
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
File: -4Xgjl27Bclbe9Dafl_m_OOYJv8.mft (raw, json)
Hash identifier: DBbewixL1aR1smSoyZdngLoCtmK5KElYRxuHet9GV4s=
Subject key identifier: FD:52:C2:F8:E4:F9:B4:81:1B:80:BD:09:EB:7A:E2:9B:4B:46:3D:93
Authority key identifier: FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF
Certificate issuer: /CN=F36C2BF2AF/serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF
Certificate serial: 02C4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
Manifest number: 02B8
Signing time: Tue 24 Mar 2026 05:00:27 +0000
Manifest this update: Tue 24 Mar 2026 05:00:26 +0000
Manifest next update: Thu 26 Mar 2026 05:00:26 +0000
Files and hashes: 1: -4Xgjl27Bclbe9Dafl_m_OOYJv8.crl (hash: 4+BC1Rbn9ltQH1SaZoDDSfA2/VKrupvDkgHn5iExEw8=)
2: 53E9AF201C4A11EF92B1620D7DDC24C2.roa (hash: KdhlIJ+hQm0D2JssqauHu+bI+aH2TH0/RDTYBo7Rfl4=)
3: 6BD3D72C1C4B11EFA0DF5FE57CDC24C2.roa (hash: kVAT6LvKNfd1TJNrUHJDtuhrBoJ6grfJU6Qzk3woG9A=)
4: 3C9F14321C4911EFAAC969317DDC24C2.roa (hash: /gSe9pWPhZ5Kr8gRd+6yNTm4qcpvwit2QsIwfbhWGVc=)
5: EBFBD6E61C4811EF8DA9FC307DDC24C2.roa (hash: Uo9oJGDvBKqk9WcNSro/GD2IK8co4yKnO+0R+FSe34k=)
6: 08C544981C4811EFBA18A22B7DDC24C2.roa (hash: tqhwIQRYgFOkg1i0m9P867NgozM8wyM/qc2l8ldhExg=)
7: 312C885E1C4A11EF9DE586157DDC24C2.roa (hash: GjHEWzUkDA6tsW5/6kpvZ3CU5zKEBXoesmUsNT+Jflo=)
8: 7E241A021C4811EF8F9DAE2C7DDC24C2.roa (hash: hxre5xYuTBxkwQmVRlBLeiMXMr0AnCvaVpMmejl5uhQ=)
9: FE708AD21C4911EF81BE34EA7CDC24C2.roa (hash: ZiopXrdqLTsU+61ziIshjn2/qWu+FsJbH9OdegqZ2vo=)
10: BF6D84E41C4811EF92649B307DDC24C2.roa (hash: Jbh8WY5UNAzz+osRgcagPYaVf8dyK5RVLpOyRMHMYas=)
11: 8604AD081C4911EF8DFB87357DDC24C2.roa (hash: MNoPychVF0mh+syf/DFmicmi7Wi0XntNJ0aJdW/gDe4=)
12: 440AE6387FC211EFACAB56B8762E951A.roa (hash: Rbkyo5rELKFe+Cn1UL0BmEWDgHbqtqW4Mc1h5Ma1xWM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708 (0x2c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C2BF2AF, serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF
Validity
Not Before: Mar 24 05:00:26 2026 GMT
Not After : Mar 26 05:00:26 2026 GMT
Subject: CN=69c21a6b-8403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:5f:f8:0c:b2:32:75:85:63:85:6f:a5:d2:
93:86:15:14:bb:5d:56:4d:9b:1d:5c:6a:99:3c:8b:
f7:16:2a:16:62:84:c8:1c:2e:37:6b:43:9b:11:67:
6e:58:f2:cc:76:76:24:06:e1:1b:f5:5f:79:6c:07:
8f:15:ef:3d:19:6a:6d:96:81:e5:9c:6d:11:12:1f:
f0:98:95:58:7f:37:c2:25:37:ac:85:70:37:10:47:
3a:83:04:fc:9f:7c:21:93:09:1b:4c:7c:37:4f:8b:
1b:08:e0:cd:0d:e3:53:2e:0c:2c:4a:0e:17:56:20:
91:2d:a8:d4:b1:20:d9:44:4c:bb:c8:64:f2:44:aa:
d1:b3:6a:17:d4:8e:5a:4f:10:83:6c:9b:51:4e:45:
5a:06:2c:66:f0:64:83:35:1a:be:50:dd:5a:c1:10:
5b:4c:2f:65:30:17:99:12:91:64:65:de:0d:e5:ca:
da:13:41:f0:6a:b7:f1:af:09:90:79:d3:1a:a0:22:
35:43:9f:f4:17:55:23:0a:c3:09:20:ac:69:29:08:
07:21:4c:17:72:c7:27:a6:50:85:77:fa:27:50:1f:
5f:7a:0c:3d:79:4a:de:d4:ae:9c:40:35:9f:82:69:
e7:22:f3:c7:a8:e5:ef:aa:50:2e:52:e6:20:73:f2:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:52:C2:F8:E4:F9:B4:81:1B:80:BD:09:EB:7A:E2:9B:4B:46:3D:93
X509v3 Authority Key Identifier:
keyid:FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:25:1e:d4:e7:da:cb:02:c1:10:c9:2f:c4:07:22:38:2f:05:
54:6d:3c:26:5e:15:b3:ca:82:50:91:e7:5f:4f:a9:8a:12:af:
22:21:3e:26:46:2c:5f:48:1d:dd:5e:9c:db:86:60:80:35:8a:
8a:0d:07:35:be:69:fa:80:d2:6c:f4:ae:7e:3b:81:20:0f:f0:
e8:11:94:f7:bd:50:e9:55:c1:f4:b8:2e:3e:8e:bf:4d:a4:ab:
6b:a6:76:6c:43:47:80:20:6f:a6:73:3c:24:17:92:30:89:c8:
af:3d:38:31:c6:ab:a3:ca:27:af:08:1c:b0:42:92:34:1e:d7:
cd:3d:55:ad:71:b4:f1:3c:a2:b1:33:56:ea:73:1a:60:81:31:
4b:1c:28:bf:b6:b3:e4:e1:29:cf:fe:f1:97:39:0b:f3:dc:f6:
12:bb:f6:23:96:a2:53:87:f5:d3:17:01:9f:43:ff:aa:5b:f1:
9e:02:e4:76:5b:1c:46:65:d6:62:3a:5e:8c:36:4f:92:c0:2e:
74:0c:43:f0:c9:8d:d2:7c:2a:3d:20:02:b1:b3:cb:b1:eb:74:
72:46:7f:ad:cc:17:a7:98:f9:b0:77:f3:16:0d:11:7f:42:12:
ae:e8:03:85:47:8d:e6:0e:a9:07:77:4b:36:f6:19:19:f7:d9:
f4:f2:90:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 20:04:09 2026 by rpki-client