Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
File: nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft (raw, json)
Hash identifier: KI3bv4kupmvaJuOYWLGp8q67UlTZ3fsuSp3lwjBFBVs=
Subject key identifier: A0:C5:33:3F:FC:6F:15:0D:6A:0B:40:67:BE:DA:1A:53:3C:A7:D8:C5
Authority key identifier: 9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61
Certificate issuer: /CN=F36B5768AF/serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
Certificate serial: 77
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
Manifest number: 76
Signing time: Sat 23 Aug 2025 05:14:18 +0000
Manifest this update: Sat 23 Aug 2025 05:14:17 +0000
Manifest next update: Mon 25 Aug 2025 05:14:17 +0000
Files and hashes: 1: nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl (hash: 82zsNHayREltkOHYOBO+dYPSsAqR7xW2hX3YHILePz0=)
2: 0BF4391E25BE11F0BA0F6C78DAE4EC9C.roa (hash: yV3qp3Snn6vcZINsGIupcA7CLhBh7nsh5NGhTfu+GnU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B5768AF, serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
Validity
Not Before: Aug 23 05:14:17 2025 GMT
Not After : Aug 25 05:14:17 2025 GMT
Subject: CN=68a94e2a-d506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e1:d6:12:79:ab:81:51:e7:34:f1:37:18:1b:
f6:54:e5:30:bd:e0:06:d3:4a:94:fa:52:e9:14:85:
76:21:c8:c8:e8:17:7d:f0:0e:8d:d0:6a:23:a9:b7:
b4:2c:9c:70:78:ed:1d:07:3f:fb:b6:df:28:9c:a5:
5a:1b:70:bd:98:e5:1d:bc:fd:3f:6d:82:b1:cb:08:
b4:bd:92:b0:e5:e0:13:5b:c2:a1:6e:79:9e:43:bd:
28:e9:57:0a:b3:d0:9d:b8:14:cc:fd:4e:93:3e:3a:
12:be:85:9b:02:86:0a:64:e3:5c:0b:9b:80:4b:dd:
e2:a3:aa:a2:0a:dd:e5:92:1c:08:5a:23:c6:7e:09:
bc:17:16:29:50:de:72:9b:89:53:39:82:7f:d8:9f:
a8:fa:58:f0:81:cf:76:49:c4:27:ce:fe:e4:ac:c8:
5b:c5:f3:36:1b:07:63:80:af:d3:71:ae:60:3e:04:
8b:80:44:97:15:3c:d1:0e:b1:2f:c0:b0:ba:ad:1d:
23:51:d2:c4:db:37:fd:6c:53:86:cc:c4:37:86:6b:
a9:83:a1:96:ad:3a:b2:94:6c:17:72:a1:fd:90:af:
aa:45:66:9e:1b:f1:fa:ed:cb:b5:9e:6e:84:07:ac:
a8:b3:1c:da:42:2d:d2:10:8f:02:6d:d0:27:5c:58:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C5:33:3F:FC:6F:15:0D:6A:0B:40:67:BE:DA:1A:53:3C:A7:D8:C5
X509v3 Authority Key Identifier:
keyid:9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:5e:22:78:80:64:5f:44:43:ba:27:c7:f7:8b:ed:62:a5:35:
13:b0:23:37:dc:ab:c5:c1:60:64:a3:28:27:1a:aa:c5:fb:f3:
22:27:ad:1d:f2:b5:2c:1f:a9:de:a5:14:86:09:dd:ff:34:d4:
8c:00:54:eb:fb:96:ae:46:3d:ed:ab:5b:63:26:50:24:85:ed:
46:ed:9f:3b:87:95:2f:0f:5b:1b:83:db:0b:d0:83:4d:d7:22:
37:34:96:96:00:75:5e:58:87:ab:6c:e8:d2:5c:95:c1:50:45:
ff:e3:6c:4a:54:a7:fc:07:ec:e1:1b:41:bd:73:0b:ed:4b:92:
ab:38:8a:44:9d:e2:2d:00:6c:77:80:64:8f:43:15:02:f6:d7:
bd:46:5a:ca:76:1e:df:02:ae:85:0c:b6:bb:c7:d2:9a:ae:91:
96:f7:cc:ac:ae:f3:a7:70:49:75:59:dc:e5:22:85:73:8c:17:
e6:10:65:3d:cf:e4:be:14:47:29:a8:9f:86:dc:f8:2f:9c:97:
1a:8a:7c:a2:55:9c:99:15:aa:d2:4b:62:f5:53:6e:11:b7:d9:
09:d8:93:99:66:a3:a8:f9:2c:18:6a:51:9f:0e:5a:b4:5e:b1:
0a:e3:11:1a:04:59:2a:4f:74:3d:7d:07:52:ae:02:91:1d:31:
be:5c:71:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:33:50 2025 by rpki-client