
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
File: _fS_ABOx8arKOVUbpibKJGg9rmY.mft (raw, json)
Hash identifier: 4rRrQQhs07vF2a09M63Omy/U4EGVZ2gm3tHITUUaMpY=
Subject key identifier: 58:E5:35:26:76:C7:99:3B:4E:00:D6:07:76:A8:D8:EF:B7:55:1C:70
Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Certificate serial: 0365
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
Manifest number: 0342
Signing time: Thu 26 Mar 2026 04:45:16 +0000
Manifest this update: Thu 26 Mar 2026 04:45:15 +0000
Manifest next update: Sat 28 Mar 2026 04:45:15 +0000
Files and hashes: 1: _fS_ABOx8arKOVUbpibKJGg9rmY.crl (hash: WZnbAUODA1egDFDyY8EJzJ2MgseTwdqEchnf2M2n2Rw=)
2: F105F828C4CE11EE939D5160775412E6.roa (hash: OVT2chMQ0Nq/o8KrWCxuVSBa6IdJd925oWRD0nztHjI=)
3: 6F89EC1EC4CE11EEB915BB5F775412E6.roa (hash: 0xzDQTGktY5SNT/oNqNDkR69eV9keuHEiaiK1qaTKh4=)
4: B1F8097EC4D211EE86535866775412E6.roa (hash: 59lN/fUbuBzBsApqG3IvBcdXKT4GXqevkBfORr82FQA=)
5: 8BA49FD0C4D211EE9EC4EB65775412E6.roa (hash: L8cuHjbSNz6+bJ/gQju0YrhFVS2tYAIiSMeuYmThWuI=)
6: DD77B4AAC4D211EEBEB69266775412E6.roa (hash: OydxnI/hxoPiyhR17/Tng3O2ILM83hRZhWDiNRN/dU4=)
7: 95C2E55CC4CE11EEB298E25F775412E6.roa (hash: 34ivVx7kCxvEM20aUk37oRsDslYZlA+xl4ns6+aB5gY=)
8: 93B700F2C4F311EE8E31E298775412E6.roa (hash: jxWkgZfYWgXiUGFUDEKR/McM7BfyCoS5P8Hm5K309v0=)
9: E93581BEC4CD11EEBD97B25E775412E6.roa (hash: 55Va12oDO8S1u6Db0FeTKlFuk9K47Rv37Hrdea7bPcE=)
10: 3DF8B8D4C4D211EEB1EC7C65775412E6.roa (hash: 9LziG0V2OwJ9n1u0dLn4KBFXmSSOMd2hKZ8b5zKpu9c=)
11: 4101D022C4CF11EEB2F10961775412E6.roa (hash: dLi4goldq2t98cgYBuvk9Jpn/HGg3ZCmLTC1jEDXh+8=)
12: FAD1EE98C4D311EEB8EF5B68775412E6.roa (hash: xrzrQk6N9A7y+gGJ1sq9ZLmMErelK63jEZa0HOn6EEE=)
13: 06EC9B8EC4CE11EE9CCFD65E775412E6.roa (hash: yxTa4SshiNJ7DHcSq54/OxpqqW1oYG+0q8Vz/U0eUK4=)
14: 4C0E8C0EC4C911EE87647756775412E6.roa (hash: 3hEwrhsuSNEta/SbVkYuC8E8cEE9Br3Bj2hXmqXW6Og=)
15: C1BC264CC4CD11EE89C2885E775412E6.roa (hash: /4XiUCjd/sd1xIFdMVmhioY/RKg6IR+Ajo98X8uy0lo=)
16: 48E43AECC4D311EE8C1B3F67775412E6.roa (hash: u/n56Tta7OlwGuEqOpX71XLsZT2jKpBxkP39WXUlLLc=)
17: 1A50080EC4D411EE9683B268775412E6.roa (hash: caLtTbJU+Ufv7BiWj1H9Gw+w4cpOtHWxcr1WeZuKjJ8=)
18: 81B67878C4C711EEA9FDDB53775412E6.roa (hash: vTf8z95jt6AfKb+uGSv38KFOEqTok2j1GUU2yZdAI08=)
19: 52716D10C4C811EEA1131155775412E6.roa (hash: xQRXL5xCOGFaycHwp48gngmbdbohfcnsUJoty1rMzbc=)
20: 2A6C3F60C4CE11EEA3D4FA5E775412E6.roa (hash: C+KA4N0o/N/27ljFsz4ZdSUMg3iOEQO8xBx9RPaXKNI=)
21: 4F31EC96C4CE11EEA565525F775412E6.roa (hash: HcZFH7qDjDPGPIsCX8qhmZSQf24/4pPHFAyHS4PESuo=)
22: B3F2595EC4D311EE97A2CE67775412E6.roa (hash: ECdHU4AArULpOT1NztEszqbSD1WJnxMYYXF31fUvbrM=)
23: 68864AB4C4F311EE8BF25B98775412E6.roa (hash: 5ft3N//XILTGHx4xJyf0ZxLMMcxslek8pxu0nWzZdwE=)
24: 648C3F8CC4CF11EEB00B3061775412E6.roa (hash: FDVWcr2ZaAbCYXZ2KHJUxLsk/2sFqJr/Vx9+VGbIRJ4=)
25: 2283DBBEC4D311EEB2E6EA66775412E6.roa (hash: vDOXm9PXQ5Zd7c1zyElcj6kt2FJGk5QRFQWZ4OnkvEI=)
26: 870416B8C4C811EE906C4D55775412E6.roa (hash: Vbe2KHg+Or1EjP08Hg3ouXICYgnv4yFEfEZ5ZITCte4=)
