
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
File: HdFv1ov_fKsauRxV2mH8DN_0F0M.mft (raw, json)
Hash identifier: npn//UMyXttmOHN4M8S43mllAleppMBmTNxrwiLnlRs=
Subject key identifier: 49:38:88:A2:44:77:CA:D3:05:87:D7:6D:9D:B0:66:48:DA:87:80:0D
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 076B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
Manifest number: 071C
Signing time: Tue 05 May 2026 02:25:49 +0000
Manifest this update: Tue 05 May 2026 02:25:48 +0000
Manifest next update: Thu 07 May 2026 02:25:48 +0000
Files and hashes: 1: HdFv1ov_fKsauRxV2mH8DN_0F0M.crl (hash: tuJS+oVHyNR+u27/R2NKAHvZH1TM8+App9N7+5dAHZU=)
2: 10E2A890A01911F08A266CD6DAE4EC9C.roa (hash: uKu9ra8g3enObejQKUm/wjJcdExGU8pfNmFnYSCVAb4=)
3: C048D206A01811F0997A41D6DAE4EC9C.roa (hash: jhoKyB34pvQ8xNX0wPMbhbFsPkWoO13xc3OlqRsvcuI=)
4: 87292E6AA01A11F0B32F60DFDAE4EC9C.roa (hash: 4nhIZUohQE/GQcQXC4C3luqxwBzt+U4vIAe9MdQWT3w=)
5: 2AC075F0A01211F0B72F98A6DAE4EC9C.roa (hash: DK9ydq1ArB3m61vuEV0TSdIjbjRvzTpBgOxKOB1u+wk=)
6: 77AA62BAA01511F0949C90BEDAE4EC9C.roa (hash: 6sOD9vGb7J0UzCC20Wr5l2Kfav4Tkbio/BxVpX+Krt0=)
7: 8CEA5014A01411F0BFEF7AB9DAE4EC9C.roa (hash: ZmcJKQbrWBpIwE/ww8rZLi/ZhcQN8hLklhkP+Cw6Oig=)
8: E64C3C80A01411F0B09CCEB9DAE4EC9C.roa (hash: P67lgxodJONkr5xhx0/ZwVViknbWq1lQZGMlbP6XgkY=)
9: 69351E4CA01411F0BCA38EB5DAE4EC9C.roa (hash: qo4MdTAgB+4LLeVyw25K2zTCPmiwmmx5+hWl/ARollk=)
10: 46A7485EA01A11F08EC941DFDAE4EC9C.roa (hash: 7n38aPRG6DfSsFKjw2v4HaAQ/mbzm69U8oIgVsOvwZ8=)
11: 18112B68A01A11F09DD253DDDAE4EC9C.roa (hash: iHeBmMWWg3WS1fulXf5vlgJuM8lCwPKmaQN2zjvQXXM=)
12: 9E2163FAA01811F09E3578D2DAE4EC9C.roa (hash: eDRADB256Y80jHNt3k4fhbDC5ZHAHMd6Ca6OrAqbwIg=)
13: 0B6A72E4A01411F0AD73C0B4DAE4EC9C.roa (hash: Y4CZp0DWrQMWNjkjyjpL08rU6hNDzV3WDuwJ4b5/tIE=)
14: 3F380060A01311F0919EC6AFDAE4EC9C.roa (hash: ML1Fpn+T9RKdP9udPwEg1TO7ruJ5fEp150SBZcWBHGg=)
15: 7D736F44A01911F09753BADADAE4EC9C.roa (hash: LoMK2CKg1w2sxKBIOF7rjm0R24WlzIzFWpE/7DH5x8E=)
16: 33EB252EA01411F08F17EEB4DAE4EC9C.roa (hash: nzlwWU3jybg0Z5LtyVm9+qYiW7rcBwW9fpuAtDJVz3c=)
17: 508EE634A01911F087E8F1D6DAE4EC9C.roa (hash: 4FyWxdVz9ZB89dnEYa1UQaV9BgwPCDZcCQ64zRWzhRY=)
18: EA82641AA01311F09744A3B4DAE4EC9C.roa (hash: PvyVycDl600xSYGgD1LSND0w48iaigMGKSIG0uMiAw4=)
19: 9D32F69A977E11F097D5EA99DAE4EC9C.roa (hash: 8T6MXp4d7k4QlXY2d72nQUcRick423J+7EbbPvV9VsA=)
20: F19DC41AA01811F09F5B62D6DAE4EC9C.roa (hash: TZ8+f6VOZFccWd8TuXEcbvL38bAwB9OZXRVHDIZr0No=)
21: 4C032782A01511F0999B65BEDAE4EC9C.roa (hash: ANPrThqCPCkYsx7dRQ398hItHVf+UOOUIIoPdsOJOUo=)
22: A34959B8A01911F0A89ED4DADAE4EC9C.roa (hash: E3HAjnixDN1XWV/LOWT5w5sQJ03lSjiuDVqAWFJfBmI=)
23: C642CE7CA01411F0B494AFB9DAE4EC9C.roa (hash: aqI2o4BrWljOyaNlrUsbDBgDucPGaFRS97cYN1ybOns=)
24: 94B2F070A01511F0B59AAFBEDAE4EC9C.roa (hash: kwH5u3K/Hl+qIz66y3+qwY9El0PaIlycS18OnhiM728=)
25: 2F962140A01911F081B8AED6DAE4EC9C.roa (hash: ujK0C2V+Qi9u6MTQjYHs+CJbsfw5+IZrPSzJeVNBBYs=)
26: 04AB017A977D11F0A97D3391DAE4EC9C.roa (hash: nkdk6GBaqBguv0UXSrzYeA5QBtv1EdIeuvUWxhgAHHY=)
