
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
File: nxc4PrZn5Ue6AM-3-RT0KExYScw.mft (raw, json)
Hash identifier: 3pf/A/izzSWfkPw4vnArZ5fB/VpYInejrvvNzh/9BT0=
Subject key identifier: 8B:C3:B9:54:77:D3:B6:77:C2:16:79:3F:25:39:B1:80:BD:87:48:FF
Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
Certificate issuer: /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Certificate serial: 0F61
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
Manifest number: 0F52
Signing time: Sun 01 Mar 2026 00:53:15 +0000
Manifest this update: Sun 01 Mar 2026 00:53:15 +0000
Manifest next update: Tue 03 Mar 2026 00:53:15 +0000
Files and hashes: 1: nxc4PrZn5Ue6AM-3-RT0KExYScw.crl (hash: P/lcow5s1L5T2eCAmGTeTeTlDYV4P5wfjhOYlVDkbc0=)
2: 0F970AA45DDA11EEA9B9B7884AD9E6FC.roa (hash: FMUt2MM7DebKkBEnbyLy3J47YqdDugPo2mNzNBuOTcI=)
3: CB802D6A9FD011F0B09E84F1DAE4EC9C.roa (hash: S80ZZFyyc08N7gI7of8t+4zntc1/6kCBNhlAw4585HY=)
4: 4252D1905DDE11EEA38F26174AD9E6FC.roa (hash: YEcxnJNljEbbPt+jZqFFjrHFGQrlfrLBxbAphuQ3lR4=)
5: AA2ED722D22511EDA73BE0D2F1222468.roa (hash: Bz6y/9VDXHlj+h8pTwHUCwEbbK4O3DXKaYbf9T3u4Kk=)
6: F8A03EA22DD711ED9D0F7E83F1222468.roa (hash: A3D2coJfMGVfkM4t+C0wadunWeeP5Netmzy2NPiOcNE=)
7: DAD32A825DD911EE908D0E884AD9E6FC.roa (hash: jYCM5n5GYzsPy5dOD3c0IJ0ltyMzwLsK1AtouHVwLZ0=)
8: 67208BD45DDE11EEA367B1174AD9E6FC.roa (hash: dUOADrTH86yUTFdknQpwKyYi7Ckfi6ZQrgp/0K1+5iw=)
9: 3EB8BE4ED22611EDAF3CB0D4F1222468.roa (hash: 8rUeH5+hrD/1gu9Yu/+gBbmACyJtB7cXUwPkrzQinJI=)
10: FA54B1109FD011F08E699CF1DAE4EC9C.roa (hash: F+/CQFEGh7hy0TbdeqQH+fkZYKvk2d9fKx2iVdi2NNY=)
11: 7FA6B8DC9FD011F09FBF73EDDAE4EC9C.roa (hash: mIreRYj0MVYZW7c/XBrrdQAMZGvWksvf2R6Ym6OT8rM=)
12: 08DDC9D85DDE11EE97117A164AD9E6FC.roa (hash: YTPBR2O7UMDxBF3Dv5l5lllDC58HOmSCof2QHjhKZws=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3937 (0xf61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Validity
Not Before: Mar 1 00:53:15 2026 GMT
Not After : Mar 3 00:53:15 2026 GMT
Subject: CN=69a38dfb-1449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:0a:ae:e9:4b:ed:01:05:92:4f:a4:9b:56:
a2:62:61:48:3a:0e:b5:0c:7a:8f:71:21:07:3b:09:
7d:3b:e8:fe:51:26:c9:eb:72:66:57:ef:6a:7f:77:
2d:9d:8b:7b:05:2e:e2:5b:03:36:46:f0:e0:ef:56:
c9:54:aa:61:11:7c:c6:07:05:05:90:1e:cd:f5:aa:
6f:91:14:a7:e0:91:ed:84:f3:90:de:bb:8f:bd:31:
2a:be:95:d3:46:06:a7:a4:44:d4:e9:02:36:b6:ca:
f1:2e:3c:74:aa:81:58:12:bc:a2:63:2d:9f:d9:ea:
91:9b:44:ed:7c:39:30:01:33:f6:b6:5a:34:e3:46:
84:2e:40:a9:98:58:5d:15:b8:da:53:75:de:88:12:
11:af:1b:e1:08:f5:53:de:9d:72:40:23:a0:f2:af:
ed:82:d4:87:f2:ae:a5:a3:db:fd:b3:06:0b:a6:77:
3e:22:6f:c8:79:0e:ea:51:9b:6e:ab:18:bf:22:d3:
58:47:41:e9:84:a7:cb:57:a6:b3:e6:7e:03:62:6e:
2a:9b:cf:18:74:b2:01:12:74:0a:7c:6b:db:00:2e:
ec:bf:97:97:a4:c1:ff:7f:8d:bb:7e:80:0f:15:4b:
97:2d:20:9c:3e:d5:59:c4:4c:93:23:f5:be:d0:2c:
7e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C3:B9:54:77:D3:B6:77:C2:16:79:3F:25:39:B1:80:BD:87:48:FF
X509v3 Authority Key Identifier:
keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:3d:c3:95:45:17:c3:28:9c:aa:9d:67:ee:99:44:0c:24:a0:
17:33:c4:29:4e:5d:e2:94:d3:e2:8d:4a:7f:f1:dd:34:87:af:
6c:e0:63:85:f3:38:6c:20:01:66:78:a9:ee:40:09:99:98:05:
58:f9:56:c6:5c:6f:33:47:bd:95:42:b5:bf:7b:bc:14:08:35:
64:61:1c:a8:21:10:3c:90:d8:a5:21:2e:9b:77:f4:57:e2:d5:
6e:6d:70:25:bd:bb:bc:b5:b6:50:78:9a:93:06:7d:f3:21:90:
ab:7b:d6:ae:4a:a8:1f:e0:a2:69:3d:ce:f2:52:b9:ba:56:48:
25:9d:47:84:11:cf:8f:0f:74:32:03:4f:d4:06:89:68:8b:00:
4e:24:a0:57:5a:88:03:de:81:94:07:7d:99:65:64:49:e7:b4:
2b:8c:1e:38:cb:51:fb:66:26:bd:d2:c9:b4:08:82:1c:4e:6e:
ff:88:4d:ab:e8:f5:0b:78:b0:eb:8d:4f:ea:4a:7a:17:5e:b2:
2d:7b:fa:36:a0:d8:e1:3c:0a:8d:20:fd:21:1b:45:c8:49:e3:
12:b1:10:fe:76:28:93:c5:ec:15:24:9d:4f:3a:14:f4:0d:03:
13:8c:aa:96:db:a9:c4:e2:46:b6:95:8a:28:15:2a:b2:50:27:
04:22:7b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:25 2026 by rpki-client