Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.mft
File: XiJnU4QNZLrrAjtZQWyZHzl3Hvw.mft (raw, json)
Hash identifier: gDs39G4C/EX43hRHEB7Ad3T+ZjJrCg9bzkuR/MDeOqU=
Subject key identifier: 29:FC:44:00:8D:32:32:55:CC:85:81:4D:3A:38:4C:4D:3C:1D:70:3A
Authority key identifier: 5E:22:67:53:84:0D:64:BA:EB:02:3B:59:41:6C:99:1F:39:77:1E:FC
Certificate issuer: /CN=F36539AEAF/serialNumber=5E226753840D64BAEB023B59416C991F39771EFC
Certificate serial: 01AB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.mft
Manifest number: 01AA
Signing time: Wed 05 Nov 2025 04:58:12 +0000
Manifest this update: Wed 05 Nov 2025 04:58:09 +0000
Manifest next update: Fri 07 Nov 2025 04:58:09 +0000
Files and hashes: 1: XiJnU4QNZLrrAjtZQWyZHzl3Hvw.crl (hash: b7vIgm39BitexgCU3PuvFSFitQRlgqeUIM/YXs3J04U=)
2: 653C9AA074DB11EFBADDB69E762E951A.roa (hash: 29Tl1qn/Uain4MhwRocZy2PFbVTKXBbVbDJYu8ZXsyM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.mft
rsync://rpki.afrinic.net/repository/afrinic/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36539AEAF, serialNumber=5E226753840D64BAEB023B59416C991F39771EFC
Validity
Not Before: Nov 5 04:58:09 2025 GMT
Not After : Nov 7 04:58:09 2025 GMT
Subject: CN=690ad964-fe4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:28:ee:5b:43:22:88:f3:c0:2c:3f:aa:60:
01:98:0b:7d:78:af:91:f7:48:63:6e:ae:99:f0:ae:
be:55:46:4e:68:7e:70:e2:d3:d5:6c:c8:86:58:6e:
8f:e9:d8:41:2e:03:6b:6b:1c:e4:e1:fa:f1:99:d9:
a4:20:cb:fd:5d:21:24:7d:01:67:d4:1b:98:09:5f:
71:10:0d:46:b5:f5:45:1c:39:2a:79:17:e2:20:c4:
14:91:24:02:07:74:09:f4:8b:92:5f:03:ec:9b:64:
60:0c:37:f4:92:55:a8:a7:b2:40:de:fe:f4:fd:0c:
16:33:13:fe:8e:2d:8e:69:c9:fa:a0:49:c6:8a:84:
78:b3:46:3f:c7:2f:2b:81:1e:f6:a6:91:29:4d:aa:
70:41:28:a9:4d:d1:8b:c1:3a:77:79:58:9a:b7:ac:
24:bf:c6:f9:8d:1b:dd:4f:5a:fe:a3:13:28:49:7d:
1f:04:a0:28:9f:5d:ec:67:c1:33:07:41:95:08:3d:
7f:0b:1e:3b:37:9c:a7:af:6f:e4:c7:b8:f7:26:be:
09:07:58:b8:f0:a0:d5:b6:65:2b:18:31:89:3f:b9:
f6:f1:3c:6a:73:3d:9e:0d:5e:c6:81:34:21:df:03:
64:2d:9a:9a:75:42:83:3c:3f:02:90:9b:54:88:b9:
45:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FC:44:00:8D:32:32:55:CC:85:81:4D:3A:38:4C:4D:3C:1D:70:3A
X509v3 Authority Key Identifier:
keyid:5E:22:67:53:84:0D:64:BA:EB:02:3B:59:41:6C:99:1F:39:77:1E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:90:85:73:f7:41:94:41:0e:72:43:a1:2c:7f:91:e0:18:41:
64:dc:dd:a6:ec:c8:2d:4a:67:2a:77:17:b3:0b:d7:35:1b:2b:
23:e8:a5:b6:66:c7:e1:ea:00:a5:5b:04:ae:b1:1b:d5:26:0b:
d6:54:d3:8b:98:e3:c4:b8:62:61:49:28:35:fc:e6:d6:c6:e3:
12:64:89:07:d1:27:f1:94:f0:41:c9:1e:39:5b:33:52:0c:58:
68:ca:53:a5:17:90:d4:7c:ec:d6:d9:b2:41:3f:17:1f:ab:2a:
75:f3:7c:91:92:59:58:37:28:4f:89:50:ab:d2:f0:85:70:ea:
7e:a2:17:ad:83:e9:e5:d1:b3:da:bc:a3:3a:d9:4e:4a:09:52:
6f:b9:55:62:bc:1c:49:bf:5d:ca:36:ed:51:f4:fc:c6:0e:f5:
c3:7a:64:d3:58:0d:9b:60:e0:9a:a9:b6:7f:a4:95:cc:34:36:
c8:1e:f1:2d:30:7e:4d:8c:a2:4b:db:64:71:12:a0:58:39:60:
29:96:bb:63:46:33:3d:d7:4a:f4:0b:55:b2:7c:13:9a:16:dd:
19:2a:86:1d:59:9b:6a:86:8a:1b:a2:73:5b:d3:3e:9c:8d:c5:
cc:9e:b3:04:67:5f:31:65:b9:ec:18:53:fe:f6:3a:23:6a:9d:
d9:14:96:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:24:30 2025 by rpki-client