Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
File: XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft (raw, json)
Hash identifier: KoYJzGqJFPuLiYc6Pi3xe5YsZwCnOWEIyWQHGQhRIys=
Subject key identifier: FB:02:1E:DF:19:FB:EC:31:7A:9D:6A:03:BB:68:CD:39:E2:9D:89:9D
Authority key identifier: 5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF
Certificate issuer: /CN=F3682615AF/serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
Certificate serial: 04B7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
Manifest number: 04B5
Signing time: Wed 05 Nov 2025 03:08:27 +0000
Manifest this update: Wed 05 Nov 2025 03:08:26 +0000
Manifest next update: Fri 07 Nov 2025 03:08:26 +0000
Files and hashes: 1: XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl (hash: M7hZ5Ot4tnv+ietu4PQLQ6WN7BEkbXFdJ0hqqDzz4hI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1207 (0x4b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682615AF, serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
Validity
Not Before: Nov 5 03:08:26 2025 GMT
Not After : Nov 7 03:08:26 2025 GMT
Subject: CN=690abfab-09d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2d:31:77:d6:86:f3:b2:71:cc:f4:69:54:1c:
e1:25:c4:41:e9:6d:ca:31:35:44:37:55:8d:91:4c:
47:b9:5d:72:f5:55:aa:d5:32:04:46:f7:60:b9:e8:
4a:f7:3f:6a:0a:53:d4:97:92:53:fd:4f:5e:f7:81:
33:c1:92:76:4e:5c:45:f0:ac:f1:5f:a0:ea:e5:92:
82:99:7a:f8:74:b7:2e:16:a9:ee:63:b8:ad:e3:c0:
4b:7f:d5:06:60:ae:07:ac:13:bc:7c:80:6d:b5:73:
f7:e8:c7:f4:1b:d4:16:ae:52:f6:9a:58:5d:b1:b8:
9a:d3:b8:93:66:9a:d8:7b:97:c8:a7:53:8f:63:d3:
3b:8b:13:2b:5e:7a:b3:96:90:fb:20:a9:60:13:1c:
54:d5:cf:68:09:d3:ca:d8:97:1f:7a:f2:e7:48:c6:
83:e2:09:94:b1:dd:72:2c:91:68:35:1b:e6:85:a8:
ac:00:36:8f:6d:af:ae:8b:45:71:46:64:d3:52:f0:
c4:a8:8a:88:91:fa:16:c7:6e:9a:9b:14:13:83:ec:
c0:14:49:cf:b4:50:15:fa:66:ce:2f:3b:ed:e8:73:
9b:3f:0a:bf:7b:3c:d8:09:39:c8:a6:73:1f:a2:2d:
44:c9:8a:83:d6:d5:57:ed:61:f3:f3:47:d9:3c:91:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:02:1E:DF:19:FB:EC:31:7A:9D:6A:03:BB:68:CD:39:E2:9D:89:9D
X509v3 Authority Key Identifier:
keyid:5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:43:70:b8:e0:27:d7:e9:10:a4:f6:54:e6:6e:5e:a4:47:1e:
6c:1d:16:76:c8:b8:ef:88:f3:f2:f7:52:a9:42:29:cc:e4:45:
e2:25:b9:ce:93:b1:03:50:8c:08:f5:b9:54:88:79:b4:74:6b:
b8:65:7d:25:36:fc:2b:01:aa:79:0c:c3:45:64:9d:d0:9e:7a:
a7:ac:bf:bc:7c:d8:ec:52:d6:68:46:cd:31:11:fc:3b:68:a4:
73:87:55:8a:38:92:90:10:15:e8:46:cf:95:b0:52:66:34:cf:
ef:69:d0:b5:50:0e:d2:ec:67:42:cf:8e:db:ee:61:41:29:34:
66:6d:8b:78:ee:e5:07:93:66:24:e5:82:a7:f5:ec:d9:c1:ad:
99:34:49:21:bd:1d:69:41:a8:f1:03:60:83:f9:a1:69:ef:6c:
32:db:d3:01:50:3f:53:ba:f2:30:5a:c3:6b:f1:3c:a0:00:84:
fe:07:5e:f5:21:f2:e2:dc:97:33:e6:85:03:6b:45:b2:e3:e4:
b9:6b:e1:01:96:a8:0e:49:50:1c:66:37:a7:71:da:55:83:3b:
83:4a:1c:1b:af:98:aa:5c:6b:2e:d6:d3:0b:9d:44:75:5e:d8:
16:3b:e6:24:ba:98:5b:af:d1:fb:49:d7:1b:3c:b8:1c:b6:3c:
c0:a7:21:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:46:52 2025 by rpki-client