Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
File: xNAUrWh1DnXpEEzqXCmztxlY_do.mft (raw, json)
Hash identifier: RTD9oxF6DnKTz1qpk/WbsidwZvnwUAAfF47MGqIRx4o=
Subject key identifier: 8B:5D:1D:0A:89:9E:05:41:8A:DF:DF:9F:B3:E7:42:C5:78:55:26:4E
Authority key identifier: C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
Certificate issuer: /CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Certificate serial: 0352
Authority info access: rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
Manifest number: 0352
Signing time: Sun 19 Oct 2025 03:38:56 +0000
Manifest this update: Sun 19 Oct 2025 03:38:55 +0000
Manifest next update: Tue 21 Oct 2025 03:38:55 +0000
Files and hashes: 1: xNAUrWh1DnXpEEzqXCmztxlY_do.crl (hash: xP35sTr3RXeKsPLb+4hanxSafWwvNveOy9KJUq9yTTg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 03:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 850 (0x352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B8D1AR, serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Validity
Not Before: Oct 19 03:38:55 2025 GMT
Not After : Oct 21 03:38:55 2025 GMT
Subject: CN=68f45d50-4548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:49:02:03:12:55:18:20:c5:91:2e:35:c6:fe:
54:f3:fc:23:ec:70:a8:c2:21:43:73:82:b5:0c:5e:
62:53:ed:0c:91:a0:63:9e:4b:83:ce:b4:22:62:4f:
d5:48:c6:84:10:7e:d2:3d:17:7e:c1:d5:1c:a5:0f:
ea:20:c8:3f:a5:55:6f:73:45:44:f4:14:35:55:4d:
50:bb:70:0a:cc:00:5c:ac:ba:81:d4:6d:7e:52:c2:
e1:6e:b1:d6:0a:42:27:4f:c5:6b:6b:4f:3b:a8:03:
4f:fe:2e:d8:bd:b6:c2:8d:e0:e4:9e:ae:7e:f6:1b:
83:d9:0e:85:f3:6a:46:ff:7c:92:97:b1:70:97:ac:
45:35:eb:aa:32:90:3e:b5:0a:cb:17:6c:3e:be:ea:
12:59:b2:19:2a:7b:dc:17:06:9b:56:69:da:ed:00:
ec:d2:80:3b:5d:97:bb:20:85:87:86:43:3d:ee:3b:
00:0f:a0:c0:50:9d:2d:4d:75:3b:67:de:7b:e4:d8:
4d:9c:da:14:fd:16:c3:3e:94:36:1f:0b:54:65:a0:
61:a5:9d:6c:e2:d0:99:a6:30:1e:a6:76:ff:81:c0:
c6:64:61:6a:ba:a1:5a:3f:8a:a7:ed:8f:77:34:bd:
a5:51:d0:c0:16:53:b2:85:36:e0:bd:da:3e:e3:ff:
de:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5D:1D:0A:89:9E:05:41:8A:DF:DF:9F:B3:E7:42:C5:78:55:26:4E
X509v3 Authority Key Identifier:
keyid:C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1d:74:d9:29:9a:8a:a3:64:15:03:01:59:15:d0:d5:52:5f:
41:d5:14:83:33:8d:20:aa:42:8c:fa:b1:58:35:8d:2f:32:a1:
02:a1:f8:b9:c1:98:a3:75:cb:dd:cd:11:a7:07:64:c0:dd:5d:
a7:59:7c:94:cd:e5:17:bf:d2:80:65:8c:6b:2f:a3:be:2f:b6:
4c:b4:75:da:a7:2c:6b:19:16:c9:e5:29:43:06:d9:42:ac:17:
1a:e1:e9:fc:61:3d:11:d2:36:77:09:d6:c8:53:8c:64:db:93:
cd:cf:44:5b:bb:18:7b:04:d2:ca:5f:9a:25:e7:01:11:c3:f6:
c6:7c:e5:99:59:fc:ce:db:72:14:40:99:8f:12:42:43:f9:b3:
4a:6b:b5:3b:45:33:66:8d:9a:24:a8:13:81:23:99:63:3f:e4:
68:80:15:b9:0a:0e:da:b3:69:9c:c7:c2:5f:9c:89:c2:89:cf:
bc:38:c8:65:19:48:2a:a0:2b:27:a4:eb:1a:15:1a:9e:c4:c7:
b1:56:40:97:44:4b:1c:33:14:f7:c2:38:79:ec:c6:cf:d4:a8:
87:7f:b2:12:92:83:86:97:83:33:f1:c6:11:7f:ab:df:db:6e:
b5:ce:61:81:89:e3:56:8f:d6:01:8e:89:9a:c3:e5:ec:53:ab:
4a:10:aa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:45 2025 by rpki-client