Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
File: X8N97OtwCLunQTR4RbdrR2d66mk.mft (raw, json)
Hash identifier: FRZZCC0A0LpFsczcK+G4bAgG1PrCIZkKxOCERpJHq1c=
Subject key identifier: 25:72:51:2C:8F:99:5F:F9:C2:11:D1:1B:35:4A:B6:F6:3B:D5:C0:7F
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Certificate issuer: /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial: 02D7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
Manifest number: 02D1
Signing time: Wed 17 Sep 2025 03:50:02 +0000
Manifest this update: Wed 17 Sep 2025 03:50:01 +0000
Manifest next update: Fri 19 Sep 2025 03:50:01 +0000
Files and hashes: 1: X8N97OtwCLunQTR4RbdrR2d66mk.crl (hash: 6C+zvYBI4B289X0FKI0LxSAfoFbFQ+9DA7DBMUYrjuI=)
2: 6DA5A2565FD511EFA88ABB88762E951A.roa (hash: ro2wQBC/RLqE0zVlMpswfR5i9xWzti7o20ft60EsccY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 03:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727 (0x2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3650567AF, serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Validity
Not Before: Sep 17 03:50:01 2025 GMT
Not After : Sep 19 03:50:01 2025 GMT
Subject: CN=68ca2fea-b548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:56:71:fc:1d:b9:39:83:f1:62:9d:4e:0b:
a1:24:59:f4:86:57:21:25:b7:91:a7:85:ff:aa:90:
4f:c3:b5:76:08:77:a6:7e:13:52:07:66:11:a2:76:
12:92:ec:23:9b:a1:6c:c8:93:2f:67:da:4e:62:c1:
82:ea:dc:4b:ab:27:aa:4f:f2:48:df:53:23:c4:8c:
fa:e5:d5:0f:a8:72:ed:e9:88:91:87:7b:56:7c:f6:
12:43:fe:76:14:c1:d7:81:7c:57:aa:11:33:68:f8:
d6:c6:97:d1:d5:24:c7:90:1e:4d:b2:40:34:80:33:
fa:58:61:7b:d7:18:00:64:52:0d:66:b4:2d:42:5f:
42:dd:ad:d5:85:e5:f3:1e:17:08:bc:4f:3e:6f:02:
4f:90:62:26:51:b6:a6:a2:4b:48:12:d8:ef:5a:8b:
8e:35:d8:89:f3:b5:e2:d1:67:7c:f9:48:72:ca:f5:
e9:fe:94:43:85:49:18:4a:2c:1d:50:74:db:c7:7b:
98:06:e3:e0:64:d6:13:1b:72:ff:0d:c9:9a:02:0c:
19:6e:78:0a:9a:8d:0d:03:34:c5:e8:23:af:a7:f0:
69:b5:ff:68:48:62:c0:57:46:56:4f:a3:71:43:03:
26:db:b9:45:f3:b8:3d:d2:af:b1:7c:11:01:17:6f:
a2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:72:51:2C:8F:99:5F:F9:C2:11:D1:1B:35:4A:B6:F6:3B:D5:C0:7F
X509v3 Authority Key Identifier:
keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b3:ca:00:7f:af:ea:e8:6f:20:97:07:a3:39:1e:40:95:f5:
8f:ae:f4:8e:43:4c:aa:39:92:7b:0d:8e:49:7d:56:50:73:fc:
