
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
File: nxc4PrZn5Ue6AM-3-RT0KExYScw.mft (raw, json)
Hash identifier: vykpsGle0buJ3UBC5XhH0qZOq2HK+oqktRBqAXxnIe4=
Subject key identifier: 45:35:B6:7B:42:DC:C0:01:81:59:21:4E:83:E6:8A:CF:9C:9C:4E:0E
Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
Certificate issuer: /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Certificate serial: 0FAB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
Manifest number: 0F9C
Signing time: Wed 13 May 2026 00:55:17 +0000
Manifest this update: Wed 13 May 2026 00:55:16 +0000
Manifest next update: Fri 15 May 2026 00:55:16 +0000
Files and hashes: 1: nxc4PrZn5Ue6AM-3-RT0KExYScw.crl (hash: xhV3WQUOUaorgqEuQxhdmcKVBvJTq4XAoZSdC76Kr/s=)
2: 0F970AA45DDA11EEA9B9B7884AD9E6FC.roa (hash: FMUt2MM7DebKkBEnbyLy3J47YqdDugPo2mNzNBuOTcI=)
3: CB802D6A9FD011F0B09E84F1DAE4EC9C.roa (hash: S80ZZFyyc08N7gI7of8t+4zntc1/6kCBNhlAw4585HY=)
4: 4252D1905DDE11EEA38F26174AD9E6FC.roa (hash: YEcxnJNljEbbPt+jZqFFjrHFGQrlfrLBxbAphuQ3lR4=)
5: AA2ED722D22511EDA73BE0D2F1222468.roa (hash: Bz6y/9VDXHlj+h8pTwHUCwEbbK4O3DXKaYbf9T3u4Kk=)
6: F8A03EA22DD711ED9D0F7E83F1222468.roa (hash: A3D2coJfMGVfkM4t+C0wadunWeeP5Netmzy2NPiOcNE=)
7: DAD32A825DD911EE908D0E884AD9E6FC.roa (hash: jYCM5n5GYzsPy5dOD3c0IJ0ltyMzwLsK1AtouHVwLZ0=)
8: 67208BD45DDE11EEA367B1174AD9E6FC.roa (hash: dUOADrTH86yUTFdknQpwKyYi7Ckfi6ZQrgp/0K1+5iw=)
9: 3EB8BE4ED22611EDAF3CB0D4F1222468.roa (hash: 8rUeH5+hrD/1gu9Yu/+gBbmACyJtB7cXUwPkrzQinJI=)
10: FA54B1109FD011F08E699CF1DAE4EC9C.roa (hash: F+/CQFEGh7hy0TbdeqQH+fkZYKvk2d9fKx2iVdi2NNY=)
11: 7FA6B8DC9FD011F09FBF73EDDAE4EC9C.roa (hash: mIreRYj0MVYZW7c/XBrrdQAMZGvWksvf2R6Ym6OT8rM=)
12: 08DDC9D85DDE11EE97117A164AD9E6FC.roa (hash: YTPBR2O7UMDxBF3Dv5l5lllDC58HOmSCof2QHjhKZws=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4011 (0xfab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Validity
Not Before: May 13 00:55:16 2026 GMT
Not After : May 15 00:55:16 2026 GMT
Subject: CN=6a03cbf5-ff02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f7:cd:98:ef:b8:35:f4:af:1b:3d:3e:c4:40:
0d:8c:b5:8a:1a:52:48:aa:74:e3:91:9e:bf:05:fe:
98:ab:68:1d:9a:c9:7b:ef:55:5e:c8:70:f2:38:4d:
47:1b:7e:5f:7e:e1:7a:20:89:97:af:5a:4a:07:4f:
ca:16:0e:56:75:2e:bc:65:83:c2:fa:b9:33:43:14:
13:41:73:8e:66:09:7c:b2:71:33:b6:58:5a:9a:38:
83:c7:36:79:4a:8e:d0:6f:d0:74:b2:26:a4:7c:38:
df:55:1b:52:3c:1c:24:9d:ba:ea:16:cf:cc:4e:75:
e0:47:0d:c2:09:e6:4c:9d:8f:b6:43:cd:48:45:9e:
2c:92:47:99:26:f7:4d:f8:77:e0:45:fe:a7:74:ea:
9f:d7:6a:ba:6d:22:54:76:e8:63:e3:f9:cf:9c:c9:
74:24:86:1f:f3:a1:cf:ee:5a:47:66:fe:55:27:29:
2e:92:9f:bc:06:f7:12:e4:50:c6:f6:8c:28:85:9f:
43:b4:b4:7c:5e:bc:00:3b:0d:f0:34:b9:ac:d8:ad:
e4:f9:ee:fa:5a:9c:1b:3e:28:62:68:5f:67:d4:29:
b9:a1:8b:da:22:85:51:90:f6:56:e3:49:94:49:5c:
7f:47:30:4d:4b:3d:a2:05:16:c1:94:66:f8:8e:29:
15:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:35:B6:7B:42:DC:C0:01:81:59:21:4E:83:E6:8A:CF:9C:9C:4E:0E
X509v3 Authority Key Identifier:
keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:d4:7b:71:2c:a8:ec:df:fd:ee:88:18:d8:9f:f6:68:19:0c:
f8:3f:fa:d0:6d:03:58:19:89:ee:af:a5:80:7c:2d:7b:d4:47:
46:47:53:17:7c:12:47:99:6e:09:5a:69:d2:2a:1b:c4:c6:9b:
89:2d:bf:69:ec:3b:de:bd:e8:12:5b:26:08:2a:f3:40:ed:87:
35:ef:da:c5:7b:39:0a:7e:3f:ff:e8:f8:93:5e:24:6b:24:6b:
a4:b8:b9:00:0a:05:94:db:a6:d5:f4:4e:6b:f0:43:2f:2c:1a:
cf:a9:88:97:bc:af:1a:5f:43:8a:8f:cd:78:55:ed:4b:2f:18:
25:1c:ca:c5:2f:83:6d:8e:c7:94:a2:c9:47:e1:d0:e2:87:bf:
22:38:35:1e:ae:32:74:58:88:35:ce:3c:63:58:54:5c:d0:2f:
b2:3d:51:dd:dc:46:9d:6b:9e:6a:7a:d2:aa:b6:7a:8e:71:9b:
33:8f:a4:3d:5c:10:48:1e:8b:4a:61:74:19:b9:1e:06:47:d6:
d4:13:d9:fa:36:6b:1c:bb:a4:7d:06:07:e3:fd:e0:37:0c:12:
e2:75:52:cb:57:eb:c8:05:d7:68:36:40:81:9b:8b:45:0e:0f:
be:0e:43:af:c7:8e:8a:20:06:12:ee:7f:76:e9:3a:d0:31:ae:
50:e0:6f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:16:48 2026 by rpki-client