Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
File: XKOJ-4BR0kErpd-AHYmyys5XJZw.mft (raw, json)
Hash identifier: CReNjE8uAf7rZlexjLOnY2EAfML5Z+cinOTaElQ98go=
Subject key identifier: 94:E5:31:F6:A1:0A:F6:8B:E2:3C:41:E6:DD:80:1C:F3:DE:6E:21:4B
Authority key identifier: 5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
Certificate issuer: /CN=F3662DABAF/serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Certificate serial: 041F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
Manifest number: 041C
Signing time: Mon 20 Oct 2025 03:12:08 +0000
Manifest this update: Mon 20 Oct 2025 03:12:07 +0000
Manifest next update: Wed 22 Oct 2025 03:12:07 +0000
Files and hashes: 1: XKOJ-4BR0kErpd-AHYmyys5XJZw.crl (hash: 8Nz4jXjYjbhxWFvaRB+00wcmp+KA0Di7K/Nu7olM/Cw=)
2: 2BCE620636E811F0AFEF58D4DAE4EC9C.roa (hash: P7lmUgIS9Hm4lWbQ/Ee8DkBKFNBVl2htZZLdVzqMPOo=)
3: FF42A1988F3211ED86A292BAF1222468.roa (hash: x+yQ5t8NNejDnfE2F13L3hSaxA+eL6ATRpRXB3MRfYU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1055 (0x41f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662DABAF, serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Validity
Not Before: Oct 20 03:12:07 2025 GMT
Not After : Oct 22 03:12:07 2025 GMT
Subject: CN=68f5a888-0e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a2:d9:66:14:e0:9d:6c:2e:98:1c:9a:8b:1e:
63:94:a5:f1:f0:6c:c6:c6:d3:14:39:19:12:e8:74:
eb:63:e8:b2:8c:e0:1b:0b:5e:a4:8f:5f:5b:0b:f4:
10:cb:d6:15:e3:dd:35:1d:bb:5f:09:62:b5:6b:74:
47:3e:db:f7:c3:d4:fc:28:2e:e1:39:57:f6:74:af:
7f:bb:da:2d:74:5e:64:cb:31:ba:fe:0f:54:b0:38:
c9:c3:4d:3c:aa:d2:af:b9:4f:be:4d:2d:72:63:df:
35:a1:a0:fa:08:3e:fd:47:dc:fe:c2:c2:b9:24:11:
da:0d:cc:7b:31:ce:c0:53:28:df:f5:17:5f:7d:6e:
a6:dc:d8:3c:16:3b:ee:8e:0d:89:9b:b7:ed:14:72:
74:ba:ec:ae:56:df:bd:ef:85:af:13:51:c1:aa:b3:
0b:34:81:70:50:25:22:03:d9:e0:58:23:56:33:7b:
3b:61:0a:14:91:d4:61:ce:6f:95:cc:c3:3e:11:6d:
6e:bb:c4:97:ef:4d:fa:58:16:ba:a8:3d:7f:7a:5b:
63:c1:37:4c:56:03:67:c8:fb:80:5b:22:14:07:b8:
de:c1:49:a8:a3:76:96:3d:a7:6d:ae:fa:c4:0d:5a:
22:55:4f:e3:3b:ca:0c:30:ae:1b:6c:56:24:1f:99:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E5:31:F6:A1:0A:F6:8B:E2:3C:41:E6:DD:80:1C:F3:DE:6E:21:4B
X509v3 Authority Key Identifier:
keyid:5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:c4:93:8d:74:8c:97:3f:ae:e6:1a:ef:73:e2:8a:1d:be:56:
aa:37:20:d1:73:33:c6:0b:61:fc:09:9b:bd:f2:f5:a9:fa:63:
bd:c0:6f:68:20:37:13:35:c5:0f:11:47:2f:09:39:0a:eb:6f:
ee:eb:ee:d2:aa:e9:59:20:a0:f6:88:ce:5e:b4:cb:d4:ab:35:
4a:13:fe:9b:5f:b1:32:c9:8b:52:1f:ac:99:34:23:be:98:1f:
2d:f8:a6:28:82:89:57:de:5e:6e:40:0d:58:e6:5f:76:ec:e6:
09:e5:27:9e:df:db:9a:87:94:31:d3:18:da:3b:d5:f8:46:ee:
77:e8:a7:ca:6c:c8:00:74:af:46:6a:5b:d5:d1:1b:77:80:d7:
eb:d9:77:3f:39:af:c1:f4:ee:da:16:b3:1a:92:a1:0e:8a:1b:
fa:45:21:9b:19:ca:6d:47:c4:90:56:a3:2e:4b:a5:92:36:24:
0a:13:28:31:bb:a6:8f:a0:1d:1c:a2:9d:9c:d8:d2:9b:29:0e:
30:e2:77:7f:65:94:96:48:c2:e6:89:1b:66:47:87:cc:ee:a2:
0b:74:ca:5a:fd:72:ff:9a:00:b7:5a:5d:72:42:5a:f9:ca:c1:
35:23:71:94:68:c7:56:21:88:ea:71:b5:c1:11:94:a1:99:3e:
5a:97:24:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:18 2025 by rpki-client