Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
File: XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft (raw, json)
Hash identifier: UFFYV3O/2p6GR5PNN3EgzvjZwqw9wl+8EiXrGP+vFq4=
Subject key identifier: 35:20:23:CD:DB:2C:6B:37:92:E0:9D:3A:43:7A:7B:3B:F9:18:86:FD
Authority key identifier: 5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32
Certificate issuer: /CN=F3644DABAF/serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
Certificate serial: 04FB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
Manifest number: 04F9
Signing time: Wed 05 Nov 2025 03:01:21 +0000
Manifest this update: Wed 05 Nov 2025 03:01:20 +0000
Manifest next update: Fri 07 Nov 2025 03:01:20 +0000
Files and hashes: 1: XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl (hash: kZnSblLnlWg43OBG/sysenpFpke9d4Wl2FIsBeIekxE=)
2: 23D327BA3B9111EF8FF3E059762E951A.roa (hash: ZJ3xXOXKk7e28z2xIgECvNbu0qz58iXckPb6BX56yvQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1275 (0x4fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644DABAF, serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
Validity
Not Before: Nov 5 03:01:20 2025 GMT
Not After : Nov 7 03:01:20 2025 GMT
Subject: CN=690abe01-5551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:73:6f:6e:e7:a5:06:2b:16:1d:3d:6e:92:
a1:60:eb:3e:26:5a:2e:0e:df:78:7d:44:6b:59:6b:
02:a2:42:b2:57:82:9f:3c:57:0e:d1:be:50:d4:17:
62:71:c8:c1:d7:b6:31:16:2d:47:12:f0:69:e6:30:
93:a2:77:75:8e:d4:d8:78:ec:ff:db:63:83:d7:de:
41:b6:52:9a:da:03:6c:92:58:67:4d:8e:4e:fe:2e:
f7:49:2e:42:06:d0:9e:7a:68:5c:29:f9:2b:35:b2:
b6:0d:d1:4e:24:36:c4:6b:9b:a2:75:38:48:ab:5e:
21:a4:b6:42:e1:5f:51:86:2b:9e:0f:0b:76:90:b3:
6e:0f:e1:c2:b4:96:81:24:32:94:80:c4:04:e0:ad:
9d:8d:62:3e:32:2b:92:18:7a:83:9e:6f:4c:e0:66:
9b:cd:be:d3:61:bc:ee:31:d4:f7:78:ae:69:84:85:
3e:bf:5d:e1:10:8d:f6:bf:20:2b:d7:b4:53:ad:48:
6a:d5:a1:ed:1c:c3:ce:e6:8b:33:60:47:0d:1a:c9:
9a:2a:66:ac:14:d7:f9:82:e8:46:07:af:7d:a5:d9:
f9:69:4b:aa:3e:cb:ff:8e:1a:0c:40:23:60:eb:75:
11:43:0b:8e:b7:02:f4:33:93:0c:31:bc:f2:ef:cf:
55:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:20:23:CD:DB:2C:6B:37:92:E0:9D:3A:43:7A:7B:3B:F9:18:86:FD
X509v3 Authority Key Identifier:
keyid:5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:39:e2:cc:c2:64:6e:95:0c:d7:9f:d4:a2:59:d0:43:9b:17:
a1:1b:56:76:99:f4:9e:19:e4:73:ad:4c:e0:34:71:71:3b:e9:
7c:d8:59:39:72:a9:bf:6f:c8:da:42:04:58:f5:8c:a1:44:f6:
72:b1:7d:29:7b:c1:bc:33:fb:5a:cf:b6:b5:6d:b8:31:59:a3:
e6:4a:e7:a4:d0:2e:db:3d:f4:fa:ab:f8:28:af:91:3d:2b:c6:
d9:34:da:4c:c5:50:ed:18:50:9b:e7:bc:36:4c:83:19:42:55:
3c:c3:35:5b:3c:f4:a7:62:a8:41:3a:6e:0a:0d:0b:a2:e7:af:
e1:24:f1:16:51:58:8c:f7:85:3b:23:cf:ce:90:c7:da:9a:b3:
01:f3:96:50:e8:f4:c5:39:7f:32:07:92:e3:94:da:47:33:c0:
1f:b0:21:6f:4d:0f:56:7e:d6:e5:3b:b7:8b:63:4e:0d:38:ed:
bd:13:4e:d0:e4:23:67:c9:0e:ab:da:4c:cb:1e:dc:74:bb:d1:
91:a2:b5:51:df:9b:b5:b4:8b:80:1f:fc:0d:61:a5:ec:f6:93:
bb:d7:d8:44:39:45:60:8f:69:27:5e:72:eb:cc:e9:34:39:c9:
06:2d:8c:0c:9d:d8:4e:0c:a1:f4:44:a7:a3:94:f1:8c:80:3c:
e9:6c:1e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:34 2025 by rpki-client