
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
File: qO-WBRTjNkRNPN43sktm3DnUPRs.mft (raw, json)
Hash identifier: hc3FgMx3fzDGK9r4AGjlzs5S/HCk7o/Wr2wnfGxQGHQ=
Subject key identifier: CC:FD:F4:13:6A:DF:08:91:CF:88:10:4C:43:C2:27:92:12:92:B1:AC
Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Certificate serial: 042D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
Manifest number: 0415
Signing time: Mon 27 Apr 2026 03:38:47 +0000
Manifest this update: Mon 27 Apr 2026 03:38:46 +0000
Manifest next update: Wed 29 Apr 2026 03:38:46 +0000
Files and hashes: 1: qO-WBRTjNkRNPN43sktm3DnUPRs.crl (hash: hJRANi8wHZsDcG41ES+v8cadoI2WDD3zdcN96uwo+3o=)
2: C64BDF325B8611EE8F5917154AD9E6FC.roa (hash: lOfMw6yYmupoBGzZG06JxE7nkGYN0SjR1YBL+6yU110=)
3: 3FC126045B7F11EE91B3797C4AD9E6FC.roa (hash: B4Jxb4zuiNxx8ARYO+8FuXUu5CFHZJCjPVqFobOB2EU=)
4: F592AE225B7E11EEAAD8A37B4AD9E6FC.roa (hash: H2+/hMWhZrQQ/v+xp+P99me7GUvAhaEZLEIOvuDJ8+o=)
5: 9389DEB25B7E11EE85FB5A794AD9E6FC.roa (hash: saW9gDDU1fU/ss5E5QByOp+7T1wbc1vVgpJ7XS+gk+s=)
6: 39E85D245B7F11EE90195D7C4AD9E6FC.roa (hash: eHbXQ/7kild+PjHeBFmSGxlAnlG3pi2uyC9o63m5Mio=)
7: 44122BBE5B7E11EEA5C359784AD9E6FC.roa (hash: dlLpBI0Us25zgjOKkdJouRreKgFknaWvSBpHKXaHN4Q=)
8: 0DDE14645B8711EEBE2DF3154AD9E6FC.roa (hash: OVYm5oOpe8XlJOHUYg0R0oIytfPmlhVRgGeohPVoeGg=)
9: E29E1C625B7D11EEAFF513774AD9E6FC.roa (hash: cL6yXVTdN5LFRK/8lI56JvUwQ8huIMxP3ArtUJsfAsg=)
10: 0DB547A45B7E11EE95F5E0774AD9E6FC.roa (hash: sgLUjm9KT8NBSGsfPuF7zb59LXdnTNhjWZlBuJluY4o=)
11: 82BE0D345B8711EE8AF170174AD9E6FC.roa (hash: du0kSdCk2tSzKNVUZIxuV5z/5Bcr0/T6HJ/NasAIv4s=)
12: 673167545B7E11EE98EEBD784AD9E6FC.roa (hash: adqbPWSj3qJmhRpUh3DUEWmWfDKPs4YfwC9ZlFS5ias=)
13: A97AA9E05B7E11EEAD5E8F794AD9E6FC.roa (hash: 3NkJ+hNEcmyOZzaQCsy/+Ozh2yGmiiWLNtnnqsmfG2I=)
14: C07457B08A3711F0A002C2E7DAE4EC9C.roa (hash: Pe7GZmcC+gV4uLFF5b8V8YgWqeJmXfjZci1uqWUJRZA=)
15: BBA7D8A05B8711EEA5880E184AD9E6FC.roa (hash: NwbjXk0kj8eY+sbmyk9mA7z7P4Od2Lqrhnl5SE+949A=)
16: 7D84FCC85B7E11EE930F05794AD9E6FC.roa (hash: LbVSQZqmCHBXF80jfRgZ632p1CiqtMRJRyKOIJ1fwIY=)
17: 5A3685F85B7D11EEB4B9A0754AD9E6FC.roa (hash: hua4m2v20w0RdcluLq3SvMVi3aYeRg47OfgA9wTRs3E=)
18: 1C0B2122019C11F1BBDB0E7FDAE4EC9C.roa (hash: xwJRkcjKrYUbtrVrTZw0KB8n5igOjLaAbAqiU+HglAk=)
19: D6AA10E05B7E11EE9B32467A4AD9E6FC.roa (hash: RAafA0ML5VlgZ60Y1uxp4EowWyBnwvs0LOD/pOddd5E=)