27: 93B9577EA01311F0B7824FB0DAE4EC9C.roa (hash: mkR2GLOQGEWqlqYNGWBX32sAXhIvbJfjR8LQZ8jggh0=)
28: C2CC2352A01311F0BA2D6BB2DAE4EC9C.roa (hash: 8dkPZG1bVKa6ng9BDONfAwpgPvxPAcZCz/nmcH4/hSQ=)
29: FD658BE4A01211F0BF85CAABDAE4EC9C.roa (hash: Jjrt4iFN9aQQeExy1Q5uaDTAkOEyoLMTHJMPctSRjM0=)
30: 6DA4387EA01311F08B3FF2AFDAE4EC9C.roa (hash: SoreU7BbeZI0MVABkoxSNUmBXY1Qer83v7w3hSgZbOk=)
31: CC94B1F0A01911F0A21BE7DADAE4EC9C.roa (hash: eol3C2aK1kCFY/RXjcfLIKnAxFpxEJhGrZQgt5Mo8mo=)
32: 28E4B6B2A01511F0BAD17CBCDAE4EC9C.roa (hash: O+8YfGKgcic5dSt9d0Vx7+HftSOAGPejOIugvkS/Q/Y=)
33: 072D5AC4A01511F09A0839BADAE4EC9C.roa (hash: yix9tcBAo74wcqdhwzt3WKH7uoqvm4BIlGZZkDl24+U=)
34: BE045106A01211F094A319ABDAE4EC9C.roa (hash: iFrlWdC+BKPWivrrH+4J7SzVi5ek4QeDzjIdOx16K2s=)
35: EE2BF774A01911F0B0CB31DBDAE4EC9C.roa (hash: HrO9DcmxgUKYwJpAAbnzvgRqkHtqT2odz+DewxsVQ7g=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 May 2026 00:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1899 (0x76b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: May 5 02:25:48 2026 GMT
Not After : May 7 02:25:48 2026 GMT
Subject: CN=69f9552d-3bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:db:f4:5a:fb:76:8e:72:37:cf:b5:cd:4d:
31:f0:cc:da:00:94:f5:1b:01:b5:bb:97:c1:9c:20:
b0:ae:a5:96:03:c9:ec:7c:2a:ad:3c:08:72:8c:e3:
b8:9a:68:80:e0:da:9d:80:97:32:8d:62:d3:74:db:
b0:d8:bc:55:86:b5:cf:f9:cf:7f:e7:99:02:28:16:
fa:80:0a:99:08:ac:d9:f0:31:1d:7c:e2:35:c4:d5:
00:d0:ec:49:44:62:53:e3:ee:68:4d:3c:e6:d0:12:
ea:a5:86:9a:aa:d7:99:26:1e:2b:61:f2:0e:ef:75:
a5:2b:3d:dc:c0:d4:36:45:d9:9c:d5:80:53:1f:45:
59:33:cf:cd:21:f9:f3:13:1f:f7:72:cc:fa:3e:ca:
56:53:51:5f:65:43:52:0b:7a:4f:61:0f:a6:6d:bb:
ea:3d:3f:03:a3:3a:fd:01:ed:ef:a8:4e:c5:47:ad:
15:84:f3:7e:b2:68:96:de:be:53:81:80:32:43:0d:
e2:74:51:5e:3d:c1:84:e5:11:4f:e1:e6:24:b3:3a:
e7:b4:d4:a7:af:6f:bf:31:0b:86:8b:46:08:b7:7f:
63:99:54:64:9f:36:c0:0d:70:5e:33:ce:eb:a1:72:
ac:da:0b:18:5b:fb:7d:0d:56:90:44:7f:51:8a:61:
0a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:38:88:A2:44:77:CA:D3:05:87:D7:6D:9D:B0:66:48:DA:87:80:0D
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:26:68:6d:78:85:4b:d8:d8:4b:3f:ec:cf:ac:4d:5c:9d:a9:
cf:1a:9b:ab:60:17:1b:a9:9b:68:54:46:96:db:c3:72:53:96:
44:68:ca:a8:fe:05:76:dd:7b:10:93:91:5f:a8:ff:54:6e:1c:
26:a9:0b:1f:8a:9e:b1:7d:50:54:01:83:f6:b9:5b:3f:99:35:
a5:ac:9a:3b:cb:f1:96:4a:47:e8:1b:52:bf:cb:38:4a:bd:65:
6e:06:04:f7:f5:6b:a3:a7:b3:52:96:c7:5e:cc:1b:d0:77:19:
26:55:30:52:df:4d:fa:46:12:97:94:84:19:f5:fe:f6:69:9c:
00:ab:81:9d:48:96:07:34:d5:31:61:dc:5b:bf:3d:87:92:73:
bd:6f:88:c0:47:7d:66:92:40:a2:b2:aa:6c:9a:c6:fb:b4:e2:
8f:82:b0:8d:ef:6b:bc:23:e4:c2:4c:e8:a9:dc:8c:f9:71:f8:
a8:ba:be:2a:5d:80:dc:23:e2:52:f1:d8:d2:5f:34:56:02:fd:
c2:ee:01:b0:67:e2:45:64:91:25:50:29:41:0d:3c:b5:f9:c8:
a4:40:ce:02:10:c3:a3:64:e1:e1:6e:4b:15:92:59:1d:b5:34:
80:bc:34:6d:11:7c:2f:2a:b0:8f:7f:7d:a6:fd:80:9c:3d:fa:
f5:91:e5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 14:38:12 2026 by rpki-client