Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
File: XK2jLPsAGrpuTJ9SE9kodlsVozc.mft (raw, json)
Hash identifier: 0B2LebAS7bl/thZPtUPFLmIA/saeeKCAsJDA15x2Z7g=
Subject key identifier: 6B:D1:C6:89:E7:25:81:9E:90:0F:10:9A:A5:24:FC:43:1E:B6:F9:DE
Authority key identifier: 5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
Certificate issuer: /CN=F368588EAF/serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Certificate serial: 08C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
Manifest number: 08B7
Signing time: Sun 27 Jul 2025 01:39:23 +0000
Manifest this update: Sun 27 Jul 2025 01:39:22 +0000
Manifest next update: Tue 29 Jul 2025 01:39:22 +0000
Files and hashes: 1: XK2jLPsAGrpuTJ9SE9kodlsVozc.crl (hash: UOsIc22D1ycsYmf2xEPOk1CWRQGGOe5DY74A8Efly6w=)
2: E90920E88E6511EBBF85CD6BF8AEA228.roa (hash: 2lqZqDUQcUKxveTR9cI5M5tuAOp//Ev36g7no9oTmfc=)
3: B45912FE8E6511EB8C41896BF8AEA228.roa (hash: qKKMDXSoDlqwiHmOGrIIdcwys6RCpAU+b2nSH+ukCFY=)
4: 82AA23C48E6511EB87AB596BF8AEA228.roa (hash: Awf3KcwUqHS+Tb+h21An3tUV9Zndn4ovZSX7QkhwLRI=)
5: 314349A68E6611EB8D43336CF8AEA228.roa (hash: Thxt35OuW2OHwRepR9n+aTVJ70XOv0V6vWotqPw7F9g=)
6: 524153BE8E6611EBB85F5E6CF8AEA228.roa (hash: 2hd9ZQH6yn17Npd0+aOdMdIMVFAkEErgQuvgi60v08M=)
7: 5B5AB2F28E6511EB82C6206BF8AEA228.roa (hash: uqU9yrUWC7VxCjK9hx7zhOvnfnJosiQgLAmWL6ofW8s=)
8: 6001068C237F11EFAF71141F7DDC24C2.roa (hash: Fe1hHfr+f3y3JImtSfxXw39BMD+ou4/AEKixzkcLodk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2243 (0x8c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368588EAF, serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Validity
Not Before: Jul 27 01:39:22 2025 GMT
Not After : Jul 29 01:39:22 2025 GMT
Subject: CN=6885834b-d83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:05:0b:a4:2b:4b:16:9c:16:c3:df:c7:5e:
0e:11:90:61:11:84:0c:cf:9c:08:93:ed:8b:b7:d6:
c8:39:77:3e:62:46:cf:fd:b7:03:7d:05:c0:80:53:
7e:68:f6:5f:83:e6:6b:af:65:10:9c:ce:8c:94:f6:
de:1d:2d:1c:d5:7c:c4:ba:8b:94:ff:1a:1f:f7:7c:
7f:aa:3c:88:07:71:49:f1:a9:2a:8d:3f:f0:da:31:
36:3f:41:28:ee:c6:46:77:69:6c:c4:b6:f7:5c:be:
9e:ed:cf:99:46:1a:f8:df:54:a9:fb:27:d2:fd:b5:
e0:e5:8b:1f:10:a4:ae:99:f3:db:80:35:58:19:98:
14:22:95:d2:84:a2:a4:7e:4d:fa:bc:7f:03:fd:63:
20:2f:8b:af:d9:f1:ce:d2:49:84:ea:02:ba:99:58:
b5:e5:a2:8f:b6:5b:76:0f:93:df:06:dd:bb:42:4d:
58:d3:e6:0e:fa:4d:ca:8f:d8:d9:0d:98:bf:76:52:
89:d0:a5:9d:33:52:62:1c:36:93:12:93:aa:51:de:
e9:a0:c5:2b:72:ca:68:e0:e6:81:34:7d:cf:c2:30:
18:9e:9a:9d:2d:ea:a9:1e:68:43:83:27:34:b8:08:
e0:e0:ca:5e:5f:c4:27:50:f6:5b:6b:dd:13:a8:fc:
72:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D1:C6:89:E7:25:81:9E:90:0F:10:9A:A5:24:FC:43:1E:B6:F9:DE
X509v3 Authority Key Identifier:
keyid:5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4d:4b:a4:ae:e1:30:bb:aa:89:dc:90:f3:51:43:d2:20:bb:
ef:e0:8e:82:17:58:0e:29:b1:5c:38:9f:12:49:99:b1:0c:aa:
f0:be:8e:86:30:64:2c:22:d8:d5:09:dc:58:fa:41:0a:92:e1:
3b:af:85:35:a1:93:6e:4e:4c:81:0a:d1:ba:6c:82:3d:fb:1b:
a3:54:1c:79:fa:87:2c:f1:79:71:ab:e3:cb:2a:41:aa:49:b9:
64:28:2c:20:7a:ac:e1:fc:be:98:5a:52:c0:16:59:d5:17:22:
0b:c9:e8:09:fb:43:b0:9c:a4:1f:0c:ac:e4:c7:65:f2:38:d7:
a8:a2:b6:6b:b4:f9:71:92:a3:2f:c5:91:56:01:7b:14:65:5f:
1c:e1:94:ad:77:1c:20:61:3d:0e:dd:35:22:6f:ba:79:af:cf:
e5:e0:e8:a8:ca:ff:d1:85:32:76:ea:cc:f0:be:ea:29:37:1b:
59:31:67:47:bd:7c:a8:21:0a:34:39:2d:26:2f:f2:59:a7:6c:
7a:a5:8a:cd:4d:21:89:ff:85:e9:09:32:fc:1c:94:a8:6e:ef:
2d:48:ca:56:60:63:e5:9f:b5:84:3a:2e:bf:5b:28:a7:9b:46:
92:34:6e:d9:1f:c4:1e:5b:b0:ee:db:8a:53:0b:9b:17:b4:a5:
91:72:0b:65
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCMMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODU4OEVBRjExMC8GA1UEBRMoNUNBREEzMkNGQjAwMUFCQTZFNEM5RjUyMTNEOTI4
NzY1QjE1QTMzNzAeFw0yNTA3MjcwMTM5MjJaFw0yNTA3MjkwMTM5MjJaMBgxFjAU
BgNVBAMTDTY4ODU4MzRiLWQ4M2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1AAULpCtLFpwWw9/HXg4RkGERhAzPnAiT7Yu31sg5dz5iRs/9twN9BcCA
U35o9l+D5muvZRCczoyU9t4dLRzVfMS6i5T/Gh/3fH+qPIgHcUnxqSqNP/DaMTY/
QSjuxkZ3aWzEtvdcvp7tz5lGGvjfVKn7J9L9teDlix8QpK6Z89uANVgZmBQildKE
oqR+Tfq8fwP9YyAvi6/Z8c7SSYTqArqZWLXloo+2W3YPk98G3btCTVjT5g76TcqP
2NkNmL92UonQpZ0zUmIcNpMSk6pR3umgxStyymjg5oE0fc/CMBiemp0t6qkeaEOD
JzS4CODgyl5fxCdQ9ltr3ROo/HK3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUa9HG
ieclgZ6QDxCapST8Qx62+d4wHwYDVR0jBBgwFoAUXK2jLPsAGrpuTJ9SE9kodlsV
ozcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg1ODhFL0EzODIzOTU2Q0IyRjExRTk4OTBEMUIyN0Y4QUVBMjI4L1hLMmpM
UHNBR3JwdVRKOVNFOWtvZGxzVm96Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hLMmpMUHNBR3JwdVRKOVNFOWtvZGxzVm96Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODU4OEUvQTM4MjM5NTZDQjJGMTFFOTg5MEQxQjI3RjhB
RUEyMjgvWEsyakxQc0FHcnB1VEo5U0U5a29kbHNWb3pjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAMTUukruEwu6qJ3JDzUUPSILvv4I6C
F1gOKbFcOJ8SSZmxDKrwvo6GMGQsItjVCdxY+kEKkuE7r4U1oZNuTkyBCtG6bII9
+xujVBx5+ocs8Xlxq+PLKkGqSblkKCwgeqzh/L6YWlLAFlnVFyILyegJ+0OwnKQf
DKzkx2XyONeoorZrtPlxkqMvxZFWAXsUZV8c4ZStdxwgYT0O3TUib7p5r8/l4Oio
yv/RhTJ26szwvuopNxtZMWdHvXyoIQo0OS0mL/JZp2x6pYrNTSGJ/4XpCTL8HJSo
bu8tSMpWYGPln7WEOi6/Wyinm0aSNG7ZH8QeW7Du24pTC5sXtKWRcgtl
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:03 2025 by rpki-client