Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
File: xcFCD1BxamsUb136joK_0eTdmRA.mft (raw, json)
Hash identifier: NUxvPRxOoXCBkgYnpJaKDSGuT0RmnV1pa6/4+p0XwG4=
Subject key identifier: 93:D0:CC:FD:C6:FE:3E:F7:10:0E:FF:A6:AC:66:A6:F7:9F:22:FE:CB
Authority key identifier: C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Certificate issuer: /CN=F36CFBB0AR/serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Certificate serial: 0145
Authority info access: rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
Manifest number: 013C
Signing time: Wed 05 Nov 2025 05:17:55 +0000
Manifest this update: Wed 05 Nov 2025 05:17:54 +0000
Manifest next update: Fri 07 Nov 2025 05:17:54 +0000
Files and hashes: 1: xcFCD1BxamsUb136joK_0eTdmRA.crl (hash: wIy8l7nhrn0R7dYgIICFWaf99opkLwUwIGum/rDsL3g=)
2: 1FC67724DB2F11EFA180C6B7762E951A.roa (hash: JHgdUdEE2ORETD1hobD1l7BrD95rRqOs+/yUcWHinV4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CFBB0AR, serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Validity
Not Before: Nov 5 05:17:54 2025 GMT
Not After : Nov 7 05:17:54 2025 GMT
Subject: CN=690ade03-353a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:ca:55:99:38:aa:9d:5b:fc:74:47:6d:b1:
2f:2f:83:db:2d:3e:63:b6:66:7d:32:f7:b4:93:13:
6d:61:ef:61:4c:8f:3c:d6:bd:3c:dd:d6:f7:af:f9:
d9:c5:cf:84:4d:60:80:a8:0d:a2:16:ae:c9:7b:ab:
d7:86:47:b6:57:01:45:44:81:b1:1f:33:39:03:f1:
7a:fa:6e:76:37:0d:7b:9f:b2:3d:dc:88:9c:d9:32:
84:10:e7:1b:ab:55:43:4b:4f:8a:de:61:56:01:ca:
cb:35:00:f5:12:bd:e3:f0:3e:bb:40:04:83:c6:be:
68:04:04:de:47:9c:28:51:40:9d:10:de:77:65:98:
8a:5d:54:65:75:f6:ad:6a:fb:18:97:68:dc:cf:20:
b9:c6:46:d1:89:bd:ec:84:da:15:af:66:ca:07:9d:
93:c3:ba:60:fa:fd:39:96:f9:dd:2f:f7:5a:85:d4:
34:55:57:15:f9:72:4b:43:45:22:a5:d0:74:be:3d:
23:d6:15:4e:65:dd:bd:a7:af:52:c3:5a:2d:af:d5:
a7:9c:30:1f:70:53:d5:2b:a5:68:16:a1:76:0b:6f:
20:8a:05:8f:b0:0f:d9:6c:35:8a:58:be:c6:c2:f8:
77:dd:7d:c5:93:35:49:d4:17:c2:52:23:ed:9d:0a:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D0:CC:FD:C6:FE:3E:F7:10:0E:FF:A6:AC:66:A6:F7:9F:22:FE:CB
X509v3 Authority Key Identifier:
keyid:C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:23:92:9e:02:be:b6:93:46:c3:d2:ca:43:ce:fa:6f:f9:d4:
ee:cf:f3:03:a8:3c:9b:82:55:51:bb:df:15:11:62:b2:28:1a:
73:cc:5a:d5:9c:c8:71:0f:ef:17:8f:dd:94:84:53:c3:9a:d2:
14:45:0d:2a:34:ea:fb:6c:27:11:eb:a0:14:7d:39:e4:ce:5c:
c0:df:04:4f:9b:ea:41:af:b0:7e:e8:c8:92:ac:e0:62:8f:4b:
2d:e8:31:90:4f:d0:94:68:66:33:71:81:bc:70:8e:70:5b:d6:
d7:bf:fd:e9:44:df:84:c3:83:37:34:d1:c9:9e:78:75:9b:02:
55:b3:08:77:aa:16:d3:8f:33:9d:b1:9f:92:ff:66:57:d1:a1:
4b:a9:de:1c:1d:77:c7:9e:2e:7d:e8:0d:20:9c:19:5c:ec:61:
83:1c:d8:3c:56:28:7c:9a:f3:e7:11:38:12:d4:a6:11:a9:3d:
57:06:fa:91:92:f8:54:b2:d8:9e:28:01:7f:cf:55:c2:7f:f9:
8d:27:0f:e0:29:4b:d6:42:78:09:d1:71:c1:b4:29:ae:5c:3f:
e4:f2:4f:a4:1e:fa:97:0a:60:a4:f7:34:9a:f6:df:3f:53:23:
5e:29:76:a1:6f:40:ca:75:2a:df:5b:e0:2a:8e:28:6f:2c:ad:
ce:c2:78:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:48:06 2025 by rpki-client