
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
File: nxc4PrZn5Ue6AM-3-RT0KExYScw.mft (raw, json)
Hash identifier: /PicJLF4DvgEIGjQxH1qPtJblE+2KtvnPB/bMKsgsAs=
Subject key identifier: 53:84:01:3A:DF:62:7A:C4:9B:1E:47:98:DB:5D:D3:BD:E1:9D:D7:69
Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
Certificate issuer: /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Certificate serial: 0FF7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
Manifest number: 0FE8
Signing time: Tue 28 Jul 2026 00:55:31 +0000
Manifest this update: Tue 28 Jul 2026 00:55:30 +0000
Manifest next update: Thu 30 Jul 2026 00:55:30 +0000
Files and hashes: 1: nxc4PrZn5Ue6AM-3-RT0KExYScw.crl (hash: h4Q6EHq6Ee/9R7CMgngl4QJ3nzlf/EYRFR/d7alUj9M=)
2: 0F970AA45DDA11EEA9B9B7884AD9E6FC.roa (hash: FMUt2MM7DebKkBEnbyLy3J47YqdDugPo2mNzNBuOTcI=)
3: CB802D6A9FD011F0B09E84F1DAE4EC9C.roa (hash: S80ZZFyyc08N7gI7of8t+4zntc1/6kCBNhlAw4585HY=)
4: 4252D1905DDE11EEA38F26174AD9E6FC.roa (hash: YEcxnJNljEbbPt+jZqFFjrHFGQrlfrLBxbAphuQ3lR4=)
5: AA2ED722D22511EDA73BE0D2F1222468.roa (hash: Bz6y/9VDXHlj+h8pTwHUCwEbbK4O3DXKaYbf9T3u4Kk=)
6: F8A03EA22DD711ED9D0F7E83F1222468.roa (hash: A3D2coJfMGVfkM4t+C0wadunWeeP5Netmzy2NPiOcNE=)
7: DAD32A825DD911EE908D0E884AD9E6FC.roa (hash: jYCM5n5GYzsPy5dOD3c0IJ0ltyMzwLsK1AtouHVwLZ0=)
8: 67208BD45DDE11EEA367B1174AD9E6FC.roa (hash: dUOADrTH86yUTFdknQpwKyYi7Ckfi6ZQrgp/0K1+5iw=)
9: 3EB8BE4ED22611EDAF3CB0D4F1222468.roa (hash: 8rUeH5+hrD/1gu9Yu/+gBbmACyJtB7cXUwPkrzQinJI=)
10: FA54B1109FD011F08E699CF1DAE4EC9C.roa (hash: F+/CQFEGh7hy0TbdeqQH+fkZYKvk2d9fKx2iVdi2NNY=)
11: 7FA6B8DC9FD011F09FBF73EDDAE4EC9C.roa (hash: mIreRYj0MVYZW7c/XBrrdQAMZGvWksvf2R6Ym6OT8rM=)
12: 08DDC9D85DDE11EE97117A164AD9E6FC.roa (hash: YTPBR2O7UMDxBF3Dv5l5lllDC58HOmSCof2QHjhKZws=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4087 (0xff7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Validity
Not Before: Jul 28 00:55:30 2026 GMT
Not After : Jul 30 00:55:30 2026 GMT
Subject: CN=6a67fe03-7c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:49:98:79:d7:5f:c9:3d:19:91:6f:ac:15:30:
7c:a1:cf:2b:09:aa:6f:f8:1e:0f:1f:11:3c:f7:5f:
b2:95:7e:4b:72:14:a1:9a:2a:f8:28:4b:1d:f8:41:
df:35:02:53:f5:a4:ba:d7:0b:cc:82:df:59:ec:00:
13:6d:40:aa:06:ef:75:db:2c:b7:e6:d3:c3:62:54:
c1:cb:10:55:4c:84:3b:8b:54:42:45:e8:a8:9c:33:
4c:a3:de:6b:29:94:20:5d:09:1b:c1:77:69:87:16:
07:f2:01:df:0a:29:9f:86:2c:c3:a6:71:ba:a6:5c:
68:12:98:42:65:a6:ee:db:62:8e:c0:be:d8:c3:a5:
b2:9f:a4:cf:09:66:81:7d:79:6b:84:71:1f:2e:1b:
28:47:de:e1:4f:97:a7:33:79:04:e2:c6:ac:00:60:
a7:a7:a9:1e:80:08:9d:0d:d3:81:64:78:df:b2:7a:
dc:38:13:fc:77:30:71:1e:20:48:8d:d3:2d:fc:d1:
ac:e7:2d:16:0f:a4:a1:85:17:b8:38:23:aa:83:0e:
6e:da:75:54:e3:35:50:52:97:e4:00:8a:1f:a7:03:
a0:94:a1:b6:fd:1a:e4:c4:f2:9c:8a:74:df:4f:0b:
4c:1d:88:c4:3a:5e:28:b4:2d:92:b1:d7:9f:cf:2a:
bd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:84:01:3A:DF:62:7A:C4:9B:1E:47:98:DB:5D:D3:BD:E1:9D:D7:69
X509v3 Authority Key Identifier:
keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:e1:41:9a:62:5a:32:7d:4c:47:db:4f:ae:25:e3:d7:26:17:
0e:f4:b5:65:af:3d:a1:15:a4:be:30:69:aa:87:19:46:43:17:
f6:e1:05:01:f2:c0:dc:f5:98:7d:80:72:f0:94:1d:54:e8:03:
34:00:1c:f3:aa:9c:f7:29:ca:99:24:54:1d:41:15:d9:df:fe:
e4:fb:17:46:99:3e:5e:14:31:04:eb:70:13:47:f9:10:56:53:
94:9a:43:85:45:6c:6b:25:c8:e1:c2:52:d1:11:64:a1:c1:01:
6e:a1:0f:20:e0:0e:8b:51:f0:ec:7e:76:7f:67:bf:75:84:56:
95:04:70:a5:2c:bf:57:de:d0:b4:00:69:01:4b:c6:a0:b8:c2:
c2:ce:0b:b5:d2:73:fa:14:e1:b0:e1:65:e3:86:56:f1:54:30:
be:13:de:aa:c5:4f:0b:97:d3:d0:1f:24:56:82:25:df:62:2a:
92:c8:d9:1b:c3:fb:d2:a0:2c:b9:a4:a2:6f:d1:92:b7:17:da:
75:04:c5:e6:05:df:d4:b8:81:a8:3c:fd:ad:1c:1b:55:35:83:
8f:5f:9a:40:14:42:55:cc:a6:f4:a1:e2:25:ec:d3:a8:70:f1:
71:ed:2a:6f:5e:68:9a:6a:d0:e2:3b:e9:ab:54:58:a7:64:05:
ae:e8:da:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:43:39 2026 by rpki-client