
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
File: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft (raw, json)
Hash identifier: mC6mB5H27g/0A0d3yRipdw3ZnU1YQhHQgVfIh4diqbs=
Subject key identifier: 38:C5:16:CE:6B:91:EE:CD:9D:0C:83:37:DC:6F:61:68:91:2D:64:E0
Authority key identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
Certificate issuer: /CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Certificate serial: 0341
Authority info access: rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
Manifest number: 0340
Signing time: Fri 07 Nov 2025 05:26:18 +0000
Manifest this update: Fri 07 Nov 2025 05:26:18 +0000
Manifest next update: Sun 09 Nov 2025 05:26:18 +0000
Files and hashes: 1: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl (hash: ApIjeFri/JMKf9zo4A/tYoAEKNQL5xtH8JI6mwbUbuw=)
2: CC9C343441E311EEA3DA33544AD9E6FC.roa (hash: O2w06Y8bPWrlQlM0KiCR/CDJJh42Y1TIJDGWDlX/VL0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 09 Nov 2025 00:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 833 (0x341)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DE42DRI, serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Validity
Not Before: Nov 7 05:26:18 2025 GMT
Not After : Nov 9 05:26:18 2025 GMT
Subject: CN=690d82fa-51a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c0:6b:08:e1:e6:f9:b3:e9:dc:9b:f8:76:2f:
df:f1:e3:58:f2:83:11:ec:80:4f:e9:ad:d2:85:3c:
83:ef:4c:d3:eb:51:86:62:6c:82:82:1c:2e:94:de:
e5:fa:83:d7:5b:4b:88:70:87:ee:29:9b:a1:3f:2a:
38:f1:93:cd:1a:11:4f:ff:08:f0:f2:f4:59:1f:a0:
6d:06:44:d4:26:40:cb:02:7f:b1:90:7d:4d:70:23:
9a:5c:8f:72:4f:99:64:28:ba:2c:94:f3:7f:83:2d:
ee:5c:17:97:09:30:f0:80:99:a0:9c:38:12:5b:b0:
38:e5:38:51:5e:03:2a:5a:40:6d:3f:17:50:32:e5:
20:70:79:0c:21:7c:31:c2:7a:82:d5:ad:e8:58:b2:
dc:04:c4:eb:41:c6:31:58:79:2d:be:75:7b:f8:34:
f7:27:a0:74:53:15:6c:83:61:16:45:30:02:9e:79:
23:0b:ca:fe:f9:d5:05:b4:1c:d7:4b:df:40:d4:c5:
c5:2a:ed:f0:a4:8a:2b:6c:0a:7d:a0:f6:b9:56:31:
81:76:66:5b:5c:da:3b:87:6d:1d:87:f9:56:62:ec:
96:07:06:23:20:c8:6c:e1:cc:7c:fe:de:60:c7:86:
b2:f2:90:f7:5b:1d:b9:31:32:f5:17:95:2d:73:26:
b0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C5:16:CE:6B:91:EE:CD:9D:0C:83:37:DC:6F:61:68:91:2D:64:E0
X509v3 Authority Key Identifier:
keyid:9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:d7:1e:63:98:95:0e:50:b3:fb:19:15:ba:60:39:83:07:ef:
ae:5c:7e:53:c6:a4:43:cb:e3:bb:84:b8:4d:60:db:98:9f:b4:
72:0b:18:85:64:0d:e9:9f:51:23:d7:3b:26:7e:ea:f2:97:f2:
6e:c5:24:16:9f:d1:4d:a0:5e:36:20:d8:73:66:d6:94:5c:c5:
cb:0a:d3:cb:67:36:4b:b1:20:c4:88:39:32:f1:b3:75:22:af:
c4:23:04:32:af:fd:91:09:09:07:43:6b:d1:ad:d1:1b:0e:b4:
2a:c7:d2:7e:68:7e:45:40:d0:1b:51:6c:47:1b:9c:6b:87:27:
3c:5f:de:9b:d9:47:2a:47:a0:88:4b:c2:03:58:42:5a:e0:a3:
e7:a7:7d:d4:c2:1e:7e:f8:79:48:57:e4:97:2a:82:ca:88:da:
89:2a:be:f3:64:ae:5a:ab:75:d5:01:b4:b4:f7:82:02:5b:0d:
7b:38:a1:a5:73:39:58:c5:99:f1:e2:03:e0:ab:7d:d1:73:81:
04:11:ec:37:b5:f1:7d:23:6d:8d:e7:cd:bc:a4:72:dc:f7:cc:
8b:f6:9f:6f:49:8a:34:14:2e:08:25:89:6b:dd:89:21:99:9a:
4b:08:c1:66:e7:eb:fb:d3:aa:e5:ff:96:ca:72:42:db:84:d8:
d6:75:ec:7b
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REU0MkRSSTExMC8GA1UEBRMoOUQ4NURBRDAyRkMxNzdBNDBFOUI5MDcwMjM3MDZG
M0Y5Nzc0NERBMDAeFw0yNTExMDcwNTI2MThaFw0yNTExMDkwNTI2MThaMBgxFjAU
BgNVBAMTDTY5MGQ4MmZhLTUxYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDewGsI4eb5s+ncm/h2L9/x41jygxHsgE/prdKFPIPvTNPrUYZibIKCHC6U
3uX6g9dbS4hwh+4pm6E/Kjjxk80aEU//CPDy9FkfoG0GRNQmQMsCf7GQfU1wI5pc
j3JPmWQouiyU83+DLe5cF5cJMPCAmaCcOBJbsDjlOFFeAypaQG0/F1Ay5SBweQwh
fDHCeoLVrehYstwExOtBxjFYeS2+dXv4NPcnoHRTFWyDYRZFMAKeeSMLyv751QW0
HNdL30DUxcUq7fCkiitsCn2g9rlWMYF2Zltc2juHbR2H+VZi7JYHBiMgyGzhzHz+
3mDHhrLykPdbHbkxMvUXlS1zJrDLAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUOMUW
zmuR7s2dDIM33G9haJEtZOAwHwYDVR0jBBgwFoAUnYXa0C/Bd6QOm5BwI3BvP5d0
TaAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRFNDJEL0NDOUFBMEU2NDFEQTExRUVCMDNFQkUzNzRBRDlFNkZDL25ZWGEw
Q19CZDZRT201QndJM0J2UDVkMFRhQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L25ZWGEwQ19CZDZRT201QndJM0J2UDVkMFRhQS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2REU0MkQvQ0M5QUEwRTY0MURBMTFFRUIwM0VCRTM3NEFEOUU2
RkMvbllYYTBDX0JkNlFPbTVCd0kzQnZQNWQwVGFBLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBo1x5jmJUOULP7GRW6YDmDB++uXH5TxqRD
y+O7hLhNYNuYn7RyCxiFZA3pn1Ej1zsmfuryl/JuxSQWn9FNoF42INhzZtaUXMXL
CtPLZzZLsSDEiDky8bN1Iq/EIwQyr/2RCQkHQ2vRrdEbDrQqx9J+aH5FQNAbUWxH
G5xrhyc8X96b2UcqR6CIS8IDWEJa4KPnp33Uwh5++HlIV+SXKoLKiNqJKr7zZK5a
q3XVAbS094ICWw17OKGlczlYxZnx4gPgq33Rc4EEEew3tfF9I22N5828pHLc98yL
9p9vSYo0FC4IJYlr3YkhmZpLCMFm5+v706rl/5bKckLbhNjWdex7
-----END CERTIFICATE-----
Generated at Fri Nov 7 08:48:10 2025 by rpki-client