
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
File: PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft (raw, json)
Hash identifier: RgwkQGoG0LwmhHlYLAdyIioG89CZkL78FlbNt1HdF+E=
Subject key identifier: 7A:83:77:BF:7B:BA:8B:7A:4C:B6:CB:1F:D5:E3:05:E7:F5:F0:FD:98
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Certificate issuer: /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial: 041B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
Manifest number: 0402
Signing time: Sat 25 Oct 2025 03:27:05 +0000
Manifest this update: Sat 25 Oct 2025 03:27:01 +0000
Manifest next update: Mon 27 Oct 2025 03:27:01 +0000
Files and hashes: 1: PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl (hash: vSnEr/wwq1eZvXSuEEH0FLXw0htvk07HLKrFiOWU4rI=)
2: 4533CC40B91311EDA26291C6F1222468.roa (hash: uGFYvGCNbxCuuh0wibkKXQKGhe4pjJXmtLBEpIrE66k=)
3: 1DEB7B6C613B11EEB5C645474AD9E6FC.roa (hash: /ErXEoW0e3+UCMayKYaaeAaWHsb5XTpte5tdQ4ZnfGA=)
4: 7DF1A778B90E11EDBC79B1B8F1222468.roa (hash: k3GwCfINv0mvGU/BLwW/oIfhjiuTSdQ3PzvAnkVobV8=)
5: EB0E0D70B90D11ED810EF2B6F1222468.roa (hash: qjnrwe3aS+ux+xzqGjAAbOm7cFsu1KPed2tIU2bivU0=)
6: 6693E35CB91311ED8675F6C6F1222468.roa (hash: 6JhXHPZF0zRHLFTuJnEgTJ4LTU9hLAslWS4MPzo2NtI=)
7: D723225EB90E11ED8875AFB9F1222468.roa (hash: Kn9nxXMbZkD7/JtPdi9k9kabkdwN9RHHmYUqtxe5CgQ=)
8: 9E8E161AB90E11ED9A8907B9F1222468.roa (hash: H3Pq9ilGAR4aK1isd9uFYe7Pyx0ixqxwxPuUeqJSQs0=)
9: 17ABBADAB90E11ED91A064B7F1222468.roa (hash: 74bYn1UZ1KvUPzN2OSoZA6NmbYaUfQGtHKW8VwNxGn0=)
10: 469FD1D2B90E11EDA4D709B8F1222468.roa (hash: DwCiq+yl1LO0Hky4qis9ittQ4gAvggd/ZDmtdnICEP0=)
11: 90EE2C2EB90F11ED9409C1BBF1222468.roa (hash: bLZoCDQRzljU6a7QZaQ/7m8zC+sEgUgzOUOZvGfwhno=)
12: 1FECC31AB90411EDABCE3C9AF1222468.roa (hash: 6Uqqk7kzConxMnvXRs+CVD9wVfEepdxTtUAqdhrHQ0g=)
13: F4DE17FEB90E11ED9DADF2B9F1222468.roa (hash: tOXvv0qQ2rd5TLKqCJZzCM6weckNfsiTf+bbdsmvZM0=)
14: EA38FC82B90A11ED85FF5EAEF1222468.roa (hash: U/DFwFJXSPn3zdoS1fQC4dnFVphKMbL7mbtwJ9Z/d5w=)
15: 0E435AD2B90B11EDA524C7AEF1222468.roa (hash: 3pi1Vkolg9TLskhvKL2ooaCwse7gRq1ZH74gOxNR6rE=)
16: A1485D08B90D11EDB7DC21B6F1222468.roa (hash: UL0BFEayVaVlnK7SHN/JGWP9FuMMQ0RUBTzgrpcNFxg=)
17: 1445B006B90611ED953613A0F1222468.roa (hash: E2Pi3VCICYk9gP/HP2vBzXaAEevEu5qcMVBYIRi4msY=)
18: 2ACB0B7EB90511EDA3D72E9DF1222468.roa (hash: Y26Di5Mtx4+qnesb2dE9YlwXzFR6VIjMiaa+c4P6/vM=)
19: EA518BD2B90311ED9B1C9F99F1222468.roa (hash: J1Vz1rVLXnQTG3uxuAEebjvTI4ey+M4i/uYDE0Z3cIA=)
