Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
File: NaE6RzFmxUdFBUsur-85WeOenW8.mft (raw, json)
Hash identifier: OSz0tsoFmrdAxxoPao60JUYzrEET2/S2jJVt1JngSa4=
Subject key identifier: E3:41:1D:CB:D1:CA:00:23:BF:7F:4D:88:F8:0B:A9:48:ED:30:14:86
Authority key identifier: 35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F
Certificate issuer: /CN=F3666101AF/serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
Certificate serial: 0556
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
Manifest number: 0553
Signing time: Mon 20 Oct 2025 02:42:35 +0000
Manifest this update: Mon 20 Oct 2025 02:42:34 +0000
Manifest next update: Wed 22 Oct 2025 02:42:34 +0000
Files and hashes: 1: NaE6RzFmxUdFBUsur-85WeOenW8.crl (hash: ipdETjEVUj6DcagKRU9CbkfxqnE3wGpouoCqxorJjhI=)
2: 99A1984E57F311F086ED54DEDAE4EC9C.roa (hash: ZM8T8/0Cbu1okxArEtkbxlaS5j1+sO4e39kgIitch78=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1366 (0x556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3666101AF, serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
Validity
Not Before: Oct 20 02:42:34 2025 GMT
Not After : Oct 22 02:42:34 2025 GMT
Subject: CN=68f5a19b-b61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f5:bd:3b:69:93:02:8b:be:9f:c7:c2:96:40:
5e:04:fc:e4:47:1f:3d:bd:fa:70:d5:81:a1:44:a3:
2c:bd:6d:0b:c8:65:86:34:58:22:64:b7:0d:c5:2e:
a0:0d:c7:e5:d2:10:08:43:a7:f1:62:3d:74:94:6a:
eb:85:62:54:3d:9c:ce:b5:f4:59:1f:8c:74:24:e1:
c9:c3:ab:3b:4a:8e:f5:81:ec:5e:8a:ec:11:ff:f0:
27:a4:2c:34:2a:59:25:cd:61:87:7e:04:3b:db:63:
c8:b6:6f:e1:0a:02:eb:26:84:6d:cd:d2:90:17:e5:
d4:56:f5:98:dd:0f:fe:a6:26:e9:01:83:81:78:03:
b4:1f:d2:e1:a2:ff:e1:21:f0:e9:56:64:7a:69:f1:
8a:82:70:14:39:29:32:69:d8:6f:b5:a7:52:7e:a8:
de:90:1a:0b:52:24:55:f5:98:9b:a8:bc:08:c6:e3:
81:e0:81:3a:31:da:63:63:5b:7a:80:c7:22:fc:8b:
00:df:a4:d0:a9:73:f0:78:a7:54:df:fc:41:d1:79:
51:61:a5:33:22:e2:11:93:95:2e:31:d2:78:09:f6:
a6:02:07:26:e3:3f:3d:0c:83:77:ce:03:7b:9d:87:
d3:52:e6:fe:3c:76:d5:44:77:8a:9d:1f:7f:55:1b:
b3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:41:1D:CB:D1:CA:00:23:BF:7F:4D:88:F8:0B:A9:48:ED:30:14:86
X509v3 Authority Key Identifier:
keyid:35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:eb:84:67:0f:c7:3f:3e:22:dd:63:36:5d:00:33:c5:1a:09:
1b:de:6f:42:55:26:de:6d:9d:bc:9a:50:a6:10:66:ce:72:4f:
