Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.mft
File: heLrQoy_jUsx-aZGYrwHtsPuQRE.mft (raw, json)
Hash identifier: E2c1JVaHgyFr9FEHpaRkG4B8H6OapL7HWcHsYOzq+ss=
Subject key identifier: 72:E5:38:CD:AF:2D:77:28:31:9C:C6:D5:C4:34:A2:17:8B:BA:B5:4D
Authority key identifier: 85:E2:EB:42:8C:BF:8D:4B:31:F9:A6:46:62:BC:07:B6:C3:EE:41:11
Certificate issuer: /CN=F36A75D2AF/serialNumber=85E2EB428CBF8D4B31F9A64662BC07B6C3EE4111
Certificate serial: 2D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/heLrQoy_jUsx-aZGYrwHtsPuQRE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.mft
Manifest number: 2C
Signing time: Mon 23 Mar 2026 06:33:40 +0000
Manifest this update: Mon 23 Mar 2026 06:33:39 +0000
Manifest next update: Wed 25 Mar 2026 06:33:39 +0000
Files and hashes: 1: heLrQoy_jUsx-aZGYrwHtsPuQRE.crl (hash: zy+HF7kVaiTbNRTAqiKzoUoQlo1A+GZDCCVv+zqyx94=)
2: 5BE72858059411F1AB4403DFDAE4EC9C.roa (hash: 0OaZbwlKspj+/PLiCfmeszFXjMcg4792APuxNjcF8Pg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.mft
rsync://rpki.afrinic.net/repository/afrinic/heLrQoy_jUsx-aZGYrwHtsPuQRE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 25 Mar 2026 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A75D2AF, serialNumber=85E2EB428CBF8D4B31F9A64662BC07B6C3EE4111
Validity
Not Before: Mar 23 06:33:39 2026 GMT
Not After : Mar 25 06:33:39 2026 GMT
Subject: CN=69c0dec4-5741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:6d:87:6b:70:5b:e0:c5:9e:a5:08:61:e6:
be:32:41:e4:43:10:e2:a9:46:a6:78:c1:78:9b:60:
e6:e0:fe:b7:76:65:17:75:b8:b1:d0:f8:58:7a:72:
cf:48:fb:4e:98:21:8f:8b:1b:b1:0f:cb:03:a2:5a:
46:8a:8e:24:b2:5b:d9:e5:4f:40:dd:16:89:a4:4a:
ac:02:8f:2c:15:3c:c8:36:74:80:d7:b6:9f:6c:6f:
28:e2:90:98:b3:d8:82:26:90:81:40:f2:a8:a4:a1:
15:3a:93:52:28:f6:18:5f:39:13:66:55:ff:ab:9f:
2f:25:98:1f:cb:5f:56:42:e7:68:38:2a:ed:54:5f:
ba:a5:d7:c1:a7:07:01:7d:02:f3:a6:77:e8:f4:f0:
f5:53:86:27:ff:de:e9:0f:c4:58:eb:69:45:7f:cb:
eb:1a:8c:b5:9d:23:d2:fc:62:b7:e9:a6:f8:fc:09:
cd:19:81:90:40:c6:fa:cb:35:91:b3:5b:9d:4e:fc:
5f:6e:a7:73:51:9e:2d:1b:3b:a1:d5:7c:42:fb:30:
5c:cf:63:b9:3b:77:1a:e2:82:18:a5:d4:0f:d9:0a:
c4:65:76:c6:9f:a4:5f:6d:2b:24:d6:78:29:60:b7:
66:c2:58:fd:75:42:e4:2a:4a:e8:16:8f:af:e0:d3:
bc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E5:38:CD:AF:2D:77:28:31:9C:C6:D5:C4:34:A2:17:8B:BA:B5:4D
X509v3 Authority Key Identifier:
keyid:85:E2:EB:42:8C:BF:8D:4B:31:F9:A6:46:62:BC:07:B6:C3:EE:41:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/heLrQoy_jUsx-aZGYrwHtsPuQRE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:38:9d:0e:85:7d:e3:02:39:a9:02:21:4b:a7:64:36:cd:31:
f3:31:0b:01:f5:e5:d2:04:01:19:38:18:6f:b0:19:1a:96:08:
0b:9b:fb:69:a4:3e:33:da:70:bd:d1:fa:de:67:b0:ef:8d:98:
8c:1e:90:ec:98:c0:17:4e:3c:81:b4:b5:6e:62:2c:28:87:81:
8d:8e:70:07:0e:25:e3:64:2b:c7:a7:7b:ff:67:16:8b:b9:29:
ca:fe:30:01:dd:ac:7e:0b:8f:ac:92:97:31:ce:7d:e2:8a:1c:
c9:a7:57:fe:c8:3c:39:3c:a4:31:cb:8b:3d:7b:63:61:9a:2f:
74:b6:31:92:ea:3b:0b:68:32:5c:3d:78:17:6c:5d:2f:6e:03:
fa:ea:75:e5:e7:51:74:0f:0e:6a:5b:0e:f3:df:55:62:7a:23:
5c:94:5e:a2:34:85:e8:4c:be:d3:09:33:ce:87:65:28:44:c7:
74:29:ad:f9:e8:61:a7:71:30:84:b1:2f:18:a0:c1:80:6a:e4:
14:b9:5c:8c:0b:55:74:00:0a:94:73:d2:a8:7d:10:5b:26:20:
d2:58:4c:f7:13:24:0a:a6:7b:17:91:c7:d7:60:05:56:b0:a9:
5b:6c:65:02:0f:6f:63:64:6f:0d:26:dc:3a:21:fe:dd:00:6d:
2f:cc:48:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 10:29:40 2026 by rpki-client