
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
File: kFAlcktjykllnsFAWPqwwTHFDp8.mft (raw, json)
Hash identifier: p3nw52sldhHlArI/9AlifvKf1Mo+svzrti2nmxy1NAU=
Subject key identifier: 7F:C2:95:66:00:07:52:61:0D:B2:9C:EF:EC:80:BC:8A:ED:B3:0A:3D
Authority key identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
Certificate issuer: /CN=F367CC68AF/serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Certificate serial: DF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
Manifest number: D4
Signing time: Sun 21 Jun 2026 05:19:11 +0000
Manifest this update: Sun 21 Jun 2026 05:19:11 +0000
Manifest next update: Tue 23 Jun 2026 05:19:11 +0000
Files and hashes: 1: kFAlcktjykllnsFAWPqwwTHFDp8.crl (hash: gbR4JNsYVF8nfmsH9Qw1qZwJTqn/thFj7IqjHJWPVjg=)
2: 65FE1EFAD60F11F0B34D61F1DAE4EC9C.roa (hash: mHmRtPN3nZyRtaKXk1NyFAMoXJCcMKBcFKPMe58mtiY=)
3: 7FC14BC8D60F11F0939384F1DAE4EC9C.roa (hash: UWIFnq0Lrxsq+X5E3Jj5o9t7xwd79DXmyhte1Zg7m98=)
4: 5F36C9FED43A11F087C1DB7BDAE4EC9C.roa (hash: 4Qs9L5d+Awp2J42sO92B4p+sTgRxFXnSs6/Y3boWpeI=)
5: 12BB6CB0D61011F080EE71F5DAE4EC9C.roa (hash: jieQwbNjbO9s2qsCMK6/pp01R2MtwreNxzIjr89AhWs=)
6: A77BACE0D60E11F0A525F0ECDAE4EC9C.roa (hash: WTe1kO+YXrIxbOoIVpdaqpCDc9gvbrr/Ve7XA6zdn5w=)
7: C09D7446D60F11F0929B8FF3DAE4EC9C.roa (hash: jxUAEr+gL2A5pYodyrShkYHLF8BEr2fg48HKO/LfZok=)
8: F20A2EE8D60F11F0A4B15CF5DAE4EC9C.roa (hash: OwRd4G+mOpbXOMIkBo/pXf/BF2+Cvu67XOd6VreanjU=)
9: 295EF6E4D61011F099E8CAF5DAE4EC9C.roa (hash: rYes370ZUBvIJkRR4ObdZvVs20GYj/AIYKpkc3M+O8c=)
10: 462E5B98D61011F09797F9F5DAE4EC9C.roa (hash: OuOErrsFiqhdqJPzGVtN61HMOsmFGKM1fy11PY2D+1E=)
11: A814A5BED61111F0B21B3C80DAE4EC9C.roa (hash: awM7RQaOv0f+MQEh7zrBLEQLCpOGervbj3ug5CYTW4A=)
12: 9ED17FD8D60F11F0907EC1F1DAE4EC9C.roa (hash: PlomXlfc2/H7NcFtazpjEv+QjpLM7jasTSrZvSQvHKQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Jun 2026 00:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CC68AF, serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Validity
Not Before: Jun 21 05:19:11 2026 GMT
Not After : Jun 23 05:19:11 2026 GMT
Subject: CN=6a37744f-4da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:58:6c:3a:24:38:f1:59:cb:b1:c8:b6:3f:
64:c8:f0:10:6f:e0:56:62:79:da:27:ee:fe:c9:9a:
50:75:18:a5:9a:ac:88:82:55:65:7c:71:47:83:ea:
a3:fa:24:8e:ee:24:5b:ab:87:9f:45:ec:5c:19:b5:
a3:a2:0d:97:2a:b1:02:ec:46:10:b9:dd:26:5d:56:
1f:97:59:fc:77:66:ec:8e:4e:55:89:74:91:19:01:
7a:06:95:c3:b9:95:f1:e1:cc:83:93:54:a0:a1:e3:
1b:c3:c5:b3:72:de:4d:62:c9:db:69:f5:64:ea:a4:
7d:3c:99:67:95:09:06:c0:85:f5:f6:13:3a:69:10:
48:cb:28:2d:ce:47:81:f6:c0:7e:93:d3:f6:74:b1:
dd:61:29:1b:7a:17:53:d1:8d:28:3c:d2:82:7c:32:
73:ba:68:da:96:80:c8:32:15:72:c6:0e:ad:cc:9b:
9a:ca:80:a3:8a:cd:1d:62:cc:83:a2:e8:24:86:ce:
3f:92:a6:2f:db:d7:d0:b9:d7:62:2f:4f:43:7b:68:
c5:d6:dc:18:32:83:07:10:87:4b:f2:9c:21:a6:53:
44:f3:ba:f9:93:14:07:97:98:df:f6:0a:2d:83:73:
23:a7:55:11:a3:b6:b8:e0:6e:52:34:76:40:ef:c0:
6e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C2:95:66:00:07:52:61:0D:B2:9C:EF:EC:80:BC:8A:ED:B3:0A:3D
X509v3 Authority Key Identifier:
keyid:90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7d:cb:9f:08:5e:f6:4c:fe:9d:66:c8:15:49:02:ca:f0:c7:
81:94:4e:ac:29:22:f8:e3:a8:ce:fb:da:1b:c8:23:93:0e:d7:
34:3c:57:12:75:c9:73:36:49:44:46:da:fe:24:0b:3c:c9:54:
84:94:91:cb:df:14:4b:73:c0:b0:da:94:b8:60:37:fa:1b:1b:
f9:18:37:8e:a9:b1:7b:57:97:d2:eb:a7:7a:1a:8c:09:73:8a:
9d:6b:51:b5:72:f1:cc:00:f3:55:5a:a0:76:36:91:cf:60:cd:
1d:c2:fd:49:70:8b:91:88:6c:10:92:87:4a:0b:ea:a1:9c:12:
e5:77:fc:e2:dc:65:21:f7:bb:db:52:58:d6:02:eb:29:c3:b9:
48:17:4a:ef:7f:ed:3f:45:7f:44:50:a7:c4:10:04:0d:a6:ca:
52:9c:54:e0:bf:52:71:73:31:b6:ff:19:5a:2c:a8:ae:7b:ef:
75:81:7e:b0:d0:76:58:6c:ab:55:15:7a:e3:3c:02:14:42:b5:
e8:c4:3a:75:c8:1c:58:a4:04:d8:98:1b:73:be:2f:50:98:f4:
75:52:3c:59:4b:9a:46:f9:cd:41:17:5f:42:d6:81:aa:45:f0:
63:0d:00:b0:fa:ae:8b:7a:07:5b:95:76:4b:24:2c:3b:91:0f:
05:49:9e:13
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0NDNjhBRjExMC8GA1UEBRMoOTA1MDI1NzI0QjYzQ0E0OTY1OUVDMTQwNThGQUIw
QzEzMUM1MEU5RjAeFw0yNjA2MjEwNTE5MTFaFw0yNjA2MjMwNTE5MTFaMBgxFjAU
BgNVBAMTDTZhMzc3NDRmLTRkYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSmlhsOiQ48VnLsci2P2TI8BBv4FZiedon7v7JmlB1GKWarIiCVWV8cUeD
6qP6JI7uJFurh59F7FwZtaOiDZcqsQLsRhC53SZdVh+XWfx3ZuyOTlWJdJEZAXoG
lcO5lfHhzIOTVKCh4xvDxbNy3k1iydtp9WTqpH08mWeVCQbAhfX2EzppEEjLKC3O
R4H2wH6T0/Z0sd1hKRt6F1PRjSg80oJ8MnO6aNqWgMgyFXLGDq3Mm5rKgKOKzR1i
zIOi6CSGzj+Spi/b19C512IvT0N7aMXW3BgygwcQh0vynCGmU0TzuvmTFAeXmN/2
Ci2DcyOnVRGjtrjgblI0dkDvwG5LAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUf8KV
ZgAHUmENspzv7IC8iu2zCj0wHwYDVR0jBBgwFoAUkFAlcktjykllnsFAWPqwwTHF
Dp8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdDQzY4LzUyNzQ5MUZDRDM1RDExRjA4NTgxNzk5N0RBRTRFQzlDL2tGQWxj
a3RqeWtsbG5zRkFXUHF3d1RIRkRwOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tGQWxja3RqeWtsbG5zRkFXUHF3d1RIRkRwOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0NDNjgvNTI3NDkxRkNEMzVEMTFGMDg1ODE3OTk3REFF
NEVDOUMva0ZBbGNrdGp5a2xsbnNGQVdQcXd3VEhGRHA4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7fcufCF72TP6dZsgVSQLK8MeBlE6s
KSL446jO+9obyCOTDtc0PFcSdclzNklERtr+JAs8yVSElJHL3xRLc8Cw2pS4YDf6
Gxv5GDeOqbF7V5fS66d6GowJc4qda1G1cvHMAPNVWqB2NpHPYM0dwv1JcIuRiGwQ
kodKC+qhnBLld/zi3GUh97vbUljWAuspw7lIF0rvf+0/RX9EUKfEEAQNpspSnFTg
v1JxczG2/xlaLKiue+91gX6w0HZYbKtVFXrjPAIUQrXoxDp1yBxYpATYmBtzvi9Q
mPR1UjxZS5pG+c1BF19C1oGqRfBjDQCw+q6LegdblXZLJCw7kQ8FSZ4T
-----END CERTIFICATE-----
Generated at Sun Jun 21 23:37:01 2026 by rpki-client