Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
File: NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft (raw, json)
Hash identifier: WxIOhiezd9g5A9+b7BKw2K4XQBdaOJo60X0CFXmf23U=
Subject key identifier: E9:D0:CE:8D:10:88:49:7F:83:18:9C:EC:0E:59:BB:CF:B3:AA:12:CE
Authority key identifier: 35:F1:27:5B:28:7E:9C:0F:8E:A3:A8:4B:8B:35:4A:B0:24:B7:69:72
Certificate issuer: /CN=F36C67A4AF/serialNumber=35F1275B287E9C0F8EA3A84B8B354AB024B76972
Certificate serial: 1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
Manifest number: 1A
Signing time: Fri 17 Apr 2026 05:29:42 +0000
Manifest this update: Fri 17 Apr 2026 05:29:41 +0000
Manifest next update: Sun 19 Apr 2026 05:29:41 +0000
Files and hashes: 1: NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl (hash: QNAh8qenOM9lAUgjso+g2YJxJAiOX9ilO+c58UdUrIY=)
2: 3100489627B211F18A08A3B6DAE4EC9C.roa (hash: KxXVh/K4PRDNOgb6lGt6sWf5pvipfL5DWCni74reBi0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C67A4AF, serialNumber=35F1275B287E9C0F8EA3A84B8B354AB024B76972
Validity
Not Before: Apr 17 05:29:41 2026 GMT
Not After : Apr 19 05:29:41 2026 GMT
Subject: CN=69e1c546-7bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:a7:ad:47:71:6f:70:28:68:4b:10:ae:b0:
22:93:a5:ad:1d:83:a5:db:ad:c9:79:1f:1a:b0:8e:
7c:5b:c1:1b:dd:7c:68:0e:30:2c:20:18:02:b9:41:
a4:55:07:8c:45:83:c5:7a:5f:54:7e:65:15:f6:8c:
2f:85:83:15:10:83:8e:ee:8c:36:0a:dc:4a:b4:0e:
cb:7a:47:5c:ff:ef:e6:d1:4f:05:88:c2:ea:f2:a8:
54:14:7a:a8:65:dc:e9:bb:86:8d:e2:31:8c:42:78:
4f:0c:0b:0f:0a:cc:ea:59:2a:30:42:dd:da:99:aa:
d8:5b:df:54:32:16:b4:5d:62:32:a1:74:9f:a4:bc:
23:c0:9d:8a:3b:11:ec:0d:e8:8c:b4:42:82:68:89:
27:85:5f:79:15:f5:b2:bc:e7:eb:bd:1e:62:73:9c:
df:0e:ff:05:b1:8f:dc:50:5f:e4:8c:19:ae:a1:f9:
fe:44:c9:88:b1:a3:01:ca:c5:81:72:a3:77:e5:bc:
4c:d1:0a:24:b4:8e:81:f1:72:69:1e:51:e1:6d:0c:
8f:41:9d:af:24:d7:9f:43:72:d4:7e:4b:63:1e:b4:
2a:17:58:2b:fe:c3:83:93:60:8d:42:30:ff:11:5a:
65:81:f0:11:b8:3d:90:91:ac:6d:4e:a1:28:09:a8:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D0:CE:8D:10:88:49:7F:83:18:9C:EC:0E:59:BB:CF:B3:AA:12:CE
X509v3 Authority Key Identifier:
keyid:35:F1:27:5B:28:7E:9C:0F:8E:A3:A8:4B:8B:35:4A:B0:24:B7:69:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7a:a6:76:43:bc:2a:fc:ee:ce:49:1d:56:3c:24:a2:1c:f9:
2f:d0:17:86:80:12:c2:86:06:81:31:b2:b5:c5:41:4c:6d:ad:
fe:1e:26:4c:fe:97:1e:36:a5:38:ea:5c:e0:24:c1:4d:d4:66:
c8:0f:f4:4a:5c:e1:e5:1a:9f:e3:ee:d6:f0:fc:10:cc:7a:93:
07:ef:ff:a6:32:27:6a:0c:5e:95:66:ac:64:7e:6c:2d:ab:24:
dc:e2:9b:74:7e:8d:d3:f5:3d:a2:6a:e3:01:6c:fd:fa:d6:ed:
a4:c1:28:cb:19:4f:0f:b7:9f:05:c9:22:bc:4b:9c:19:e2:51:
a5:84:99:97:08:8a:54:f0:44:00:83:fd:b1:50:2c:28:43:7d:
e0:96:a6:a2:13:78:b4:eb:01:35:8a:9d:37:74:c4:c2:dd:54:
89:c1:7a:c3:c0:e3:5c:97:00:ad:fc:12:77:a1:97:63:ab:bc:
14:5e:56:23:af:24:d6:4a:a9:39:f8:2d:d5:37:d6:59:bb:a1:
8b:f7:90:dc:43:e8:b6:19:41:2b:82:be:2a:42:04:9e:72:22:
e5:21:51:dc:84:fa:34:c5:6a:ac:bf:f2:1e:15:30:d5:f8:cd:
1e:82:f1:89:b6:1f:e7:af:1d:62:f0:ce:61:00:72:b8:73:9f:
9b:26:a2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:49 2026 by rpki-client