
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
File: HdFv1ov_fKsauRxV2mH8DN_0F0M.mft (raw, json)
Hash identifier: yxCIXZUThEQ4D99P/RQ+j7pVUR4TfGfgBUk6FS0G0xI=
Subject key identifier: 1D:8B:A5:A9:4F:3F:CA:06:35:1E:C0:CF:AC:09:EF:B2:FC:EA:4C:45
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 074B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
Manifest number: 06FC
Signing time: Sat 04 Apr 2026 02:24:42 +0000
Manifest this update: Sat 04 Apr 2026 02:24:41 +0000
Manifest next update: Mon 06 Apr 2026 02:24:41 +0000
Files and hashes: 1: HdFv1ov_fKsauRxV2mH8DN_0F0M.crl (hash: N3c3zcZdmVo/zdcEwHmpHcZmnQtjJ+/XdPpOs/ubml4=)
2: 10E2A890A01911F08A266CD6DAE4EC9C.roa (hash: uKu9ra8g3enObejQKUm/wjJcdExGU8pfNmFnYSCVAb4=)
3: C048D206A01811F0997A41D6DAE4EC9C.roa (hash: jhoKyB34pvQ8xNX0wPMbhbFsPkWoO13xc3OlqRsvcuI=)
4: 87292E6AA01A11F0B32F60DFDAE4EC9C.roa (hash: 4nhIZUohQE/GQcQXC4C3luqxwBzt+U4vIAe9MdQWT3w=)
5: 2AC075F0A01211F0B72F98A6DAE4EC9C.roa (hash: DK9ydq1ArB3m61vuEV0TSdIjbjRvzTpBgOxKOB1u+wk=)
6: 77AA62BAA01511F0949C90BEDAE4EC9C.roa (hash: 6sOD9vGb7J0UzCC20Wr5l2Kfav4Tkbio/BxVpX+Krt0=)
7: 8CEA5014A01411F0BFEF7AB9DAE4EC9C.roa (hash: ZmcJKQbrWBpIwE/ww8rZLi/ZhcQN8hLklhkP+Cw6Oig=)
8: E64C3C80A01411F0B09CCEB9DAE4EC9C.roa (hash: P67lgxodJONkr5xhx0/ZwVViknbWq1lQZGMlbP6XgkY=)
9: 69351E4CA01411F0BCA38EB5DAE4EC9C.roa (hash: qo4MdTAgB+4LLeVyw25K2zTCPmiwmmx5+hWl/ARollk=)
10: 46A7485EA01A11F08EC941DFDAE4EC9C.roa (hash: 7n38aPRG6DfSsFKjw2v4HaAQ/mbzm69U8oIgVsOvwZ8=)
11: 18112B68A01A11F09DD253DDDAE4EC9C.roa (hash: iHeBmMWWg3WS1fulXf5vlgJuM8lCwPKmaQN2zjvQXXM=)
12: 9E2163FAA01811F09E3578D2DAE4EC9C.roa (hash: eDRADB256Y80jHNt3k4fhbDC5ZHAHMd6Ca6OrAqbwIg=)
13: 0B6A72E4A01411F0AD73C0B4DAE4EC9C.roa (hash: Y4CZp0DWrQMWNjkjyjpL08rU6hNDzV3WDuwJ4b5/tIE=)
14: 3F380060A01311F0919EC6AFDAE4EC9C.roa (hash: ML1Fpn+T9RKdP9udPwEg1TO7ruJ5fEp150SBZcWBHGg=)
15: 7D736F44A01911F09753BADADAE4EC9C.roa (hash: LoMK2CKg1w2sxKBIOF7rjm0R24WlzIzFWpE/7DH5x8E=)
16: 33EB252EA01411F08F17EEB4DAE4EC9C.roa (hash: nzlwWU3jybg0Z5LtyVm9+qYiW7rcBwW9fpuAtDJVz3c=)
17: 508EE634A01911F087E8F1D6DAE4EC9C.roa (hash: 4FyWxdVz9ZB89dnEYa1UQaV9BgwPCDZcCQ64zRWzhRY=)
18: EA82641AA01311F09744A3B4DAE4EC9C.roa (hash: PvyVycDl600xSYGgD1LSND0w48iaigMGKSIG0uMiAw4=)
19: 9D32F69A977E11F097D5EA99DAE4EC9C.roa (hash: 8T6MXp4d7k4QlXY2d72nQUcRick423J+7EbbPvV9VsA=)
20: F19DC41AA01811F09F5B62D6DAE4EC9C.roa (hash: TZ8+f6VOZFccWd8TuXEcbvL38bAwB9OZXRVHDIZr0No=)
