
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
File: 1ijkyWq6nPsSRHeGe73xpENfD1s.mft (raw, json)
Hash identifier: SNWMlaShywNEyhmcO4qISVcEPaJ41MaQWYwhW3Z5riY=
Subject key identifier: 6C:08:B1:05:5C:CA:A8:EC:02:A2:61:89:B7:A6:80:34:A8:C8:95:74
Authority key identifier: D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B
Certificate issuer: /CN=F362412EAF/serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B
Certificate serial: 0390
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
Manifest number: 0387
Signing time: Thu 26 Mar 2026 04:31:20 +0000
Manifest this update: Thu 26 Mar 2026 04:31:19 +0000
Manifest next update: Sat 28 Mar 2026 04:31:19 +0000
Files and hashes: 1: 1ijkyWq6nPsSRHeGe73xpENfD1s.crl (hash: J7eshpLSB+i9jpXQsFhYw5/loXkVpFd9BaJS3M9H8I8=)
2: ED02D88AE81A11EE8623BCC5775412E6.roa (hash: mvHTVhODmwdELfP/e2cG297ECeboGj2BsOL9AUtxSak=)
3: D9673B327E3811EEA513EB3B4AD9E6FC.roa (hash: UqaCdDOXPbSropYSiVv8/KHGfuPJpE0IwMmtg9u2HE0=)
4: AD4DC7B2E81B11EE9D0AAC4C775412E6.roa (hash: Rg0rPDoDCNsPvE5jk03o2oztgTr1S1Uz/K+MpVZVO/k=)
5: 413308947E3A11EE832D2F404AD9E6FC.roa (hash: Eb0obFXe3E6DORP4MxW4QBN2bM/zRSA3RlnaOBqHUN0=)
6: A9A46126E81A11EEAA8ECCC1775412E6.roa (hash: wd/nf2EuVpjl0YLy2l9YBPgNolj8qZpz1sk3ozhlrnw=)
7: EA19B9687E3911EE8853E63E4AD9E6FC.roa (hash: O86LwkUf5r8SNUYChgmFxO/FC3RubzrEdUN/7g3zOxM=)
8: 1970B130E81B11EEACE154C6775412E6.roa (hash: 5vNOWkuS5OOw6HL2Agkgo+3kaWgHGPZi7TRSlYZvPNs=)
9: 48AE0434E81B11EE876ADDC6775412E6.roa (hash: wJr/eaxq68q6pHClMi9x3b4zYhBKBXGZVN5loE10NCg=)
10: 63F96FF2BEB411EE9F8AD251775412E6.roa (hash: ndpKTdXcDoxXSkEuWmu2k8nfK/ZfndTlZeUQ+gODKm4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl
rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912 (0x390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362412EAF, serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B
Validity
Not Before: Mar 26 04:31:19 2026 GMT
Not After : Mar 28 04:31:19 2026 GMT
Subject: CN=69c4b698-c26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:28:fb:24:db:49:de:9c:84:c9:12:b9:74:
d5:d1:b3:ee:d0:6f:89:7f:b0:e0:84:04:84:d4:e0:
3a:97:dc:57:13:d5:9e:a9:72:af:35:25:2a:94:a7:
e2:e0:0b:3c:77:a7:2c:4f:b8:a0:28:df:a0:78:27:
b9:20:91:0b:76:75:5d:2b:0a:d4:16:c1:ff:6f:9d:
d6:9c:84:03:64:78:c4:00:88:c8:c8:d4:a0:02:ae:
3c:3f:17:9f:0c:e9:00:90:bb:67:27:46:b6:e1:e5:
62:a4:6b:5d:67:6b:09:73:32:28:7e:8c:7b:68:52:
56:2d:38:12:df:2a:09:c0:dc:fd:e6:0b:76:ff:1c:
88:7d:06:da:fa:c5:13:10:a3:07:98:46:e6:82:dd:
41:a2:37:88:a7:fb:14:11:b1:aa:70:31:71:4c:16:
7f:33:4b:2f:92:fa:28:b1:4c:d2:59:ab:d1:98:66:
7f:b5:8c:d9:aa:10:93:1a:ce:10:c2:01:45:75:f1:
8f:fb:a9:ef:40:59:55:c5:02:89:ac:fe:bb:fb:2b:
c3:54:5e:b2:38:fa:0d:6b:01:59:73:cd:b7:df:38:
