
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
File: HdFv1ov_fKsauRxV2mH8DN_0F0M.mft (raw, json)
Hash identifier: CJdR4piX7UKdky5ZIg1ydmgcPr/orPtka+/lD4hw1Vo=
Subject key identifier: AE:2B:88:A2:E1:6D:40:1C:0A:D2:B4:FC:6E:76:66:18:6D:F2:6D:D6
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 072F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
Manifest number: 06E0
Signing time: Sat 07 Mar 2026 02:47:25 +0000
Manifest this update: Sat 07 Mar 2026 02:47:25 +0000
Manifest next update: Mon 09 Mar 2026 02:47:25 +0000
Files and hashes: 1: HdFv1ov_fKsauRxV2mH8DN_0F0M.crl (hash: C+keukDmPwqxOXzhyh9n0V125HM3iS6cXDnXCNjB8nI=)
2: 10E2A890A01911F08A266CD6DAE4EC9C.roa (hash: uKu9ra8g3enObejQKUm/wjJcdExGU8pfNmFnYSCVAb4=)
3: C048D206A01811F0997A41D6DAE4EC9C.roa (hash: jhoKyB34pvQ8xNX0wPMbhbFsPkWoO13xc3OlqRsvcuI=)
4: 87292E6AA01A11F0B32F60DFDAE4EC9C.roa (hash: 4nhIZUohQE/GQcQXC4C3luqxwBzt+U4vIAe9MdQWT3w=)
5: 2AC075F0A01211F0B72F98A6DAE4EC9C.roa (hash: DK9ydq1ArB3m61vuEV0TSdIjbjRvzTpBgOxKOB1u+wk=)
6: 77AA62BAA01511F0949C90BEDAE4EC9C.roa (hash: 6sOD9vGb7J0UzCC20Wr5l2Kfav4Tkbio/BxVpX+Krt0=)
7: 8CEA5014A01411F0BFEF7AB9DAE4EC9C.roa (hash: ZmcJKQbrWBpIwE/ww8rZLi/ZhcQN8hLklhkP+Cw6Oig=)
8: E64C3C80A01411F0B09CCEB9DAE4EC9C.roa (hash: P67lgxodJONkr5xhx0/ZwVViknbWq1lQZGMlbP6XgkY=)
9: 69351E4CA01411F0BCA38EB5DAE4EC9C.roa (hash: qo4MdTAgB+4LLeVyw25K2zTCPmiwmmx5+hWl/ARollk=)
10: 46A7485EA01A11F08EC941DFDAE4EC9C.roa (hash: 7n38aPRG6DfSsFKjw2v4HaAQ/mbzm69U8oIgVsOvwZ8=)
11: 18112B68A01A11F09DD253DDDAE4EC9C.roa (hash: iHeBmMWWg3WS1fulXf5vlgJuM8lCwPKmaQN2zjvQXXM=)
12: 9E2163FAA01811F09E3578D2DAE4EC9C.roa (hash: eDRADB256Y80jHNt3k4fhbDC5ZHAHMd6Ca6OrAqbwIg=)
13: 0B6A72E4A01411F0AD73C0B4DAE4EC9C.roa (hash: Y4CZp0DWrQMWNjkjyjpL08rU6hNDzV3WDuwJ4b5/tIE=)
14: 3F380060A01311F0919EC6AFDAE4EC9C.roa (hash: ML1Fpn+T9RKdP9udPwEg1TO7ruJ5fEp150SBZcWBHGg=)
15: 7D736F44A01911F09753BADADAE4EC9C.roa (hash: LoMK2CKg1w2sxKBIOF7rjm0R24WlzIzFWpE/7DH5x8E=)
16: 33EB252EA01411F08F17EEB4DAE4EC9C.roa (hash: nzlwWU3jybg0Z5LtyVm9+qYiW7rcBwW9fpuAtDJVz3c=)
17: 508EE634A01911F087E8F1D6DAE4EC9C.roa (hash: 4FyWxdVz9ZB89dnEYa1UQaV9BgwPCDZcCQ64zRWzhRY=)
18: EA82641AA01311F09744A3B4DAE4EC9C.roa (hash: PvyVycDl600xSYGgD1LSND0w48iaigMGKSIG0uMiAw4=)
19: 9D32F69A977E11F097D5EA99DAE4EC9C.roa (hash: 8T6MXp4d7k4QlXY2d72nQUcRick423J+7EbbPvV9VsA=)
20: F19DC41AA01811F09F5B62D6DAE4EC9C.roa (hash: TZ8+f6VOZFccWd8TuXEcbvL38bAwB9OZXRVHDIZr0No=)
21: 4C032782A01511F0999B65BEDAE4EC9C.roa (hash: ANPrThqCPCkYsx7dRQ398hItHVf+UOOUIIoPdsOJOUo=)
22: A34959B8A01911F0A89ED4DADAE4EC9C.roa (hash: E3HAjnixDN1XWV/LOWT5w5sQJ03lSjiuDVqAWFJfBmI=)
23: C642CE7CA01411F0B494AFB9DAE4EC9C.roa (hash: aqI2o4BrWljOyaNlrUsbDBgDucPGaFRS97cYN1ybOns=)
24: 94B2F070A01511F0B59AAFBEDAE4EC9C.roa (hash: kwH5u3K/Hl+qIz66y3+qwY9El0PaIlycS18OnhiM728=)
25: 2F962140A01911F081B8AED6DAE4EC9C.roa (hash: ujK0C2V+Qi9u6MTQjYHs+CJbsfw5+IZrPSzJeVNBBYs=)
26: 04AB017A977D11F0A97D3391DAE4EC9C.roa (hash: nkdk6GBaqBguv0UXSrzYeA5QBtv1EdIeuvUWxhgAHHY=)