27: D4A143FEC4D311EE8C6C1968775412E6.roa (hash: AgQ0WKMr6LdRsNIoXgyHASIpWGf5jCQAlVVsb6zmYZ8=)
28: 5DCB92C6C4D211EE8BD1A065775412E6.roa (hash: PsrWGlKMnmYkcFOTAbq8GoiP2U6q8o3llEg2ATal3EM=)
29: CCB4D870C59311EE927FFFA7775412E6.roa (hash: 9rD0WduujgyOlEWZ+vDkwaNAJhs7jTIfIlCfix8PC/0=)
30: 9073DE6CC4D311EEB0B9C867775412E6.roa (hash: elhNbqke+6Kl2ZATVb9O1DeKyGk/Aq6WgPyX415dPg0=)
31: 96B86BD6C4CD11EEA3C61A5E775412E6.roa (hash: 1/4BsRl0z2euLNjIiSiAv+wgrdGXz1NzXtlGPkiO18s=)
32: 684B797CC4D311EE816F8467775412E6.roa (hash: zrGP4qbV7TkM2QLEaYGOzJRGNrjbHqUR2QRTvJ966ic=)
33: BFE793D2C4CE11EE81D70760775412E6.roa (hash: YKo9lE8pH+B0lF4SQUvGTWgHthQjPN6oP/oPK/YNf8s=)
34: 1D9BA0C2C4CF11EE9D26CF60775412E6.roa (hash: 0X/6wOprzARBLwyRT7sbR4YEUnDHgpq1rvlRKwpi56E=)
35: FF49F7B4C4D211EEB6F1A266775412E6.roa (hash: qvVux5l6rnVThhETsGLH9EXoxv6/IKPh5G9ATtSGJFg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 869 (0x365)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655D2CAF, serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Validity
Not Before: Mar 26 04:45:15 2026 GMT
Not After : Mar 28 04:45:15 2026 GMT
Subject: CN=69c4b9dc-b81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:df:d7:bf:30:bd:f2:fa:ec:4a:a3:dc:ea:37:
6a:b8:c0:f4:53:e3:fa:56:4e:df:c1:db:0f:20:f0:
31:ab:18:e7:69:12:16:6c:82:2a:c6:9b:b6:e2:38:
03:9d:72:89:09:05:47:26:a4:51:eb:41:37:b2:40:
69:d8:23:98:32:66:fc:20:55:e9:02:6f:7d:86:ed:
3a:09:80:da:fd:09:a6:4c:33:fc:e6:32:a8:d0:d5:
d5:1f:44:e9:54:b8:9d:7b:f3:d3:c4:d3:0f:ba:c2:
60:17:18:fe:4f:6e:3f:7a:16:47:ee:57:b7:45:83:
aa:6c:b2:f6:5a:b8:b4:ae:c4:51:75:a0:b8:82:dc:
9b:9e:22:3b:9e:72:a9:f6:57:73:ef:84:3a:e0:c8:
0c:77:ff:c7:d7:a1:3f:28:70:09:7f:fb:ca:42:e8:
33:3a:e4:e6:e0:44:95:c5:e2:49:c4:21:10:7b:43:
99:ab:a7:d9:a9:f2:45:6f:31:8d:84:12:3e:fe:d9:
ee:8e:91:79:2c:6f:18:5f:7e:aa:8a:63:ef:2f:00:
4d:6b:0d:c3:b0:2c:dd:a6:38:91:26:92:c4:1a:b5:
91:8f:ca:be:23:81:ea:30:b6:de:62:07:b2:16:51:
a0:0d:19:a7:cb:8c:cf:86:b0:56:86:c8:73:76:92:
26:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E5:35:26:76:C7:99:3B:4E:00:D6:07:76:A8:D8:EF:B7:55:1C:70
X509v3 Authority Key Identifier:
keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:a2:b6:d7:ba:de:2a:f0:82:c8:ee:4c:3b:60:76:f1:03:dc:
4d:96:51:5e:9a:43:12:09:70:ca:4d:e1:f7:22:da:10:9b:50:
e6:78:1c:c8:63:7f:01:23:d4:67:1c:00:60:ec:97:c7:46:94:
15:63:c6:3b:97:10:3c:16:f2:b0:19:c7:6e:57:7c:50:af:9d:
a2:26:ea:f4:bc:1c:3a:43:6a:96:4b:21:b0:fd:be:b8:ee:92:
ac:59:b4:d5:4a:41:ae:fb:1f:a4:6b:e4:66:1b:cd:c0:f0:70:
f6:15:ef:ab:6d:7c:6f:57:15:fc:f3:03:2e:29:88:e9:f3:4c:
4a:ec:b8:c9:ae:b5:9e:77:c7:0f:3b:19:8a:6b:ab:85:09:f3:
9a:e7:f7:70:6f:18:b3:13:e3:fa:02:cd:5a:2e:cd:9d:27:81:
ee:1c:cd:e4:63:04:0e:03:1e:45:63:f7:79:56:67:07:d9:03:
b8:bb:33:6c:ba:d5:71:9a:1b:ff:48:05:d8:46:03:0e:75:dc:
f3:20:8f:65:f9:55:f4:ae:ba:f2:90:9b:b1:07:bd:93:53:94:
e4:51:0e:a1:5e:13:80:3c:05:be:c9:1b:7b:f0:a6:19:79:00:
da:a9:c4:44:37:33:2e:f5:ae:ea:a0:d5:d3:24:52:08:a3:08:
e3:ad:1a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:57 2026 by rpki-client