Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
File: NSunHRHXakg8nsebSWRvi0XYOLo.mft (raw, json)
Hash identifier: 5dP/J2zJ78W4s/VTwJBrSIwnZCt2wPBRY5TBjw5uSRo=
Subject key identifier: 76:C7:40:31:D1:62:3C:79:D0:C7:57:E5:DC:D7:9A:4C:30:93:00:0D
Authority key identifier: 35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA
Certificate issuer: /CN=F3633396AF/serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
Certificate serial: 06B8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
Manifest number: 06B6
Signing time: Thu 26 Mar 2026 02:42:44 +0000
Manifest this update: Thu 26 Mar 2026 02:42:43 +0000
Manifest next update: Sat 28 Mar 2026 02:42:43 +0000
Files and hashes: 1: NSunHRHXakg8nsebSWRvi0XYOLo.crl (hash: aly6hjH5AQtnp3bKiu+Ti2TJjsdYDF3PCQJrj8dQZ+4=)
2: B83520CE3C5411F0B678C6A7DAE4EC9C.roa (hash: G6iOOYX+72GS+UQO3yIOd7hEz/TAFLzGnnM38j3t3+w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1720 (0x6b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3633396AF, serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
Validity
Not Before: Mar 26 02:42:43 2026 GMT
Not After : Mar 28 02:42:43 2026 GMT
Subject: CN=69c49d24-c70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5e:48:26:52:77:27:40:da:c8:0b:ee:90:42:
d3:74:b4:7b:d7:13:a9:e2:87:1c:89:f3:8f:19:df:
66:65:05:c7:ed:5c:38:ca:e0:48:35:a8:4b:39:5e:
f8:09:bf:7b:dd:51:36:7d:af:f4:30:a6:94:e2:d6:
ba:fc:f9:29:9a:c9:6f:f1:07:34:f9:66:5a:97:79:
8d:9d:1a:43:ce:11:9e:65:56:1a:2b:ad:d7:53:66:
9e:e9:4d:86:d1:9b:6f:0f:3b:3a:29:4f:79:2a:5f:
a4:96:45:32:21:1c:f0:2a:4b:ff:03:3a:7d:21:08:
d9:83:01:1c:63:9e:a7:de:ea:9f:f8:f8:10:e4:c5:
66:c9:7b:ea:42:03:ea:bc:d9:c4:dc:e7:0b:40:80:
52:ff:11:87:c4:39:04:c5:87:99:b2:27:cd:ea:a3:
08:03:49:f4:10:2c:1b:3c:5e:3e:82:01:cb:39:a5:
34:c5:00:05:12:67:ba:c4:0c:09:1f:a2:60:7b:80:
72:b4:d7:fb:68:1b:78:8a:d9:f2:e9:66:ea:6c:96:
58:40:74:8a:45:a0:b3:0d:f1:9d:e0:dc:f5:c2:13:
60:6c:1b:b9:10:86:55:7a:5d:f8:dc:70:4b:63:c8:
4f:73:23:3c:98:80:1d:74:f4:43:ff:8b:0f:1e:61:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C7:40:31:D1:62:3C:79:D0:C7:57:E5:DC:D7:9A:4C:30:93:00:0D
X509v3 Authority Key Identifier:
keyid:35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5c:f8:3d:00:4a:48:38:60:d5:64:57:39:16:bc:6d:e2:0f:
0c:b9:6c:ea:d3:a0:c5:84:2e:71:a8:66:a4:4a:d5:60:13:4f:
1d:32:77:9c:66:ed:32:83:0b:2a:f4:40:7d:dd:91:4a:7c:6a:
95:c3:be:bc:60:fb:43:e2:b5:ad:d8:86:17:ea:4e:c4:0b:33:
44:dd:15:7a:89:d4:6e:48:15:5f:25:18:68:8e:ff:ec:be:5a:
f9:7d:25:98:0d:76:a0:31:2b:d7:d5:4e:1f:4a:75:13:be:ce:
19:82:5f:ef:05:5a:b2:9d:29:e2:32:06:a3:d4:6e:29:dd:1f:
66:75:af:84:f3:03:fd:4c:d7:81:46:58:38:1c:bb:cb:8f:fc:
8b:16:94:f4:bb:f6:21:7a:ef:a4:c5:39:e7:94:c2:dc:6b:65:
42:23:b7:ec:ef:a3:b9:b9:48:f0:ee:8f:6c:94:a6:af:72:e1:
a3:ba:3c:f6:a2:85:b7:63:e0:51:13:9f:13:3d:40:0f:44:d3:
5d:81:78:b3:c3:b9:56:75:f9:1b:0e:a6:7d:50:25:1d:9f:9a:
bc:7d:9e:31:56:c7:87:8b:ef:97:7d:2c:19:73:7c:44:12:61:
d8:aa:97:ea:8d:79:d7:d2:a0:54:38:73:fd:9f:d8:d3:07:22:
3f:e7:ad:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:39:49 2026 by rpki-client