
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
File: XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft (raw, json)
Hash identifier: BrCuUmcQBPnuThq5+MI0/gPVFUZ+HsxeS0iWWu38/uw=
Subject key identifier: 71:4D:B8:5A:6E:7A:68:A6:4A:67:69:DB:96:10:26:40:EF:FD:68:54
Authority key identifier: 5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
Certificate issuer: /CN=F3678967AF/serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Certificate serial: 0837
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
Manifest number: 0832
Signing time: Wed 05 Nov 2025 01:45:22 +0000
Manifest this update: Wed 05 Nov 2025 01:45:21 +0000
Manifest next update: Fri 07 Nov 2025 01:45:21 +0000
Files and hashes: 1: XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl (hash: hHUu8AMXlYd4Gd0y42HgavtyI1+E6w2OUNQuv/gGn2M=)
2: 420B22A27D0111F0BA56A0A5DAE4EC9C.roa (hash: FgbgmTnolN1lRJKNhlZr9zZr69rYAV0zr0aJY9PwsCo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2103 (0x837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3678967AF, serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Validity
Not Before: Nov 5 01:45:21 2025 GMT
Not After : Nov 7 01:45:21 2025 GMT
Subject: CN=690aac32-5584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f2:a0:3b:65:6b:7c:8b:58:db:ff:2a:b5:d5:
26:8d:dd:0d:c2:99:10:55:84:85:be:f5:04:cf:75:
1b:ae:df:4e:52:73:7e:6b:ba:32:55:7e:c6:33:05:
ac:ab:2c:ad:ce:5c:d4:70:0f:3f:29:e0:e5:84:74:
79:c5:de:d1:44:c1:7a:ab:6b:e4:2c:5d:be:fc:30:
45:ef:07:44:32:3a:9f:c9:39:ea:89:4f:cf:39:de:
57:1c:9e:77:c3:e3:cf:fb:82:39:03:89:1f:50:b0:
37:43:a6:15:eb:3b:d6:72:72:8e:e1:c5:77:09:29:
07:82:a1:b7:8f:49:98:6f:ef:5f:f1:2f:04:b0:d1:
50:66:18:d2:3c:cc:3e:da:06:30:94:f0:62:88:c9:
2f:42:52:5a:57:d9:39:f1:45:59:53:5c:9a:c2:8b:
52:4e:bd:22:8d:ab:15:2e:fb:c6:0c:9f:68:05:66:
35:c9:8b:ca:56:22:01:e0:04:dd:2f:f7:80:9a:4f:
61:a6:bf:1e:80:c5:a0:8a:3a:f4:bc:36:f7:01:a6:
7f:f2:84:83:c3:5d:a7:a5:4b:49:28:78:bc:8a:74:
2e:92:5c:0f:0b:9a:9e:a4:47:1f:9f:fb:1b:d6:df:
e1:de:c8:be:9d:44:40:87:77:ad:db:92:39:3f:9f:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4D:B8:5A:6E:7A:68:A6:4A:67:69:DB:96:10:26:40:EF:FD:68:54
X509v3 Authority Key Identifier:
keyid:5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:90:ca:8d:4f:ea:4b:7a:2e:b2:46:a1:3a:92:88:ab:8a:01:
08:39:aa:11:9f:5f:c6:6b:18:0b:16:d8:ad:ee:67:b2:a7:29:
55:c1:b1:41:3f:a9:71:a3:a7:b4:d2:5b:1c:04:9e:97:1d:b8:
a3:73:a4:47:0c:8d:cf:5c:a1:d6:c2:6f:c5:e9:09:05:0f:7d:
a3:07:8f:de:e3:be:17:e0:de:1c:5e:cf:1a:fb:a4:18:7e:cf:
6d:01:2a:f1:9b:a9:46:9f:ec:77:01:66:6f:e4:a9:7b:18:76:
e4:45:b4:26:3e:6e:c2:72:df:ec:4a:ae:d5:ed:0d:68:d2:e1:
30:71:3f:eb:14:58:ef:70:ef:37:e1:d0:79:26:4d:0a:03:d5:
40:a6:9c:98:42:3b:ec:74:47:54:18:c0:57:62:3d:89:43:dd:
bf:1b:15:d3:84:78:19:1c:0e:27:f7:c0:7b:64:80:37:8f:fb:
41:e8:76:f8:a9:0f:f2:3e:2a:d7:28:dc:58:e0:d1:9e:e0:9c:
bb:d5:26:16:fe:97:31:da:62:59:06:ff:d9:0b:94:03:f0:26:
0a:c5:b8:be:21:52:59:2a:5d:0d:0d:82:cf:24:c8:0d:a8:84:
f6:cc:f4:ae:a5:62:d2:5a:3f:15:81:96:04:ce:b7:ed:e3:fb:
98:cb:95:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:28:12 2025 by rpki-client