Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
File: XudwaWdbdcoke_xc0zALF7WznDQ.mft (raw, json)
Hash identifier: 8XVOaZ0mwkdQoegpLXnJrsX/X3xYn80mDOYTI/s7Mls=
Subject key identifier: 5F:34:5A:72:D8:86:1B:BA:0D:39:38:F4:6A:A8:74:27:6C:72:03:A6
Authority key identifier: 5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
Certificate issuer: /CN=F3646008AF/serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Certificate serial: 0739
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
Manifest number: 0739
Signing time: Wed 17 Sep 2025 01:55:04 +0000
Manifest this update: Wed 17 Sep 2025 01:55:03 +0000
Manifest next update: Fri 19 Sep 2025 01:55:03 +0000
Files and hashes: 1: XudwaWdbdcoke_xc0zALF7WznDQ.crl (hash: yCX6OqgTTxFcTk5sSSw/LXpVCdZ4Fsw6Mx9PC85wrk8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 01:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1849 (0x739)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3646008AF, serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Validity
Not Before: Sep 17 01:55:03 2025 GMT
Not After : Sep 19 01:55:03 2025 GMT
Subject: CN=68ca14f8-5b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:67:3b:8b:5e:b2:6a:2a:9f:9b:85:eb:8c:4f:
3b:0e:22:14:e5:a2:de:b8:75:c4:da:f8:59:3c:d4:
a3:e2:5a:dd:10:68:f2:14:9e:83:f1:e2:c1:8f:57:
6d:7a:44:e9:6d:76:f9:3c:65:07:ac:ca:19:35:33:
a4:78:4c:d3:50:78:44:c0:31:d9:19:fa:5c:01:53:
bb:03:ad:13:50:52:41:54:8f:d4:04:68:56:fe:6e:
57:79:a7:5c:63:2a:2f:47:15:81:bc:c7:e5:95:a0:
b9:13:7f:e2:41:6b:e8:99:9a:83:a3:c5:c2:e5:d0:
cf:15:77:20:6c:6c:17:4d:16:db:5f:76:52:75:3f:
43:11:91:b7:3d:0d:e8:9f:53:bc:c0:46:02:90:87:
7b:a0:2f:df:37:09:c9:80:27:42:55:67:80:27:1a:
20:b5:02:3e:c7:b0:5a:7d:85:7f:3a:de:c6:a8:c1:
87:5a:23:31:60:a1:6d:4d:26:32:2d:fc:e7:7c:d0:
b6:a7:a4:c8:83:df:54:dc:ad:04:db:e7:3a:24:f1:
f3:b9:5d:ce:9d:26:f6:c8:20:03:bb:65:30:9c:a3:
8b:4e:ab:80:27:aa:d9:b1:80:8e:61:d3:76:0f:6c:
81:bb:01:63:06:14:bc:52:a9:7f:0a:36:fe:ea:33:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:34:5A:72:D8:86:1B:BA:0D:39:38:F4:6A:A8:74:27:6C:72:03:A6
X509v3 Authority Key Identifier:
keyid:5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:29:76:e0:01:5a:db:c1:02:cc:65:57:df:b6:a7:16:88:fd:
6d:be:47:d0:6f:82:61:fe:15:8b:4c:e0:5b:91:aa:66:39:18:
95:51:60:cd:83:01:b6:6a:7b:7e:1b:a7:d5:1f:8f:74:aa:1a:
80:d9:b0:3f:b6:93:e1:53:97:4f:fe:ea:50:f3:e2:40:9f:13:
c6:c6:6c:79:f8:e9:76:91:1e:ef:5b:02:ad:cc:e7:ba:75:92:
20:d8:7c:9f:ab:cd:85:57:43:ee:1c:ed:c2:f3:29:09:2d:a1:
99:b0:2c:48:ce:5f:8f:18:c9:d6:a1:2d:fd:b0:c1:ea:ba:c9:
3c:0a:f5:4a:26:96:c9:b2:07:ba:62:5f:38:66:34:a4:3a:9c:
98:5d:92:e3:4b:5d:b3:4d:b8:82:7d:1d:76:f8:87:51:6b:8d:
76:f1:a5:ba:c7:33:be:1f:a8:18:31:b2:7e:d8:87:ae:53:89:
9b:a9:08:6c:bb:f2:f7:41:c3:98:42:48:3c:c8:eb:8e:45:8c:
0a:41:29:d9:20:a8:1a:55:a8:87:aa:9b:c3:e7:60:63:1c:e9:
2b:5f:5b:52:6d:e8:cb:40:19:16:c1:01:37:e7:c1:5a:7b:f6:
a7:ee:3a:68:60:92:12:32:25:a6:89:b3:a9:28:ac:7d:c8:c7:
17:d8:f7:4b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBzkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDYwMDhBRjExMC8GA1UEBRMoNUVFNzcwNjk2NzVCNzVDQTI0N0JGQzVDRDMzMDBC
MTdCNUIzOUMzNDAeFw0yNTA5MTcwMTU1MDNaFw0yNTA5MTkwMTU1MDNaMBgxFjAU
BgNVBAMTDTY4Y2ExNGY4LTViNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPZzuLXrJqKp+bheuMTzsOIhTlot64dcTa+Fk81KPiWt0QaPIUnoPx4sGP
V216ROltdvk8ZQesyhk1M6R4TNNQeETAMdkZ+lwBU7sDrRNQUkFUj9QEaFb+bld5
p1xjKi9HFYG8x+WVoLkTf+JBa+iZmoOjxcLl0M8VdyBsbBdNFttfdlJ1P0MRkbc9
DeifU7zARgKQh3ugL983CcmAJ0JVZ4AnGiC1Aj7HsFp9hX863saowYdaIzFgoW1N
JjIt/Od80LanpMiD31TcrQTb5zok8fO5Xc6dJvbIIAO7ZTCco4tOq4AnqtmxgI5h
03YPbIG7AWMGFLxSqX8KNv7qM1KNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUXzRa
ctiGG7oNOTj0aqh0J2xyA6YwHwYDVR0jBBgwFoAUXudwaWdbdcoke/xc0zALF7Wz
nDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ2MDA4Lzc4NTE3NUNBMDg4RDExRUJBQUQxQkM1QkY4QUVBMjI4L1h1ZHdh
V2RiZGNva2VfeGMwekFMRjdXem5EUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1h1ZHdhV2RiZGNva2VfeGMwekFMRjdXem5EUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDYwMDgvNzg1MTc1Q0EwODhEMTFFQkFBRDFCQzVCRjhB
RUEyMjgvWHVkd2FXZGJkY29rZV94YzB6QUxGN1d6bkRRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC7KXbgAVrbwQLMZVfftqcWiP1tvkfQ
b4Jh/hWLTOBbkapmORiVUWDNgwG2ant+G6fVH490qhqA2bA/tpPhU5dP/upQ8+JA
nxPGxmx5+Ol2kR7vWwKtzOe6dZIg2Hyfq82FV0PuHO3C8ykJLaGZsCxIzl+PGMnW
oS39sMHqusk8CvVKJpbJsge6Yl84ZjSkOpyYXZLjS12zTbiCfR12+IdRa4128aW6
xzO+H6gYMbJ+2IeuU4mbqQhsu/L3QcOYQkg8yOuORYwKQSnZIKgaVaiHqpvD52Bj
HOkrX1tSbejLQBkWwQE358Fae/an7jpoYJISMiWmibOpKKx9yMcX2PdL
-----END CERTIFICATE-----
Generated at Wed Sep 17 23:21:30 2025 by rpki-client