Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
File: XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft (raw, json)
Hash identifier: jVSA7sn/fR34tiaRzQHScdbED4maYtaBQXA+/V6dxJI=
Subject key identifier: 4C:BA:34:74:33:9F:54:3D:AE:52:4B:34:F0:E5:C4:8A:86:ED:3E:07
Authority key identifier: 5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
Certificate issuer: /CN=F3678967AF/serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Certificate serial: 0805
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
Manifest number: 0800
Signing time: Wed 17 Sep 2025 01:45:18 +0000
Manifest this update: Wed 17 Sep 2025 01:45:17 +0000
Manifest next update: Fri 19 Sep 2025 01:45:17 +0000
Files and hashes: 1: XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl (hash: Lw/r540JkUlAhhl6Nw5NlmmRg8HEyY//ltY3ALv/4IU=)
2: 420B22A27D0111F0BA56A0A5DAE4EC9C.roa (hash: FgbgmTnolN1lRJKNhlZr9zZr69rYAV0zr0aJY9PwsCo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 01:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3678967AF, serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Validity
Not Before: Sep 17 01:45:17 2025 GMT
Not After : Sep 19 01:45:17 2025 GMT
Subject: CN=68ca12ae-9c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8e:60:c0:6f:43:d5:a4:c4:11:e4:fa:7a:a8:
1c:1d:c2:66:d2:6d:1c:83:ba:e9:2b:6f:8e:48:86:
be:10:56:f5:f9:6b:4f:11:da:8a:49:7e:93:65:5f:
87:f2:58:86:9d:b1:ee:d3:21:36:4c:c7:83:7d:04:
1f:48:f0:fb:bc:73:2a:80:c4:0a:19:cf:0e:51:fc:
07:70:f3:e5:30:ac:8d:bd:47:1f:af:7b:1d:85:2a:
75:ad:38:7e:b0:de:81:6d:03:0a:01:1e:8a:81:cd:
df:c3:d7:5c:51:3b:52:59:2e:39:58:58:69:e6:a9:
19:e8:55:5b:53:5e:56:39:bd:16:dc:22:81:00:16:
d6:c7:70:3e:f4:bf:ba:c8:72:4c:8b:da:37:5c:ad:
8c:6c:69:3a:1a:d7:78:f5:32:2a:f2:fd:dc:10:75:
89:52:00:35:c7:9a:13:5c:7a:c4:96:cd:9a:ac:ed:
fe:1c:90:04:5a:96:f6:38:ae:d3:1e:fe:0d:bc:db:
f4:4c:44:5b:96:cc:51:10:52:c7:75:f2:8d:54:ff:
4d:c7:42:3b:7c:7c:f0:53:cb:ff:54:31:fc:99:20:
b5:9b:9e:75:d3:b2:f4:e5:04:e8:15:ca:89:70:6a:
03:60:01:f3:b1:e3:b1:90:61:8f:40:85:01:26:6a:
24:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BA:34:74:33:9F:54:3D:AE:52:4B:34:F0:E5:C4:8A:86:ED:3E:07
X509v3 Authority Key Identifier:
keyid:5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ad:b9:71:fb:aa:c3:5b:53:9f:00:8f:31:eb:93:79:a6:86:
ea:d0:b0:1c:76:8c:b5:eb:98:95:e5:b2:de:de:65:44:cf:e7:
b3:1c:21:47:16:37:5b:0b:58:67:09:29:d0:dc:57:a8:bd:08:
3d:7b:90:29:59:ed:50:3e:75:6d:e1:a2:20:8f:55:1c:c5:ae:
80:ec:08:e0:9d:d7:50:ad:0e:72:d5:78:6f:03:ed:5e:98:53:
fc:f4:46:6c:7b:d5:3f:b0:59:d3:b6:f4:10:8e:c5:02:e6:e9:
c2:df:57:c2:3e:55:75:cd:a6:da:c7:93:60:49:57:7a:cc:95:
6a:1b:59:f8:07:49:c3:b2:e9:a2:48:f0:ec:d5:70:f3:1a:c9:
75:3a:63:83:af:d8:c9:a0:77:c0:a1:75:2b:de:46:10:b0:48:
92:cc:74:f2:7e:b0:83:54:e6:a1:8b:4e:74:5d:9c:d5:8c:67:
91:d1:6b:7b:ec:ca:c4:4f:1c:a9:45:53:3a:62:71:b6:ca:94:
d9:cb:d7:e5:66:fb:e9:b4:e7:de:09:f7:a7:cd:f7:8e:17:4d:
5c:4a:4c:e3:71:57:45:56:31:63:58:27:df:5e:89:43:d3:08:
2a:9e:ca:ef:25:26:ae:66:a6:32:34:a9:b7:9a:c8:e9:10:f6:
6f:12:03:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:38:03 2025 by rpki-client