
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
File: iCYpiV2NtXslQepI-hEmMl4pAgs.mft (raw, json)
Hash identifier: iLkYAGWQMNtV4P6cCUxcx9+S7YUAjO7bqww6tFfuXQo=
Subject key identifier: C9:DD:BE:58:46:27:CC:76:03:28:9B:4B:05:8D:CA:29:39:21:B1:DB
Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Certificate issuer: /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Certificate serial: 100A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
Manifest number: 0FF8
Signing time: Thu 06 Aug 2026 00:57:20 +0000
Manifest this update: Thu 06 Aug 2026 00:57:19 +0000
Manifest next update: Sat 08 Aug 2026 00:57:19 +0000
Files and hashes: 1: iCYpiV2NtXslQepI-hEmMl4pAgs.crl (hash: pwfYh1u6CnPf2CdA47sQXJFMupncwx7yOr1DQxr32Yo=)
2: AC9E51C2D4DE11EBADC42846F8AEA228.roa (hash: 5Ggz3Te0vgHLm/Kbv+y3MXeLbDbWl36tckNnmxxM2SA=)
3: 362D26308F0A11F1B4045FB8CE1D38B0.roa (hash: kD5E6bSsUZ2DDG8n9orOIkkFFuM3fBWfcQRJBlF8WJg=)
4: 1C5E9EFED4DF11EB9185D046F8AEA228.roa (hash: eN89IVYVfW57zUXGRLnTAOoNL9FLLc3vgrYPZzt46O0=)
5: 3469E5FA7B7211F1B243C300CF1D38B0.roa (hash: hX8O0ZYKk9oF6OhSZ3d33KQkrAldnrJfSsy0yCg08EU=)
6: FC67BBDA7B6E11F1A29088ECCE1D38B0.roa (hash: VuyY8Cp5a1XrJqlaUJnSJWCJHjs6SKQq/6s6QpmiIL8=)
7: 4288E4568F0911F1AC9254B1CE1D38B0.roa (hash: GE12R4RqUVM3naTuWSQa6p1HS7+tCOZPLqrhgpTvbNM=)
8: BE6404FAD4DF11EBBA81A747F8AEA228.roa (hash: GH3Ja4snhwLWpp5ydwcxU3wl3XfH8RIdlELqY5Zsj+E=)
9: 78C71AF4D4DF11EB91BD5247F8AEA228.roa (hash: IMIVkoVO+LqKsmy3JpQMcRirZ3OyWFNrawFCvM6fDOk=)
10: 5CB73F807B6D11F1B9662CE4CE1D38B0.roa (hash: N/jRmpdjfA3JkvkzJNhjw9Td49wSKepzVaBgfp3FjXg=)
11: 5781D1FE7B6F11F1A27D61F0CE1D38B0.roa (hash: qY9gTFyxLeKKP3wsEKrrnFvi3gpHzdRPEYsotda9ylk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4106 (0x100a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3620ACFAF, serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Validity
Not Before: Aug 6 00:57:19 2026 GMT
Not After : Aug 8 00:57:19 2026 GMT
Subject: CN=6a73dbf0-7636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:53:ab:94:e1:03:ff:a0:36:55:7a:59:ad:98:
88:77:0c:56:7c:af:02:02:e9:09:be:35:70:20:c3:
25:8d:5a:02:9e:bd:97:b7:99:a8:83:77:a0:e8:1d:
18:d9:2a:ee:89:27:62:ba:3c:89:6d:fa:c5:07:3c:
2f:9d:6e:77:ae:ba:c4:24:c6:e7:6b:08:11:f1:08:
6a:a5:6b:79:76:84:a5:75:fe:27:48:2c:34:e4:71:
cb:98:ec:4d:e8:de:3f:d2:de:22:a8:8e:a6:b9:ab:
9f:28:7b:3f:31:51:73:9a:4f:89:b2:d8:50:74:76:
5b:bd:58:38:60:a9:ac:de:e1:1d:e3:20:b5:a4:f1:
a5:bd:3e:f6:7f:b9:60:4f:bc:3b:d4:c6:9d:58:3f:
55:90:1f:20:88:98:c5:74:65:82:32:f6:c3:69:d3:
7e:df:97:8e:d1:01:e5:61:80:a2:9f:82:97:dc:1e:
5e:8f:2e:e8:e8:18:af:e3:d4:8c:c2:cb:d6:36:46:
41:07:0a:ff:67:e7:30:4e:63:31:9e:c1:d0:d6:52:
b4:96:88:4c:c5:56:0d:a8:8e:1c:c6:4e:99:e1:6f:
ee:de:fc:40:17:86:58:45:6b:d8:82:2e:bf:71:ce:
2c:ad:41:1a:76:fa:e0:18:20:5d:ef:d0:c7:5b:90:
62:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DD:BE:58:46:27:CC:76:03:28:9B:4B:05:8D:CA:29:39:21:B1:DB
X509v3 Authority Key Identifier:
keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:84:61:74:f4:d4:fb:f3:62:ed:14:7a:9d:4c:ab:99:4d:26:
0c:d4:8a:ac:2c:fd:b2:17:ad:a8:02:1d:4c:3e:1e:2c:1c:9e:
b0:70:05:06:41:e9:78:87:94:ff:6b:93:5b:ee:78:c1:4e:ed:
3f:45:f5:dd:ac:e7:f4:75:91:f5:5b:83:13:b4:6d:40:b8:e2:
8f:7b:d1:7b:9b:25:fb:e6:50:1a:99:21:76:6c:6a:b0:e8:41:
04:2b:da:d2:96:37:89:0d:68:40:70:58:19:94:1c:15:59:a9:
4c:84:61:74:14:57:ed:9c:31:ef:7b:b5:92:bb:77:b6:4d:2a:
0c:28:98:cc:0a:56:6a:fb:ef:0d:79:7f:76:21:dc:d0:ae:f1:
85:14:e5:11:8e:c9:0b:51:0d:e9:df:d6:f2:8e:8e:42:77:6c:
a8:dc:a8:4a:7b:4e:1c:c8:c4:68:8c:5f:2f:9c:68:8b:87:e0:
b4:15:de:c8:c2:5c:49:c5:74:e2:66:a2:61:ed:49:cc:38:7d:
bf:73:61:c8:0f:1e:6b:f5:39:36:52:9d:d5:ae:d2:63:fb:95:
bd:ae:cf:96:75:38:8f:bf:47:ad:18:c1:0a:6b:2c:85:1c:f6:
48:9f:1a:86:b2:3c:bd:e2:6f:ea:bc:77:84:47:c7:d5:69:60:
23:7b:09:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:41:31 2026 by rpki-client