:97
X509v3 Authority Key Identifier:
keyid:18:35:07:2A:22:EF:9D:9C:7C:B8:B5:A3:6C:69:E7:C3:98:13:3C:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:00:70:69:da:84:13:cf:e9:ac:5d:2f:58:f3:00:a1:9a:94:
5f:25:25:6a:06:07:74:d0:eb:d3:44:83:1c:81:46:de:ec:c3:
56:59:61:37:21:9b:03:77:0e:65:20:35:06:99:3c:51:51:82:
cd:0a:7b:98:41:d1:ab:5b:b8:cc:6f:ac:d3:97:51:4c:d4:06:
cc:62:ee:65:a8:99:90:a4:00:ad:1c:d0:fe:4e:56:df:5f:79:
f6:c3:32:8e:78:58:50:0c:4f:8d:73:a2:a4:1f:df:1c:dc:fa:
ca:eb:10:9c:ed:3e:ab:95:85:c4:0b:a0:00:26:45:73:17:90:
66:f9:d3:73:9a:7e:dd:ce:76:b0:bf:0d:6b:bd:1a:8f:a2:a9:
64:a9:b1:41:6c:56:14:03:57:47:20:5f:f7:6f:0d:54:5d:b4:
b6:cd:3a:04:12:1f:0a:a1:dc:69:c4:b3:32:08:c1:07:da:74:
da:02:f7:e0:44:90:05:41:b3:d2:07:12:d2:de:96:c1:3f:0c:
4f:75:27:90:97:05:9a:9e:8a:7d:f2:40:29:a0:a5:a6:7b:f5:
97:99:c0:19:2e:99:59:b1:a9:41:10:19:64:32:10:b4:fa:c0:
c0:9e:69:23:bf:55:97:ba:e2:34:f6:3b:10:ef:22:ae:ed:e9:
5a:75:91:ec
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODNCNUJBRjExMC8GA1UEBRMoMTgzNTA3MkEyMkVGOUQ5QzdDQjhCNUEzNkM2OUU3
QzM5ODEzM0M2MTAeFw0yNjA2MDMwMzM2MjhaFw0yNjA2MDUwMzM2MjhaMBgxFjAU
BgNVBAMTDTZhMWZhMTNkLTNlOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1nX/Qoko9/tTB8Kw0YEppbRzg800N4HMlL5QXF33Q0lQOv/Sju5KfaS+J
LyhIRVnNXPL96u3EaKeF76zkTmsM6CD/fwDWE8iH2YlTN/vwVZjf+YnaXUUf6nqn
yWSa+wn3tZnwCX5Z6Rv2Q5VkiOKQqtLPrsD/5CxanMbrUieWAnBdIBrvKR1yT1OZ
Yc1rqAZDeNAkqJ6Mw+UAe6db3dxzXdfrrLdI9HNKlPkWjrm+iy9zAxSGANi00EKq
wIBzH61jfu3/dBzQrTa5xLi86bWvARxM1kVQdmhfo6IHkhnaHXZ1syMrTvYHkqmu
WZfGKAlyFS+pMuqKEezHcyA236MbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUTD7b
xWAy1ixjmpGQtMkU9LS1pZcwHwYDVR0jBBgwFoAUGDUHKiLvnZx8uLWjbGnnw5gT
PGEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgzQjVCLzdDM0JFRjA4MzVENTExRUU5Qzg5QzM0MzRBRDlFNkZDL0dEVUhL
aUx2blp4OHVMV2piR25udzVnVFBHRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dEVUhLaUx2blp4OHVMV2piR25udzVnVFBHRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODNCNUIvN0MzQkVGMDgzNUQ1MTFFRTlDODlDMzQzNEFE
OUU2RkMvR0RVSEtpTHZuWng4dUxXamJHbm53NWdUUEdFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhAHBp2oQTz+msXS9Y8wChmpRfJSVq
Bgd00OvTRIMcgUbe7MNWWWE3IZsDdw5lIDUGmTxRUYLNCnuYQdGrW7jMb6zTl1FM
1AbMYu5lqJmQpACtHND+TlbfX3n2wzKOeFhQDE+Nc6KkH98c3PrK6xCc7T6rlYXE
C6AAJkVzF5Bm+dNzmn7dznawvw1rvRqPoqlkqbFBbFYUA1dHIF/3bw1UXbS2zToE
Eh8KodxpxLMyCMEH2nTaAvfgRJAFQbPSBxLS3pbBPwxPdSeQlwWanop98kApoKWm
e/WXmcAZLplZsalBEBlkMhC0+sDAnmkjv1WXuuI09jsQ7yKu7eladZHs
-----END CERTIFICATE-----
Generated at Wed Jun 3 19:57:46 2026 by rpki-client