21: 4C032782A01511F0999B65BEDAE4EC9C.roa (hash: ANPrThqCPCkYsx7dRQ398hItHVf+UOOUIIoPdsOJOUo=)
22: A34959B8A01911F0A89ED4DADAE4EC9C.roa (hash: E3HAjnixDN1XWV/LOWT5w5sQJ03lSjiuDVqAWFJfBmI=)
23: C642CE7CA01411F0B494AFB9DAE4EC9C.roa (hash: aqI2o4BrWljOyaNlrUsbDBgDucPGaFRS97cYN1ybOns=)
24: 94B2F070A01511F0B59AAFBEDAE4EC9C.roa (hash: kwH5u3K/Hl+qIz66y3+qwY9El0PaIlycS18OnhiM728=)
25: 2F962140A01911F081B8AED6DAE4EC9C.roa (hash: ujK0C2V+Qi9u6MTQjYHs+CJbsfw5+IZrPSzJeVNBBYs=)
26: 04AB017A977D11F0A97D3391DAE4EC9C.roa (hash: nkdk6GBaqBguv0UXSrzYeA5QBtv1EdIeuvUWxhgAHHY=)
27: 93B9577EA01311F0B7824FB0DAE4EC9C.roa (hash: mkR2GLOQGEWqlqYNGWBX32sAXhIvbJfjR8LQZ8jggh0=)
28: C2CC2352A01311F0BA2D6BB2DAE4EC9C.roa (hash: 8dkPZG1bVKa6ng9BDONfAwpgPvxPAcZCz/nmcH4/hSQ=)
29: FD658BE4A01211F0BF85CAABDAE4EC9C.roa (hash: Jjrt4iFN9aQQeExy1Q5uaDTAkOEyoLMTHJMPctSRjM0=)
30: 6DA4387EA01311F08B3FF2AFDAE4EC9C.roa (hash: SoreU7BbeZI0MVABkoxSNUmBXY1Qer83v7w3hSgZbOk=)
31: CC94B1F0A01911F0A21BE7DADAE4EC9C.roa (hash: eol3C2aK1kCFY/RXjcfLIKnAxFpxEJhGrZQgt5Mo8mo=)
32: 28E4B6B2A01511F0BAD17CBCDAE4EC9C.roa (hash: O+8YfGKgcic5dSt9d0Vx7+HftSOAGPejOIugvkS/Q/Y=)
33: 072D5AC4A01511F09A0839BADAE4EC9C.roa (hash: yix9tcBAo74wcqdhwzt3WKH7uoqvm4BIlGZZkDl24+U=)
34: BE045106A01211F094A319ABDAE4EC9C.roa (hash: iFrlWdC+BKPWivrrH+4J7SzVi5ek4QeDzjIdOx16K2s=)
35: EE2BF774A01911F0B0CB31DBDAE4EC9C.roa (hash: HrO9DcmxgUKYwJpAAbnzvgRqkHtqT2odz+DewxsVQ7g=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 Apr 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1867 (0x74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Apr 4 02:24:41 2026 GMT
Not After : Apr 6 02:24:41 2026 GMT
Subject: CN=69d07669-bb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:7d:54:cd:94:03:a5:c4:ae:73:5f:cf:97:
5d:eb:55:b8:59:21:03:9a:1c:21:b5:2a:76:dd:70:
96:41:c6:66:f7:82:0d:b8:8a:02:25:c1:a0:0e:31:
70:f8:36:61:e7:e9:cb:88:61:47:77:29:ed:eb:f7:
d9:92:9f:25:fd:47:1d:3a:86:33:93:f7:c3:5f:df:
f8:b8:86:76:52:d2:f3:37:20:ee:6f:15:5a:6f:36:
8d:7f:48:a3:57:ef:80:be:b1:1a:7e:61:cf:c8:97:
55:1d:1e:2c:14:eb:12:fb:39:8a:fc:1f:00:ba:45:
c7:30:a1:52:36:51:2c:ef:47:0f:fb:45:1f:f5:c5:
7b:cc:88:a5:e3:c5:04:3e:86:a6:78:a4:94:c9:73:
6b:6c:73:67:05:01:e1:f6:4a:85:51:56:69:d0:19:
db:1d:7b:d2:af:16:1c:51:b0:92:1a:9e:ad:51:4a:
d8:68:8e:b6:3b:40:07:22:8c:75:62:6e:4d:f6:16:
5e:c6:28:9f:5e:bf:5b:12:f0:05:bc:c9:d7:5a:f4:
1b:9e:54:60:13:0f:00:0e:14:13:3f:4c:99:04:d0:
0c:e3:20:d3:37:a8:de:3b:6c:01:e3:a7:8f:0f:88:
