Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
File: XozUASYISPXWb0DSj9l3F6nw8mo.mft (raw, json)
Hash identifier: irY6EyJH8BGGm1ErrjjFzQmQMV9sbR+Nm43ipcBsTcE=
Subject key identifier: 70:15:67:1D:24:71:95:28:AA:D5:CA:95:6F:6D:1E:F5:89:DD:D0:DC
Authority key identifier: 5E:8C:D4:01:26:08:48:F5:D6:6F:40:D2:8F:D9:77:17:A9:F0:F2:6A
Certificate issuer: /CN=F36D8D30AR/serialNumber=5E8CD401260848F5D66F40D28FD97717A9F0F26A
Certificate serial: 0409
Authority info access: rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
Manifest number: 0408
Signing time: Tue 04 Nov 2025 04:34:00 +0000
Manifest this update: Tue 04 Nov 2025 04:33:59 +0000
Manifest next update: Thu 06 Nov 2025 04:33:59 +0000
Files and hashes: 1: XozUASYISPXWb0DSj9l3F6nw8mo.crl (hash: +2cE5afiIDZls3uCYeSNG57pxOSQGGkhSkTvxDM/kAM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1033 (0x409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8D30AR, serialNumber=5E8CD401260848F5D66F40D28FD97717A9F0F26A
Validity
Not Before: Nov 4 04:33:59 2025 GMT
Not After : Nov 6 04:33:59 2025 GMT
Subject: CN=69098238-765c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b2:42:1b:40:52:fd:d2:5e:5e:d1:36:ca:d9:
7d:18:ff:61:d4:d3:f4:7a:31:23:d7:f9:56:81:f1:
b8:32:84:2c:f0:db:18:73:7f:9e:e8:5e:02:72:c3:
9c:76:69:4e:a8:f0:a4:f9:f0:a4:8e:0b:fe:67:39:
23:1d:88:a6:80:4a:d2:87:31:c3:0c:61:2c:f4:0c:
13:bd:58:38:4b:19:48:5d:92:58:43:d9:15:52:76:
2d:15:d7:67:f0:ce:15:b4:96:59:36:8d:48:1f:35:
b7:54:2e:03:2f:fb:c6:f5:07:4d:de:86:c4:77:cc:
ed:07:55:c9:72:81:4e:13:9a:f6:bc:84:b9:fa:2b:
5e:8e:f3:1d:9f:d8:81:93:52:4a:75:7d:e1:8e:dd:
fe:a8:69:b8:90:67:55:e3:82:1a:a1:8d:b8:05:dd:
31:4f:70:94:72:69:cb:95:24:f9:53:1e:4b:2c:c9:
47:6f:91:85:3d:86:21:0b:66:f2:01:16:03:c6:50:
b3:1a:4e:14:f6:74:90:91:ce:7f:64:15:00:ce:7c:
3c:f4:11:50:f2:67:28:4f:d7:09:c5:9d:c2:ee:eb:
14:49:61:59:55:93:99:2f:fd:b6:e0:ef:50:f7:48:
3f:65:78:5f:ad:30:96:01:04:07:03:d2:b7:ce:e4:
e5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:15:67:1D:24:71:95:28:AA:D5:CA:95:6F:6D:1E:F5:89:DD:D0:DC
X509v3 Authority Key Identifier:
keyid:5E:8C:D4:01:26:08:48:F5:D6:6F:40:D2:8F:D9:77:17:A9:F0:F2:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:62:41:46:7a:f8:9b:b1:d4:d6:8a:d9:f3:fa:c0:7e:fb:6f:
4e:f2:51:e8:03:f9:4d:20:51:f5:bc:32:b4:34:1e:00:07:40:
07:ce:c4:2e:23:e0:c1:70:d7:54:80:b6:bf:29:bd:b9:2d:a9:
02:ab:b2:29:db:46:b4:39:8f:aa:a4:72:ff:7b:2d:9e:1d:fc:
13:8e:c1:e2:49:8e:98:2f:22:ab:61:55:5d:0e:d3:52:19:b4:
64:3e:57:14:21:5a:af:70:ea:ea:00:e3:e3:39:be:a2:b5:33:
52:4d:9a:6a:31:79:95:1e:f3:c0:0c:3b:76:5d:9d:a2:5e:e6:
f2:df:b5:ff:2f:39:f6:c6:21:ea:da:25:7c:88:04:fd:21:91:
04:bc:05:e9:45:8d:dc:5e:17:a2:e6:cb:e3:2a:2e:b4:ce:f1:
0f:74:ea:df:f8:4e:e1:4f:30:dc:90:84:cf:5a:a3:0b:d7:35:
35:6b:ca:04:ab:8d:35:ae:ad:f4:0a:4e:4d:38:b0:68:6a:e5:
f6:d9:1b:3d:97:de:15:de:37:58:a1:20:72:96:c9:b9:85:14:
37:14:b0:04:1b:15:e6:4e:19:4e:19:18:a3:66:0a:d1:d6:65:
88:00:84:73:08:44:58:f3:78:19:36:cc:5c:1e:db:98:4f:1e:
28:4c:41:80
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBAkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDhEMzBBUjExMC8GA1UEBRMoNUU4Q0Q0MDEyNjA4NDhGNUQ2NkY0MEQyOEZEOTc3
MTdBOUYwRjI2QTAeFw0yNTExMDQwNDMzNTlaFw0yNTExMDYwNDMzNTlaMBgxFjAU
BgNVBAMTDTY5MDk4MjM4LTc2NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDwskIbQFL90l5e0TbK2X0Y/2HU0/R6MSPX+VaB8bgyhCzw2xhzf57oXgJy
w5x2aU6o8KT58KSOC/5nOSMdiKaAStKHMcMMYSz0DBO9WDhLGUhdklhD2RVSdi0V
12fwzhW0llk2jUgfNbdULgMv+8b1B03ehsR3zO0HVclygU4Tmva8hLn6K16O8x2f
2IGTUkp1feGO3f6oabiQZ1XjghqhjbgF3TFPcJRyacuVJPlTHkssyUdvkYU9hiEL
ZvIBFgPGULMaThT2dJCRzn9kFQDOfDz0EVDyZyhP1wnFncLu6xRJYVlVk5kv/bbg
71D3SD9leF+tMJYBBAcD0rfO5OVLAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUcBVn
HSRxlSiq1cqVb20e9Ynd0NwwHwYDVR0jBBgwFoAUXozUASYISPXWb0DSj9l3F6nw
8mowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ4RDMwLzNFQTY5NkFDQTZCMDExRURCOTAxRDQ5Q0YxMjIyNDY4L1hvelVB
U1lJU1BYV2IwRFNqOWwzRjZudzhtby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1hvelVBU1lJU1BYV2IwRFNqOWwzRjZudzhtby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RDhEMzAvM0VBNjk2QUNBNkIwMTFFREI5MDFENDlDRjEyMjI0
NjgvWG96VUFTWUlTUFhXYjBEU2o5bDNGNm53OG1vLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDZYkFGevibsdTWitnz+sB++29O8lHoA/lN
IFH1vDK0NB4AB0AHzsQuI+DBcNdUgLa/Kb25LakCq7Ip20a0OY+qpHL/ey2eHfwT
jsHiSY6YLyKrYVVdDtNSGbRkPlcUIVqvcOrqAOPjOb6itTNSTZpqMXmVHvPADDt2
XZ2iXuby37X/Lzn2xiHq2iV8iAT9IZEEvAXpRY3cXhei5svjKi60zvEPdOrf+E7h
TzDckITPWqML1zU1a8oEq401rq30Ck5NOLBoauX22Rs9l94V3jdYoSBylsm5hRQ3
FLAEGxXmThlOGRijZgrR1mWIAIRzCERY83gZNsxcHtuYTx4oTEGA
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:11:07 2025 by rpki-client