Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
File: NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft (raw, json)
Hash identifier: Ch3PL/cxWstdz7g4b6WwpEy8V9EPjgV8PFee3CFztng=
Subject key identifier: C5:66:FD:EF:32:E8:67:90:64:FC:D0:1F:F6:E2:C9:CB:D4:63:57:74
Authority key identifier: 36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
Certificate issuer: /CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Certificate serial: 07DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
Manifest number: 07D9
Signing time: Mon 02 Mar 2026 01:30:06 +0000
Manifest this update: Mon 02 Mar 2026 01:30:05 +0000
Manifest next update: Wed 04 Mar 2026 01:30:05 +0000
Files and hashes: 1: NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl (hash: jTGngWdlo4iR8KWFxBiCLOKwtH5o9bDuL9qpZ8V5ans=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2012 (0x7dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6DD4AF, serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Validity
Not Before: Mar 2 01:30:05 2026 GMT
Not After : Mar 4 01:30:05 2026 GMT
Subject: CN=69a4e81e-a598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c4:cb:e9:9c:55:58:c4:3d:bc:11:49:96:71:
45:98:6b:e1:cc:c2:43:ce:4b:4b:5f:8e:9f:47:11:
51:2f:c0:51:f9:e7:df:b1:47:2d:ad:43:16:94:f9:
7d:57:ee:a8:40:cc:75:34:7d:6d:02:6c:10:ea:fd:
2e:96:4a:e2:38:ea:d7:6a:09:b0:e6:a8:6a:ad:6b:
9b:3f:a4:71:f2:04:1f:0b:3f:2b:30:b2:34:06:3b:
67:4d:3b:3f:cc:40:39:47:c5:e6:16:a6:35:bc:9f:
1b:9d:17:8a:e2:a4:10:ff:78:8f:3c:11:35:a3:8c:
0b:f6:af:2b:d5:c2:73:e0:39:9d:a0:56:7b:7d:61:
68:5d:86:cc:75:b2:fe:e1:46:8d:e2:1a:99:ed:cb:
39:00:2d:64:86:de:2b:d1:09:03:97:6a:14:00:4b:
6f:61:c9:37:b8:0d:8c:55:2c:34:2b:36:e2:89:c7:
d6:f1:9a:23:16:37:57:1d:92:a7:40:fa:13:1a:00:
7e:be:d3:02:bf:0a:42:6a:0a:f8:c5:9b:cf:13:5d:
5b:9b:2b:e7:a9:e6:42:d6:c0:f9:d5:67:09:43:e7:
67:a4:56:01:39:1f:03:6c:78:ee:73:61:b5:05:e0:
05:48:72:45:d5:a7:50:94:b5:61:de:01:17:4a:c3:
25:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:66:FD:EF:32:E8:67:90:64:FC:D0:1F:F6:E2:C9:CB:D4:63:57:74
X509v3 Authority Key Identifier:
keyid:36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:14:95:ba:3c:3d:4d:f4:0d:63:e6:42:8a:f2:99:05:b0:f2:
05:e6:ba:be:7a:73:da:83:07:ab:74:9e:92:ad:6e:36:87:0b:
a8:3a:98:94:7a:11:de:03:77:ab:bc:7b:bc:92:81:01:fd:31:
db:49:8a:3d:94:64:e5:0b:b6:8a:cc:42:3f:1b:bf:b3:b2:f8:
0b:b9:50:f0:fc:01:69:e2:37:5f:1b:c0:fa:e3:22:9c:85:8f:
d4:19:41:ba:15:23:03:04:ba:73:b5:24:38:ac:f8:79:68:ef:
11:c9:e8:39:0a:ec:69:11:f6:67:45:d7:56:d6:01:68:ba:4e:
b5:34:23:df:00:8a:1e:b3:2e:74:04:9c:88:07:44:37:cb:58:
10:a0:eb:ae:7e:dc:5d:58:f8:ac:7b:55:4c:0e:c0:3c:4d:92:
1c:30:22:cb:14:f4:a0:4c:3a:e7:d5:76:94:d9:5a:ed:c3:72:
43:8b:b6:01:05:4a:13:ab:fc:7a:07:2a:6d:fd:cb:5b:dc:cd:
ba:ed:3d:5d:95:39:a3:17:0b:09:42:57:91:59:92:01:74:f5:
0c:5b:72:f2:1e:b7:0c:37:c5:13:ca:b3:6c:3f:97:cf:66:3e:
cf:e6:2c:64:d5:d9:29:26:9f:1e:4d:ca:a6:58:51:5d:df:17:
3d:37:c7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:16 2026 by rpki-client