Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
File: DiXC-NXlAp5pEJ686yVczjVJFv4.mft (raw, json)
Hash identifier: sP2w9BduiI3sajwMhvDa7ofQhIB3rMrwgAAVZKD1Epg=
Subject key identifier: 7C:AE:0D:1D:F0:95:D0:8A:F1:59:F1:AF:F4:7C:15:18:AF:F9:46:37
Authority key identifier: 0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE
Certificate issuer: /CN=F369CA26AF/serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
Certificate serial: 0288
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
Manifest number: 0287
Signing time: Sat 23 Aug 2025 04:10:07 +0000
Manifest this update: Sat 23 Aug 2025 04:10:06 +0000
Manifest next update: Mon 25 Aug 2025 04:10:06 +0000
Files and hashes: 1: DiXC-NXlAp5pEJ686yVczjVJFv4.crl (hash: Z/zKXHkKBb2RoOB9HKsSQtgJ+1/pcsAVPXx8cO4Olwo=)
2: 8C7C1810938711EE9A4CB809D25BE465.roa (hash: WJPtWXyF4HbsBRlcRAZ4odD1u13hg/x2iKAvSH5H04k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl
rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 648 (0x288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369CA26AF, serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
Validity
Not Before: Aug 23 04:10:06 2025 GMT
Not After : Aug 25 04:10:06 2025 GMT
Subject: CN=68a93f1f-394d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ab:11:a1:ac:d8:1f:df:64:16:d4:68:e6:71:
f0:81:6b:24:41:53:94:5b:20:51:a5:4f:af:5a:6e:
59:67:40:79:ff:8d:24:32:d8:64:0c:f0:68:19:cd:
8e:4d:5d:24:06:00:a3:db:f7:4a:07:e9:9e:fa:38:
4f:be:da:60:cc:5d:c1:62:29:b2:3e:a8:16:b1:f5:
c3:ab:0c:48:45:fc:15:4b:b0:d8:7a:0d:09:b5:ed:
6c:e9:b4:0a:8d:af:a9:f2:79:65:ff:5a:55:7d:9c:
90:fb:11:9a:03:1c:ff:8e:c2:0a:ec:c6:49:5e:ad:
7a:fb:5d:02:d9:e2:59:13:78:0a:7b:9b:ca:d5:d4:
f6:d4:e1:93:c9:f5:a4:ea:bb:86:ad:16:33:6e:56:
05:79:61:c7:e6:db:c9:c2:e3:82:74:ba:f0:95:a0:
da:7d:c3:5a:61:20:eb:0b:32:5b:39:88:38:39:94:
fd:e3:7b:87:af:b4:45:55:c5:05:a6:57:d7:99:e4:
c5:93:8d:0b:d1:8d:b4:ab:f2:bb:f9:70:4f:0b:47:
f3:09:8e:b6:7a:34:41:94:44:84:57:7e:3b:a6:0a:
74:af:64:5f:f8:6b:bd:50:1c:35:cd:ab:2a:0b:8d:
f6:df:e8:12:d1:c2:fa:50:56:05:cc:33:c7:9a:eb:
dd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AE:0D:1D:F0:95:D0:8A:F1:59:F1:AF:F4:7C:15:18:AF:F9:46:37
X509v3 Authority Key Identifier:
keyid:0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:da:14:b1:50:61:e0:5e:4f:69:ff:31:7d:69:f1:e7:87:e1:
40:b6:99:41:d8:94:d5:b6:52:56:5a:1e:2e:df:0a:71:81:05:
