Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
File: NSunHRHXakg8nsebSWRvi0XYOLo.mft (raw, json)
Hash identifier: KLcbMY+SR/9VoYNlK/aurS6FhXufUbQ1FZzMWMOXYNg=
Subject key identifier: A9:8B:5C:43:A3:FC:D9:17:6B:F8:6C:49:99:42:54:3D:97:83:9C:09
Authority key identifier: 35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA
Certificate issuer: /CN=F3633396AF/serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
Certificate serial: 0629
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
Manifest number: 0627
Signing time: Wed 05 Nov 2025 02:29:05 +0000
Manifest this update: Wed 05 Nov 2025 02:29:04 +0000
Manifest next update: Fri 07 Nov 2025 02:29:04 +0000
Files and hashes: 1: NSunHRHXakg8nsebSWRvi0XYOLo.crl (hash: 8IDZQE4PVEXVe+ABKVw/alOYyvgcSxTazpIluOdsoV0=)
2: B83520CE3C5411F0B678C6A7DAE4EC9C.roa (hash: G6iOOYX+72GS+UQO3yIOd7hEz/TAFLzGnnM38j3t3+w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1577 (0x629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3633396AF, serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
Validity
Not Before: Nov 5 02:29:04 2025 GMT
Not After : Nov 7 02:29:04 2025 GMT
Subject: CN=690ab670-0c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:73:2f:ad:9e:cd:14:74:0f:df:a4:65:fa:
2f:8c:02:33:f9:2a:e2:7c:3c:9d:cf:4d:ed:2c:65:
72:47:7c:21:57:50:2f:4c:f9:cc:4c:d9:fe:71:01:
11:4b:22:ba:bf:1e:92:27:d8:de:1a:aa:34:fe:94:
05:0c:d8:f8:ff:cb:fa:4a:f8:45:a0:79:92:29:31:
63:8c:02:a0:cc:77:98:79:db:33:d8:16:9e:6b:e3:
84:57:4b:02:76:cd:3d:11:52:52:51:e3:68:dc:45:
99:74:e3:44:36:ed:11:c4:68:fe:3a:53:6a:11:df:
91:1b:ce:92:89:c9:3f:78:97:d4:1e:67:e3:73:35:
ea:70:f5:55:14:6e:67:af:3a:fa:d5:3a:ce:d9:5b:
a8:89:f5:73:59:75:3e:77:d7:ef:77:98:bb:8b:58:
08:13:96:8e:53:59:38:b2:13:6d:3b:fd:b8:bb:b0:
21:70:4b:d4:28:ea:d6:db:ab:49:c8:fb:36:19:9c:
5e:b8:67:f9:f7:43:40:55:9c:7e:44:f1:14:37:26:
a9:47:88:99:83:cd:fd:ea:27:9a:11:64:40:aa:64:
82:29:a5:30:1a:4a:a6:f8:e0:e0:a5:0e:5e:b2:bd:
fd:c2:e5:4c:09:86:91:d7:3b:09:df:a3:78:e1:5c:
ae:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8B:5C:43:A3:FC:D9:17:6B:F8:6C:49:99:42:54:3D:97:83:9C:09
X509v3 Authority Key Identifier:
keyid:35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:94:11:8d:dd:9d:45:17:8c:a0:0a:a3:b0:ee:a0:d0:17:d0:
f8:08:5c:de:9a:c2:b4:6b:bd:8d:4a:df:8b:fe:bb:21:ac:63:
74:a1:55:b2:c8:fa:19:77:c3:aa:d2:4a:90:b1:76:1e:a6:88:
00:79:11:cb:e3:7b:33:5b:a1:79:9c:5a:af:b8:91:a6:cf:51:
82:1d:54:6a:3b:e7:3d:81:00:8f:a8:7b:ee:3f:4e:f9:33:53:
0e:57:e8:41:29:29:7f:78:7d:9f:ce:de:30:2c:1b:b1:af:f4:
05:4b:20:d7:0f:b8:54:8a:1f:b3:1e:16:6f:d7:b6:d4:66:e5:
1c:3a:23:1d:c8:5b:63:67:2e:67:2a:6e:3f:a0:44:54:e3:2a:
88:d6:e2:e4:c2:92:ac:f5:6c:84:52:fe:c0:19:51:2a:f3:21:
eb:e0:6b:75:24:bc:79:01:a4:71:72:0f:a9:02:c3:a3:78:96:
9a:0b:71:54:58:99:ce:73:5a:6e:c7:a4:fe:88:d2:ea:7e:f9:
57:ac:c3:e6:e2:9c:48:8d:80:81:c1:4b:bc:5e:c7:e5:d5:2c:
d1:f0:65:cb:2d:f2:c4:5f:56:03:f6:ed:cb:7c:33:91:f8:1d:
07:0c:cb:4a:28:34:fe:21:77:76:ac:b6:d3:bd:d8:89:e4:00:
aa:93:38:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:39:46 2025 by rpki-client