36:31:d0:9a:18:8d:75:8f:05:9d:cb:e9:13:cd:51:
cc:b8:99:3b:4f:1c:d7:17:86:29:03:a9:d5:92:4a:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:08:B1:05:5C:CA:A8:EC:02:A2:61:89:B7:A6:80:34:A8:C8:95:74
X509v3 Authority Key Identifier:
keyid:D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:25:95:43:93:71:6b:a0:a3:42:28:e9:07:18:c3:2e:7c:fd:
1f:cc:a3:54:99:ba:a0:ff:f3:7d:de:3b:d1:a0:41:ad:23:42:
96:81:f0:2a:04:c8:7a:38:22:20:12:e0:0d:7c:51:8c:2c:0c:
db:f4:4d:bb:da:c2:87:8d:6f:14:22:df:13:5c:37:a9:85:28:
e4:c3:0c:b2:94:64:26:ea:9d:40:d0:87:6d:29:b6:ea:7c:a0:
e4:2b:ef:2f:2f:14:fc:b4:c3:85:9a:bd:76:69:e3:89:a6:5c:
3f:86:23:10:5a:70:ed:0d:4e:66:30:43:8a:9a:09:ed:3d:9f:
f6:c3:da:46:57:0f:0a:2c:52:06:ad:ef:01:ac:bb:c8:8f:c6:
b4:13:a1:64:08:9e:dd:af:c6:0f:cc:f7:54:74:b0:f6:52:80:
f5:b9:c6:7a:3f:e2:d5:34:a4:53:3c:fc:db:bc:98:c1:d9:26:
15:34:56:79:0c:97:e2:16:dc:6d:47:c3:ba:68:a0:c8:08:24:
c0:ae:29:58:8d:d2:37:97:2e:04:db:d5:1a:ef:87:25:f1:ba:
52:9c:62:f6:92:c0:c6:04:3d:73:5c:fd:84:4a:71:39:66:93:
45:f7:5f:a8:00:dc:6e:f8:7b:09:74:c0:5f:4c:a8:d1:23:22:
05:aa:6a:00
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjQxMkVBRjExMC8GA1UEBRMoRDYyOEU0Qzk2QUJBOUNGQjEyNDQ3Nzg2N0JCREYx
QTQ0MzVGMEY1QjAeFw0yNjAzMjYwNDMxMTlaFw0yNjAzMjgwNDMxMTlaMBgxFjAU
BgNVBAMTDTY5YzRiNjk4LWMyNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKRCj7JNtJ3pyEyRK5dNXRs+7Qb4l/sOCEBITU4DqX3FcT1Z6pcq81JSqU
p+LgCzx3pyxPuKAo36B4J7kgkQt2dV0rCtQWwf9vndachANkeMQAiMjI1KACrjw/
F58M6QCQu2cnRrbh5WKka11nawlzMih+jHtoUlYtOBLfKgnA3P3mC3b/HIh9Btr6
xRMQoweYRuaC3UGiN4in+xQRsapwMXFMFn8zSy+S+iixTNJZq9GYZn+1jNmqEJMa
zhDCAUV18Y/7qe9AWVXFAoms/rv7K8NUXrI4+g1rAVlzzbffODYx0JoYjXWPBZ3L
6RPNUcy4mTtPHNcXhikDqdWSStQbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUbAix
BVzKqOwComGJt6aANKjIlXQwHwYDVR0jBBgwFoAU1ijkyWq6nPsSRHeGe73xpENf
D1swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI0MTJFLzNBMjM5QTIwN0UzODExRUU4NTRFRTQzOTRBRDlFNkZDLzFpamt5
V3E2blBzU1JIZUdlNzN4cEVOZkQxcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzFpamt5V3E2blBzU1JIZUdlNzN4cEVOZkQxcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjQxMkUvM0EyMzlBMjA3RTM4MTFFRTg1NEVFNDM5NEFE
OUU2RkMvMWlqa3lXcTZuUHNTUkhlR2U3M3hwRU5mRDFzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC/JZVDk3FroKNCKOkHGMMufP0fzKNU
mbqg//N93jvRoEGtI0KWgfAqBMh6OCIgEuANfFGMLAzb9E272sKHjW8UIt8TXDep
hSjkwwyylGQm6p1A0IdtKbbqfKDkK+8vLxT8tMOFmr12aeOJplw/hiMQWnDtDU5m
MEOKmgntPZ/2w9pGVw8KLFIGre8BrLvIj8a0E6FkCJ7dr8YPzPdUdLD2UoD1ucZ6
P+LVNKRTPPzbvJjB2SYVNFZ5DJfiFtxtR8O6aKDICCTArilYjdI3ly4E29Ua74cl
8bpSnGL2ksDGBD1zXP2ESnE5ZpNF91+oANxu+HsJdMBfTKjRIyIFqmoA
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:17 2026 by rpki-client