
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
File: _fS_ABOx8arKOVUbpibKJGg9rmY.mft (raw, json)
Hash identifier: mNxbDOGEx3ieVyhuIRNMuTJnCxjwLaKC4EJutQpir4o=
Subject key identifier: ED:EB:7B:31:09:39:3F:B3:6E:28:44:C7:DC:F9:84:05:B2:BC:F2:13
Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Certificate serial: 0395
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
Manifest number: 0372
Signing time: Tue 12 May 2026 03:59:08 +0000
Manifest this update: Tue 12 May 2026 03:59:07 +0000
Manifest next update: Thu 14 May 2026 03:59:07 +0000
Files and hashes: 1: _fS_ABOx8arKOVUbpibKJGg9rmY.crl (hash: 9dqEjMkyXlLUdnUmhkeT7I7UZ5FrAE6pIvFWHe1/exs=)
2: F105F828C4CE11EE939D5160775412E6.roa (hash: OVT2chMQ0Nq/o8KrWCxuVSBa6IdJd925oWRD0nztHjI=)
3: 6F89EC1EC4CE11EEB915BB5F775412E6.roa (hash: 0xzDQTGktY5SNT/oNqNDkR69eV9keuHEiaiK1qaTKh4=)
4: B1F8097EC4D211EE86535866775412E6.roa (hash: 59lN/fUbuBzBsApqG3IvBcdXKT4GXqevkBfORr82FQA=)
5: 8BA49FD0C4D211EE9EC4EB65775412E6.roa (hash: L8cuHjbSNz6+bJ/gQju0YrhFVS2tYAIiSMeuYmThWuI=)
6: DD77B4AAC4D211EEBEB69266775412E6.roa (hash: OydxnI/hxoPiyhR17/Tng3O2ILM83hRZhWDiNRN/dU4=)
7: 95C2E55CC4CE11EEB298E25F775412E6.roa (hash: 34ivVx7kCxvEM20aUk37oRsDslYZlA+xl4ns6+aB5gY=)
8: 93B700F2C4F311EE8E31E298775412E6.roa (hash: jxWkgZfYWgXiUGFUDEKR/McM7BfyCoS5P8Hm5K309v0=)
9: E93581BEC4CD11EEBD97B25E775412E6.roa (hash: 55Va12oDO8S1u6Db0FeTKlFuk9K47Rv37Hrdea7bPcE=)
10: 3DF8B8D4C4D211EEB1EC7C65775412E6.roa (hash: 9LziG0V2OwJ9n1u0dLn4KBFXmSSOMd2hKZ8b5zKpu9c=)
11: 4101D022C4CF11EEB2F10961775412E6.roa (hash: dLi4goldq2t98cgYBuvk9Jpn/HGg3ZCmLTC1jEDXh+8=)
12: FAD1EE98C4D311EEB8EF5B68775412E6.roa (hash: xrzrQk6N9A7y+gGJ1sq9ZLmMErelK63jEZa0HOn6EEE=)
13: 06EC9B8EC4CE11EE9CCFD65E775412E6.roa (hash: yxTa4SshiNJ7DHcSq54/OxpqqW1oYG+0q8Vz/U0eUK4=)
14: 4C0E8C0EC4C911EE87647756775412E6.roa (hash: 3hEwrhsuSNEta/SbVkYuC8E8cEE9Br3Bj2hXmqXW6Og=)
15: C1BC264CC4CD11EE89C2885E775412E6.roa (hash: /4XiUCjd/sd1xIFdMVmhioY/RKg6IR+Ajo98X8uy0lo=)
16: 48E43AECC4D311EE8C1B3F67775412E6.roa (hash: u/n56Tta7OlwGuEqOpX71XLsZT2jKpBxkP39WXUlLLc=)
17: 1A50080EC4D411EE9683B268775412E6.roa (hash: caLtTbJU+Ufv7BiWj1H9Gw+w4cpOtHWxcr1WeZuKjJ8=)
18: 81B67878C4C711EEA9FDDB53775412E6.roa (hash: vTf8z95jt6AfKb+uGSv38KFOEqTok2j1GUU2yZdAI08=)
19: 52716D10C4C811EEA1131155775412E6.roa (hash: xQRXL5xCOGFaycHwp48gngmbdbohfcnsUJoty1rMzbc=)
20: 2A6C3F60C4CE11EEA3D4FA5E775412E6.roa (hash: C+KA4N0o/N/27ljFsz4ZdSUMg3iOEQO8xBx9RPaXKNI=)
21: 4F31EC96C4CE11EEA565525F775412E6.roa (hash: HcZFH7qDjDPGPIsCX8qhmZSQf24/4pPHFAyHS4PESuo=)
22: B3F2595EC4D311EE97A2CE67775412E6.roa (hash: ECdHU4AArULpOT1NztEszqbSD1WJnxMYYXF31fUvbrM=)
23: 68864AB4C4F311EE8BF25B98775412E6.roa (hash: 5ft3N//XILTGHx4xJyf0ZxLMMcxslek8pxu0nWzZdwE=)
24: 648C3F8CC4CF11EEB00B3061775412E6.roa (hash: FDVWcr2ZaAbCYXZ2KHJUxLsk/2sFqJr/Vx9+VGbIRJ4=)
25: 2283DBBEC4D311EEB2E6EA66775412E6.roa (hash: vDOXm9PXQ5Zd7c1zyElcj6kt2FJGk5QRFQWZ4OnkvEI=)
26: 870416B8C4C811EE906C4D55775412E6.roa (hash: Vbe2KHg+Or1EjP08Hg3ouXICYgnv4yFEfEZ5ZITCte4=)