44:3a:17:d5:29:43:b8:45:dc:9d:d5:6b:bb:64:28:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8B:A5:A9:4F:3F:CA:06:35:1E:C0:CF:AC:09:EF:B2:FC:EA:4C:45
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d3:b1:0f:78:89:fd:57:30:00:09:78:fa:57:c0:56:55:56:
14:6b:94:77:90:bc:e0:5d:a1:a8:15:74:cb:43:97:5d:5a:6e:
ce:2c:d8:1e:10:76:51:11:ac:77:50:03:6a:ee:e7:ed:4d:5f:
df:f6:99:63:7b:a4:3a:2b:a7:e9:15:00:38:06:6e:79:e8:4a:
77:21:fb:bc:51:7f:97:5c:2c:2b:bb:e9:8c:95:b7:59:48:ff:
5f:63:e4:6c:dc:01:79:24:e2:ac:6e:5c:3d:9c:73:22:dd:b1:
0e:78:a6:de:3c:7d:a5:b8:50:90:f3:6e:74:08:34:51:5d:ba:
c1:bb:4b:0f:ca:7c:16:3d:bd:b5:48:37:a9:33:d4:9a:10:52:
46:5c:77:3e:fc:27:c3:b5:ae:f3:15:66:62:74:bf:08:15:ea:
c2:70:b5:89:90:39:23:62:be:f1:36:c3:c6:52:3f:d4:78:85:
f8:a8:9e:10:38:a2:7a:ac:9e:68:14:6f:da:b9:60:cf:0e:d1:
bb:33:68:b1:a2:f8:a8:20:b4:9e:a1:58:ce:52:01:0f:24:23:
a5:e3:22:e7:a2:c0:49:12:dc:31:1d:1b:2b:a8:5e:2b:25:c1:
1d:05:b1:d7:4c:5d:9f:99:fc:b1:8f:a6:c0:f8:c4:39:90:1b:
be:06:90:c5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB0swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjFDMDZBRjExMC8GA1UEBRMoMUREMTZGRDY4QkZGN0NBQjFBQjkxQzU1REE2MUZD
MENERkY0MTc0MzAeFw0yNjA0MDQwMjI0NDFaFw0yNjA0MDYwMjI0NDFaMBgxFjAU
BgNVBAMTDTY5ZDA3NjY5LWJiNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDOX1UzZQDpcSuc1/Pl13rVbhZIQOaHCG1KnbdcJZBxmb3gg24igIlwaAO
MXD4NmHn6cuIYUd3Ke3r99mSnyX9Rx06hjOT98Nf3/i4hnZS0vM3IO5vFVpvNo1/
SKNX74C+sRp+Yc/Il1UdHiwU6xL7OYr8HwC6RccwoVI2USzvRw/7RR/1xXvMiKXj
xQQ+hqZ4pJTJc2tsc2cFAeH2SoVRVmnQGdsde9KvFhxRsJIanq1RSthojrY7QAci
jHVibk32Fl7GKJ9ev1sS8AW8ydda9BueVGATDwAOFBM/TJkE0AzjINM3qN47bAHj
p48PiEQ6F9UpQ7hF3J3Va7tkKIIrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUHYul
qU8/ygY1HsDPrAnvsvzqTEUwHwYDVR0jBBgwFoAUHdFv1ov/fKsauRxV2mH8DN/0
F0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4QTAxNENFL0hkRnYx
b3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hkRnYxb3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjFDMDYvNThDOUI3OEMyMDU5MTFFQzk5MUI2ODc3RDhB
MDE0Q0UvSGRGdjFvdl9mS3NhdVJ4VjJtSDhETl8wRjBNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCl07EPeIn9VzAACXj6V8BWVVYUa5R3
kLzgXaGoFXTLQ5ddWm7OLNgeEHZREax3UANq7uftTV/f9plje6Q6K6fpFQA4Bm55
6Ep3Ifu8UX+XXCwru+mMlbdZSP9fY+Rs3AF5JOKsblw9nHMi3bEOeKbePH2luFCQ
8250CDRRXbrBu0sPynwWPb21SDepM9SaEFJGXHc+/CfDta7zFWZidL8IFerCcLWJ
kDkjYr7xNsPGUj/UeIX4qJ4QOKJ6rJ5oFG/auWDPDtG7M2ixovioILSeoVjOUgEP
JCOl4yLnosBJEtwxHRsrqF4rJcEdBbHXTF2fmfyxj6bA+MQ5kBu+BpDF
-----END CERTIFICATE-----
Generated at Sat Apr 4 19:14:32 2026 by rpki-client