
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
File: wI8-3FkViULC3znxQl5uuCFovj4.mft (raw, json)
Hash identifier: rFJxiDA+mo9zRu3cK3mWaGm/TS2EssHLpcLa8nx9RxU=
Subject key identifier: B9:32:2A:FC:1D:81:D2:D0:FC:5D:D2:57:55:86:AF:0F:EC:49:81:EB
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Certificate issuer: /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial: 069C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
Manifest number: 068A
Signing time: Sat 01 Nov 2025 02:20:15 +0000
Manifest this update: Sat 01 Nov 2025 02:20:14 +0000
Manifest next update: Mon 03 Nov 2025 02:20:14 +0000
Files and hashes: 1: wI8-3FkViULC3znxQl5uuCFovj4.crl (hash: PGNFGLYRMEQIQAVC5cjZCKPdPzJ9oM4XMXAUFRChIP4=)
2: BE8B744223BF11ED85C484C4F1222468.roa (hash: mPfb/W1Lt6VuDNJFTu3CYZ/uoF57Z5GFzbMSNrIadIk=)
3: 47EC7EC423C111ED8C5569C9F1222468.roa (hash: X90d8Bp7be3eFZEm0tN0NlXAE4lcokMViNFvfEFubQ4=)
4: FA517E3A23C011EDA50A83C8F1222468.roa (hash: xQyOqRSRtBnzYBtEnci3/fZ1gbPy5vNLel67f1qXTlM=)
5: 7097890C25B711EDA0F42D8CF1222468.roa (hash: LCDQJRPalUgqEBA5/BHdcp5UayryRT5PLrlOTYXutHo=)
6: 71FA729823C111EDAB9AEEC9F1222468.roa (hash: ajHfktHCX6C5ICjcze8RYAaozdvM825xVJ6eHLup0/c=)
7: B23C0D6823C011ED85E19AC7F1222468.roa (hash: ycw2kblVv14coafRuI4bh8uZ423FHxoLlRXQjWcq7iE=)
8: 73A4A16E23C011EDABD4C1C6F1222468.roa (hash: Puzr/sJbdQB4MzskXStH2KcslcnVGHGWC7j0vSxPGck=)
9: 2B02A64023C011ED8728E5C5F1222468.roa (hash: G/yX4leE+tLKxVRQ080jUVUwSsOPiDnIG2vz/NduDOc=)
10: C896274C23C011ED9C3FD1C7F1222468.roa (hash: yZnBwovkgD+QQe0Ey+FhF46dMQlhjgVt/VRzQSjeVzU=)
11: E3E135C823C011ED954F2FC8F1222468.roa (hash: f1H3bY8RHDq2y8Y8/XygLs40Lsy2PWBYElNy/nq4D80=)
12: 232E5B1623C111EDB63CF4C8F1222468.roa (hash: 0o2DcmpoHMCfNZtf1lb07iznJrEi/XbnXGntHAj6Rms=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Nov 2025 00:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1692 (0x69c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C65C6AF, serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Validity
Not Before: Nov 1 02:20:14 2025 GMT
Not After : Nov 3 02:20:14 2025 GMT
Subject: CN=69056e5e-9d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:eb:3b:f4:1f:c8:7c:b5:66:9a:16:de:60:
34:98:2a:43:1e:24:5f:4a:d1:e1:8c:b6:78:f1:9d:
ff:3a:f1:73:58:c5:03:1b:f3:92:82:ea:82:98:35:
73:67:9a:71:1d:be:b9:6a:9e:bd:37:31:7a:da:e1:
77:ae:8e:cb:74:1c:b1:03:fe:d9:00:f1:ed:dd:e8:
90:90:6a:cc:0b:89:dd:3e:b1:47:d0:d1:86:43:d2:
db:d2:12:00:a3:a6:d3:38:e8:21:64:ba:73:8f:d9:
40:98:38:ec:e1:5f:9f:97:c4:95:54:5f:77:86:c4:
8b:03:eb:99:12:cc:bf:d9:56:fa:98:87:f9:2f:97:
6a:66:81:7e:21:bf:18:07:7e:5c:95:88:b0:61:6c:
d7:ae:63:67:18:cd:53:af:c4:b3:4b:d8:5a:57:e4:
58:14:8b:9a:d2:29:2f:9a:6e:1f:cc:fa:0e:a0:dd:
0d:20:13:30:f0:88:1e:fa:4e:b1:c7:ad:81:ae:13:
64:f6:dc:25:5f:e2:c3:59:a4:fa:25:b2:df:da:36:
d9:a9:ac:a7:26:03:1f:a4:9c:c9:eb:6a:17:d8:e8:
b8:6a:fd:2d:d7:79:7b:63:3a:3f:01:67:b4:87:84:
10:41:e0:f0:60:ed:ec:9d:8b:82:12:01:ac:bb:bc:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:32:2A:FC:1D:81:D2:D0:FC:5D:D2:57:55:86:AF:0F:EC:49:81:EB
X509v3 Authority Key Identifier:
keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:74:3f:73:f5:3f:45:d5:65:14:bf:20:74:7d:79:19:94:ff:
34:5e:52:5a:d4:2a:a2:09:f9:7d:65:01:6a:0e:29:2c:55:7b:
0f:18:5f:7e:71:51:c5:b6:db:fb:e9:fa:37:a8:dc:d6:52:aa:
95:e3:84:44:48:66:ed:b5:88:f1:b3:88:3a:65:54:b6:ee:34:
64:6f:3c:66:92:7e:d6:f8:42:52:05:c5:5a:44:3b:a4:ff:33:
c7:64:16:fa:8c:b9:b9:3c:56:d9:bb:59:0c:bb:53:0c:b9:d3:
91:52:b5:df:68:e0:17:d4:e8:7f:77:6f:ac:51:f0:7d:a6:23:
1e:60:f5:99:b7:e4:9f:46:69:bb:58:ea:ff:bd:70:80:bb:b8:
1f:d5:ea:25:e8:c9:ae:37:85:14:97:ce:9d:81:e5:d0:37:78:
6d:99:8e:7a:50:49:d1:df:88:8b:ed:83:d6:c4:12:b5:81:8d:
da:5c:1b:21:a1:60:80:12:35:e7:bf:41:f4:af:44:40:99:c1:
eb:bb:b3:f9:3b:14:79:48:68:0b:20:71:ce:ac:28:9e:11:e5:
13:24:d2:de:fe:2d:91:ae:67:53:88:47:a0:7a:f7:cf:9a:86:
3f:f2:b2:c1:f2:32:65:1d:2b:7a:53:a3:27:42:d2:2a:6a:c8:
ab:13:c3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 15:25:43 2025 by rpki-client