Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
File: X8N97OtwCLunQTR4RbdrR2d66mk.mft (raw, json)
Hash identifier: RalF/8KDK91kRrcfk544Iln365gJNvKMZPpH4CsLMlY=
Subject key identifier: C2:A4:44:84:0D:CC:2A:1C:92:3D:FE:C0:E8:DC:4C:52:07:85:25:F5
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Certificate issuer: /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial: 02F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
Manifest number: 02F2
Signing time: Mon 20 Oct 2025 03:53:59 +0000
Manifest this update: Mon 20 Oct 2025 03:53:58 +0000
Manifest next update: Wed 22 Oct 2025 03:53:58 +0000
Files and hashes: 1: X8N97OtwCLunQTR4RbdrR2d66mk.crl (hash: jSLhwk5xZH4hXjduzouHPcBbj/0pgnmKulQgW15GB54=)
2: 6DA5A2565FD511EFA88ABB88762E951A.roa (hash: ro2wQBC/RLqE0zVlMpswfR5i9xWzti7o20ft60EsccY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 760 (0x2f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3650567AF, serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Validity
Not Before: Oct 20 03:53:58 2025 GMT
Not After : Oct 22 03:53:58 2025 GMT
Subject: CN=68f5b257-172d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fc:50:2c:a5:5e:a6:c8:67:4d:cf:1a:50:cc:
35:ef:49:dc:03:e6:d5:b3:a8:91:ea:d0:42:60:78:
28:55:41:d8:23:64:02:85:27:54:5a:a7:f7:82:f1:
d8:8d:1d:23:e4:ab:be:3a:ca:20:84:a6:bf:3f:0b:
ab:4b:1a:95:a6:0e:d5:3a:a5:6f:85:2c:a6:86:00:
d8:46:ab:7c:f1:bd:48:66:0e:16:06:bc:01:f2:60:
46:05:b1:c2:67:62:d2:08:57:97:d6:ac:17:39:b1:
16:e3:84:b6:f2:d3:ee:f2:0f:2b:96:16:b6:95:4b:
cf:f2:18:11:56:d8:d6:f9:28:20:c3:d9:e8:3d:26:
98:be:99:49:e2:47:19:7a:4a:68:4f:6f:26:4d:60:
60:bd:2c:76:06:58:25:d4:2c:ae:1d:31:18:98:cf:
9d:de:08:46:85:9e:04:05:64:c0:28:89:9e:d0:bc:
06:6a:7d:15:7f:20:7d:f7:42:f2:94:4e:8c:41:3a:
06:35:ae:7b:dc:ca:18:93:50:37:84:08:77:01:9f:
72:d8:26:ac:4e:d5:c1:14:6b:3c:55:c0:e1:f4:7d:
ae:4f:80:d5:59:9a:31:fc:01:67:67:3d:f7:92:d8:
33:16:51:23:d6:da:b6:79:f5:e6:99:48:90:92:64:
d0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A4:44:84:0D:CC:2A:1C:92:3D:FE:C0:E8:DC:4C:52:07:85:25:F5
X509v3 Authority Key Identifier:
keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:84:70:fc:a3:7c:95:c6:0f:3c:9b:fb:e4:78:8d:c0:16:3f:
18:af:19:36:8d:1b:2f:08:d0:31:5a:c7:ee:09:fd:8f:0b:ad:
c8:37:fc:18:10:46:23:cc:f2:c9:6c:69:83:68:fc:7b:47:d5:
c0:ce:ae:d0:e8:0f:fc:a9:9c:07:38:c1:75:41:b4:7d:ea:58:
66:40:38:69:3e:07:68:63:28:b3:bd:5e:80:74:b0:15:11:10:
15:a8:62:84:8b:b5:46:0b:b3:a1:c2:85:ef:cc:df:0f:71:99:
ca:cf:10:a7:fe:04:f7:c1:61:dc:09:0b:a1:92:40:50:27:c8:
d3:0f:bf:cf:ac:3d:41:5b:fd:2e:98:02:f8:3e:85:7b:48:aa:
b6:97:b2:52:23:ab:c9:c9:57:ce:96:c0:01:bf:95:80:f6:aa:
50:dc:d1:b6:33:e3:c6:a2:2b:b3:8f:64:45:4c:66:81:10:36:
98:36:1b:d6:98:09:e2:ef:e5:f1:80:8f:83:e2:c2:f7:db:d1:
a9:42:19:56:2c:ee:e4:86:99:63:90:33:e0:73:74:27:72:55:
17:cb:9e:26:f5:bd:8c:b1:a7:a3:1a:2f:7f:e7:2e:b9:03:43:
05:c4:12:00:12:32:05:76:10:cc:ea:b4:e1:26:7e:a8:82:ad:
4f:ca:53:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:08:36 2025 by rpki-client