
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
File: nxc4PrZn5Ue6AM-3-RT0KExYScw.mft (raw, json)
Hash identifier: xFAjAdmdbWNCN30QW8jYlj2HsYpTB59OIX8sz2fWXxs=
Subject key identifier: 07:A5:81:4E:44:EF:36:3C:B5:4D:C3:8F:45:DA:B2:56:EA:92:33:E0
Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
Certificate issuer: /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Certificate serial: 0EE9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
Manifest number: 0EDA
Signing time: Tue 04 Nov 2025 01:01:49 +0000
Manifest this update: Tue 04 Nov 2025 01:01:48 +0000
Manifest next update: Thu 06 Nov 2025 01:01:48 +0000
Files and hashes: 1: nxc4PrZn5Ue6AM-3-RT0KExYScw.crl (hash: vVkv5U5mgl1dNZXcYekhexZ5yYWqcdIdix98BK2J+r0=)
2: 0F970AA45DDA11EEA9B9B7884AD9E6FC.roa (hash: FMUt2MM7DebKkBEnbyLy3J47YqdDugPo2mNzNBuOTcI=)
3: CB802D6A9FD011F0B09E84F1DAE4EC9C.roa (hash: S80ZZFyyc08N7gI7of8t+4zntc1/6kCBNhlAw4585HY=)
4: 4252D1905DDE11EEA38F26174AD9E6FC.roa (hash: YEcxnJNljEbbPt+jZqFFjrHFGQrlfrLBxbAphuQ3lR4=)
5: AA2ED722D22511EDA73BE0D2F1222468.roa (hash: Bz6y/9VDXHlj+h8pTwHUCwEbbK4O3DXKaYbf9T3u4Kk=)
6: F8A03EA22DD711ED9D0F7E83F1222468.roa (hash: A3D2coJfMGVfkM4t+C0wadunWeeP5Netmzy2NPiOcNE=)
7: DAD32A825DD911EE908D0E884AD9E6FC.roa (hash: jYCM5n5GYzsPy5dOD3c0IJ0ltyMzwLsK1AtouHVwLZ0=)
8: 67208BD45DDE11EEA367B1174AD9E6FC.roa (hash: dUOADrTH86yUTFdknQpwKyYi7Ckfi6ZQrgp/0K1+5iw=)
9: 3EB8BE4ED22611EDAF3CB0D4F1222468.roa (hash: 8rUeH5+hrD/1gu9Yu/+gBbmACyJtB7cXUwPkrzQinJI=)
10: FA54B1109FD011F08E699CF1DAE4EC9C.roa (hash: F+/CQFEGh7hy0TbdeqQH+fkZYKvk2d9fKx2iVdi2NNY=)
11: 7FA6B8DC9FD011F09FBF73EDDAE4EC9C.roa (hash: mIreRYj0MVYZW7c/XBrrdQAMZGvWksvf2R6Ym6OT8rM=)
12: 08DDC9D85DDE11EE97117A164AD9E6FC.roa (hash: YTPBR2O7UMDxBF3Dv5l5lllDC58HOmSCof2QHjhKZws=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 01:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3817 (0xee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Validity
Not Before: Nov 4 01:01:48 2025 GMT
Not After : Nov 6 01:01:48 2025 GMT
Subject: CN=6909507d-abdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:c9:aa:01:55:5d:16:2a:e1:78:2f:30:2a:
cf:72:59:a8:d1:01:a8:6a:96:d3:03:47:1f:a8:d6:
02:d9:07:50:3b:9d:68:06:e0:9c:59:b8:c9:c0:0c:
ce:7a:90:bd:96:ad:19:3c:bc:eb:6a:83:de:c0:4c:
6e:e3:86:83:d9:1e:fd:40:68:34:15:6a:92:86:73:
77:6a:b6:bc:09:fd:a5:f6:75:55:d5:ad:24:a7:d8:
f4:ac:8e:e1:e6:d8:3a:4d:ce:a6:41:8b:ee:fc:1e:
79:ae:81:e2:17:42:9f:8b:e7:48:af:e3:59:d3:dd:
aa:b1:26:e7:48:b3:08:3b:cf:46:53:81:5f:5d:50:
04:b1:5b:44:c4:bb:d4:67:05:44:ca:74:7d:f6:92:
ab:5a:a4:ff:c8:b1:60:b6:31:f3:95:b3:51:46:c5:
90:40:c7:20:ac:ce:1e:c1:88:3d:59:36:5b:f9:32:
97:0e:b6:18:dd:92:27:3e:66:4f:25:c2:c3:75:d6:
c6:ee:98:3c:8a:c7:41:5d:e4:78:a5:29:49:4d:d3:
a7:45:13:cf:29:0d:6f:b7:a8:7d:c8:1a:12:82:d6:
6f:70:d7:1b:eb:23:4b:64:7b:73:c4:ef:9a:e7:06:
e9:81:de:94:c9:bd:ef:f0:6c:56:c3:3a:a9:9d:af:
4e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A5:81:4E:44:EF:36:3C:B5:4D:C3:8F:45:DA:B2:56:EA:92:33:E0
X509v3 Authority Key Identifier:
keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:e3:5a:6f:50:a1:77:9e:71:d9:48:d0:4c:cf:87:48:3d:e0:
0e:a6:43:a7:aa:cd:d1:6b:f0:40:aa:32:19:78:33:cc:4d:5e:
d4:f5:00:eb:f8:f2:81:d8:ab:f1:ee:bf:a5:da:78:52:90:14:
38:ab:7d:50:8f:e2:ce:3c:f4:b7:84:4d:c6:d2:b4:c1:b9:98:
55:52:d0:21:4c:21:af:80:83:94:f9:ba:9b:55:83:1d:4a:32:
5d:99:e4:52:c9:11:29:f7:40:8a:85:8e:fd:7f:54:53:bc:f3:
5e:11:21:74:3c:71:75:1b:99:bc:0b:f0:f8:11:35:77:30:db:
4a:49:b1:cf:61:73:3d:03:8d:92:28:84:eb:44:74:e6:31:29:
2e:b0:8a:d6:4c:13:2e:1e:44:52:e0:9e:5a:08:dd:8f:b6:21:
4f:76:a2:91:ab:67:c0:9e:ab:09:3a:8a:02:a7:24:8e:bc:e0:
b3:9f:8a:38:b8:ed:c6:65:f0:1c:da:34:66:cf:38:0a:63:78:
bb:52:e6:63:70:df:03:4b:d9:d0:c8:d7:83:95:b1:9b:47:41:
0b:d9:9d:26:a8:0d:32:4c:11:b6:15:52:4d:14:f8:81:34:04:
74:76:34:40:ef:1f:dd:5e:84:df:74:85:6c:4e:45:3a:05:35:
3a:f2:d1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:26 2025 by rpki-client