Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
File: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft (raw, json)
Hash identifier: 6DndSn+ei/y0c5XU+Dxkj3gVZvJ+8e4kTxm8BZZTtX8=
Subject key identifier: CD:8A:44:0A:8A:5E:94:29:40:60:79:0B:6C:61:B7:20:3B:D0:21:AA
Authority key identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
Certificate issuer: /CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Certificate serial: 030D
Authority info access: rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
Manifest number: 030C
Signing time: Wed 17 Sep 2025 03:43:56 +0000
Manifest this update: Wed 17 Sep 2025 03:43:55 +0000
Manifest next update: Fri 19 Sep 2025 03:43:55 +0000
Files and hashes: 1: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl (hash: tDCg7eX2ka/sGcOlhT1JMUjjfGEuyv9Pt2lzmML5omM=)
2: CC9C343441E311EEA3DA33544AD9E6FC.roa (hash: O2w06Y8bPWrlQlM0KiCR/CDJJh42Y1TIJDGWDlX/VL0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 03:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 781 (0x30d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DE42DRI, serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Validity
Not Before: Sep 17 03:43:55 2025 GMT
Not After : Sep 19 03:43:55 2025 GMT
Subject: CN=68ca2e7c-f742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:1a:45:96:5a:6f:70:98:d1:e4:f7:42:ea:
0b:8b:08:fa:e4:a3:84:a0:c9:aa:4c:1d:51:96:68:
04:96:47:66:ee:82:ba:c4:36:ed:a9:84:cc:7a:5c:
98:8d:ae:29:e0:64:7b:17:de:1a:a3:2d:db:f7:5c:
29:a1:a7:4a:31:5c:8d:96:87:91:f8:7b:61:9b:ef:
f7:9e:0a:9e:3d:0c:71:7d:91:f6:f8:5e:d3:a3:02:
e9:ba:c0:cc:96:eb:00:4f:83:c7:6e:f6:73:31:d2:
35:77:37:42:6d:d2:ae:29:a0:8a:68:ee:45:bb:4b:
79:86:c1:4f:a8:cb:6d:e2:ec:a0:66:95:15:77:ee:
20:7c:b6:52:f0:e8:37:6d:68:17:d6:c3:3b:ad:08:
4e:d5:f3:fd:b8:5d:95:2d:b7:f4:5b:01:72:39:50:
56:fc:85:b5:84:f0:f4:89:77:d8:22:e6:7e:2a:03:
6f:03:d1:41:14:2c:17:a8:10:ef:f7:5d:2d:56:d2:
b8:0f:d9:7d:23:3c:e1:3b:25:35:10:f5:fc:91:b5:
25:b2:81:d3:6c:28:8f:8c:af:b4:68:c6:be:94:26:
29:3c:c5:aa:3b:7b:2a:ef:dc:65:34:5b:ce:f7:58:
4e:6f:ad:ac:9a:f9:13:6c:a5:10:b5:da:dd:39:53:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8A:44:0A:8A:5E:94:29:40:60:79:0B:6C:61:B7:20:3B:D0:21:AA
X509v3 Authority Key Identifier:
keyid:9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:57:76:ac:cd:8d:19:cd:75:af:1e:b7:06:ad:67:b9:9c:dd:
cf:b2:62:16:42:a5:40:6e:56:47:69:3b:fa:0f:9a:5e:17:87:
85:60:da:27:c0:69:ca:72:8e:4e:a7:b2:da:0d:86:67:5f:e8:
09:d0:84:0f:61:dd:13:4a:56:e3:77:17:53:cf:45:c9:a9:bf:
1a:4d:41:0f:32:b2:c5:b7:c6:ef:0b:a1:6e:c2:0a:21:f7:cd:
e8:cd:71:8a:29:9c:d0:6e:c6:d3:e4:04:82:a4:3c:64:00:ce:
f4:e9:36:12:ee:24:44:ce:36:93:44:52:d2:79:4f:4e:bd:60:
b3:9d:bb:34:93:a9:e1:a1:aa:3b:86:ff:c2:cc:d2:da:25:06:
18:fd:b7:ea:68:d3:9c:c4:1b:b0:2b:a4:f2:ce:c2:2a:a1:e1:
ff:25:35:a4:1d:dd:89:57:ca:5c:72:13:0e:f6:19:f3:26:28:
ef:e9:1f:00:48:40:de:43:0c:e9:dc:d1:f2:97:39:c2:6a:d9:
73:e8:62:8c:02:f0:e5:08:21:41:0c:17:92:5e:5f:64:36:a6:
64:f1:9f:fc:a7:e7:ee:58:9c:3e:8a:8a:9f:49:31:d1:f0:c2:
38:0a:86:68:19:6f:44:f0:5d:14:80:de:8d:0a:ff:bc:66:ea:
d9:28:8d:66
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REU0MkRSSTExMC8GA1UEBRMoOUQ4NURBRDAyRkMxNzdBNDBFOUI5MDcwMjM3MDZG
M0Y5Nzc0NERBMDAeFw0yNTA5MTcwMzQzNTVaFw0yNTA5MTkwMzQzNTVaMBgxFjAU
BgNVBAMTDTY4Y2EyZTdjLWY3NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDABRpFllpvcJjR5PdC6guLCPrko4SgyapMHVGWaASWR2bugrrENu2phMx6
XJiNringZHsX3hqjLdv3XCmhp0oxXI2Wh5H4e2Gb7/eeCp49DHF9kfb4XtOjAum6
wMyW6wBPg8du9nMx0jV3N0Jt0q4poIpo7kW7S3mGwU+oy23i7KBmlRV37iB8tlLw
6DdtaBfWwzutCE7V8/24XZUtt/RbAXI5UFb8hbWE8PSJd9gi5n4qA28D0UEULBeo
EO/3XS1W0rgP2X0jPOE7JTUQ9fyRtSWygdNsKI+Mr7Roxr6UJik8xao7eyrv3GU0
W873WE5vraya+RNspRC12t05U+9PAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUzYpE
CopelClAYHkLbGG3IDvQIaowHwYDVR0jBBgwFoAUnYXa0C/Bd6QOm5BwI3BvP5d0
TaAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRFNDJEL0NDOUFBMEU2NDFEQTExRUVCMDNFQkUzNzRBRDlFNkZDL25ZWGEw
Q19CZDZRT201QndJM0J2UDVkMFRhQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L25ZWGEwQ19CZDZRT201QndJM0J2UDVkMFRhQS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2REU0MkQvQ0M5QUEwRTY0MURBMTFFRUIwM0VCRTM3NEFEOUU2
RkMvbllYYTBDX0JkNlFPbTVCd0kzQnZQNWQwVGFBLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCV3aszY0ZzXWvHrcGrWe5nN3PsmIWQqVA
blZHaTv6D5peF4eFYNonwGnKco5Op7LaDYZnX+gJ0IQPYd0TSlbjdxdTz0XJqb8a
TUEPMrLFt8bvC6Fuwgoh983ozXGKKZzQbsbT5ASCpDxkAM706TYS7iREzjaTRFLS
eU9OvWCznbs0k6nhoao7hv/CzNLaJQYY/bfqaNOcxBuwK6TyzsIqoeH/JTWkHd2J
V8pcchMO9hnzJijv6R8ASEDeQwzp3NHylznCatlz6GKMAvDlCCFBDBeSXl9kNqZk
8Z/8p+fuWJw+ioqfSTHR8MI4CoZoGW9E8F0UgN6NCv+8ZurZKI1m
-----END CERTIFICATE-----
Generated at Wed Sep 17 18:51:56 2025 by rpki-client