Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
File: hXm8J-c9eykQjr_zl_ts_VxrAkc.mft (raw, json)
Hash identifier: JiplShyn/eh4Oz/uKVqwCm0I8wthqdckTUOsPaWCqK4=
Subject key identifier: 71:44:65:C7:A5:F5:8A:E8:B4:5E:1D:F1:6D:EF:10:2F:F1:26:5E:F7
Authority key identifier: 85:79:BC:27:E7:3D:7B:29:10:8E:BF:F3:97:FB:6C:FD:5C:6B:02:47
Certificate issuer: /CN=F3675292AF/serialNumber=8579BC27E73D7B29108EBFF397FB6CFD5C6B0247
Certificate serial: 029F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
Manifest number: 029A
Signing time: Wed 05 Nov 2025 04:19:06 +0000
Manifest this update: Wed 05 Nov 2025 04:19:05 +0000
Manifest next update: Fri 07 Nov 2025 04:19:05 +0000
Files and hashes: 1: hXm8J-c9eykQjr_zl_ts_VxrAkc.crl (hash: LvxlnLIOla0J1/u4jub7MC+9C1Y8pPj5ut6rVzDL53k=)
2: 0145205ABE9F11EEAB4694AB775412E6.roa (hash: nCtysz82HWpQKRVxjrkp1CPdrS4qO3BX0cqzzKNO/pQ=)
3: AC3D4D08BE9E11EEA64FBFAA775412E6.roa (hash: WfYokYZnTAkyut9ZfwPk7g8ZUxso2I/ndS+zQRque/A=)
4: 6CE0579ABE9E11EEBC7C69AA775412E6.roa (hash: kSDEs7oP+jey7M4wMBUDf1oTjGdLGimVQ2c+G5EoTkc=)
5: D3C327DABE9E11EE993106AB775412E6.roa (hash: JBKixCSDBI+8M+eUfX+NbM+TcRDwKlbGQLGKTvvPJkw=)
6: 8F2451D0BE9E11EEBA8196AA775412E6.roa (hash: 4AAd/b+kE9JKp63Wlhwua7XjTGFImGjuMiypLHiKkR8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671 (0x29f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3675292AF, serialNumber=8579BC27E73D7B29108EBFF397FB6CFD5C6B0247
Validity
Not Before: Nov 5 04:19:05 2025 GMT
Not After : Nov 7 04:19:05 2025 GMT
Subject: CN=690ad039-7ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f8:86:98:f3:90:48:10:a4:15:c8:9a:a7:84:
f6:ad:62:72:94:ee:51:5d:4f:e9:a9:f4:3a:91:43:
d5:17:87:92:b6:b8:f0:17:b5:d7:b1:ee:d9:fa:a1:
e1:4d:e7:b0:8c:4c:16:da:c5:30:bf:27:d2:ef:62:
12:e7:cb:ed:0d:10:13:15:61:89:9f:f0:58:fc:bf:
0f:67:c6:17:27:4c:59:93:0d:85:7e:18:1a:ff:6a:
00:cf:50:38:e3:a8:52:25:70:5a:62:85:ae:39:24:
b1:7b:65:d4:30:9e:74:27:e2:d1:48:b0:ac:f7:86:
59:3b:64:5b:eb:40:25:6d:a5:87:21:da:40:86:16:
35:34:c4:fa:86:f1:30:5a:c4:58:4e:86:d5:3f:60:
83:bd:38:dd:55:f0:00:22:d9:81:7c:0a:bc:75:9a:
3d:7e:b9:f7:d4:11:cd:d2:3c:d1:27:19:81:0e:28:
57:8d:7c:25:9a:47:4b:a3:ef:7a:a4:5f:5d:e1:73:
ac:37:01:da:59:dd:a3:55:b8:3e:32:36:6c:3b:14:
73:da:78:7e:f2:41:81:03:7e:ee:e5:fa:c9:f4:ca:
76:f8:40:0d:c0:3c:4d:20:3f:ae:d4:c4:d6:c6:54:
68:2d:bf:fb:30:74:97:56:1f:29:22:87:d0:94:84:
5e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:44:65:C7:A5:F5:8A:E8:B4:5E:1D:F1:6D:EF:10:2F:F1:26:5E:F7
X509v3 Authority Key Identifier:
