
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
File: HdFv1ov_fKsauRxV2mH8DN_0F0M.mft (raw, json)
Hash identifier: X4K+o8iceN21viLWJFn5fhkjOP6dSfplZjJNbiBnjBk=
Subject key identifier: DB:F4:40:CE:DA:5E:3B:54:73:E1:07:A9:1E:16:C0:4F:6B:AD:3E:0F
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 074D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
Manifest number: 06FE
Signing time: Mon 06 Apr 2026 02:25:44 +0000
Manifest this update: Mon 06 Apr 2026 02:25:44 +0000
Manifest next update: Wed 08 Apr 2026 02:25:43 +0000
Files and hashes: 1: HdFv1ov_fKsauRxV2mH8DN_0F0M.crl (hash: itzVWQXVy24hYLCTOSgS37XpTrzxI2cJseNwRxbMH6Q=)
2: 10E2A890A01911F08A266CD6DAE4EC9C.roa (hash: uKu9ra8g3enObejQKUm/wjJcdExGU8pfNmFnYSCVAb4=)
3: C048D206A01811F0997A41D6DAE4EC9C.roa (hash: jhoKyB34pvQ8xNX0wPMbhbFsPkWoO13xc3OlqRsvcuI=)
4: 87292E6AA01A11F0B32F60DFDAE4EC9C.roa (hash: 4nhIZUohQE/GQcQXC4C3luqxwBzt+U4vIAe9MdQWT3w=)
5: 2AC075F0A01211F0B72F98A6DAE4EC9C.roa (hash: DK9ydq1ArB3m61vuEV0TSdIjbjRvzTpBgOxKOB1u+wk=)
6: 77AA62BAA01511F0949C90BEDAE4EC9C.roa (hash: 6sOD9vGb7J0UzCC20Wr5l2Kfav4Tkbio/BxVpX+Krt0=)
7: 8CEA5014A01411F0BFEF7AB9DAE4EC9C.roa (hash: ZmcJKQbrWBpIwE/ww8rZLi/ZhcQN8hLklhkP+Cw6Oig=)
8: E64C3C80A01411F0B09CCEB9DAE4EC9C.roa (hash: P67lgxodJONkr5xhx0/ZwVViknbWq1lQZGMlbP6XgkY=)
9: 69351E4CA01411F0BCA38EB5DAE4EC9C.roa (hash: qo4MdTAgB+4LLeVyw25K2zTCPmiwmmx5+hWl/ARollk=)
10: 46A7485EA01A11F08EC941DFDAE4EC9C.roa (hash: 7n38aPRG6DfSsFKjw2v4HaAQ/mbzm69U8oIgVsOvwZ8=)
11: 18112B68A01A11F09DD253DDDAE4EC9C.roa (hash: iHeBmMWWg3WS1fulXf5vlgJuM8lCwPKmaQN2zjvQXXM=)
12: 9E2163FAA01811F09E3578D2DAE4EC9C.roa (hash: eDRADB256Y80jHNt3k4fhbDC5ZHAHMd6Ca6OrAqbwIg=)
13: 0B6A72E4A01411F0AD73C0B4DAE4EC9C.roa (hash: Y4CZp0DWrQMWNjkjyjpL08rU6hNDzV3WDuwJ4b5/tIE=)
14: 3F380060A01311F0919EC6AFDAE4EC9C.roa (hash: ML1Fpn+T9RKdP9udPwEg1TO7ruJ5fEp150SBZcWBHGg=)
15: 7D736F44A01911F09753BADADAE4EC9C.roa (hash: LoMK2CKg1w2sxKBIOF7rjm0R24WlzIzFWpE/7DH5x8E=)
16: 33EB252EA01411F08F17EEB4DAE4EC9C.roa (hash: nzlwWU3jybg0Z5LtyVm9+qYiW7rcBwW9fpuAtDJVz3c=)
17: 508EE634A01911F087E8F1D6DAE4EC9C.roa (hash: 4FyWxdVz9ZB89dnEYa1UQaV9BgwPCDZcCQ64zRWzhRY=)
18: EA82641AA01311F09744A3B4DAE4EC9C.roa (hash: PvyVycDl600xSYGgD1LSND0w48iaigMGKSIG0uMiAw4=)
19: 9D32F69A977E11F097D5EA99DAE4EC9C.roa (hash: 8T6MXp4d7k4QlXY2d72nQUcRick423J+7EbbPvV9VsA=)
20: F19DC41AA01811F09F5B62D6DAE4EC9C.roa (hash: TZ8+f6VOZFccWd8TuXEcbvL38bAwB9OZXRVHDIZr0No=)
21: 4C032782A01511F0999B65BEDAE4EC9C.roa (hash: ANPrThqCPCkYsx7dRQ398hItHVf+UOOUIIoPdsOJOUo=)
22: A34959B8A01911F0A89ED4DADAE4EC9C.roa (hash: E3HAjnixDN1XWV/LOWT5w5sQJ03lSjiuDVqAWFJfBmI=)
23: C642CE7CA01411F0B494AFB9DAE4EC9C.roa (hash: aqI2o4BrWljOyaNlrUsbDBgDucPGaFRS97cYN1ybOns=)
24: 94B2F070A01511F0B59AAFBEDAE4EC9C.roa (hash: kwH5u3K/Hl+qIz66y3+qwY9El0PaIlycS18OnhiM728=)
25: 2F962140A01911F081B8AED6DAE4EC9C.roa (hash: ujK0C2V+Qi9u6MTQjYHs+CJbsfw5+IZrPSzJeVNBBYs=)
26: 04AB017A977D11F0A97D3391DAE4EC9C.roa (hash: nkdk6GBaqBguv0UXSrzYeA5QBtv1EdIeuvUWxhgAHHY=)
