
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
File: nxc4PrZn5Ue6AM-3-RT0KExYScw.mft (raw, json)
Hash identifier: yokUUUgXHRS4Q2TCOGWSYVR069S4i4oTwNE2qLLC5/o=
Subject key identifier: 85:F9:98:77:17:CF:3B:84:31:AA:C2:FF:66:03:3D:D4:E4:D4:6B:A3
Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
Certificate issuer: /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Certificate serial: 0FB5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
Manifest number: 0FA6
Signing time: Sat 23 May 2026 00:55:33 +0000
Manifest this update: Sat 23 May 2026 00:55:33 +0000
Manifest next update: Mon 25 May 2026 00:55:33 +0000
Files and hashes: 1: nxc4PrZn5Ue6AM-3-RT0KExYScw.crl (hash: 2RPAa60ewq6RhYUbhYf//qOMFNKKv1KpXQUP4S4Z/Ps=)
2: 0F970AA45DDA11EEA9B9B7884AD9E6FC.roa (hash: FMUt2MM7DebKkBEnbyLy3J47YqdDugPo2mNzNBuOTcI=)
3: CB802D6A9FD011F0B09E84F1DAE4EC9C.roa (hash: S80ZZFyyc08N7gI7of8t+4zntc1/6kCBNhlAw4585HY=)
4: 4252D1905DDE11EEA38F26174AD9E6FC.roa (hash: YEcxnJNljEbbPt+jZqFFjrHFGQrlfrLBxbAphuQ3lR4=)
5: AA2ED722D22511EDA73BE0D2F1222468.roa (hash: Bz6y/9VDXHlj+h8pTwHUCwEbbK4O3DXKaYbf9T3u4Kk=)
6: F8A03EA22DD711ED9D0F7E83F1222468.roa (hash: A3D2coJfMGVfkM4t+C0wadunWeeP5Netmzy2NPiOcNE=)
7: DAD32A825DD911EE908D0E884AD9E6FC.roa (hash: jYCM5n5GYzsPy5dOD3c0IJ0ltyMzwLsK1AtouHVwLZ0=)
8: 67208BD45DDE11EEA367B1174AD9E6FC.roa (hash: dUOADrTH86yUTFdknQpwKyYi7Ckfi6ZQrgp/0K1+5iw=)
9: 3EB8BE4ED22611EDAF3CB0D4F1222468.roa (hash: 8rUeH5+hrD/1gu9Yu/+gBbmACyJtB7cXUwPkrzQinJI=)
10: FA54B1109FD011F08E699CF1DAE4EC9C.roa (hash: F+/CQFEGh7hy0TbdeqQH+fkZYKvk2d9fKx2iVdi2NNY=)
11: 7FA6B8DC9FD011F09FBF73EDDAE4EC9C.roa (hash: mIreRYj0MVYZW7c/XBrrdQAMZGvWksvf2R6Ym6OT8rM=)
12: 08DDC9D85DDE11EE97117A164AD9E6FC.roa (hash: YTPBR2O7UMDxBF3Dv5l5lllDC58HOmSCof2QHjhKZws=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 May 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4021 (0xfb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Validity
Not Before: May 23 00:55:33 2026 GMT
Not After : May 25 00:55:33 2026 GMT
Subject: CN=6a10fb05-fa0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:c9:79:96:a7:a8:09:65:fd:9b:e6:2b:4a:
3a:cf:8c:89:63:1c:e9:17:d2:86:d7:49:b2:95:79:
0e:73:e7:ca:e9:40:71:27:70:28:b7:e7:a8:fe:69:
5a:00:e5:1c:73:eb:47:a5:f1:3c:d2:fe:93:83:09:
72:f2:ed:89:75:73:1d:66:96:95:e7:72:50:cc:7c:
ba:86:3d:a9:0b:31:de:b3:4c:50:c3:11:67:2f:ed:
c7:80:aa:c0:78:f3:0a:4f:17:6b:5d:f5:87:b5:3a:
71:ee:48:97:ce:c7:43:f0:47:77:64:04:3e:cb:47:
3d:4a:be:f9:b8:7c:77:b7:34:5a:9b:20:66:82:7e:
ff:c1:e1:a8:98:f6:1e:40:15:12:4a:a4:4a:79:b0:
ac:a3:dc:91:b8:4a:50:59:c0:63:2f:12:92:32:c0:
f3:a2:d5:2a:24:8d:90:7f:fe:e3:9b:ef:80:b5:64:
48:f4:54:f8:12:46:5a:39:e8:ae:b2:70:db:49:04:
67:b2:f5:02:4c:87:4a:ee:1a:ca:27:b4:79:5d:bb:
35:66:7a:1a:84:76:83:0a:b7:10:a9:2b:fe:42:22:
68:ac:f7:62:86:77:af:4e:54:01:9a:28:86:a8:45:
fa:95:c9:32:6c:83:02:35:6a:b8:c8:b2:83:bd:74:
a2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F9:98:77:17:CF:3B:84:31:AA:C2:FF:66:03:3D:D4:E4:D4:6B:A3
X509v3 Authority Key Identifier:
keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:21:d6:d7:ef:47:0a:69:d6:83:d1:e9:ed:27:45:5c:a1:87:
81:53:14:8e:24:41:86:b2:ec:0b:7a:b1:df:5b:3b:9b:85:cc:
25:91:2a:ea:b1:46:cc:9d:09:d7:a1:79:72:79:6a:64:b0:2d:
2c:e7:90:62:22:51:c1:b4:d2:05:ca:ac:26:de:9a:25:af:6b:
09:26:53:d1:2d:f3:81:5a:5d:b8:3e:16:b9:62:9f:dc:cb:f1:
b0:7b:5b:9e:21:29:75:a7:bb:86:b4:cb:91:d0:a4:e3:be:3c:
69:1c:69:0e:97:3c:05:78:bc:67:c0:e2:f1:08:b8:47:80:18:
8e:ef:1b:46:ff:49:05:f2:77:07:f6:19:6a:0b:ec:00:20:8f:
f4:7d:61:cd:f6:ff:49:bd:a0:d3:ea:61:83:52:5f:66:47:8d:
42:18:fc:3b:5b:73:ba:53:b1:42:ca:38:30:e9:82:e8:27:de:
fd:1c:95:85:07:b1:44:9b:28:a2:0e:c5:47:28:de:6b:5f:99:
69:85:ef:5b:c8:13:66:3c:21:c2:24:3b:29:21:aa:ac:42:97:
ee:74:26:7d:37:61:90:36:53:49:e5:5a:a0:94:6a:2a:fa:17:
43:6a:65:b8:c4:0a:77:e5:76:d6:f5:6f:d8:30:b8:f8:f1:19:
9f:58:3b:a4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICD7UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTQ5QjFBRjExMC8GA1UEBRMoOUYxNzM4M0VCNjY3RTU0N0JBMDBDRkI3RjkxNEY0
Mjg0QzU4NDlDQzAeFw0yNjA1MjMwMDU1MzNaFw0yNjA1MjUwMDU1MzNaMBgxFjAU
BgNVBAMTDTZhMTBmYjA1LWZhMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwd8l5lqeoCWX9m+YrSjrPjIljHOkX0obXSbKVeQ5z58rpQHEncCi356j+
aVoA5Rxz60el8TzS/pODCXLy7Yl1cx1mlpXnclDMfLqGPakLMd6zTFDDEWcv7ceA
qsB48wpPF2td9Ye1OnHuSJfOx0PwR3dkBD7LRz1Kvvm4fHe3NFqbIGaCfv/B4aiY
9h5AFRJKpEp5sKyj3JG4SlBZwGMvEpIywPOi1SokjZB//uOb74C1ZEj0VPgSRlo5
6K6ycNtJBGey9QJMh0ruGsontHlduzVmehqEdoMKtxCpK/5CImis92KGd69OVAGa
KIaoRfqVyTJsgwI1arjIsoO9dKJfAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUhfmY
dxfPO4QxqsL/ZgM91OTUa6MwHwYDVR0jBBgwFoAUnxc4PrZn5Ue6AM+3+RT0KExY
ScwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0OUIxL0RGNzg4Qzk4NTYxMzExRTVCMUEwRTM2MEY4QUVBMjI4L254YzRQ
clpuNVVlNkFNLTMtUlQwS0V4WVNjdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL254YzRQclpuNVVlNkFNLTMtUlQwS0V4WVNjdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTQ5QjEvREY3ODhDOTg1NjEzMTFFNUIxQTBFMzYwRjhB
RUEyMjgvbnhjNFByWm41VWU2QU0tMy1SVDBLRXhZU2N3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBHIdbX70cKadaD0entJ0VcoYeBUxSO
JEGGsuwLerHfWzubhcwlkSrqsUbMnQnXoXlyeWpksC0s55BiIlHBtNIFyqwm3pol
r2sJJlPRLfOBWl24Pha5Yp/cy/Gwe1ueISl1p7uGtMuR0KTjvjxpHGkOlzwFeLxn
wOLxCLhHgBiO7xtG/0kF8ncH9hlqC+wAII/0fWHN9v9JvaDT6mGDUl9mR41CGPw7
W3O6U7FCyjgw6YLoJ979HJWFB7FEmyiiDsVHKN5rX5lphe9byBNmPCHCJDspIaqs
QpfudCZ9N2GQNlNJ5VqglGoq+hdDamW4xAp35XbW9W/YMLj48RmfWDuk
-----END CERTIFICATE-----
Generated at Sat May 23 03:48:23 2026 by rpki-client