Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
File: DiXC-NXlAp5pEJ686yVczjVJFv4.mft (raw, json)
Hash identifier: nhngdMho2pDqlKNtbXFjwI96XGq03EoM8aKOPiRyGkI=
Subject key identifier: B1:EB:17:2A:6E:3E:77:78:1F:8A:F7:61:12:11:A1:E8:C2:5F:CE:81
Authority key identifier: 0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE
Certificate issuer: /CN=F369CA26AF/serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
Certificate serial: 021F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
Manifest number: 021E
Signing time: Sun 11 May 2025 04:11:21 +0000
Manifest this update: Sun 11 May 2025 04:11:20 +0000
Manifest next update: Tue 13 May 2025 04:11:20 +0000
Files and hashes: 1: DiXC-NXlAp5pEJ686yVczjVJFv4.crl (hash: Lu215+t4aJZG5jzTKeNjA+c09/35McwigS8vn4KHmTY=)
2: 8C7C1810938711EE9A4CB809D25BE465.roa (hash: WJPtWXyF4HbsBRlcRAZ4odD1u13hg/x2iKAvSH5H04k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl
rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 543 (0x21f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369CA26AF, serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
Validity
Not Before: May 11 04:11:20 2025 GMT
Not After : May 13 04:11:20 2025 GMT
Subject: CN=68202368-62fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:09:d2:59:0c:21:06:ff:fd:a4:53:e3:f8:
ca:6b:78:6e:6a:57:58:f2:c9:24:d7:42:33:80:fe:
71:d7:55:0b:e2:d7:be:ee:c1:c6:5e:e2:45:a7:88:
a0:b3:af:06:d8:76:e8:ff:50:99:9d:3b:3a:f7:12:
99:9d:9e:08:bf:11:37:e8:17:e2:b5:ce:f4:52:66:
dd:75:2b:e6:99:ed:4a:dc:ae:32:20:c3:01:8b:36:
76:85:ca:b4:3a:1d:35:45:49:1f:c6:41:07:9b:21:
9c:3f:d5:2f:64:2a:f1:6f:61:46:2c:d7:eb:1c:09:
2f:9b:67:f5:7b:7c:4e:76:5f:60:0d:03:cf:3f:bf:
e8:9e:4a:97:24:3f:f4:a7:ce:77:f6:f9:06:9e:40:
59:46:e0:65:73:5f:ad:1a:0c:6f:81:ac:e6:5e:4f:
8d:c9:df:80:cd:7d:a5:be:18:fe:39:93:b7:f7:20:
c8:34:4f:b0:93:4b:b6:0f:25:e5:37:de:99:fa:9c:
0b:92:1a:db:c5:25:b4:f0:8a:71:2e:c8:10:2d:00:
61:9d:56:05:cd:12:a8:76:ef:6b:d5:ab:bc:53:7a:
9a:2b:bd:a2:4e:54:b5:29:b7:0b:4e:60:08:33:24:
f4:c3:e8:cc:29:5b:9e:6a:03:e8:bf:3e:e5:10:2c:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EB:17:2A:6E:3E:77:78:1F:8A:F7:61:12:11:A1:E8:C2:5F:CE:81
X509v3 Authority Key Identifier:
keyid:0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:bf:70:ec:6e:f5:67:da:02:10:63:fd:57:e9:7b:a1:41:63:
f1:21:2c:81:21:5a:d3:43:fc:d7:36:57:d5:a0:2d:04:a9:27:
36:28:03:a9:50:08:57:5f:0c:64:fb:9d:6f:58:81:dc:b3:f6:
8b:46:0c:23:58:4d:27:09:3c:d5:20:85:6b:9c:cd:d3:a5:10:
b4:da:4d:70:5b:d9:c2:d1:61:67:45:25:ea:9a:58:69:77:77:
66:51:f6:68:0b:8c:51:b3:14:fe:e6:78:3d:fb:0d:ab:35:e3:
08:57:bd:d5:7b:be:2a:85:4b:78:e0:3c:0f:97:4c:d8:dc:04:
99:e3:31:68:47:e5:0b:49:17:bf:f0:bc:7c:79:0e:35:34:11:
0a:7a:61:c2:ae:4f:47:da:f3:9c:df:79:07:96:af:09:61:e2:
65:2b:89:23:19:6a:9c:26:24:c4:fa:4f:8c:96:08:44:fc:ab:
3f:81:60:96:7f:40:8d:ef:76:de:2e:9b:58:71:1b:e9:fb:bd:
a2:57:58:6f:dd:75:66:31:97:90:f5:33:f9:c1:d0:a5:13:2f:
1a:59:c9:ba:31:ed:f2:60:24:f7:dd:7f:86:27:28:27:35:e1:
7d:38:e4:53:1a:b9:7a:ce:33:ae:1c:25:da:ad:af:07:90:b4:
b6:b3:6a:cb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUNBMjZBRjExMC8GA1UEBRMoMEUyNUMyRjhENUU1MDI5RTY5MTA5RUJDRUIyNTVD
Q0UzNTQ5MTZGRTAeFw0yNTA1MTEwNDExMjBaFw0yNTA1MTMwNDExMjBaMBgxFjAU
BgNVBAMTDTY4MjAyMzY4LTYyZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqswnSWQwhBv/9pFPj+MpreG5qV1jyySTXQjOA/nHXVQvi177uwcZe4kWn
iKCzrwbYduj/UJmdOzr3Epmdngi/ETfoF+K1zvRSZt11K+aZ7UrcrjIgwwGLNnaF
yrQ6HTVFSR/GQQebIZw/1S9kKvFvYUYs1+scCS+bZ/V7fE52X2ANA88/v+ieSpck
P/Snznf2+QaeQFlG4GVzX60aDG+BrOZeT43J34DNfaW+GP45k7f3IMg0T7CTS7YP
JeU33pn6nAuSGtvFJbTwinEuyBAtAGGdVgXNEqh272vVq7xTeporvaJOVLUptwtO
YAgzJPTD6MwpW55qA+i/PuUQLG7fAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUsesX
Km4+d3gfivdhEhGh6MJfzoEwHwYDVR0jBBgwFoAUDiXC+NXlAp5pEJ686yVczjVJ
Fv4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlDQTI2L0JFQ0M0NzM4OTM4NTExRUVCQzc3NzIwNkQyNUJFNDY1L0RpWEMt
TlhsQXA1cEVKNjg2eVZjempWSkZ2NC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RpWEMtTlhsQXA1cEVKNjg2eVZjempWSkZ2NC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUNBMjYvQkVDQzQ3Mzg5Mzg1MTFFRUJDNzc3MjA2RDI1
QkU0NjUvRGlYQy1OWGxBcDVwRUo2ODZ5VmN6alZKRnY0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQACv3DsbvVn2gIQY/1X6XuhQWPxISyB
IVrTQ/zXNlfVoC0EqSc2KAOpUAhXXwxk+51vWIHcs/aLRgwjWE0nCTzVIIVrnM3T
pRC02k1wW9nC0WFnRSXqmlhpd3dmUfZoC4xRsxT+5ng9+w2rNeMIV73Ve74qhUt4
4DwPl0zY3ASZ4zFoR+ULSRe/8Lx8eQ41NBEKemHCrk9H2vOc33kHlq8JYeJlK4kj
GWqcJiTE+k+MlghE/Ks/gWCWf0CN73beLptYcRvp+72iV1hv3XVmMZeQ9TP5wdCl
Ey8aWcm6Me3yYCT33X+GJygnNeF9OORTGrl6zjOuHCXara8HkLS2s2rL
-----END CERTIFICATE-----
Generated at Sun May 11 12:43:12 2025 by rpki-client