Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
File: nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft (raw, json)
Hash identifier: 0pzB99nwy0o9fhJwBx/QLLLhN+ydYk9Cn8SWlJ2Dxbc=
Subject key identifier: 29:FA:60:CA:92:9B:5F:34:4B:01:E7:FE:4D:DF:48:4E:49:C4:CF:D6
Authority key identifier: 9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61
Certificate issuer: /CN=F36B5768AF/serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
Certificate serial: B0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
Manifest number: AF
Signing time: Sun 19 Oct 2025 04:57:47 +0000
Manifest this update: Sun 19 Oct 2025 04:57:46 +0000
Manifest next update: Tue 21 Oct 2025 04:57:46 +0000
Files and hashes: 1: nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl (hash: wabJ5SW6z7L56saeVEv2Vknl/xfJ3Z2KGD0AuZrx5sU=)
2: 0BF4391E25BE11F0BA0F6C78DAE4EC9C.roa (hash: yV3qp3Snn6vcZINsGIupcA7CLhBh7nsh5NGhTfu+GnU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 04:57:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B5768AF, serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
Validity
Not Before: Oct 19 04:57:46 2025 GMT
Not After : Oct 21 04:57:46 2025 GMT
Subject: CN=68f46fcb-9dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:d5:f7:6e:5e:4d:99:0f:03:24:60:43:3e:
48:b0:7e:71:94:43:82:e3:f5:40:08:11:95:9d:29:
ed:79:bb:75:bb:a6:0e:94:2b:9c:89:65:f0:1c:3c:
09:5c:97:80:fc:4a:b8:52:fb:d0:6f:eb:b9:15:c2:
dd:10:ef:f0:7b:14:bb:4b:e5:52:5b:8e:f0:86:4d:
01:62:c0:12:3d:a1:86:49:74:d0:8d:b1:44:56:47:
05:75:bd:37:88:d8:04:7f:13:ea:91:d6:d2:20:16:
e2:b3:bd:9e:49:00:1c:91:0e:75:c5:18:4f:35:d9:
0c:cd:e1:0b:11:a2:cb:98:50:1a:ed:1c:04:d0:c0:
83:cc:d8:41:ad:b7:a7:e8:22:e9:36:8b:95:04:cf:
40:17:de:73:6c:2e:1d:18:5c:72:ef:27:de:80:44:
bb:ca:f1:47:c5:d9:fe:5e:0f:a1:78:63:f0:f9:c5:
d1:f2:84:c8:10:24:d4:a7:bd:70:7c:c7:d1:75:b2:
42:ae:9d:91:0a:96:e4:06:9a:23:69:31:31:52:f8:
7d:0b:c6:5f:88:01:2d:cf:19:f0:09:90:53:72:ca:
2c:a3:6d:92:0d:7b:78:ce:0e:bd:36:1b:93:93:16:
3a:1f:b6:f2:31:d4:00:de:95:54:07:4d:96:e0:70:
a9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FA:60:CA:92:9B:5F:34:4B:01:E7:FE:4D:DF:48:4E:49:C4:CF:D6
X509v3 Authority Key Identifier:
keyid:9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a0:b2:50:f4:34:42:12:4a:83:f6:fb:35:8c:8a:1f:bd:56:
26:91:fe:cd:38:fc:5e:79:fa:40:72:9f:1c:7a:82:ff:fd:d1:
51:0e:7e:ba:23:36:6c:21:08:5d:a9:b4:06:03:46:dd:20:ed:
ad:4f:19:aa:f1:06:39:b3:12:d6:3b:31:75:46:76:76:62:f1:
d7:26:28:fa:48:a8:15:64:d8:b7:72:4b:fa:6e:ec:20:84:62:
e1:50:bb:45:c4:71:61:e8:c7:28:5d:bc:25:71:c8:ee:29:bd:
c8:64:e9:85:cd:8b:b1:f3:5c:b0:7a:24:4c:f9:96:cf:90:ff:
9f:29:1e:c3:a0:2e:40:ec:91:5d:84:e9:99:97:48:a0:87:9a:
d4:b7:d5:d2:b8:74:08:c8:a6:00:0c:ea:3d:97:ab:96:97:fb:
9a:b6:95:8c:bd:22:20:3a:e4:99:7f:a8:ff:cf:b5:b4:a9:31:
28:94:8b:ae:21:71:9b:51:68:7d:d0:7d:b5:7a:a7:88:e1:8d:
19:a5:16:6c:1c:ba:b3:c8:7f:46:0b:6c:3f:71:45:04:04:42:
0c:e9:f1:1a:16:ea:ba:f8:e9:48:84:86:e2:5e:2d:c0:f5:ce:
76:f3:0c:96:4f:f2:eb:f6:8c:bb:0b:0f:d5:73:77:f9:b9:24:
f9:fc:13:1c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICALAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjU3NjhBRjExMC8GA1UEBRMoOUNENTYxNENGOTBEQTUxRTI3NzNCNUVCOTdCRDg5
OTM3QzUwNTg2MTAeFw0yNTEwMTkwNDU3NDZaFw0yNTEwMjEwNDU3NDZaMBgxFjAU
BgNVBAMTDTY4ZjQ2ZmNiLTlkYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6H9X3bl5NmQ8DJGBDPkiwfnGUQ4Lj9UAIEZWdKe15u3W7pg6UK5yJZfAc
PAlcl4D8SrhS+9Bv67kVwt0Q7/B7FLtL5VJbjvCGTQFiwBI9oYZJdNCNsURWRwV1
vTeI2AR/E+qR1tIgFuKzvZ5JAByRDnXFGE812QzN4QsRosuYUBrtHATQwIPM2EGt
t6foIuk2i5UEz0AX3nNsLh0YXHLvJ96ARLvK8UfF2f5eD6F4Y/D5xdHyhMgQJNSn
vXB8x9F1skKunZEKluQGmiNpMTFS+H0Lxl+IAS3PGfAJkFNyyiyjbZINe3jODr02
G5OTFjoftvIx1ADelVQHTZbgcKnZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKfpg
ypKbXzRLAef+Td9ITknEz9YwHwYDVR0jBBgwFoAUnNVhTPkNpR4nc7Xrl72Jk3xQ
WGEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI1NzY4L0Q0MjgxNDk0MjU4OTExRjBBNTJCQzhBMURBRTRFQzlDL25OVmhU
UGtOcFI0bmM3WHJsNzJKazN4UVdHRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL25OVmhUUGtOcFI0bmM3WHJsNzJKazN4UVdHRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjU3NjgvRDQyODE0OTQyNTg5MTFGMEE1MkJDOEExREFF
NEVDOUMvbk5WaFRQa05wUjRuYzdYcmw3MkprM3hRV0dFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBvoLJQ9DRCEkqD9vs1jIofvVYmkf7N
OPxeefpAcp8ceoL//dFRDn66IzZsIQhdqbQGA0bdIO2tTxmq8QY5sxLWOzF1RnZ2
YvHXJij6SKgVZNi3ckv6buwghGLhULtFxHFh6McoXbwlccjuKb3IZOmFzYux81yw
eiRM+ZbPkP+fKR7DoC5A7JFdhOmZl0igh5rUt9XSuHQIyKYADOo9l6uWl/uatpWM
vSIgOuSZf6j/z7W0qTEolIuuIXGbUWh90H21eqeI4Y0ZpRZsHLqzyH9GC2w/cUUE
BEIM6fEaFuq6+OlIhIbiXi3A9c528wyWT/Lr9oy7Cw/Vc3f5uST5/BMc
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:56:56 2025 by rpki-client