Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
File: QiUOABGQATIiltvNEo4jCi0GSmM.mft (raw, json)
Hash identifier: vxjjLlvdGWj/IaOYFegSLHLOigI4XQsraP5oo5UDkf8=
Subject key identifier: 48:F0:07:D4:C6:29:85:D6:7E:5F:7E:5F:26:27:7C:11:B1:96:9D:B2
Authority key identifier: 42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63
Certificate issuer: /CN=F36D8020AF/serialNumber=42250E00119001322296DBCD128E230A2D064A63
Certificate serial: DB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
Manifest number: DB
Signing time: Sun 21 Jun 2026 05:16:30 +0000
Manifest this update: Sun 21 Jun 2026 05:16:29 +0000
Manifest next update: Tue 23 Jun 2026 05:16:29 +0000
Files and hashes: 1: QiUOABGQATIiltvNEo4jCi0GSmM.crl (hash: 6DXcm4eUMphmyw/q42x/xmxjeOvODMlyfQzPUHhcgrQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Jun 2026 00:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8020AF, serialNumber=42250E00119001322296DBCD128E230A2D064A63
Validity
Not Before: Jun 21 05:16:29 2026 GMT
Not After : Jun 23 05:16:29 2026 GMT
Subject: CN=6a3773ae-5123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:70:ae:b8:29:b4:4b:43:70:85:8a:da:e5:
4b:7a:6c:e4:17:5d:1d:8a:b2:a7:1c:cf:d6:72:f4:
6d:86:6d:22:7a:1b:4d:43:72:69:04:0e:ba:a8:a1:
ac:13:b1:2e:d4:03:c6:ef:3e:fa:83:61:05:78:df:
51:96:b2:a4:ca:dc:1a:ed:33:d1:fb:ac:9b:a8:9c:
fd:18:75:bf:a5:95:b5:04:73:02:42:a4:bd:c3:27:
89:95:7c:97:df:45:b8:87:f9:61:ba:3d:e9:9c:5c:
e8:10:b7:9e:f1:6b:54:3a:98:42:b7:b4:35:1b:af:
2c:88:15:f7:11:4a:80:70:5f:2f:7e:68:44:ca:63:
d2:a3:f3:08:9d:64:d5:a4:12:52:96:c0:2a:89:85:
7e:51:b3:1c:89:65:82:47:ad:e1:3e:53:6e:25:7e:
ea:7e:aa:a1:f5:34:69:e3:97:13:11:e6:c2:0c:ed:
47:5a:07:9e:86:e0:23:f0:ae:b0:9c:fe:dd:95:f4:
b1:8a:5b:89:54:a2:ef:9b:f3:44:44:d9:85:05:f0:
e7:a5:43:62:75:c6:2b:88:e2:3d:51:78:39:89:e5:
a0:41:fb:e2:6f:cb:23:63:e7:c2:a1:60:83:65:24:
42:4b:08:70:eb:2b:0a:19:52:5b:00:9b:59:ae:5c:
b1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F0:07:D4:C6:29:85:D6:7E:5F:7E:5F:26:27:7C:11:B1:96:9D:B2
X509v3 Authority Key Identifier:
keyid:42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:af:99:d5:96:db:ef:52:51:32:93:6e:46:1e:df:11:ed:4a:
a7:41:79:15:2e:1a:c3:ed:5e:48:16:0c:44:ee:48:c3:87:84:
e2:78:0c:f3:ac:57:d8:74:55:2a:56:32:c2:93:79:5c:b6:95:
f6:46:d6:fa:77:54:12:eb:9c:54:71:1b:b1:6b:20:7e:d2:a5:
8c:da:09:b0:5d:32:d8:e8:1f:97:50:76:f5:1c:cd:53:d2:5b:
69:59:a4:d4:ee:04:04:06:b0:a4:b1:a6:75:2b:69:99:50:1c:
69:c3:f2:b7:46:40:62:80:1b:ec:86:0c:73:86:00:b6:b1:6e:
04:dc:69:18:60:8f:31:6d:5b:69:7b:cf:71:aa:5f:1f:7b:3c:
49:d7:bd:4e:fd:f6:64:1f:b9:14:59:68:ce:8c:7e:10:1f:11:
27:c6:ec:90:d4:04:c5:30:c6:b1:2d:45:92:8b:7d:ec:72:48:
23:f0:53:12:fa:ce:2c:e0:3b:05:ab:71:ba:4d:8f:10:7a:58:
b7:03:67:69:a0:83:aa:63:68:0d:65:f8:49:ea:5f:bf:d4:10:
01:89:b1:6c:50:c8:b0:f6:49:58:0e:b9:5a:59:8b:e1:c8:3d:
90:4e:c2:19:bc:c6:90:6d:d1:41:3d:ea:39:8c:ea:e1:78:52:
2c:c4:74:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:38:45 2026 by rpki-client