Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
File: XK2jLPsAGrpuTJ9SE9kodlsVozc.mft (raw, json)
Hash identifier: R9tCKxkJIc0o/07ZfhYAbgqHq1LWqdafQlA/XHQhTes=
Subject key identifier: 07:15:58:F0:7E:65:B4:89:56:B4:A6:01:1C:4F:87:BD:52:AC:AD:16
Authority key identifier: 5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
Certificate issuer: /CN=F368588EAF/serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Certificate serial: 0928
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
Manifest number: 091C
Signing time: Tue 04 Nov 2025 01:43:23 +0000
Manifest this update: Tue 04 Nov 2025 01:43:22 +0000
Manifest next update: Thu 06 Nov 2025 01:43:22 +0000
Files and hashes: 1: XK2jLPsAGrpuTJ9SE9kodlsVozc.crl (hash: crC7SVVjYQphbURtqif11Ww8znNqQMSeaXOB4YqODkU=)
2: E90920E88E6511EBBF85CD6BF8AEA228.roa (hash: 2lqZqDUQcUKxveTR9cI5M5tuAOp//Ev36g7no9oTmfc=)
3: B45912FE8E6511EB8C41896BF8AEA228.roa (hash: qKKMDXSoDlqwiHmOGrIIdcwys6RCpAU+b2nSH+ukCFY=)
4: 82AA23C48E6511EB87AB596BF8AEA228.roa (hash: Awf3KcwUqHS+Tb+h21An3tUV9Zndn4ovZSX7QkhwLRI=)
5: 314349A68E6611EB8D43336CF8AEA228.roa (hash: Thxt35OuW2OHwRepR9n+aTVJ70XOv0V6vWotqPw7F9g=)
6: 524153BE8E6611EBB85F5E6CF8AEA228.roa (hash: 2hd9ZQH6yn17Npd0+aOdMdIMVFAkEErgQuvgi60v08M=)
7: 5B5AB2F28E6511EB82C6206BF8AEA228.roa (hash: uqU9yrUWC7VxCjK9hx7zhOvnfnJosiQgLAmWL6ofW8s=)
8: 6001068C237F11EFAF71141F7DDC24C2.roa (hash: Fe1hHfr+f3y3JImtSfxXw39BMD+ou4/AEKixzkcLodk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 01:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2344 (0x928)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368588EAF, serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Validity
Not Before: Nov 4 01:43:22 2025 GMT
Not After : Nov 6 01:43:22 2025 GMT
Subject: CN=69095a3a-7b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d0:e3:e6:b7:a1:6e:68:c2:3f:75:a8:20:5e:
41:96:d6:9d:20:f5:7d:6c:a5:11:c9:99:e9:ea:91:
3d:c7:63:ff:b6:66:aa:3e:f8:58:1e:33:37:e2:54:
95:41:76:77:c7:88:f9:77:1d:a5:7a:6b:53:95:b1:
71:24:b6:aa:16:02:98:bf:af:42:e5:40:bb:69:b7:
cc:b1:50:d9:90:0a:b9:20:f4:24:03:3a:03:35:be:
40:cd:78:b7:3b:80:c9:3a:f6:de:b7:1e:ef:b5:46:
ad:f3:21:78:c1:66:42:28:ab:d5:c4:8b:eb:07:32:
52:c6:2a:b7:d2:f9:34:97:bd:0c:7b:3a:fb:9e:97:
a0:97:67:84:3e:99:c3:66:9e:16:ab:46:d3:1f:09:
96:9b:93:87:f1:01:34:f8:b9:3f:67:37:7a:00:08:
e6:2a:11:9d:1d:06:a1:64:ed:a2:60:72:d6:0d:66:
16:83:db:68:a4:79:f1:d2:0f:9b:bb:f7:9e:25:89:
39:eb:6d:3c:71:a6:a2:7b:75:8b:73:10:d1:75:2e:
6a:2b:fc:28:ae:bb:13:a5:68:e5:bc:40:1c:46:25:
fa:a8:a2:f6:73:2c:76:e3:b3:6b:d0:cd:43:de:db:
9b:3f:ed:a0:ff:71:61:ec:5e:e1:b7:71:bb:13:30:
4a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:15:58:F0:7E:65:B4:89:56:B4:A6:01:1C:4F:87:BD:52:AC:AD:16
X509v3 Authority Key Identifier:
keyid:5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:ab:2b:49:ea:4c:b5:2c:65:ad:79:38:cb:25:b2:f6:67:c7:
f4:10:bc:74:88:33:33:6c:a9:4c:ec:81:3e:1a:4b:c2:b6:08:
5a:7f:fe:42:a7:a1:21:ec:39:4e:67:ff:54:36:8f:32:82:e1:
3d:23:66:7f:81:78:93:88:50:9c:1d:d2:3b:e3:0f:03:54:a6:
6a:39:1f:2b:05:64:49:4d:2e:6d:b4:65:ff:f7:f9:da:31:77:
77:6e:b0:f7:dd:cc:a8:22:5a:55:76:37:3c:7a:fd:80:53:62:
b6:a1:a0:f1:63:0d:64:97:11:78:01:f5:8b:65:33:a7:03:ba:
d1:66:04:fc:37:40:23:c2:00:a2:80:00:40:5b:4a:17:7e:0a:
96:3a:8d:75:dd:92:4e:eb:e8:1f:33:cf:8f:71:5b:00:86:e0:
4a:36:62:10:00:0b:ad:94:9a:4a:36:85:3c:f1:f9:37:2d:97:
a5:ba:bd:fd:f2:79:04:5e:cf:e7:ff:1d:ac:20:56:6c:3d:af:
f9:80:ef:b8:db:d4:38:c8:46:4c:18:5b:8b:ba:41:fa:b5:55:
f7:f3:28:fd:3b:a5:61:08:6b:d4:2e:89:06:a1:e0:51:62:96:
ac:16:ad:f2:9d:bb:4b:8d:06:3a:ed:27:3d:42:6c:0f:7d:34:
fe:c7:dd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:10:35 2025 by rpki-client