Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
File: NSunHRHXakg8nsebSWRvi0XYOLo.mft (raw, json)
Hash identifier: kOzyN1/L3nwBCF8Tv/uM4ka8jKsm7PbvES8hKxHSi70=
Subject key identifier: FC:9C:F1:5C:9F:24:80:42:03:A8:C3:EE:F4:94:5E:21:99:F9:70:4B
Authority key identifier: 35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA
Certificate issuer: /CN=F3633396AF/serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
Certificate serial: 05DE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
Manifest number: 05DC
Signing time: Sat 23 Aug 2025 02:29:48 +0000
Manifest this update: Sat 23 Aug 2025 02:29:47 +0000
Manifest next update: Mon 25 Aug 2025 02:29:47 +0000
Files and hashes: 1: NSunHRHXakg8nsebSWRvi0XYOLo.crl (hash: Mpve7DakLYkO2H8GIutHwVHpNmgg6t9oR6FV4xtzIzs=)
2: B83520CE3C5411F0B678C6A7DAE4EC9C.roa (hash: G6iOOYX+72GS+UQO3yIOd7hEz/TAFLzGnnM38j3t3+w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1502 (0x5de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3633396AF, serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
Validity
Not Before: Aug 23 02:29:47 2025 GMT
Not After : Aug 25 02:29:47 2025 GMT
Subject: CN=68a9279c-8ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:27:9a:fc:a1:13:94:47:84:d5:1b:4d:19:
b8:e6:f0:1c:4e:05:2e:3f:98:88:e5:1e:b3:c8:91:
51:1c:56:00:04:78:b5:9c:11:bb:f9:3e:6f:1f:98:
76:47:8b:ad:c1:03:ce:57:d9:1c:3e:39:d1:e4:bd:
14:40:52:a9:53:bb:5a:a2:80:9c:8d:70:70:62:43:
b5:99:61:d4:6a:be:e5:fb:d1:4f:36:29:41:3e:62:
17:1d:0f:29:b5:cb:79:fd:d9:72:2d:5d:1e:3d:b5:
15:e0:5f:23:f0:cb:a9:40:ba:70:fc:f3:0a:6f:cc:
88:06:a9:b2:8a:b8:8e:24:a1:b4:59:5b:f6:e5:f7:
83:9b:74:08:03:f5:dd:22:bb:cf:d2:73:9b:36:94:
1e:55:c3:3b:e7:45:65:07:96:e5:1d:26:7b:d4:71:
37:17:e2:3e:82:56:dd:98:3f:ab:19:04:2d:af:1b:
cc:2f:20:b0:aa:2e:dd:be:34:38:78:ae:ba:e9:21:
17:e5:f3:ba:2b:09:2e:90:c3:1e:7e:7c:0d:a1:83:
61:11:cb:1e:67:0a:96:52:fb:de:61:25:ec:b6:89:
c1:5e:38:71:4b:25:d6:fd:88:52:3e:f2:66:a4:02:
c2:ce:31:5c:14:ea:27:fa:5f:14:83:25:2d:f1:5e:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9C:F1:5C:9F:24:80:42:03:A8:C3:EE:F4:94:5E:21:99:F9:70:4B
X509v3 Authority Key Identifier:
keyid:35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:78:31:ef:b2:6d:33:a7:ff:66:c2:36:f8:65:b2:13:86:28:
23:50:cb:3e:f9:98:50:a7:ce:34:ea:fa:3f:45:66:ba:47:3f:
0e:bb:00:57:9f:68:8e:b1:c3:e6:22:bd:48:5b:eb:44:d5:4a:
d6:ba:14:1e:d7:09:80:19:0c:01:ff:54:5f:51:79:2f:46:c7:
9b:bf:07:41:f3:4b:45:0e:66:2f:09:9c:0b:35:19:e3:2d:5f:
68:bc:28:e1:d9:73:7a:57:e4:b2:b3:5d:4b:9c:45:17:72:1f:
11:d0:1d:a9:97:2c:08:df:a6:83:a3:db:69:f9:14:73:61:31:
f9:a3:0a:16:c9:a5:4b:ab:c5:77:70:8d:0d:a0:e0:c6:06:76:
97:c4:e0:68:bc:43:e9:05:fa:b7:de:ae:f3:9e:4d:5b:8d:54:
59:f5:ea:26:67:ed:30:f3:8d:9c:40:6a:aa:47:d5:03:c7:91:
43:4d:ad:68:69:7a:1d:b1:71:af:93:b2:f1:49:a4:07:4a:b0:
bf:6a:81:e6:51:4e:30:21:c1:bc:e5:12:18:2e:6d:e1:86:b5:
8a:9d:6d:7e:8e:53:56:94:fa:cd:54:a9:52:8a:15:1d:87:ac:
45:17:6d:a8:e2:24:85:ac:a6:08:e1:71:89:23:d2:5c:d9:31:
c7:74:26:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:10 2025 by rpki-client