20: 239555A4B91311EDBDD805C6F1222468.roa (hash: TMW3XM4heg7B+zbYk8n88UWO5D0/PgqY4J8jVrpyTf4=)
21: 07F1B9A4B90511ED97E8D59CF1222468.roa (hash: Z5jkWScZAF0iUScwlLtH91pr6etSX7YQoMC+lv2EUy8=)
22: EDA6C45EB90411ED84A2979CF1222468.roa (hash: YbllMRgXv2ItWxHhyBf/RDeDvc8S+ilc9Tjl3XPHlSM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 27 Oct 2025 03:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1051 (0x41b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AF, serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Validity
Not Before: Oct 25 03:27:01 2025 GMT
Not After : Oct 27 03:27:01 2025 GMT
Subject: CN=68fc4388-83a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:03:c1:31:75:91:7c:f8:fc:52:2e:1e:1b:df:
fb:c3:cb:cf:25:6b:4c:f0:7d:b4:86:d7:49:3a:9d:
e9:cb:2c:48:9e:f0:92:81:b3:b4:f6:87:b8:6e:6f:
77:e2:b7:8e:83:d5:fb:05:dd:83:55:5e:39:63:c7:
9e:a8:d0:9f:58:3c:01:7b:49:24:d0:4e:a5:ab:86:
ee:1f:4a:9c:b3:2a:f2:67:d1:37:52:d3:fe:9c:5c:
85:8a:c6:cb:0f:5c:d7:12:62:8b:38:a5:84:f4:5c:
64:86:ae:32:8e:9b:10:be:1c:a5:fd:62:fe:ca:c2:
a6:92:1c:67:ed:41:7b:71:22:9d:c7:a9:3b:5b:d9:
e8:fe:7b:f9:88:3c:6d:62:7f:51:93:51:8c:c2:29:
6a:ff:72:ac:9c:eb:80:45:95:77:f6:c0:46:fe:ce:
14:d0:66:6c:22:13:cf:ae:19:5d:1e:b6:0a:d0:2d:
09:96:4c:3c:ae:a0:9b:90:fb:78:44:b9:9e:77:79:
cb:66:16:ec:d9:0a:ab:fa:e2:a0:f4:9c:db:47:d5:
f4:cc:60:df:23:5d:e2:98:05:3e:f1:1a:4c:43:fc:
45:71:48:33:0b:b3:fc:d0:85:c0:7a:20:bb:e2:05:
99:a6:14:76:32:86:b0:48:e4:b4:50:f2:04:cd:21:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:83:77:BF:7B:BA:8B:7A:4C:B6:CB:1F:D5:E3:05:E7:F5:F0:FD:98
X509v3 Authority Key Identifier:
keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:b1:e4:79:c8:22:45:65:10:04:9e:2c:61:73:4c:1a:54:b3:
38:0c:21:26:94:32:66:5a:6b:59:9b:5d:fc:3d:59:5b:20:74:
07:fb:b3:1c:cb:49:53:5f:61:d5:d5:d8:8d:ca:80:66:c0:ee:
5e:82:b0:40:de:06:c0:34:79:ec:b5:c9:28:31:fe:7b:19:ea:
ab:da:e1:d0:4e:0d:c8:25:41:6b:28:38:2a:50:9d:9e:e8:42:
47:b3:ff:df:56:db:18:fd:f9:d0:ef:5d:15:86:ec:23:74:84:
94:6b:c9:41:df:56:20:41:cd:64:38:70:6b:0d:ba:65:39:d4:
26:8c:19:f0:27:54:d2:ac:de:90:8b:8c:36:3f:3b:e7:2d:1b:
ff:b3:61:cf:f4:4d:cb:eb:f3:ef:d5:b4:6a:f1:7e:91:b7:1c:
a4:de:47:99:5a:9f:ff:12:28:02:a3:2d:41:f8:af:fc:1d:e0:
dd:36:bf:ee:55:c2:40:b5:4c:0b:af:f3:f7:58:72:e7:3b:a7:
42:9e:d4:56:77:68:4a:f5:88:34:2c:68:28:f1:af:13:e8:57:
ef:62:a7:a2:b5:63:59:f7:f2:ca:cd:09:ab:3d:b1:1e:78:86:
85:ea:07:01:0b:d8:45:6e:c6:35:b2:53:af:2c:64:06:cc:85:
bd:6b:93:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:14:30 2025 by rpki-client