Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
File: XudwaWdbdcoke_xc0zALF7WznDQ.mft (raw, json)
Hash identifier: p3om7Mjm3tyVMxenyt1OLERoO+6gcXrS5MD+/2gdxHg=
Subject key identifier: 38:4D:3D:42:45:C4:B5:E1:D2:28:8C:5C:CA:5D:E1:63:B9:AA:B4:49
Authority key identifier: 5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
Certificate issuer: /CN=F3646008AF/serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Certificate serial: 075A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
Manifest number: 075A
Signing time: Mon 20 Oct 2025 01:56:46 +0000
Manifest this update: Mon 20 Oct 2025 01:56:45 +0000
Manifest next update: Wed 22 Oct 2025 01:56:45 +0000
Files and hashes: 1: XudwaWdbdcoke_xc0zALF7WznDQ.crl (hash: wBVHAFuhgHqKisXcvWWkfd9IXthISNPrFfP/6pYGAOI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1882 (0x75a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3646008AF, serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Validity
Not Before: Oct 20 01:56:45 2025 GMT
Not After : Oct 22 01:56:45 2025 GMT
Subject: CN=68f596de-8e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:6e:5f:32:82:5e:b8:25:11:2e:99:2b:05:
d4:7a:28:17:40:07:04:d6:ed:cc:b3:16:15:3b:9e:
90:75:f5:8a:75:e9:2b:ea:0f:2c:4e:a3:e3:3d:c4:
7d:7d:05:8c:af:17:46:1b:4a:d0:7a:06:e5:54:80:
2a:e1:13:29:2e:15:52:d3:d1:d9:a7:8a:70:60:e9:
7e:8f:e5:8b:7c:f5:78:40:c6:5f:94:23:fb:cf:cf:
a5:b6:7e:82:28:2b:3e:ac:af:cf:b9:fb:0a:9b:41:
7e:69:c7:c6:21:60:8b:ff:53:dd:9a:a9:1b:af:0a:
1e:f5:f2:f3:c4:94:31:db:8d:c9:f2:af:91:b0:cc:
7f:37:20:fe:dc:cf:2c:76:45:35:2c:66:0d:3a:e7:
07:c2:49:7c:26:f1:cf:12:7f:33:1e:07:a6:02:87:
6d:b5:da:27:87:56:5a:74:08:42:de:44:a1:91:87:
92:2f:ef:97:b3:28:9f:25:76:36:ae:51:0f:38:48:
31:e0:4d:22:8b:f9:33:f4:0c:1c:33:7a:a7:ce:1a:
8f:7b:00:73:66:f2:18:de:e3:3a:77:60:a9:48:70:
23:3c:48:28:32:07:68:11:b3:41:41:58:7d:c5:6d:
d9:4b:f1:ef:b2:d1:77:5c:f5:fe:68:46:38:32:a1:
2d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4D:3D:42:45:C4:B5:E1:D2:28:8C:5C:CA:5D:E1:63:B9:AA:B4:49
X509v3 Authority Key Identifier:
keyid:5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:c0:0e:4a:00:ab:19:b3:13:ad:12:f7:d8:c6:38:39:68:30:
89:09:a7:09:70:6a:0d:01:2e:91:25:ae:7d:68:56:f3:1f:4e:
e2:dd:1c:ea:e1:03:12:b1:48:b0:6a:b8:c9:75:da:f5:33:32:
e7:64:e1:19:55:17:65:7d:8d:31:0a:e6:7c:dd:69:13:c6:ee:
aa:44:a4:4f:61:c6:c5:a3:22:5c:f2:48:bc:1e:f6:e1:ab:8d:
6b:e1:33:50:c5:bc:2f:25:5e:63:a1:c5:ea:ea:eb:5f:b9:e6:
01:df:ff:dc:eb:e2:d5:75:27:62:79:47:dc:6c:a5:fc:c1:b0:
4f:89:81:71:34:f8:94:55:6c:a2:02:6b:b9:75:a0:66:e3:34:
98:28:36:47:5c:4d:c1:df:5f:5b:3f:62:dc:ca:c4:ae:2f:ad:
81:11:eb:8d:ed:84:69:e3:11:97:2e:d1:cd:68:c5:78:e2:27:
4c:6e:84:c3:b0:06:4a:47:af:54:a0:67:fb:c9:10:97:3d:ee:
4e:0b:ca:98:04:ec:4f:69:ac:6c:e4:aa:54:8f:ec:8a:a0:3a:
5e:3c:2d:d9:96:c9:b5:21:a7:67:0f:f1:e0:31:70:95:65:9e:
32:04:17:87:df:68:f1:3f:d3:d2:bb:0f:23:27:2f:47:fb:b7:
c5:b6:4f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:59:18 2025 by rpki-client