Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
File: xaUP22PDxb0fR0h14JTxitF-H5Y.mft (raw, json)
Hash identifier: AYtNBa6W1lfxxphyGqISArY3MLYgMLN2X9GdNxbVlhc=
Subject key identifier: 19:A8:7C:B3:3B:C2:88:EC:D8:A7:F5:01:98:DA:48:08:00:A7:F4:78
Authority key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Certificate issuer: /CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Certificate serial: 02CE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
Manifest number: 02CD
Signing time: Wed 05 Nov 2025 04:14:26 +0000
Manifest this update: Wed 05 Nov 2025 04:14:25 +0000
Manifest next update: Fri 07 Nov 2025 04:14:25 +0000
Files and hashes: 1: xaUP22PDxb0fR0h14JTxitF-H5Y.crl (hash: nMAWPMGE4Zwob/f2ga7PC66QesqKUGXjU4Alxu8MtNE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718 (0x2ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365F7E8AF, serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Validity
Not Before: Nov 5 04:14:25 2025 GMT
Not After : Nov 7 04:14:25 2025 GMT
Subject: CN=690acf22-03f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f9:21:6e:a1:0d:14:c6:b0:bc:fe:7c:97:9b:
6d:21:d9:f4:cf:dd:43:60:3d:8f:9f:e0:62:7a:f1:
30:96:6e:0a:c9:2c:23:ad:12:db:6f:1c:21:ca:e0:
86:ba:a4:6e:7e:a0:0e:cf:d4:84:4b:eb:d8:bc:7e:
96:87:f7:94:bd:47:bb:90:3d:7c:2f:46:e5:56:16:
13:68:38:01:e9:d9:9d:1c:9e:1c:e0:35:a7:f7:5e:
25:67:51:12:fc:ee:13:6e:38:b2:7e:fc:f2:37:60:
cc:f6:92:60:c3:c3:ce:60:4b:f4:13:65:60:f4:62:
39:31:3f:11:7b:82:be:74:21:52:40:a7:ac:4c:9b:
7b:25:c8:6d:a2:51:4e:66:ca:f8:80:a7:c2:0b:eb:
91:15:28:12:48:49:b2:65:20:a4:d0:05:4b:71:02:
51:94:42:1c:24:79:b8:ec:4d:61:c8:9b:b8:e8:ac:
ac:4d:ec:bd:bf:61:2f:5e:ad:1c:66:4c:c2:61:36:
7a:e5:88:51:2d:f9:4e:96:0b:a7:de:bb:32:04:87:
e2:b9:ef:b1:23:27:47:bc:bf:c5:0d:28:81:38:eb:
ef:61:60:91:bd:62:76:8c:b8:32:e9:ac:26:da:57:
29:b4:b0:f9:3a:0e:25:84:df:5d:72:e6:56:ea:92:
65:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A8:7C:B3:3B:C2:88:EC:D8:A7:F5:01:98:DA:48:08:00:A7:F4:78
X509v3 Authority Key Identifier:
keyid:C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:69:11:09:61:98:b2:5a:d0:9a:14:3a:ce:1e:bf:a0:f1:eb:
3e:df:c3:0d:7d:c3:c2:f2:f5:64:8e:5a:43:20:28:82:b2:89:
7a:6d:74:5b:bb:de:78:1f:52:6f:b9:f2:bc:de:eb:12:3c:8d:
dd:38:17:cd:be:dd:6c:ad:05:d3:ed:30:76:9a:c8:9d:f8:dc:
42:5a:da:35:68:d1:72:49:75:03:4c:6f:40:23:21:b5:30:2f:
72:fd:98:9c:a3:c0:fa:bc:c6:6d:9b:a2:53:00:30:d9:75:b2:
3c:ac:9b:8a:18:35:67:d6:a9:e5:d4:04:f0:0c:9a:f3:e3:ec:
f4:b0:0a:07:ea:9f:2f:7f:84:eb:f4:a2:0b:c4:5f:7b:ae:c4:
ea:d3:01:2d:08:83:15:04:54:97:58:1f:a1:34:3a:6c:55:64:
e4:81:7d:fd:e1:7b:3b:d5:78:8f:b6:6c:49:4f:5a:98:fc:c5:
68:69:18:b0:ab:be:1c:39:f6:5d:c5:de:0e:2e:ff:c9:e0:38:
88:e8:a8:7e:9b:ef:82:8f:aa:7f:e6:af:66:d1:8b:da:23:5a:
01:e9:a8:fd:15:01:39:bd:bf:a8:ba:eb:b0:b9:ec:0a:5c:82:
b4:b1:4e:95:87:1a:ca:44:31:a9:b2:aa:ea:71:d2:9e:64:20:
3e:3a:99:b2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUY3RThBRjExMC8GA1UEBRMoQzVBNTBGREI2M0MzQzVCRDFGNDc0ODc1RTA5NEYx
OEFEMTdFMUY5NjAeFw0yNTExMDUwNDE0MjVaFw0yNTExMDcwNDE0MjVaMBgxFjAU
BgNVBAMTDTY5MGFjZjIyLTAzZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDS+SFuoQ0UxrC8/nyXm20h2fTP3UNgPY+f4GJ68TCWbgrJLCOtEttvHCHK
4Ia6pG5+oA7P1IRL69i8fpaH95S9R7uQPXwvRuVWFhNoOAHp2Z0cnhzgNaf3XiVn
URL87hNuOLJ+/PI3YMz2kmDDw85gS/QTZWD0YjkxPxF7gr50IVJAp6xMm3slyG2i
UU5myviAp8IL65EVKBJISbJlIKTQBUtxAlGUQhwkebjsTWHIm7jorKxN7L2/YS9e
rRxmTMJhNnrliFEt+U6WC6feuzIEh+K577EjJ0e8v8UNKIE46+9hYJG9YnaMuDLp
rCbaVym0sPk6DiWE311y5lbqkmUvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUGah8
szvCiOzYp/UBmNpICACn9HgwHwYDVR0jBBgwFoAUxaUP22PDxb0fR0h14JTxitF+
H5YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVGN0U4L0Q4NjgyMTEwOTZDQTExRUVBMDFCREE3M0QyNUJFNDY1L3hhVVAy
MlBEeGIwZlIwaDE0SlR4aXRGLUg1WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3hhVVAyMlBEeGIwZlIwaDE0SlR4aXRGLUg1WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUY3RTgvRDg2ODIxMTA5NkNBMTFFRUEwMUJEQTczRDI1
QkU0NjUveGFVUDIyUER4YjBmUjBoMTRKVHhpdEYtSDVZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCeaREJYZiyWtCaFDrOHr+g8es+38MN
fcPC8vVkjlpDICiCsol6bXRbu954H1JvufK83usSPI3dOBfNvt1srQXT7TB2msid
+NxCWto1aNFySXUDTG9AIyG1MC9y/Zico8D6vMZtm6JTADDZdbI8rJuKGDVn1qnl
1ATwDJrz4+z0sAoH6p8vf4Tr9KILxF97rsTq0wEtCIMVBFSXWB+hNDpsVWTkgX39
4Xs71XiPtmxJT1qY/MVoaRiwq74cOfZdxd4OLv/J4DiI6Kh+m++Cj6p/5q9m0Yva
I1oB6aj9FQE5vb+ouuuwuewKXIK0sU6VhxrKRDGpsqrqcdKeZCA+Opmy
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:03:25 2025 by rpki-client