1f:ea:ef:b0:9d:8a:0d:ba:b7:5d:f3:e0:74:d7:fc:e3:76:0c:
a0:d3:90:fc:06:29:7d:4f:c4:25:44:47:86:68:8c:c5:57:9c:
74:47:30:45:e6:3e:ed:9d:52:65:62:da:d2:16:1d:3f:96:74:
79:44:8f:72:ac:be:29:a4:5a:7b:c5:65:25:b3:23:ea:1b:70:
25:f8:3f:16:12:8b:2b:7e:d8:19:f7:69:8a:81:48:50:3d:eb:
eb:ad:1b:c0:94:a3:45:19:0b:57:88:09:b3:1b:dd:60:50:f8:
1d:1d:5e:c9:7c:25:91:54:46:0e:32:58:f1:67:71:08:76:d2:
ed:dc:16:43:23:e5:bc:55:26:59:08:de:ac:f5:17:19:2c:f0:
57:4e:af:a0:20:b1:0e:ea:a3:12:7b:83:b4:81:c6:52:0a:1c:
bb:51:a4:70:09:08:3a:7d:ca:49:d9:45:9a:14:47:53:ab:ad:
9d:93:2e:86:0b:85:2d:a0:ff:01:1d:2e:a5:44:d4:da:5e:67:
ec:fe:44:eb:ad:bf:05:e9:ce:62:be:82:7f:bd:e7:a3:5d:bb:
a5:ec:30:35
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAogwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUNBMjZBRjExMC8GA1UEBRMoMEUyNUMyRjhENUU1MDI5RTY5MTA5RUJDRUIyNTVD
Q0UzNTQ5MTZGRTAeFw0yNTA4MjMwNDEwMDZaFw0yNTA4MjUwNDEwMDZaMBgxFjAU
BgNVBAMTDTY4YTkzZjFmLTM5NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUqxGhrNgf32QW1GjmcfCBayRBU5RbIFGlT69abllnQHn/jSQy2GQM8GgZ
zY5NXSQGAKPb90oH6Z76OE++2mDMXcFiKbI+qBax9cOrDEhF/BVLsNh6DQm17Wzp
tAqNr6nyeWX/WlV9nJD7EZoDHP+OwgrsxklerXr7XQLZ4lkTeAp7m8rV1PbU4ZPJ
9aTqu4atFjNuVgV5Ycfm28nC44J0uvCVoNp9w1phIOsLMls5iDg5lP3je4evtEVV
xQWmV9eZ5MWTjQvRjbSr8rv5cE8LR/MJjrZ6NEGURIRXfjumCnSvZF/4a71QHDXN
qyoLjfbf6BLRwvpQVgXMM8ea691JAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUfK4N
HfCV0IrxWfGv9HwVGK/5RjcwHwYDVR0jBBgwFoAUDiXC+NXlAp5pEJ686yVczjVJ
Fv4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlDQTI2L0JFQ0M0NzM4OTM4NTExRUVCQzc3NzIwNkQyNUJFNDY1L0RpWEMt
TlhsQXA1cEVKNjg2eVZjempWSkZ2NC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RpWEMtTlhsQXA1cEVKNjg2eVZjempWSkZ2NC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUNBMjYvQkVDQzQ3Mzg5Mzg1MTFFRUJDNzc3MjA2RDI1
QkU0NjUvRGlYQy1OWGxBcDVwRUo2ODZ5VmN6alZKRnY0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCX2hSxUGHgXk9p/zF9afHnh+FAtplB
2JTVtlJWWh4u3wpxgQUf6u+wnYoNurdd8+B01/zjdgyg05D8Bil9T8QlREeGaIzF
V5x0RzBF5j7tnVJlYtrSFh0/lnR5RI9yrL4ppFp7xWUlsyPqG3Al+D8WEosrftgZ
92mKgUhQPevrrRvAlKNFGQtXiAmzG91gUPgdHV7JfCWRVEYOMljxZ3EIdtLt3BZD
I+W8VSZZCN6s9RcZLPBXTq+gILEO6qMSe4O0gcZSChy7UaRwCQg6fcpJ2UWaFEdT
q62dky6GC4UtoP8BHS6lRNTaXmfs/kTrrb8F6c5ivoJ/veejXbul7DA1
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:23 2025 by rpki-client