27: D4A143FEC4D311EE8C6C1968775412E6.roa (hash: AgQ0WKMr6LdRsNIoXgyHASIpWGf5jCQAlVVsb6zmYZ8=)
28: 5DCB92C6C4D211EE8BD1A065775412E6.roa (hash: PsrWGlKMnmYkcFOTAbq8GoiP2U6q8o3llEg2ATal3EM=)
29: CCB4D870C59311EE927FFFA7775412E6.roa (hash: 9rD0WduujgyOlEWZ+vDkwaNAJhs7jTIfIlCfix8PC/0=)
30: 9073DE6CC4D311EEB0B9C867775412E6.roa (hash: elhNbqke+6Kl2ZATVb9O1DeKyGk/Aq6WgPyX415dPg0=)
31: 96B86BD6C4CD11EEA3C61A5E775412E6.roa (hash: 1/4BsRl0z2euLNjIiSiAv+wgrdGXz1NzXtlGPkiO18s=)
32: 684B797CC4D311EE816F8467775412E6.roa (hash: zrGP4qbV7TkM2QLEaYGOzJRGNrjbHqUR2QRTvJ966ic=)
33: BFE793D2C4CE11EE81D70760775412E6.roa (hash: YKo9lE8pH+B0lF4SQUvGTWgHthQjPN6oP/oPK/YNf8s=)
34: 1D9BA0C2C4CF11EE9D26CF60775412E6.roa (hash: 0X/6wOprzARBLwyRT7sbR4YEUnDHgpq1rvlRKwpi56E=)
35: FF49F7B4C4D211EEB6F1A266775412E6.roa (hash: qvVux5l6rnVThhETsGLH9EXoxv6/IKPh5G9ATtSGJFg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 May 2026 03:59:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917 (0x395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655D2CAF, serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Validity
Not Before: May 12 03:59:07 2026 GMT
Not After : May 14 03:59:07 2026 GMT
Subject: CN=6a02a58c-0d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:96:52:b8:2c:3a:f1:59:3e:9e:ab:2f:31:
79:5b:66:f7:b1:b9:85:b2:a6:c1:30:b1:50:ed:89:
44:77:d1:24:b4:09:72:90:3f:bf:19:2e:76:50:f4:
52:6f:aa:3b:66:21:4b:a2:24:79:cd:c5:51:c4:09:
09:f2:df:bc:33:5b:75:0a:0c:19:43:10:7b:af:b4:
de:ed:f8:66:04:ce:57:6a:f3:ad:57:c9:2b:16:cf:
95:30:00:07:31:a9:a1:27:7f:48:e1:1c:5c:98:3f:
62:91:cf:ae:88:eb:16:fb:37:22:ee:f8:5e:9f:4c:
98:b4:3d:76:7f:a9:fe:7d:4d:59:1c:43:39:62:9d:
44:e0:e0:bb:04:40:5d:89:85:fc:4e:eb:70:05:a0:
29:1b:a5:b1:b2:2a:d9:54:20:39:e0:f8:4a:0f:4e:
09:08:4a:b6:6e:fd:8a:95:67:a1:82:c4:03:d9:d1:
40:24:77:20:a3:61:4e:60:b2:3a:c5:1e:b7:7b:a2:
c4:60:a0:de:17:52:14:d4:3d:98:14:9e:d7:68:b7:
7a:bc:86:7a:e5:ce:89:b9:74:d4:86:97:57:2a:49:
75:a9:18:34:d0:fc:b4:71:db:d2:d3:bc:32:28:8d:
56:78:4c:b9:47:89:44:2f:11:52:df:89:54:3b:90:
c8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EB:7B:31:09:39:3F:B3:6E:28:44:C7:DC:F9:84:05:B2:BC:F2:13
X509v3 Authority Key Identifier:
keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:55:99:4e:8f:40:3c:50:66:94:5f:87:04:f6:4c:3c:6b:70:
bb:25:2b:02:e4:b4:29:32:a2:9a:5f:48:ce:44:cc:57:d7:17:
46:dc:35:3e:70:72:68:d5:84:09:e8:81:59:d9:01:50:45:54:
16:08:52:66:ba:97:dd:06:32:1e:79:25:0d:69:6e:e7:cf:32:
d7:69:6a:88:06:39:c3:7d:19:45:9d:10:9d:f2:e7:eb:96:52:
db:8a:6e:b1:40:c3:1e:fd:6e:6b:13:bb:06:b5:27:d8:ba:bf:
d3:45:03:4f:b2:c2:46:cc:54:9e:71:ff:38:91:a2:47:eb:8e:
cd:3c:9e:5f:b2:88:be:d5:a4:71:3b:0d:6e:58:50:69:75:e6:
16:02:e6:18:a9:be:0f:f6:75:0c:4a:c7:9f:56:8c:b1:02:46:
33:9f:c6:3a:63:07:37:0e:0c:cd:57:9a:71:e9:ea:d9:fc:c9:
77:86:78:c7:f8:2a:ce:d5:c1:2b:48:1b:6c:b1:ed:24:4a:09:
af:23:e4:25:55:17:0f:e0:7c:44:46:e8:a7:e3:42:c5:e9:7f:
74:8f:4d:a9:b8:a4:77:d6:10:c1:2a:f1:4b:f3:a4:07:cc:e8:
4e:15:c5:62:f1:2f:08:a6:95:a5:08:f7:94:c1:f3:6b:82:8b:
d9:a9:8f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:18:55 2026 by rpki-client