27: 93B9577EA01311F0B7824FB0DAE4EC9C.roa (hash: mkR2GLOQGEWqlqYNGWBX32sAXhIvbJfjR8LQZ8jggh0=)
28: C2CC2352A01311F0BA2D6BB2DAE4EC9C.roa (hash: 8dkPZG1bVKa6ng9BDONfAwpgPvxPAcZCz/nmcH4/hSQ=)
29: FD658BE4A01211F0BF85CAABDAE4EC9C.roa (hash: Jjrt4iFN9aQQeExy1Q5uaDTAkOEyoLMTHJMPctSRjM0=)
30: 6DA4387EA01311F08B3FF2AFDAE4EC9C.roa (hash: SoreU7BbeZI0MVABkoxSNUmBXY1Qer83v7w3hSgZbOk=)
31: CC94B1F0A01911F0A21BE7DADAE4EC9C.roa (hash: eol3C2aK1kCFY/RXjcfLIKnAxFpxEJhGrZQgt5Mo8mo=)
32: 28E4B6B2A01511F0BAD17CBCDAE4EC9C.roa (hash: O+8YfGKgcic5dSt9d0Vx7+HftSOAGPejOIugvkS/Q/Y=)
33: 072D5AC4A01511F09A0839BADAE4EC9C.roa (hash: yix9tcBAo74wcqdhwzt3WKH7uoqvm4BIlGZZkDl24+U=)
34: BE045106A01211F094A319ABDAE4EC9C.roa (hash: iFrlWdC+BKPWivrrH+4J7SzVi5ek4QeDzjIdOx16K2s=)
35: EE2BF774A01911F0B0CB31DBDAE4EC9C.roa (hash: HrO9DcmxgUKYwJpAAbnzvgRqkHtqT2odz+DewxsVQ7g=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Mar 2026 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1839 (0x72f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Mar 7 02:47:25 2026 GMT
Not After : Mar 9 02:47:25 2026 GMT
Subject: CN=69ab91bd-ab6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:9c:03:ed:86:8b:3b:9b:a6:f8:d2:26:1d:
ac:2a:35:47:1e:5e:3a:5a:d4:82:da:21:c3:06:5d:
a4:08:54:95:45:56:c7:9f:0c:bd:f9:9e:95:7c:08:
6e:82:a3:81:89:57:cf:f5:23:d1:78:ab:ce:ad:ac:
30:9e:31:1d:b6:a9:b0:5f:7c:a0:c4:d0:c6:c6:cd:
39:0f:9a:41:04:a1:81:07:96:42:0d:9d:13:3d:d0:
c9:3c:e5:8d:c6:4b:14:6e:8e:9b:ca:55:40:5a:5a:
5e:2a:35:07:15:79:9a:b4:a1:d2:3a:f6:b4:77:e8:
8c:91:ff:b5:f2:a4:d1:4c:52:25:96:93:8c:1e:a9:
0f:b0:2e:4a:fc:2c:0e:27:9f:0b:10:d1:b8:82:66:
f4:48:e2:6c:01:c5:ab:3d:ae:ac:21:dd:21:ab:4d:
92:ed:c3:8e:64:14:b6:e9:a2:ee:6d:80:d0:f3:88:
98:3c:7f:e4:1b:53:90:ad:b6:f8:b1:dd:c3:5d:c1:
d6:04:ba:58:dc:fe:7a:ee:25:5c:17:0a:7b:f3:fa:
e0:ef:fa:73:f7:d0:78:28:d4:25:65:dc:b6:02:81:
10:d5:15:fd:ef:14:41:5f:31:09:d8:77:4a:5a:c9:
5e:4d:44:79:2d:c5:3c:2c:8e:07:06:f0:4e:64:4a:
9c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2B:88:A2:E1:6D:40:1C:0A:D2:B4:FC:6E:76:66:18:6D:F2:6D:D6
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:4d:b4:27:83:5d:08:75:3f:dc:f7:4e:21:b9:a6:9f:c5:1b:
46:e3:fd:9e:43:1c:3b:a9:81:ba:11:bd:45:35:18:5a:01:fa:
3c:e1:06:f1:da:8b:bc:f0:b7:b4:97:77:15:37:0c:ca:b4:06:
7b:50:5d:f2:12:b3:7c:7e:a1:79:23:d3:78:9c:30:83:09:dd:
db:2d:b8:23:d9:92:98:e5:3e:16:df:34:77:f7:e0:84:36:dd:
35:e2:f8:71:e8:a0:3e:48:e4:de:28:8c:14:86:d9:a9:12:d5:
0d:5d:af:07:38:f0:7f:29:cf:6e:39:19:1b:94:f2:99:c9:4a:
2e:46:11:bf:33:13:c2:05:9d:52:6d:c3:1d:27:d6:af:d1:24:
5f:c5:c7:4b:a0:eb:38:28:e2:44:68:39:f6:a9:c7:5f:05:8e:
b9:a6:9f:a3:b6:89:7b:26:9f:b5:cd:60:20:7c:81:5e:eb:ed:
5e:49:52:23:03:9b:24:c6:b9:f0:c6:0c:df:a7:1d:fb:1f:36:
0e:32:d1:6b:51:ad:27:77:a8:ef:80:5a:90:f8:ec:06:28:ef:
59:fd:58:f1:85:0b:c6:fd:a7:4c:9f:b5:37:ea:e8:01:c0:31:
c1:02:7c:9f:15:04:46:93:03:69:4a:97:3c:15:fa:5e:f4:bf:
1a:2f:3e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 10:54:12 2026 by rpki-client