
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
File: iCYpiV2NtXslQepI-hEmMl4pAgs.mft (raw, json)
Hash identifier: 678jISH/TCU4WtkoLVB96Zqw10qTGbbayEFtVchhaLk=
Subject key identifier: A6:89:73:FF:7D:AF:E1:C7:42:8C:D6:B6:07:5C:93:CF:BD:FC:02:46
Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Certificate issuer: /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Certificate serial: 0FF7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
Manifest number: 0FE7
Signing time: Fri 24 Jul 2026 00:57:19 +0000
Manifest this update: Fri 24 Jul 2026 00:57:18 +0000
Manifest next update: Sun 26 Jul 2026 00:57:18 +0000
Files and hashes: 1: iCYpiV2NtXslQepI-hEmMl4pAgs.crl (hash: XrU3JSH7SjjuZy6jKE6UBgm+243GqVFD6KupZuI1owI=)
2: AC9E51C2D4DE11EBADC42846F8AEA228.roa (hash: 5Ggz3Te0vgHLm/Kbv+y3MXeLbDbWl36tckNnmxxM2SA=)
3: 705E5CA8155611ECA3F1402FD8A014CE.roa (hash: BvaUlhFB8dhvbeBRjwtIRVfG1DlJ/s5hWEEmmbVV+rk=)
4: 1C5E9EFED4DF11EB9185D046F8AEA228.roa (hash: eN89IVYVfW57zUXGRLnTAOoNL9FLLc3vgrYPZzt46O0=)
5: 3469E5FA7B7211F1B243C300CF1D38B0.roa (hash: hX8O0ZYKk9oF6OhSZ3d33KQkrAldnrJfSsy0yCg08EU=)
6: FC67BBDA7B6E11F1A29088ECCE1D38B0.roa (hash: VuyY8Cp5a1XrJqlaUJnSJWCJHjs6SKQq/6s6QpmiIL8=)
7: AA3A8B5E155611ECB70DA62FD8A014CE.roa (hash: oylej++hlt4CSGV5/IZZeR0C3dM4otrHkh7MutLV9Go=)
8: BE6404FAD4DF11EBBA81A747F8AEA228.roa (hash: GH3Ja4snhwLWpp5ydwcxU3wl3XfH8RIdlELqY5Zsj+E=)
9: 78C71AF4D4DF11EB91BD5247F8AEA228.roa (hash: IMIVkoVO+LqKsmy3JpQMcRirZ3OyWFNrawFCvM6fDOk=)
10: 5CB73F807B6D11F1B9662CE4CE1D38B0.roa (hash: N/jRmpdjfA3JkvkzJNhjw9Td49wSKepzVaBgfp3FjXg=)
11: 5781D1FE7B6F11F1A27D61F0CE1D38B0.roa (hash: qY9gTFyxLeKKP3wsEKrrnFvi3gpHzdRPEYsotda9ylk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4087 (0xff7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3620ACFAF, serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Validity
Not Before: Jul 24 00:57:18 2026 GMT
Not After : Jul 26 00:57:18 2026 GMT
Subject: CN=6a62b86f-f018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:ae:2e:8d:28:ba:63:e0:d5:7e:45:0d:06:
df:9f:43:a4:4d:91:2b:69:75:cd:32:96:c7:b8:d4:
06:bc:87:d8:b0:97:80:95:22:f2:da:13:da:bd:d1:
95:d2:8e:81:8a:4f:6e:51:78:48:6c:1f:9c:bf:35:
c4:15:21:7f:52:56:b0:f0:cf:9d:d1:39:7c:87:c8:
da:cf:07:11:df:43:f5:f8:34:b3:5d:ae:4a:27:6a:
ff:c5:46:37:6c:d3:22:cf:f5:08:e7:0c:1e:ec:b9:
3e:aa:0f:3b:52:5f:eb:b5:09:c8:f9:7a:8b:b0:2e:
63:91:6e:2f:26:1a:df:69:b2:59:fc:00:d4:89:0b:
76:5e:4f:e5:99:ee:9f:e1:50:aa:f5:4b:8b:1c:eb:
33:48:c6:91:5a:19:a2:13:e8:84:6b:e5:de:45:05:
96:46:f0:1e:4f:27:b5:92:01:75:5c:a3:b0:8a:c5:
01:a5:73:3c:0f:ba:ea:97:ae:a7:78:85:42:54:1b:
ba:50:1b:71:99:44:59:42:d8:08:f1:22:93:29:55:
ad:db:31:d0:62:37:0d:20:fd:6c:01:b8:af:1f:cc:
2c:c8:13:af:fd:cf:31:eb:1f:59:df:a5:ef:aa:00:
e0:c4:f9:a1:31:7f:91:0f:9e:98:5b:d8:e1:db:51:
2e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:89:73:FF:7D:AF:E1:C7:42:8C:D6:B6:07:5C:93:CF:BD:FC:02:46
X509v3 Authority Key Identifier:
keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ba:4f:ea:47:c9:68:a3:49:f1:0a:58:86:9b:16:b4:b2:36:
61:c8:81:68:47:3f:70:d5:8c:d8:6f:e6:ae:0a:06:78:2c:52:
d3:b9:3b:9c:08:52:69:f5:5a:9d:2d:c2:21:42:a8:da:14:1e:
16:57:6a:41:58:d1:85:b2:6a:89:a7:6a:ac:08:8f:fb:87:19:
d6:6e:19:b3:71:46:b7:8c:08:49:d0:d7:8e:af:11:e1:bd:36:
9a:a4:fe:ab:ef:b3:f0:16:c6:95:f1:30:d8:1b:d3:ae:24:15:
01:1a:1c:0c:aa:98:93:5a:7a:22:bc:e4:b4:8f:2a:4d:45:b4:
94:7c:78:1b:bc:a0:1d:00:c9:7d:78:ae:56:6b:c6:93:55:61:
30:9c:53:38:82:21:53:8a:5e:f5:e1:7e:18:37:95:d0:74:f5:
73:34:27:11:15:8c:5d:b7:bc:9a:ad:65:d7:69:a9:4e:15:23:
c6:f9:02:9d:03:a2:a1:8f:94:ae:f8:6c:2f:f7:0b:6d:53:03:
eb:c1:8d:19:26:fe:4d:61:f4:65:0f:4a:c6:d9:33:31:0c:c1:
9d:85:c1:43:f5:0d:c3:96:33:96:09:77:8d:c5:97:c3:85:be:
9a:06:af:b6:2f:d1:b5:da:35:60:5b:41:30:dc:5a:2a:85:c6:
df:cc:32:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:02:44 2026 by rpki-client