Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
File: XTIRwmpetGVqxFtni0_0vyQECa4.mft (raw, json)
Hash identifier: YLkJ6wYa80R7+qX038LuFIYPiWzblDTSmCD6Aek/7HI=
Subject key identifier: D8:41:1B:5C:2F:3E:D1:E7:24:95:50:9B:EC:21:1C:54:7C:89:EF:9C
Authority key identifier: 5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE
Certificate issuer: /CN=F3625046AF/serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
Certificate serial: 01A3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
Manifest number: 01A2
Signing time: Tue 04 Nov 2025 05:56:52 +0000
Manifest this update: Tue 04 Nov 2025 05:56:43 +0000
Manifest next update: Thu 06 Nov 2025 05:56:43 +0000
Files and hashes: 1: XTIRwmpetGVqxFtni0_0vyQECa4.crl (hash: 9uB3rHpH7J6ETkrjh7nD8A0Hkvjs2CDyHCUNrKoqKEM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 05:56:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625046AF, serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
Validity
Not Before: Nov 4 05:56:43 2025 GMT
Not After : Nov 6 05:56:43 2025 GMT
Subject: CN=690995a4-2738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:79:ef:50:cd:9c:be:ff:f3:6e:88:6e:7e:
f0:e7:8c:b7:f6:9d:06:d9:b5:30:0c:ff:64:12:59:
cf:7d:09:e3:f1:f1:29:98:b7:ef:4f:d4:75:73:0a:
c5:66:57:a6:c1:ac:63:89:c0:bd:28:fa:f4:18:9d:
0b:fb:c4:a6:bd:c7:ed:dc:67:37:ee:5d:9d:af:8a:
43:aa:48:ed:8e:71:68:b0:4f:2f:59:de:7a:84:3f:
66:5e:a7:ef:90:7b:89:cd:bc:8e:e3:79:3b:b8:ae:
14:b6:aa:2f:83:b8:55:ed:f6:e9:e9:be:ef:d1:e4:
5d:99:71:1d:a6:2c:75:a0:dd:01:9a:9d:51:de:4c:
f1:b6:1e:e5:20:8a:8e:c5:3a:df:8a:06:7a:2e:65:
22:0b:41:24:24:a4:36:0e:34:ec:9d:d6:37:b3:bd:
83:e7:e2:f5:58:dd:cf:f2:87:60:89:ea:04:9e:25:
ad:dc:ee:55:c2:aa:d1:57:bb:2e:88:39:fc:d2:ca:
02:77:15:d7:ae:ad:08:bf:db:dd:62:12:2b:9d:e0:
22:2b:d6:3d:e1:e9:02:37:b9:1c:0c:24:e3:91:0d:
26:94:15:f1:5a:5e:b2:40:10:9a:2c:8f:d8:03:73:
49:8a:ad:96:51:8f:a2:05:9e:47:e1:51:88:8e:7d:
46:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:41:1B:5C:2F:3E:D1:E7:24:95:50:9B:EC:21:1C:54:7C:89:EF:9C
X509v3 Authority Key Identifier:
keyid:5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:a9:f8:fa:f7:94:87:31:9d:fe:fd:17:5e:20:fa:5f:03:4a:
c4:d9:c3:e1:0d:d5:cb:82:4d:f5:83:92:31:73:b3:c1:4d:d9:
99:d9:ef:46:13:41:d2:4f:7e:95:b3:14:2d:70:55:d6:3c:42:
8e:81:05:72:1a:de:09:22:c6:97:9e:5f:6f:c1:82:aa:22:11:
23:f9:77:0a:e6:e1:d7:3e:99:5d:4c:df:cf:bb:c7:05:2b:88:
56:16:03:2f:54:c4:2f:76:79:93:4b:c7:90:c5:74:cd:a3:11:
78:1f:dd:0e:61:cf:b8:be:33:92:e5:31:bb:ac:db:5b:fa:48:
1d:c7:30:80:68:81:18:ce:89:6d:2c:53:7a:e8:08:20:d6:e9:
0f:59:17:78:21:a5:a5:51:3a:24:20:03:ac:3e:52:22:30:cb:
08:34:73:7f:c6:d5:22:4c:43:c5:c6:e6:08:7e:6d:3a:3f:1e:
fb:56:cf:fd:ee:b3:94:1b:34:2a:8d:5c:fa:36:c4:82:06:f4:
0a:33:2c:ed:66:a4:97:24:54:f9:67:ca:36:2f:7a:2b:b2:bc:
dc:f5:ad:8b:5f:77:c8:60:5d:17:3b:df:44:48:69:bc:7b:07:
c7:59:2d:e4:11:dd:11:e5:9e:c8:d6:26:b5:49:fc:1c:a4:b8:
64:88:6a:c9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjUwNDZBRjExMC8GA1UEBRMoNUQzMjExQzI2QTVFQjQ2NTZBQzQ1QjY3OEI0RkY0
QkYyNDA0MDlBRTAeFw0yNTExMDQwNTU2NDNaFw0yNTExMDYwNTU2NDNaMBgxFjAU
BgNVBAMTDTY5MDk5NWE0LTI3MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+23nvUM2cvv/zbohufvDnjLf2nQbZtTAM/2QSWc99CePx8SmYt+9P1HVz
CsVmV6bBrGOJwL0o+vQYnQv7xKa9x+3cZzfuXZ2vikOqSO2OcWiwTy9Z3nqEP2Ze
p++Qe4nNvI7jeTu4rhS2qi+DuFXt9unpvu/R5F2ZcR2mLHWg3QGanVHeTPG2HuUg
io7FOt+KBnouZSILQSQkpDYONOyd1jezvYPn4vVY3c/yh2CJ6gSeJa3c7lXCqtFX
uy6IOfzSygJ3FdeurQi/291iEiud4CIr1j3h6QI3uRwMJOORDSaUFfFaXrJAEJos
j9gDc0mKrZZRj6IFnkfhUYiOfUYrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU2EEb
XC8+0ecklVCb7CEcVHyJ75wwHwYDVR0jBBgwFoAUXTIRwmpetGVqxFtni0/0vyQE
Ca4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI1MDQ2LzlCQzE5RTMwNzlDODExRUY5RTBBODU4Rjc2MkU5NTFBL1hUSVJ3
bXBldEdWcXhGdG5pMF8wdnlRRUNhNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hUSVJ3bXBldEdWcXhGdG5pMF8wdnlRRUNhNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjUwNDYvOUJDMTlFMzA3OUM4MTFFRjlFMEE4NThGNzYy
RTk1MUEvWFRJUndtcGV0R1ZxeEZ0bmkwXzB2eVFFQ2E0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDDqfj695SHMZ3+/RdeIPpfA0rE2cPh
DdXLgk31g5Ixc7PBTdmZ2e9GE0HST36VsxQtcFXWPEKOgQVyGt4JIsaXnl9vwYKq
IhEj+XcK5uHXPpldTN/Pu8cFK4hWFgMvVMQvdnmTS8eQxXTNoxF4H90OYc+4vjOS
5TG7rNtb+kgdxzCAaIEYzoltLFN66Agg1ukPWRd4IaWlUTokIAOsPlIiMMsINHN/
xtUiTEPFxuYIfm06Px77Vs/97rOUGzQqjVz6NsSCBvQKMyztZqSXJFT5Z8o2L3or
srzc9a2LX3fIYF0XO99ESGm8ewfHWS3kEd0R5Z7I1ia1SfwcpLhkiGrJ
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:26:26 2025 by rpki-client