Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
File: XudwaWdbdcoke_xc0zALF7WznDQ.mft (raw, json)
Hash identifier: oDZfNSQKIlLJLf1S4HNdN7vwztspH2z7C17k5y540no=
Subject key identifier: 46:56:DB:86:4F:E7:68:AE:5F:A0:75:FD:FD:BC:C3:6F:5F:D7:B6:63
Authority key identifier: 5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
Certificate issuer: /CN=F3646008AF/serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Certificate serial: 076B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
Manifest number: 076B
Signing time: Wed 05 Nov 2025 01:56:26 +0000
Manifest this update: Wed 05 Nov 2025 01:56:17 +0000
Manifest next update: Fri 07 Nov 2025 01:56:17 +0000
Files and hashes: 1: XudwaWdbdcoke_xc0zALF7WznDQ.crl (hash: O5S9GaKscEmRIjpgL7djLWj0thO9LB3Fuh9hsn67QV0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1899 (0x76b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3646008AF, serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Validity
Not Before: Nov 5 01:56:17 2025 GMT
Not After : Nov 7 01:56:17 2025 GMT
Subject: CN=690aaeca-4ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dd:d2:b5:01:02:a2:b4:a4:4d:0b:6a:c9:f5:
d9:46:d5:18:bf:19:68:10:4a:d5:2f:16:1f:d7:4d:
4b:14:05:b7:dd:49:e9:55:ac:01:e0:dc:16:f9:25:
09:02:f8:b1:9e:ad:89:9c:6d:57:18:9f:98:81:06:
dc:7a:f3:d7:e2:5d:07:89:24:4c:ee:ef:ab:a3:0d:
3d:d2:09:ad:eb:b6:c0:c7:86:da:2f:2e:44:93:6b:
75:16:1d:71:53:b3:74:67:78:67:da:23:18:62:57:
b4:09:d6:e5:2c:0a:f2:bb:bc:e6:6f:be:54:fc:9d:
54:14:49:6e:1f:20:1e:ba:de:1d:bf:47:17:95:6f:
8c:e3:ca:0c:59:07:8d:a4:4f:0e:c7:ee:0f:6b:2d:
6d:bb:a7:f5:26:e4:6b:5c:a6:b1:3b:4a:8d:df:d9:
bf:4c:cf:3c:d3:2a:a3:66:4e:bb:e5:ac:e7:8f:94:
26:14:80:af:13:1d:9d:14:8f:c5:4f:7d:0a:b0:6b:
33:57:77:60:6e:4b:46:8b:22:e5:da:b9:04:24:9f:
6c:60:08:94:82:34:7f:6a:23:3b:c2:1e:eb:e3:93:
c3:cb:18:f6:5d:b6:76:dd:5d:54:90:da:52:0e:63:
f3:7c:10:d9:67:09:ca:e5:22:0d:7b:92:81:f3:66:
c8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:56:DB:86:4F:E7:68:AE:5F:A0:75:FD:FD:BC:C3:6F:5F:D7:B6:63
X509v3 Authority Key Identifier:
keyid:5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6f:92:d8:1b:46:10:2d:21:0c:ac:ab:52:81:7d:c5:88:0d:
a6:9b:03:55:68:be:e2:bd:ed:69:44:d2:59:ee:7c:6e:af:c6:
31:f2:f8:b0:83:bf:dd:c3:7b:4e:53:a4:7d:d2:6b:5e:45:51:
2c:e7:04:b8:75:92:d4:f6:63:15:ea:db:f8:9c:f3:d2:69:01:
86:9e:80:f9:03:d0:50:4f:51:68:6e:96:1e:3a:05:82:34:1a:
b4:09:f1:7f:28:89:21:9f:bc:19:82:48:8a:74:a7:5d:0f:5f:
fd:f2:f6:16:ae:07:cb:30:14:c2:78:47:bc:c9:bc:0f:9f:57:
54:06:87:db:50:08:62:28:a7:96:4a:9c:52:42:3c:46:60:8d:
75:23:b5:a1:fb:b8:a5:b8:c1:03:b6:7f:a4:d9:6a:71:03:41:
e8:3f:7b:0a:fd:18:f6:1b:b1:5e:81:e0:6a:d9:5f:35:ca:bd:
2a:03:99:c2:15:c3:0e:55:38:5c:91:e8:70:02:97:00:a5:3e:
53:46:85:81:24:d0:c2:24:0e:68:c5:ea:25:20:0e:c8:56:72:
44:8a:c1:db:6f:74:a1:1b:4f:50:7d:ba:7a:ba:30:41:28:56:
e0:17:46:6a:ac:e2:4d:36:7e:ec:d3:d2:85:52:2f:bc:5c:e1:
e3:88:24:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:41:24 2025 by rpki-client