Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
File: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft (raw, json)
Hash identifier: Y1LVFh2mWCGY/t9vKoA+jTNDV8V5oTA4zO2fyessqoU=
Subject key identifier: E7:24:DE:A2:9B:3B:02:EF:14:45:5D:8E:60:3F:6A:B4:C8:E3:D5:07
Authority key identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
Certificate issuer: /CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Certificate serial: 033F
Authority info access: rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
Manifest number: 033E
Signing time: Wed 05 Nov 2025 03:55:09 +0000
Manifest this update: Wed 05 Nov 2025 03:55:08 +0000
Manifest next update: Fri 07 Nov 2025 03:55:08 +0000
Files and hashes: 1: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl (hash: FTnKLr/pCXyUE2MfT4uUj30eJ3VU5vK4kkzVNPDmewM=)
2: CC9C343441E311EEA3DA33544AD9E6FC.roa (hash: O2w06Y8bPWrlQlM0KiCR/CDJJh42Y1TIJDGWDlX/VL0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 831 (0x33f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DE42DRI, serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Validity
Not Before: Nov 5 03:55:08 2025 GMT
Not After : Nov 7 03:55:08 2025 GMT
Subject: CN=690aca9d-3a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:ac:9b:71:27:8a:96:64:3f:7e:ee:58:1a:
21:22:ce:f2:a4:52:86:b2:c5:84:7d:05:f0:b6:ae:
88:18:60:08:e5:0f:27:4a:82:df:2a:e2:32:c2:88:
ef:46:55:9a:f7:85:dd:57:4a:26:76:b6:e8:6e:26:
db:8c:d8:0a:3b:de:e6:a2:97:a1:a9:1f:9a:06:c2:
1a:c4:aa:f3:95:98:96:65:64:67:76:a3:b5:3c:62:
98:6b:ad:95:83:04:a6:7e:b8:fd:6e:21:d7:7d:d9:
f9:db:33:dc:7d:66:2d:81:23:b2:09:4d:64:ca:61:
2b:27:8e:9d:e9:54:e6:19:dc:60:24:0a:c4:a3:05:
7e:b1:be:25:1f:f2:41:24:93:17:66:0e:f9:19:71:
af:00:8c:5f:c2:48:3f:64:b6:b8:01:f8:84:7b:ae:
af:a5:9a:7b:38:9c:f7:4a:3d:91:78:b4:90:ee:65:
12:e1:aa:21:61:67:a8:32:64:a5:cc:1c:e8:44:d6:
91:a9:b2:46:c5:03:f5:51:4f:a4:27:02:73:18:6a:
cf:ba:12:dc:ad:eb:4a:86:1c:cc:78:0e:65:30:fa:
48:c7:b5:a4:86:f5:3d:8d:f0:c1:7c:78:45:7c:7e:
7d:b4:e4:00:92:8e:6c:82:1c:c7:76:1c:ad:59:00:
86:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:24:DE:A2:9B:3B:02:EF:14:45:5D:8E:60:3F:6A:B4:C8:E3:D5:07
X509v3 Authority Key Identifier:
keyid:9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:0c:ff:9a:05:f1:2f:ed:c5:65:59:f1:b9:ee:33:02:66:68:
3c:f1:11:ee:3f:8d:d0:41:c7:8c:4a:c1:05:ce:09:77:05:32:
56:f1:5b:90:f6:78:64:6f:8e:4f:a3:7f:d2:8c:7b:bf:2f:a5:
68:26:df:0c:21:ae:87:bb:d3:32:db:77:ca:7b:b3:6a:7b:5f:
d5:42:77:69:b8:3b:b4:ad:51:16:5f:36:a0:b1:84:ae:5e:8a:
9d:48:61:9a:cc:42:f6:96:bf:8c:d9:4b:e2:6a:f1:77:a0:35:
fa:4b:4a:f6:47:04:07:d4:f2:32:a8:67:88:e5:d2:e6:ff:ee:
41:e0:38:89:e9:8a:82:37:1d:61:f6:b1:96:e9:54:9f:6f:56:
02:d7:c9:85:07:a8:67:81:41:0c:05:c0:59:2b:02:b1:68:1e:
c0:fb:2f:9b:dd:8b:4c:69:3b:61:c4:c3:2a:1d:0f:0a:5a:c8:
b9:67:51:a6:18:7d:15:91:b0:b7:28:31:70:23:92:b4:bb:3e:
89:63:b2:99:57:b2:b9:65:15:40:5b:c0:97:50:d9:1f:20:b7:
6f:d0:66:bc:a9:fa:6b:9f:d2:be:35:04:22:79:56:43:ab:fe:
e5:66:79:f9:5a:7a:85:c9:dd:de:e0:12:8e:f1:c8:b7:d1:b1:
cf:84:cb:c8
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REU0MkRSSTExMC8GA1UEBRMoOUQ4NURBRDAyRkMxNzdBNDBFOUI5MDcwMjM3MDZG
M0Y5Nzc0NERBMDAeFw0yNTExMDUwMzU1MDhaFw0yNTExMDcwMzU1MDhaMBgxFjAU
BgNVBAMTDTY5MGFjYTlkLTNhNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQJqybcSeKlmQ/fu5YGiEizvKkUoayxYR9BfC2rogYYAjlDydKgt8q4jLC
iO9GVZr3hd1XSiZ2tuhuJtuM2Ao73uail6GpH5oGwhrEqvOVmJZlZGd2o7U8Yphr
rZWDBKZ+uP1uIdd92fnbM9x9Zi2BI7IJTWTKYSsnjp3pVOYZ3GAkCsSjBX6xviUf
8kEkkxdmDvkZca8AjF/CSD9ktrgB+IR7rq+lmns4nPdKPZF4tJDuZRLhqiFhZ6gy
ZKXMHOhE1pGpskbFA/VRT6QnAnMYas+6Etyt60qGHMx4DmUw+kjHtaSG9T2N8MF8
eEV8fn205ACSjmyCHMd2HK1ZAIYxAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU5yTe
ops7Au8URV2OYD9qtMjj1QcwHwYDVR0jBBgwFoAUnYXa0C/Bd6QOm5BwI3BvP5d0
TaAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRFNDJEL0NDOUFBMEU2NDFEQTExRUVCMDNFQkUzNzRBRDlFNkZDL25ZWGEw
Q19CZDZRT201QndJM0J2UDVkMFRhQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L25ZWGEwQ19CZDZRT201QndJM0J2UDVkMFRhQS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2REU0MkQvQ0M5QUEwRTY0MURBMTFFRUIwM0VCRTM3NEFEOUU2
RkMvbllYYTBDX0JkNlFPbTVCd0kzQnZQNWQwVGFBLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCDP+aBfEv7cVlWfG57jMCZmg88RHuP43Q
QceMSsEFzgl3BTJW8VuQ9nhkb45Po3/SjHu/L6VoJt8MIa6Hu9My23fKe7Nqe1/V
QndpuDu0rVEWXzagsYSuXoqdSGGazEL2lr+M2UviavF3oDX6S0r2RwQH1PIyqGeI
5dLm/+5B4DiJ6YqCNx1h9rGW6VSfb1YC18mFB6hngUEMBcBZKwKxaB7A+y+b3YtM
aTthxMMqHQ8KWsi5Z1GmGH0VkbC3KDFwI5K0uz6JY7KZV7K5ZRVAW8CXUNkfILdv
0Ga8qfprn9K+NQQieVZDq/7lZnn5WnqFyd3e4BKO8ci30bHPhMvI
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:53:13 2025 by rpki-client