Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
File: XabN45sUTEexNxp5v2LPbtykpzs.mft (raw, json)
Hash identifier: wTKu5aU5Dv1gRp3FETsuWPVyFpYh58DdeYCk4dMqqLA=
Subject key identifier: 97:69:53:E1:B1:78:B1:CB:97:E5:EA:97:88:82:96:CC:27:93:22:F2
Authority key identifier: 5D:A6:CD:E3:9B:14:4C:47:B1:37:1A:79:BF:62:CF:6E:DC:A4:A7:3B
Certificate issuer: /CN=F361174DAF/serialNumber=5DA6CDE39B144C47B1371A79BF62CF6EDCA4A73B
Certificate serial: 04CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
Manifest number: 04C8
Signing time: Sun 19 Oct 2025 02:55:39 +0000
Manifest this update: Sun 19 Oct 2025 02:55:38 +0000
Manifest next update: Tue 21 Oct 2025 02:55:38 +0000
Files and hashes: 1: XabN45sUTEexNxp5v2LPbtykpzs.crl (hash: Ig8tEMsyrWrKv9eJl480kdRnTNDdUZnT4exub8MQSD4=)
2: EFDD06EC090111EDBC15A4C3F1222468.roa (hash: mzBwRw/NsD0Kw5UC1+dnCe3jWxLCxwOLqnhj2973w4M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.crl
rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 02:55:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1226 (0x4ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361174DAF, serialNumber=5DA6CDE39B144C47B1371A79BF62CF6EDCA4A73B
Validity
Not Before: Oct 19 02:55:38 2025 GMT
Not After : Oct 21 02:55:38 2025 GMT
Subject: CN=68f4532b-22dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:93:5e:7c:17:b1:e7:02:29:88:11:0a:1b:
f3:43:63:bf:68:e9:cb:75:e2:ff:95:80:31:d5:e7:
b5:95:50:5f:52:d4:1d:a5:cc:83:06:7f:84:4c:e9:
3f:fc:8e:67:c2:00:bb:60:54:ab:c6:de:d2:8d:eb:
59:2e:f1:2b:50:f7:02:e4:3c:cf:b7:ab:f3:74:4b:
8b:c0:58:f2:22:52:89:c8:48:12:ad:da:23:11:29:
52:71:70:29:c6:99:30:5e:c3:fc:5f:34:b4:42:d0:
22:83:f9:75:2b:da:74:61:0c:e7:05:33:10:31:f2:
8d:ea:54:5e:90:1e:e2:99:eb:91:6b:37:36:78:43:
00:1a:60:23:67:20:9f:42:91:72:8c:55:d0:a4:f5:
fe:91:5b:51:f7:4b:86:b4:32:92:e6:74:4d:35:79:
5e:41:92:d6:69:43:76:86:f6:ac:6d:c1:24:77:7e:
8b:12:e9:2d:ed:38:af:09:23:4f:e2:ad:cd:5b:20:
a4:32:ed:2f:6a:eb:8f:2f:29:71:41:9e:f4:c8:09:
e8:43:46:ae:2b:0e:1b:56:fe:65:58:ae:8d:18:5e:
1c:42:bb:d2:af:e8:0d:c9:7b:3a:df:fd:e7:d5:f8:
f0:e2:d3:94:d9:a9:6a:59:bc:e2:09:8a:7c:fc:b2:
10:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:69:53:E1:B1:78:B1:CB:97:E5:EA:97:88:82:96:CC:27:93:22:F2
X509v3 Authority Key Identifier:
keyid:5D:A6:CD:E3:9B:14:4C:47:B1:37:1A:79:BF:62:CF:6E:DC:A4:A7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:ac:21:77:c0:8f:37:b2:c5:ec:ce:2b:ce:9e:6a:e3:59:66:
1d:8d:60:4a:12:80:03:f4:ca:e1:32:b4:b2:2b:ee:fc:37:bd:
ba:9a:b9:95:75:2a:6a:d8:30:e3:50:70:6b:db:02:5e:ca:b6:
9d:fe:b0:2f:24:09:c1:e5:c3:11:c3:e1:14:1b:44:e4:f5:1f:
1a:6f:ea:a3:3c:ee:2e:5c:d0:f4:a5:e5:e5:24:5d:f6:ae:4a:
62:1d:f6:40:3e:e6:e0:e2:31:51:71:ca:ae:4a:43:5a:d4:34:
3a:7b:6f:11:ef:1f:8b:77:43:56:5f:a2:c4:d4:57:0b:80:69:
66:56:e0:ae:73:ff:f6:bc:17:b1:e9:89:5f:ad:13:5d:d2:c7:
31:10:c2:cc:f4:1a:ca:36:3e:26:ea:98:24:bd:2f:2c:e4:28:
63:9a:6a:46:c3:02:e5:d0:05:92:e7:d0:fa:cb:62:62:9d:d5:
a7:0e:39:de:1f:91:f4:d7:0b:4b:06:b4:d9:c9:fa:10:f2:33:
0f:cb:f5:d4:62:f7:12:87:d8:3f:38:a9:90:2d:23:d7:a1:9d:
3e:15:ba:ca:9e:19:bd:0f:0a:6f:3c:0a:31:95:61:d5:12:e7:
09:7e:ad:af:e5:a4:01:1c:ea:25:cb:3c:88:c1:ed:1f:5f:a7:
a4:fc:56:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:15:09 2025 by rpki-client