20: 9FF8CF2E5B8711EE9F40A5174AD9E6FC.roa (hash: lG9MW9PGMEKdmiEYPlQxLtvMK2I/+bgWEhfhck5fvqA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 29 Apr 2026 00:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1069 (0x42d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668CFEAF, serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Validity
Not Before: Apr 27 03:38:46 2026 GMT
Not After : Apr 29 03:38:46 2026 GMT
Subject: CN=69eeda47-46f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:7f:2e:c3:40:6a:48:fb:de:9a:99:25:de:
ae:1d:7a:45:f1:da:6c:fc:89:6d:ef:88:c6:b1:63:
4d:8b:4b:a9:ad:6b:c4:a0:ff:5c:1b:99:e1:2a:70:
4d:82:c6:cc:ef:fe:4d:3d:86:08:cc:cf:a0:63:68:
f4:dc:01:2c:ae:ea:5c:a6:db:b0:fb:ee:0a:cc:f5:
e3:e5:51:3a:9d:8b:10:72:a3:c0:be:fe:ed:b8:3b:
ed:10:ad:16:1b:a8:9f:01:67:06:5c:75:41:3c:fb:
f1:70:48:1f:b9:47:ec:6c:c1:b5:c8:58:e2:ab:71:
bc:4f:b8:49:be:6b:fe:6b:94:51:56:7d:48:10:30:
03:d9:dc:55:e7:cf:78:d0:f7:4f:46:b6:1f:2b:82:
fb:89:26:66:56:ff:83:fc:80:f9:8e:22:2e:dc:93:
89:df:50:d6:8b:20:d7:f9:7d:57:fc:d9:a4:15:32:
f3:41:17:b3:5f:8d:a8:ae:d6:5d:98:bb:6a:1e:6c:
01:0c:d0:8f:6a:0f:0c:5a:02:06:9b:bd:11:87:65:
e2:c5:c5:ca:10:6a:92:68:cd:d0:6f:42:bd:37:49:
bc:05:d8:66:45:ec:57:dc:84:83:61:85:83:47:76:
c6:41:67:42:ec:8b:c2:7f:7e:c5:05:ec:84:25:4b:
b1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FD:F4:13:6A:DF:08:91:CF:88:10:4C:43:C2:27:92:12:92:B1:AC
X509v3 Authority Key Identifier:
keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:0e:82:3e:cc:a6:cc:83:fa:d3:4f:2c:ef:97:4b:2f:b5:8b:
82:66:1a:02:dc:63:4d:52:0a:d4:b6:ec:ea:e7:44:fc:1b:1e:
a0:69:d4:f4:e7:08:e3:04:4f:99:9a:a9:a7:2f:8e:47:a5:f9:
c4:1a:11:3e:09:11:12:e3:50:f2:97:28:f3:c1:43:57:b6:37:
8e:d8:88:b1:2e:1a:f9:24:a1:22:10:32:03:00:0a:21:f9:15:
63:51:ff:bc:eb:1a:bf:92:5d:87:28:f5:6a:9c:ae:8e:e3:60:
6f:de:3c:86:0c:8f:05:0c:7e:8e:39:88:d7:8a:96:ed:81:b4:
f0:59:a5:26:c4:38:88:92:fe:bb:7e:4d:5e:91:6f:70:29:1d:
77:db:c3:aa:2c:13:fd:60:2e:16:36:84:a7:c8:80:1a:9a:95:
35:2a:7f:d2:79:0a:c2:ab:36:08:69:c7:3d:4d:37:5c:0d:2c:
fb:da:e0:4d:98:6e:f2:31:64:43:7a:8f:97:4c:99:11:34:0b:
36:4b:69:92:d9:74:a3:da:e2:97:c9:b9:8b:77:7e:f1:af:86:
8b:b7:3d:06:e5:d9:7e:3a:7f:3a:fb:44:80:a9:75:d8:b9:71:
62:66:63:1a:9b:02:30:17:d5:42:cd:c8:8f:33:99:ee:27:85:
75:d5:96:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 01:16:03 2026 by rpki-client