Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
File: XabN45sUTEexNxp5v2LPbtykpzs.mft (raw, json)
Hash identifier: +DLYTxZER/vgXwwXejBJR5GNLSmqW8nomFxss7xRvps=
Subject key identifier: 09:FF:D1:98:73:9F:B6:0C:DB:FD:94:5B:A3:F0:31:C0:FA:09:89:44
Authority key identifier: 5D:A6:CD:E3:9B:14:4C:47:B1:37:1A:79:BF:62:CF:6E:DC:A4:A7:3B
Certificate issuer: /CN=F361174DAF/serialNumber=5DA6CDE39B144C47B1371A79BF62CF6EDCA4A73B
Certificate serial: 04DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
Manifest number: 04DA
Signing time: Wed 05 Nov 2025 03:05:37 +0000
Manifest this update: Wed 05 Nov 2025 03:05:36 +0000
Manifest next update: Fri 07 Nov 2025 03:05:36 +0000
Files and hashes: 1: XabN45sUTEexNxp5v2LPbtykpzs.crl (hash: RozBYue3lTG/LkmHFmzPUMByY++PPxUP6ZEFJWEXluQ=)
2: EFDD06EC090111EDBC15A4C3F1222468.roa (hash: mzBwRw/NsD0Kw5UC1+dnCe3jWxLCxwOLqnhj2973w4M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.crl
rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1244 (0x4dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361174DAF, serialNumber=5DA6CDE39B144C47B1371A79BF62CF6EDCA4A73B
Validity
Not Before: Nov 5 03:05:36 2025 GMT
Not After : Nov 7 03:05:36 2025 GMT
Subject: CN=690abf01-9e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:4f:a4:0f:cc:7b:2c:30:23:16:f4:c4:9d:
2b:9f:a5:32:ee:d2:a1:9d:2c:7b:bc:05:0d:fd:1b:
46:42:92:6f:3c:87:08:a7:d3:67:5b:5a:37:84:f0:
29:8c:51:86:6e:6b:a4:4f:41:20:32:da:c6:e4:24:
39:79:e8:fd:a2:65:b5:49:14:a3:a7:95:d4:be:24:
29:de:e1:d8:68:a3:19:77:d6:34:1a:0d:6d:88:26:
aa:dc:cc:81:0c:07:6e:e2:34:a2:cd:06:fe:42:c4:
7c:f6:54:ab:ae:5a:a8:22:74:18:84:c5:38:d1:8c:
34:0f:89:93:9e:16:85:5d:c5:ad:84:b5:7b:09:0f:
e8:b2:72:b7:c3:98:61:ba:26:ff:68:cf:57:61:e9:
2a:28:6f:d7:ae:a0:15:31:e3:d5:6d:75:f1:49:fa:
41:64:08:7a:0e:82:9e:72:27:ae:5a:dc:93:14:f2:
73:d8:e2:99:0b:5f:3a:60:46:d8:42:51:0c:2a:2f:
0a:3a:e9:1f:a5:b5:92:04:33:70:0a:e6:90:57:8d:
d0:8f:62:e2:53:e9:9a:e1:7e:49:95:e2:37:cf:53:
bb:7d:6a:e3:66:05:47:8f:33:c9:2c:f4:4a:4f:1f:
41:5f:6d:02:7b:43:44:84:c4:68:f9:99:5d:35:a8:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FF:D1:98:73:9F:B6:0C:DB:FD:94:5B:A3:F0:31:C0:FA:09:89:44
X509v3 Authority Key Identifier:
keyid:5D:A6:CD:E3:9B:14:4C:47:B1:37:1A:79:BF:62:CF:6E:DC:A4:A7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d2:88:f3:17:ab:5b:f0:37:3b:f4:ab:fb:e8:a3:5f:00:f3:
a9:8e:38:d5:a1:47:4e:f2:df:f3:05:e2:75:6e:9b:92:65:4a:
c1:4b:ac:aa:41:a3:98:aa:a3:e7:ee:06:3b:e9:bd:79:3d:77:
43:45:3d:37:fd:11:3e:c9:29:23:c7:0d:9e:9b:a7:1d:78:5d:
b5:a0:30:b3:20:30:5f:ae:58:d7:66:68:07:d3:29:7c:b3:79:
1a:38:ed:18:98:34:c6:a4:3b:98:72:74:54:b0:89:e2:4f:52:
92:24:5a:ed:a4:c8:17:11:d1:67:a3:25:15:13:e3:ba:96:f9:
b3:21:85:9e:c6:32:67:65:e6:d4:c7:4b:30:fa:4e:d0:b9:c5:
7f:bb:ae:a9:7b:76:0f:c4:5e:9d:d9:4d:a5:38:46:d5:ae:90:
7e:70:3f:d9:0e:42:45:c7:44:19:49:01:09:f2:84:df:12:9b:
fe:2d:64:77:ef:1f:d6:8a:6d:d3:92:08:43:3f:10:0f:6e:a2:
dc:a8:b7:96:c0:a7:5f:2c:96:5e:00:8a:a8:44:6a:03:61:ef:
02:51:6a:2c:17:e0:df:6b:f3:55:8d:be:65:45:b6:a7:f1:00:
f7:17:c1:64:10:7c:71:44:73:bd:af:44:b7:49:7d:f9:7a:2e:
50:24:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:20:58 2025 by rpki-client