Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
File: xaUP22PDxb0fR0h14JTxitF-H5Y.mft (raw, json)
Hash identifier: 0UUucQ/OtczUs3kRCdl/xz5SjqP3bFJ82jq+NBFjxU0=
Subject key identifier: BF:E7:A0:32:5E:F2:30:FD:63:1D:E3:66:31:89:6B:CE:91:89:B2:9C
Authority key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Certificate issuer: /CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Certificate serial: 02BD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
Manifest number: 02BC
Signing time: Mon 20 Oct 2025 04:00:11 +0000
Manifest this update: Mon 20 Oct 2025 04:00:10 +0000
Manifest next update: Wed 22 Oct 2025 04:00:10 +0000
Files and hashes: 1: xaUP22PDxb0fR0h14JTxitF-H5Y.crl (hash: 8F6NP21ZbS6uYJivcVrE2SzjU0M+T8fAOCi3b7JQbrQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701 (0x2bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365F7E8AF, serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Validity
Not Before: Oct 20 04:00:10 2025 GMT
Not After : Oct 22 04:00:10 2025 GMT
Subject: CN=68f5b3cb-938d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:43:37:14:13:ce:f0:6d:4f:0f:8b:d0:24:
b0:37:de:b5:fe:ef:87:e8:78:75:cd:27:8e:e0:5d:
94:db:37:bf:c2:19:52:5b:9d:ef:80:ba:32:d1:de:
48:fd:65:b1:d2:82:9e:21:14:28:e2:cc:2d:78:1f:
77:f9:90:71:36:4f:fb:fd:58:f7:14:5b:e0:42:a0:
9b:ad:b4:42:ae:f9:9a:69:b1:61:b0:13:7a:f4:32:
b3:fe:bb:58:3e:cf:48:38:15:09:9b:a3:7a:eb:43:
5d:99:06:5c:82:4b:32:7d:2e:7e:09:84:d4:bb:f4:
ca:21:e5:ff:64:24:b7:cd:67:2c:87:fd:f6:87:3a:
37:df:74:87:80:bc:aa:64:bf:ba:6f:1b:47:66:47:
ff:b2:f9:6b:70:86:b9:15:79:6b:59:17:19:24:b7:
1c:2c:5d:cd:5d:41:11:47:2c:d1:ec:f8:63:e3:fe:
3e:96:fc:d5:d7:0e:f3:6c:16:fd:ff:d6:3d:5d:fa:
88:ce:a4:7d:f8:cd:1b:86:6a:83:78:b9:58:15:1c:
48:ee:f4:45:f4:6a:99:5a:c1:ef:34:7b:78:f3:e9:
40:07:c6:5b:b6:12:d8:df:cc:a8:c0:71:18:42:cb:
42:12:b1:ed:c6:e0:89:61:d0:6a:fd:2a:6f:95:b2:
b3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E7:A0:32:5E:F2:30:FD:63:1D:E3:66:31:89:6B:CE:91:89:B2:9C
X509v3 Authority Key Identifier:
keyid:C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7d:b7:29:df:12:61:83:70:2d:57:90:86:16:03:5b:f3:da:
cf:0d:40:74:9a:da:1f:5c:f8:a9:69:ab:0b:e9:7d:04:bc:14:
be:49:f4:79:cc:39:c0:a0:88:60:61:da:d3:43:4f:98:78:fb:
c3:35:02:b3:51:d6:f0:a6:5d:50:ae:5e:54:67:dc:e1:8b:75:
cd:71:9b:5c:85:3c:44:1d:1b:34:93:8e:c3:87:6d:ac:92:bb:
9b:43:d0:0f:bc:52:4d:33:7a:b4:13:43:0f:bd:b0:80:aa:3b:
1b:ce:4f:94:c7:e1:f2:40:10:a7:56:e3:6d:b6:0d:85:53:15:
37:ed:c2:04:c2:32:49:f9:49:30:6a:8f:49:aa:1a:e9:9c:9d:
9e:ab:63:54:b1:f8:65:f0:9a:88:8c:a7:94:e0:de:b5:69:50:
e3:dc:de:ea:8d:f5:8d:9c:69:c4:e7:0b:01:ba:28:19:d2:5c:
e9:94:61:e6:86:a5:12:0a:58:9a:30:bd:ad:95:13:2a:b6:9a:
75:98:d8:27:6a:68:4b:18:14:6b:c8:bf:27:ab:ae:87:e6:59:
fe:d5:a3:b0:74:f7:b3:59:72:2e:f8:0c:63:0f:b5:9b:2a:69:
77:49:32:ea:d9:f0:6a:fd:2c:c3:f2:6d:47:64:9b:11:eb:e9:
42:f1:bd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:49:38 2025 by rpki-client