keyid:85:79:BC:27:E7:3D:7B:29:10:8E:BF:F3:97:FB:6C:FD:5C:6B:02:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:05:90:01:5f:98:45:d5:3b:f5:9c:0f:2a:e8:b1:9f:50:e7:
6c:eb:78:57:3c:2f:a8:a6:79:e0:8f:a3:8d:50:3a:d2:36:ac:
73:27:65:41:69:9c:cc:af:56:db:a0:10:be:a2:06:43:a9:53:
39:ff:52:56:a3:48:72:79:e1:10:0e:f5:d1:8e:15:39:10:af:
cb:72:a4:ca:20:0a:b9:2a:82:31:b1:88:38:eb:2c:04:e1:ca:
42:b1:4f:af:e3:bd:d6:a2:b8:c7:70:f0:f3:5f:5c:e8:98:97:
06:22:fd:42:73:49:53:ef:3f:54:55:40:1e:57:73:d9:06:32:
64:42:a1:e2:a5:97:1e:ac:73:3b:02:5b:02:a3:99:52:87:56:
f6:b4:e0:31:d8:6a:70:14:7e:0d:ee:bf:fa:07:f7:3b:cf:04:
04:4a:2e:ca:95:1a:e4:a4:71:d6:b2:04:64:38:dd:96:be:03:
d2:f4:d5:e0:70:47:49:09:e3:78:81:b4:9f:03:3d:4d:3c:62:
b3:fa:11:54:72:cd:2b:b3:d7:65:88:e9:40:4e:01:f4:c2:3a:
7d:bc:e5:bf:12:30:08:cd:10:0f:24:1d:73:03:01:2c:41:74:
66:9d:c8:f5:eb:86:59:d6:ec:23:7f:c1:79:e9:08:6e:56:56:
34:35:d5:54
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAp8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzUyOTJBRjExMC8GA1UEBRMoODU3OUJDMjdFNzNEN0IyOTEwOEVCRkYzOTdGQjZD
RkQ1QzZCMDI0NzAeFw0yNTExMDUwNDE5MDVaFw0yNTExMDcwNDE5MDVaMBgxFjAU
BgNVBAMTDTY5MGFkMDM5LTdlYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCg+IaY85BIEKQVyJqnhPatYnKU7lFdT+mp9DqRQ9UXh5K2uPAXtdex7tn6
oeFN57CMTBbaxTC/J9LvYhLny+0NEBMVYYmf8Fj8vw9nxhcnTFmTDYV+GBr/agDP
UDjjqFIlcFpiha45JLF7ZdQwnnQn4tFIsKz3hlk7ZFvrQCVtpYch2kCGFjU0xPqG
8TBaxFhOhtU/YIO9ON1V8AAi2YF8Crx1mj1+uffUEc3SPNEnGYEOKFeNfCWaR0uj
73qkX13hc6w3AdpZ3aNVuD4yNmw7FHPaeH7yQYEDfu7l+sn0ynb4QA3APE0gP67U
xNbGVGgtv/swdJdWHykih9CUhF4nAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUcURl
x6X1iui0Xh3xbe8QL/EmXvcwHwYDVR0jBBgwFoAUhXm8J+c9eykQjr/zl/ts/Vxr
AkcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc1MjkyLzI2NEQxN0ZFQkREQzExRUVCNDFFNDE0RDc3NTQxMkU2L2hYbThK
LWM5ZXlrUWpyX3psX3RzX1Z4ckFrYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hYbThKLWM5ZXlrUWpyX3psX3RzX1Z4ckFrYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzUyOTIvMjY0RDE3RkVCRERDMTFFRUI0MUU0MTRENzc1
NDEyRTYvaFhtOEotYzlleWtRanJfemxfdHNfVnhyQWtjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZBZABX5hF1Tv1nA8q6LGfUOds63hX
PC+opnngj6ONUDrSNqxzJ2VBaZzMr1bboBC+ogZDqVM5/1JWo0hyeeEQDvXRjhU5
EK/LcqTKIAq5KoIxsYg46ywE4cpCsU+v473WorjHcPDzX1zomJcGIv1Cc0lT7z9U
VUAeV3PZBjJkQqHipZcerHM7AlsCo5lSh1b2tOAx2GpwFH4N7r/6B/c7zwQESi7K
lRrkpHHWsgRkON2WvgPS9NXgcEdJCeN4gbSfAz1NPGKz+hFUcs0rs9dliOlATgH0
wjp9vOW/EjAIzRAPJB1zAwEsQXRmncj164ZZ1uwjf8F56QhuVlY0NdVU
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:41:29 2025 by rpki-client