27: 93B9577EA01311F0B7824FB0DAE4EC9C.roa (hash: mkR2GLOQGEWqlqYNGWBX32sAXhIvbJfjR8LQZ8jggh0=)
28: C2CC2352A01311F0BA2D6BB2DAE4EC9C.roa (hash: 8dkPZG1bVKa6ng9BDONfAwpgPvxPAcZCz/nmcH4/hSQ=)
29: FD658BE4A01211F0BF85CAABDAE4EC9C.roa (hash: Jjrt4iFN9aQQeExy1Q5uaDTAkOEyoLMTHJMPctSRjM0=)
30: 6DA4387EA01311F08B3FF2AFDAE4EC9C.roa (hash: SoreU7BbeZI0MVABkoxSNUmBXY1Qer83v7w3hSgZbOk=)
31: CC94B1F0A01911F0A21BE7DADAE4EC9C.roa (hash: eol3C2aK1kCFY/RXjcfLIKnAxFpxEJhGrZQgt5Mo8mo=)
32: 28E4B6B2A01511F0BAD17CBCDAE4EC9C.roa (hash: O+8YfGKgcic5dSt9d0Vx7+HftSOAGPejOIugvkS/Q/Y=)
33: 072D5AC4A01511F09A0839BADAE4EC9C.roa (hash: yix9tcBAo74wcqdhwzt3WKH7uoqvm4BIlGZZkDl24+U=)
34: BE045106A01211F094A319ABDAE4EC9C.roa (hash: iFrlWdC+BKPWivrrH+4J7SzVi5ek4QeDzjIdOx16K2s=)
35: EE2BF774A01911F0B0CB31DBDAE4EC9C.roa (hash: HrO9DcmxgUKYwJpAAbnzvgRqkHtqT2odz+DewxsVQ7g=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 Apr 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1869 (0x74d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Apr 6 02:25:44 2026 GMT
Not After : Apr 8 02:25:43 2026 GMT
Subject: CN=69d319a8-2e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:51:f3:a5:25:0b:43:5e:1b:38:77:c6:fd:88:
30:00:15:b9:72:99:5d:f3:d8:ed:39:a4:85:73:cd:
b1:fe:9b:01:94:87:27:39:e6:61:3e:1c:c1:c4:fc:
58:ab:ad:3f:6a:36:ca:9b:08:fa:ec:49:d9:0b:16:
57:d1:92:d1:3f:7d:bb:f8:a3:12:2a:e6:0f:95:57:
a9:41:49:d3:34:ee:20:36:f4:11:ea:3f:4a:69:ca:
18:53:54:ac:c9:95:50:f5:a5:12:8e:85:46:f7:ea:
8f:32:66:88:62:03:45:31:a0:90:8d:8f:6d:dd:b8:
44:c5:e0:1a:cc:ce:96:8d:ed:c8:18:59:2c:92:58:
f2:89:d4:50:aa:6e:1d:5f:a2:9d:06:6c:c6:e8:dc:
0f:2a:9b:83:71:0b:47:7b:cf:4f:29:70:76:ce:d2:
c4:10:7a:00:f6:ab:7b:9b:3c:55:14:9f:1e:99:02:
8b:c2:81:85:f5:ab:43:f8:11:e3:f7:70:49:61:0b:
28:96:45:2b:8e:ba:c0:83:ce:6e:1a:ef:cd:5f:0a:
f6:40:7b:35:a9:b3:5a:8d:6f:a1:60:4d:42:3e:1f:
ac:f0:8f:89:b9:23:12:69:c4:8d:11:87:e9:09:79:
fd:7e:fb:45:d9:a1:bc:b5:d7:7e:1e:94:60:cf:4d:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F4:40:CE:DA:5E:3B:54:73:E1:07:A9:1E:16:C0:4F:6B:AD:3E:0F
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:c8:cc:b3:4f:a8:60:0f:1b:ef:68:3a:95:82:49:89:df:fd:
7b:56:3d:69:fc:37:28:40:be:35:d0:c7:f5:8f:71:6b:03:ce:
2b:79:a8:0a:67:16:c2:17:27:3c:8f:d4:5d:dc:c8:93:cd:49:
de:0b:25:8b:c9:23:85:c2:31:75:b9:da:99:b8:5d:10:ee:e0:
b9:c6:83:30:d6:b7:9f:6b:2b:52:95:98:59:cf:4d:7d:88:65:
10:8a:c6:99:15:04:e1:f0:af:01:da:f9:a3:a0:b0:cd:17:bc:
a0:28:de:44:7f:37:af:a9:61:4e:aa:fb:04:a3:3f:13:46:69:
06:d2:af:33:30:99:57:b0:d6:62:50:9e:41:a9:31:5f:23:a5:
ec:8d:22:5c:bc:d6:f5:f8:55:cd:2c:2e:70:98:2a:e6:4a:4b:
9c:74:ad:8b:56:42:9e:fe:9e:9f:37:00:5d:9f:2c:99:a9:35:
00:70:11:21:13:f2:c0:70:c4:0d:54:e3:db:d6:40:ee:1f:48:
ed:53:7d:7e:05:13:74:8c:74:57:27:d5:dc:f7:25:0f:c2:51:
e6:65:20:32:47:39:ee:ad:80:01:6b:a7:8a:6b:93:a5:1a:a5:
b9:cf:5f:b4:7a:d9:38:32:1f:7c:04:61:a4:e2:2a:ce:29:8f:
f7:25:fb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 22:18:06 2026 by rpki-client