7a:87:d7:53:43:fe:b9:34:f5:84:04:e0:f3:a7:6d:67:de:9b:
81:0a:1d:12:26:f8:cd:08:76:dc:0e:51:54:49:75:5f:c7:1c:
72:b0:42:4c:8d:3c:31:a6:69:33:4e:ad:09:b5:99:28:9b:9b:
09:47:00:4b:9c:b4:74:84:d3:2a:c8:31:77:cb:e7:ab:f5:8f:
a1:8e:70:73:6d:0e:f0:e5:6e:21:d3:d7:94:46:d2:80:cc:3f:
2d:f4:46:9b:ca:62:a5:03:81:2b:1b:13:76:72:65:56:a1:5e:
bb:db:9f:33:c6:0a:b3:9c:3c:fa:ab:a9:d6:03:98:9e:86:d4:
31:09:8b:80:1b:16:f7:a0:ad:db:1a:69:15:1e:9f:6d:b1:e7:
17:1c:76:42:9a:d1:f8:eb:ea:b8:42:ce:ed:95:8b:b1:6a:24:
2a:41:37:03:3f:cf:5c:6c:f8:91:60:c4:f6:0b:6a:34:01:a2:
fd:d7:3b:a5:e1:dc:d9:4c:13:6f:e2:09:aa:e2:f8:f5:48:9e:
d8:5d:9c:ed:bc:b2:08:a7:5c:55:d8:56:bf:24:e2:b1:e2:63:
1e:cb:e2:74
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBVYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjYxMDFBRjExMC8GA1UEBRMoMzVBMTNBNDczMTY2QzU0NzQ1MDU0QjJFQUZFRjM5
NTlFMzlFOUQ2RjAeFw0yNTEwMjAwMjQyMzRaFw0yNTEwMjIwMjQyMzRaMBgxFjAU
BgNVBAMTDTY4ZjVhMTliLWI2MWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDS9b07aZMCi76fx8KWQF4E/ORHHz29+nDVgaFEoyy9bQvIZYY0WCJktw3F
LqANx+XSEAhDp/FiPXSUauuFYlQ9nM619FkfjHQk4cnDqztKjvWB7F6K7BH/8Cek
LDQqWSXNYYd+BDvbY8i2b+EKAusmhG3N0pAX5dRW9ZjdD/6mJukBg4F4A7Qf0uGi
/+Eh8OlWZHpp8YqCcBQ5KTJp2G+1p1J+qN6QGgtSJFX1mJuovAjG44HggTox2mNj
W3qAxyL8iwDfpNCpc/B4p1Tf/EHReVFhpTMi4hGTlS4x0ngJ9qYCBybjPz0Mg3fO
A3udh9NS5v48dtVEd4qdH39VG7NPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU40Ed
y9HKACO/f02I+AupSO0wFIYwHwYDVR0jBBgwFoAUNaE6RzFmxUdFBUsur+85WeOe
nW8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY2MTAxLzRBRDVFQzU4OUJBMjExRUNCMzkyMDM3NjVBNDBENTc3L05hRTZS
ekZteFVkRkJVc3VyLTg1V2VPZW5XOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL05hRTZSekZteFVkRkJVc3VyLTg1V2VPZW5XOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjYxMDEvNEFENUVDNTg5QkEyMTFFQ0IzOTIwMzc2NUE0
MEQ1NzcvTmFFNlJ6Rm14VWRGQlVzdXItODVXZU9lblc4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAR64RnD8c/PiLdYzZdADPFGgkb3m9C
VSbebZ28mlCmEGbOck96h9dTQ/65NPWEBODzp21n3puBCh0SJvjNCHbcDlFUSXVf
xxxysEJMjTwxpmkzTq0JtZkom5sJRwBLnLR0hNMqyDF3y+er9Y+hjnBzbQ7w5W4h
09eURtKAzD8t9EabymKlA4ErGxN2cmVWoV67258zxgqznDz6q6nWA5iehtQxCYuA
Gxb3oK3bGmkVHp9tsecXHHZCmtH46+q4Qs7tlYuxaiQqQTcDP89cbPiRYMT2C2o0
AaL91zul4dzZTBNv4gmq4vj1SJ7YXZztvLIIp1xV2Fa/JOKx4mMey+J0
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:50:00 2025 by rpki-client