Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
File: XudwaWdbdcoke_xc0zALF7WznDQ.mft (raw, json)
Hash identifier: wKn301Ub4alStOVYfFEIBcSpbAdsO5FlaGQiRkdLAOo=
Subject key identifier: 89:08:71:DD:02:7C:34:E6:C3:6C:5C:75:0A:C4:AF:2E:BD:3C:FE:3D
Authority key identifier: 5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
Certificate issuer: /CN=F3646008AF/serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Certificate serial: 0720
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
Manifest number: 0720
Signing time: Sat 23 Aug 2025 02:00:37 +0000
Manifest this update: Sat 23 Aug 2025 02:00:37 +0000
Manifest next update: Mon 25 Aug 2025 02:00:37 +0000
Files and hashes: 1: XudwaWdbdcoke_xc0zALF7WznDQ.crl (hash: XJZpZevI42oa5UAWIF4quEx5AlfCmRAJotvEvZjmK4U=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1824 (0x720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3646008AF, serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Validity
Not Before: Aug 23 02:00:37 2025 GMT
Not After : Aug 25 02:00:37 2025 GMT
Subject: CN=68a920c5-5c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:84:6f:f7:26:e5:ae:41:89:36:78:f9:11:
3b:2e:95:26:17:ad:5f:8b:5c:28:74:bd:1c:19:d6:
36:11:95:42:75:18:35:07:72:22:74:c5:3a:ae:0e:
46:88:09:4e:d2:0d:76:9a:e1:15:f5:ad:30:62:9e:
68:3d:62:0f:9d:bf:b1:97:c8:1c:f1:d8:32:c8:d6:
da:af:df:bf:83:bd:1c:e1:75:fe:f5:b2:66:09:5d:
8b:3e:59:7e:bc:6f:f0:99:75:18:89:17:17:d6:60:
71:fb:cd:20:3b:a7:be:58:d9:cb:70:e2:63:04:51:
2f:68:e1:e3:61:3e:34:52:17:5d:c4:58:70:ca:cb:
f9:04:e8:4f:f9:9e:5d:9d:cd:55:1e:f7:ae:b4:0d:
1b:1b:f7:b3:b3:34:10:cf:e7:b3:68:88:d0:58:d9:
20:d2:25:6d:8e:a6:70:ee:35:6a:dc:bf:b7:26:36:
8e:c7:d4:0e:51:60:53:94:98:e6:b8:ad:5d:a0:11:
04:db:7f:22:d2:64:2a:a1:e4:a0:95:b7:c0:5e:06:
5e:9e:1c:b7:9a:65:b8:fd:e3:36:2a:d4:08:37:28:
7a:b5:0c:c4:51:36:4e:72:6c:fe:57:37:aa:6f:78:
c2:e9:5c:40:0a:47:56:77:d5:5d:0b:de:62:14:e9:
f2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:08:71:DD:02:7C:34:E6:C3:6C:5C:75:0A:C4:AF:2E:BD:3C:FE:3D
X509v3 Authority Key Identifier:
keyid:5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:78:4b:6a:6f:b4:6d:74:59:74:65:db:dc:1a:5b:64:9b:dd:
e6:8b:ac:59:9b:12:a6:82:43:ba:73:02:f4:d3:f4:d2:0a:d6:
3b:73:39:64:73:ab:00:3c:15:4c:76:81:5a:28:da:b1:5a:b1:
87:77:11:f5:64:92:fa:63:27:37:e3:c8:82:d8:bb:fb:6c:d0:
ab:ad:a7:2e:3a:15:9c:79:61:ce:fb:66:a8:b0:25:a8:91:52:
ba:ec:f2:9a:2b:8b:2c:65:6d:c7:5e:dc:86:46:85:db:ef:35:
e2:ad:22:6b:1f:3e:c9:32:ef:c6:43:e9:ed:08:47:8f:3f:f2:
bc:14:2b:fe:2b:42:7f:67:d9:09:9b:d7:20:54:f9:e8:65:b7:
af:0f:07:d9:7a:a2:bd:2e:65:15:cf:ff:3c:3b:cc:55:98:0e:
68:98:a0:99:7b:83:70:2d:f0:b1:df:7b:4f:fa:30:22:74:a6:
c4:e6:74:e2:75:cd:ee:ca:aa:89:fb:7d:19:23:55:26:41:5c:
03:59:68:47:ec:99:c6:a9:0d:72:3b:2d:76:d7:04:70:b6:13:
1f:8a:2f:f7:1c:56:70:90:05:a5:fa:c2:b9:63:f2:16:58:06:
6c:04:cb:27:98:72:4d:0c:03:62:ad:f2:c2:92:90:16:8b:c0:
13:60:f9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:22 2025 by rpki-client