Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
File: NSunHRHXakg8nsebSWRvi0XYOLo.mft (raw, json)
Hash identifier: kk38RMXDf6pKMjGFolIBEfC5qeT8UteZtyvkiBHmCEU=
Subject key identifier: 09:06:68:91:45:21:DC:69:EF:3C:07:9B:A6:8C:73:E5:03:71:1B:8C
Authority key identifier: 35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA
Certificate issuer: /CN=F3633396AF/serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
Certificate serial: 05D4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
Manifest number: 05D2
Signing time: Wed 13 Aug 2025 02:31:03 +0000
Manifest this update: Wed 13 Aug 2025 02:31:03 +0000
Manifest next update: Fri 15 Aug 2025 02:31:03 +0000
Files and hashes: 1: NSunHRHXakg8nsebSWRvi0XYOLo.crl (hash: 20DSf5pS39OFVaVfX+F9weiyhsjDi0JAC0ru8grXeQs=)
2: B83520CE3C5411F0B678C6A7DAE4EC9C.roa (hash: G6iOOYX+72GS+UQO3yIOd7hEz/TAFLzGnnM38j3t3+w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 Aug 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1492 (0x5d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3633396AF, serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
Validity
Not Before: Aug 13 02:31:03 2025 GMT
Not After : Aug 15 02:31:03 2025 GMT
Subject: CN=689bf8e7-76da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:60:0f:f0:37:78:7a:5e:bd:39:ae:e4:b1:
36:d9:4f:71:77:db:84:73:8c:45:ac:22:90:c4:94:
ef:a9:ed:87:65:7e:24:b0:af:94:32:ab:83:41:6b:
6f:08:4d:8e:43:30:48:41:ee:fc:9b:6d:18:ed:a5:
6c:cc:05:06:78:15:77:9d:b9:db:82:9f:f7:07:b2:
d6:8d:5b:93:b9:cb:27:7d:aa:9b:1f:1d:4c:c6:87:
2a:71:a2:90:b3:10:28:80:7c:0d:d6:a8:ef:10:e2:
71:b9:68:c2:57:29:76:82:22:26:40:b7:de:c6:ae:
47:7f:80:5b:4e:f5:4e:69:6a:01:ce:0f:d1:6e:73:
49:75:c8:2e:df:c3:95:09:05:b2:85:d6:52:1d:2a:
5c:b5:73:9b:cb:b3:b2:bc:ba:5a:ad:92:4a:ae:50:
5d:fb:fb:66:22:0b:2e:7d:81:d9:b7:c2:54:93:d8:
b1:91:c7:7b:f8:ca:52:76:ab:5d:47:c8:2a:b4:4e:
80:be:44:cb:9f:4c:48:02:eb:29:b9:2c:64:60:be:
01:13:88:b4:9b:f1:fd:4b:f7:d9:f4:1a:bf:8f:0c:
53:02:ed:37:af:dc:22:2c:b4:c2:da:79:fd:a4:f0:
54:17:44:a6:a6:2c:bd:0b:f2:d0:fb:9d:01:a8:bd:
c9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:06:68:91:45:21:DC:69:EF:3C:07:9B:A6:8C:73:E5:03:71:1B:8C
X509v3 Authority Key Identifier:
keyid:35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a0:67:67:d4:d5:4d:af:dc:60:53:ed:4a:8e:a6:8f:12:c3:
04:b7:0a:f5:f8:bd:ee:c3:6e:4a:98:89:11:c5:a4:b4:b9:5a:
b4:8d:fe:b5:d7:f2:d0:55:14:9a:8a:ca:b6:ee:cd:59:70:ea:
55:9a:2c:dc:66:ef:03:f7:c5:96:5c:b5:00:91:0b:e3:f7:06:
81:aa:ef:99:a5:c1:e2:a9:02:04:36:25:bf:a5:cb:7f:43:b0:
27:1b:e9:1e:0f:b1:28:64:50:5c:00:e4:e9:20:42:da:ca:e1:
5d:11:a6:d1:ab:9a:36:db:53:1b:d4:98:0a:eb:23:b2:c3:7f:
ef:8a:dd:16:75:50:ac:31:71:ff:13:f7:cd:61:ef:5c:a5:e1:
32:f9:d6:ad:32:1a:85:39:1a:db:c0:3f:37:d6:eb:a4:51:81:
76:c7:5b:b5:91:af:6f:4f:f8:fc:3b:e0:e8:69:5e:72:dd:ba:
00:09:a5:f6:db:d9:3f:00:f9:3e:cd:c7:c1:30:fc:66:49:58:
80:46:d8:25:b6:87:1b:6f:96:96:99:06:78:b1:10:12:bb:f1:
79:8d:dc:ad:0a:21:71:b2:f1:11:5b:97:38:90:e1:23:b5:4e:
97:59:9e:8a:82:85:f9:cb:6d:4f:7f:48:17:ff:e7:b9:81:10:
4c:78:40:9d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzMzOTZBRjExMC8GA1UEBRMoMzUyQkE3MUQxMUQ3NkE0ODNDOUVDNzlCNDk2NDZG
OEI0NUQ4MzhCQTAeFw0yNTA4MTMwMjMxMDNaFw0yNTA4MTUwMjMxMDNaMBgxFjAU
BgNVBAMTDTY4OWJmOGU3LTc2ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3wWAP8Dd4el69Oa7ksTbZT3F324RzjEWsIpDElO+p7YdlfiSwr5Qyq4NB
a28ITY5DMEhB7vybbRjtpWzMBQZ4FXeduduCn/cHstaNW5O5yyd9qpsfHUzGhypx
opCzECiAfA3WqO8Q4nG5aMJXKXaCIiZAt97Grkd/gFtO9U5pagHOD9Fuc0l1yC7f
w5UJBbKF1lIdKly1c5vLs7K8ulqtkkquUF37+2YiCy59gdm3wlST2LGRx3v4ylJ2
q11HyCq0ToC+RMufTEgC6ym5LGRgvgETiLSb8f1L99n0Gr+PDFMC7Tev3CIstMLa
ef2k8FQXRKamLL0L8tD7nQGovckBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUCQZo
kUUh3GnvPAebpoxz5QNxG4wwHwYDVR0jBBgwFoAUNSunHRHXakg8nsebSWRvi0XY
OLowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMzMzk2L0ZDNTY3NTA4MDY3NzExRUM5RDE2M0Q1QUQ4QTAxNENFL05TdW5I
UkhYYWtnOG5zZWJTV1J2aTBYWU9Mby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL05TdW5IUkhYYWtnOG5zZWJTV1J2aTBYWU9Mby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzMzOTYvRkM1Njc1MDgwNjc3MTFFQzlEMTYzRDVBRDhB
MDE0Q0UvTlN1bkhSSFhha2c4bnNlYlNXUnZpMFhZT0xvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/oGdn1NVNr9xgU+1KjqaPEsMEtwr1
+L3uw25KmIkRxaS0uVq0jf611/LQVRSaisq27s1ZcOpVmizcZu8D98WWXLUAkQvj
9waBqu+ZpcHiqQIENiW/pct/Q7AnG+keD7EoZFBcAOTpIELayuFdEabRq5o221Mb
1JgK6yOyw3/vit0WdVCsMXH/E/fNYe9cpeEy+datMhqFORrbwD831uukUYF2x1u1
ka9vT/j8O+DoaV5y3boACaX229k/APk+zcfBMPxmSViARtgltocbb5aWmQZ4sRAS
u/F5jdytCiFxsvERW5c4kOEjtU6XWZ6KgoX5y21Pf0gX/+e5gRBMeECd
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:06 2025 by rpki-client