Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
File: XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft (raw, json)
Hash identifier: szmp2NmkpIb5Uilgo7dY6cfyxlDBrZltj5zBTXRKNzk=
Subject key identifier: 81:B9:D5:9E:18:0B:32:05:2C:22:C1:F5:23:B1:CC:87:88:B6:8F:37
Authority key identifier: 5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14
Certificate issuer: /CN=F36795C4AR/serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
Certificate serial: 0947
Authority info access: rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
Manifest number: 0946
Signing time: Mon 20 Oct 2025 01:31:23 +0000
Manifest this update: Mon 20 Oct 2025 01:31:22 +0000
Manifest next update: Wed 22 Oct 2025 01:31:22 +0000
Files and hashes: 1: XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl (hash: 3hagW1L2dlymbYmWq2qnE3vrXetr17dlG3YefmhpyqQ=)
2: 85DEE92291EF11E9ABCCB07EF8AEA228.roa (hash: 3K2tDuP6LQooSlB5SsHZUahCN8ylMLHTNlp/RyDYHoc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2375 (0x947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36795C4AR, serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
Validity
Not Before: Oct 20 01:31:22 2025 GMT
Not After : Oct 22 01:31:22 2025 GMT
Subject: CN=68f590eb-5aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ca:50:1f:ba:58:4b:9a:17:0c:16:38:91:c5:
16:43:f4:5c:db:fe:2f:60:d8:23:11:56:d2:e4:0d:
f1:e3:0f:d7:cc:81:b7:40:f4:e0:38:df:00:37:db:
38:d4:a9:8f:c9:f5:6d:0a:85:f6:99:c0:14:c5:b0:
23:fb:77:20:e2:98:48:b2:28:c0:40:db:91:fc:b3:
a7:aa:21:bb:d0:9f:0b:85:0d:cc:0a:9f:74:59:4e:
2a:8f:70:e4:dc:0e:d7:30:cf:61:5d:bf:62:b9:0a:
01:b3:08:64:a2:ae:fd:21:86:c3:90:4d:16:95:9e:
9f:a9:6c:a8:59:11:e7:30:27:ce:3f:0d:48:ee:4e:
44:b1:78:10:ff:e4:8f:81:4c:c5:2a:43:8f:2c:e5:
24:cf:a7:a7:e3:97:22:33:82:b4:41:57:6f:58:bc:
ee:00:85:54:f2:9d:f3:6e:d0:36:99:e6:51:ac:2d:
b8:75:91:ae:18:6a:f0:cf:45:e4:12:04:60:78:aa:
ca:3d:58:6b:f1:f0:84:3a:3b:b3:e4:43:f3:29:ad:
77:47:b5:8b:47:1b:1f:4c:b2:35:6b:a3:81:2d:5e:
18:8a:cc:0f:12:08:b8:dd:59:aa:29:f6:75:e2:a6:
53:b2:e2:02:92:e3:3b:e6:cb:b4:53:cc:37:12:9a:
35:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B9:D5:9E:18:0B:32:05:2C:22:C1:F5:23:B1:CC:87:88:B6:8F:37
X509v3 Authority Key Identifier:
keyid:5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3e:2a:16:df:8b:f8:06:63:e5:b4:ca:b0:d2:fc:0a:dd:01:
16:3f:5f:b5:9c:fb:ad:50:d8:d9:39:87:29:33:40:e3:38:91:
e1:29:32:c7:d9:5a:4c:3a:35:57:6b:23:4d:d6:dc:f8:81:72:
67:e3:d1:ed:07:4b:95:94:3b:bd:39:20:57:56:5d:4f:fc:1c:
eb:96:3f:d7:75:a4:c7:b1:42:a5:6e:1c:fd:7d:99:53:8b:21:
ad:d2:b3:2f:81:b9:83:1b:25:99:7c:15:e3:9c:73:49:ca:29:
be:e3:9e:54:be:9f:e8:bb:ba:d3:b9:51:15:69:70:51:42:85:
b6:1e:67:ff:5e:a9:64:08:64:0b:70:cb:e6:88:16:e6:12:e7:
8d:99:3f:ac:fe:e8:21:48:71:6f:c5:28:95:51:f0:c1:7b:4a:
e6:8f:b1:e8:f0:fc:b2:3b:e9:b3:f1:08:8b:e6:20:a1:3b:4f:
e3:db:51:86:98:cb:fa:bd:fe:3d:19:92:b2:b0:d8:1b:8f:0f:
9d:f8:04:6c:51:f5:96:db:7b:a9:c6:78:b8:cc:1b:80:2e:d2:
4f:29:12:8e:d7:71:1f:22:05:cd:c0:76:12:10:6e:5e:d4:86:
af:48:27:d0:de:dc:75:2d:25:b6:50:8b:a4:7a:49:3c:12:de:
f6:ba:cd:5f
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCUcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzk1QzRBUjExMC8GA1UEBRMoNUREMTlDNjdGMTNFNjNEN0FEQTFBRUFDOEI3N0FD
QzA2M0U5RTUxNDAeFw0yNTEwMjAwMTMxMjJaFw0yNTEwMjIwMTMxMjJaMBgxFjAU
BgNVBAMTDTY4ZjU5MGViLTVhZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPylAfulhLmhcMFjiRxRZD9Fzb/i9g2CMRVtLkDfHjD9fMgbdA9OA43wA3
2zjUqY/J9W0KhfaZwBTFsCP7dyDimEiyKMBA25H8s6eqIbvQnwuFDcwKn3RZTiqP
cOTcDtcwz2Fdv2K5CgGzCGSirv0hhsOQTRaVnp+pbKhZEecwJ84/DUjuTkSxeBD/
5I+BTMUqQ48s5STPp6fjlyIzgrRBV29YvO4AhVTynfNu0DaZ5lGsLbh1ka4YavDP
ReQSBGB4qso9WGvx8IQ6O7PkQ/MprXdHtYtHGx9MsjVro4EtXhiKzA8SCLjdWaop
9nXiplOy4gKS4zvmy7RTzDcSmjX5AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUgbnV
nhgLMgUsIsH1I7HMh4i2jzcwHwYDVR0jBBgwFoAUXdGcZ/E+Y9etoa6si3eswGPp
5RQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc5NUM0L0U4NDcwM0JDOTFFRDExRTlCMDlFNzQ3REY4QUVBMjI4L1hkR2Na
X0UtWTlldG9hNnNpM2Vzd0dQcDVSUS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1hkR2NaX0UtWTlldG9hNnNpM2Vzd0dQcDVSUS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2Nzk1QzQvRTg0NzAzQkM5MUVEMTFFOUIwOUU3NDdERjhBRUEy
MjgvWGRHY1pfRS1ZOWV0b2E2c2kzZXN3R1BwNVJRLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7PioW34v4BmPltMqw0vwK3QEWP1+1nPut
UNjZOYcpM0DjOJHhKTLH2VpMOjVXayNN1tz4gXJn49HtB0uVlDu9OSBXVl1P/Bzr
lj/XdaTHsUKlbhz9fZlTiyGt0rMvgbmDGyWZfBXjnHNJyim+455Uvp/ou7rTuVEV
aXBRQoW2Hmf/XqlkCGQLcMvmiBbmEueNmT+s/ughSHFvxSiVUfDBe0rmj7Ho8Pyy
O+mz8QiL5iChO0/j21GGmMv6vf49GZKysNgbjw+d+ARsUfWW23upxni4zBuALtJP
KRKO13EfIgXNwHYSEG5e1IavSCfQ3tx1LSW2UIukekk8Et72us1f
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:55 2025 by rpki-client