Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
File: XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft (raw, json)
Hash identifier: XcEflY4jZ++MxWG0xPUX2mgTOuLGSNssD2D0dKYy1iA=
Subject key identifier: 03:F2:01:41:62:7F:6F:7D:F9:8A:55:83:F9:C8:70:FE:43:F0:CD:1F
Authority key identifier: 5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14
Certificate issuer: /CN=F36795C4AR/serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
Certificate serial: 0957
Authority info access: rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
Manifest number: 0956
Signing time: Wed 05 Nov 2025 01:30:39 +0000
Manifest this update: Wed 05 Nov 2025 01:30:38 +0000
Manifest next update: Fri 07 Nov 2025 01:30:38 +0000
Files and hashes: 1: XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl (hash: rwAzbeCi2f+zEt7m3lhsjqHkAhkqZfGWf3hmOfRfQjM=)
2: 85DEE92291EF11E9ABCCB07EF8AEA228.roa (hash: 3K2tDuP6LQooSlB5SsHZUahCN8ylMLHTNlp/RyDYHoc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2391 (0x957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36795C4AR, serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
Validity
Not Before: Nov 5 01:30:38 2025 GMT
Not After : Nov 7 01:30:38 2025 GMT
Subject: CN=690aa8bf-2a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b4:ea:5a:d2:8c:b6:21:f6:f4:26:0f:10:f9:
e3:bd:3d:37:aa:79:0b:25:e0:1b:12:d5:d8:25:1e:
d4:57:5d:64:74:db:ef:8c:50:98:3e:bf:23:d0:c4:
7e:b9:ca:9a:de:d3:d0:91:00:94:36:bf:cc:01:0b:
93:40:9b:95:9f:97:dd:71:c0:97:89:d0:95:d5:23:
25:e7:65:25:eb:2d:c9:71:ec:42:ab:e0:17:36:7e:
ac:08:22:0b:b5:3b:b9:ca:c1:77:33:35:07:93:1c:
76:d3:06:c8:b9:e9:73:c7:43:ba:0c:1c:4e:63:20:
9f:55:ba:ac:72:a1:3b:9e:75:0d:2d:85:6e:9a:50:
65:18:a0:db:ee:63:48:86:98:3a:28:d4:08:4e:2d:
05:6f:de:e9:ce:3d:99:42:4c:39:cf:e0:ff:0a:b5:
0e:02:da:7c:5a:30:45:1e:e3:06:40:c7:ba:66:44:
cd:d3:bd:ae:8a:4e:29:c4:58:3f:02:ef:9a:81:5a:
b3:0a:7b:bf:82:59:ed:c4:45:be:f7:3e:86:e9:07:
a3:ec:3b:71:b6:69:8a:0f:1f:7b:bf:82:75:e9:a8:
71:66:09:19:40:b4:44:a8:c7:5d:14:e4:e4:32:3c:
ea:bf:7e:ab:3e:d7:b1:3f:34:68:9a:20:f2:cd:01:
ec:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F2:01:41:62:7F:6F:7D:F9:8A:55:83:F9:C8:70:FE:43:F0:CD:1F
X509v3 Authority Key Identifier:
keyid:5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:76:0a:a5:f7:6b:2e:cc:da:80:8a:b1:00:1f:47:2b:01:9b:
b6:99:3e:25:c8:67:85:d6:19:7c:14:e3:88:51:5a:6a:00:32:
7e:5b:9f:63:52:35:69:e3:81:bf:0f:2e:66:d9:a4:ac:25:d1:
66:d6:2a:b5:0d:9c:5d:c0:b1:ac:ce:94:15:2f:56:eb:f0:99:
52:d2:e8:19:28:ec:d3:9a:c0:f6:a1:72:5c:f5:8e:39:15:aa:
d4:19:0c:44:d9:31:7a:78:5a:40:49:31:ff:54:68:a2:5a:61:
90:fe:69:74:0c:f5:36:a5:a1:43:46:fe:58:ec:9c:f0:e4:78:
c5:67:04:87:6a:26:77:bd:58:e5:ea:b4:a4:89:b2:00:5c:5d:
ad:a1:c7:30:27:60:d1:ca:7f:fb:9e:69:57:59:88:f0:21:a6:
0c:19:c4:a6:bb:42:85:17:4b:5b:6e:c7:ae:8d:f5:a0:3c:7f:
da:62:b6:e1:e3:89:fc:82:9d:f6:be:4d:36:49:7d:83:81:1e:
6d:c1:20:b1:4c:18:9f:36:ba:7c:f4:28:36:73:f1:0d:95:a1:
ff:cc:46:dd:1f:ac:7b:be:43:4e:8b:36:45:a9:cf:ad:c2:32:
c1:ee:64:a0:c7:8c:7c:f5:1c:2c:53:94:37:31:4f:1f:32:db:
62:73:79:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:55:50 2025 by rpki-client