cf:37:3c:eb:da:16:5f:50:55:41:04:73:c2:38:ea:2b:f4:a5:
9d:b9:09:de:e0:02:ec:9d:ee:a1:ba:35:1b:92:67:69:d0:5d:
d5:2a:41:a6:68:07:2e:44:94:ed:d4:e9:2e:86:04:dd:ac:e1:
1c:4b:d7:33:5c:61:5a:c5:77:c3:26:88:fb:ac:d7:63:35:59:
02:19:a4:c2:12:84:1f:27:16:3d:c7:26:d3:73:4f:a5:0c:eb:
8a:d1:5b:9c:d8:2f:37:b9:ee:c7:7e:c1:56:d5:a4:1e:f3:6a:
d6:7e:e3:e9:43:df:ff:08:95:e4:72:37:dc:b9:65:44:82:b3:
c0:8c:24:6a:99:f7:9c:58:b8:36:0e:96:b7:ab:aa:ef:58:08:
df:6e:ca:bd:94:ff:11:23:57:af:8d:72:5d:ea:75:e0:cb:7b:
fb:ad:48:1b:19:2a:28:81:36:fb:6b:0c:ff:49:46:6a:64:ce:
7f:ed:58:15:14:05:fc:55:41:45:27:1b:26:54:54:8d:00:10:
39:9c:96:48:d0:c1:d2:db:05:1b:84:f6:58:56:79:a6:a6:f1:
1c:0a:4e:33
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTA1NjdBRjExMC8GA1UEBRMoNUZDMzdERUNFQjcwMDhCQkE3NDEzNDc4NDVCNzZC
NDc2NzdBRUE2OTAeFw0yNTA5MTcwMzUwMDFaFw0yNTA5MTkwMzUwMDFaMBgxFjAU
BgNVBAMTDTY4Y2EyZmVhLWI1NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyolZx/B25OYPxYp1OC6EkWfSGVyElt5Gnhf+qkE/DtXYId6Z+E1IHZhGi
dhKS7COboWzIky9n2k5iwYLq3EurJ6pP8kjfUyPEjPrl1Q+ocu3piJGHe1Z89hJD
/nYUwdeBfFeqETNo+NbGl9HVJMeQHk2yQDSAM/pYYXvXGABkUg1mtC1CX0LdrdWF
5fMeFwi8Tz5vAk+QYiZRtqaiS0gS2O9ai4412InzteLRZ3z5SHLK9en+lEOFSRhK
LB1QdNvHe5gG4+Bk1hMbcv8NyZoCDBlueAqajQ0DNMXoI6+n8Gm1/2hIYsBXRlZP
o3FDAybbuUXzuD3Sr7F8EQEXb6KNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUJXJR
LI+ZX/nCEdEbNUq29jvVwH8wHwYDVR0jBBgwFoAUX8N97OtwCLunQTR4RbdrR2d6
6mkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUwNTY3LzMzRTMzMDI2NzRCQTExRUVBQTk0QzE3MzRBRDlFNkZDL1g4Tjk3
T3R3Q0x1blFUUjRSYmRyUjJkNjZtay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1g4Tjk3T3R3Q0x1blFUUjRSYmRyUjJkNjZtay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTA1NjcvMzNFMzMwMjY3NEJBMTFFRUFBOTRDMTczNEFE
OUU2RkMvWDhOOTdPdHdDTHVuUVRSNFJiZHJSMmQ2Nm1rLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB6s8oAf6/q6G8glwejOR5AlfWPrvSO
Q0yqOZJ7DY5JfVZQc/zPNzzr2hZfUFVBBHPCOOor9KWduQne4ALsne6hujUbkmdp
0F3VKkGmaAcuRJTt1OkuhgTdrOEcS9czXGFaxXfDJoj7rNdjNVkCGaTCEoQfJxY9
xybTc0+lDOuK0Vuc2C83ue7HfsFW1aQe82rWfuPpQ9//CJXkcjfcuWVEgrPAjCRq
mfecWLg2Dpa3q6rvWAjfbsq9lP8RI1evjXJd6nXgy3v7rUgbGSoogTb7awz/SUZq
ZM5/7VgVFAX8VUFFJxsmVFSNABA5nJZI0MHS2wUbhPZYVnmmpvEcCk4z
-----END CERTIFICATE-----
Generated at Thu Sep 18 03:23:04 2025 by rpki-client