
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
File: qO-WBRTjNkRNPN43sktm3DnUPRs.mft (raw, json)
Hash identifier: KPqOGXXhUe+Klx5swVwkKJY568lRwp4sKfqDWOUfecY=
Subject key identifier: 86:D2:65:5B:23:B5:03:B7:59:9B:C4:F6:1F:97:7A:0E:D7:F3:5B:7B
Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Certificate serial: 040C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
Manifest number: 03F4
Signing time: Thu 26 Mar 2026 04:17:51 +0000
Manifest this update: Thu 26 Mar 2026 04:17:50 +0000
Manifest next update: Sat 28 Mar 2026 04:17:50 +0000
Files and hashes: 1: qO-WBRTjNkRNPN43sktm3DnUPRs.crl (hash: Qubszeol0+7UoDRvTojHllkrdPLSlSkDGL7/AIUoG9o=)
2: C64BDF325B8611EE8F5917154AD9E6FC.roa (hash: lOfMw6yYmupoBGzZG06JxE7nkGYN0SjR1YBL+6yU110=)
3: 3FC126045B7F11EE91B3797C4AD9E6FC.roa (hash: B4Jxb4zuiNxx8ARYO+8FuXUu5CFHZJCjPVqFobOB2EU=)
4: F592AE225B7E11EEAAD8A37B4AD9E6FC.roa (hash: H2+/hMWhZrQQ/v+xp+P99me7GUvAhaEZLEIOvuDJ8+o=)
5: 9389DEB25B7E11EE85FB5A794AD9E6FC.roa (hash: saW9gDDU1fU/ss5E5QByOp+7T1wbc1vVgpJ7XS+gk+s=)
6: 39E85D245B7F11EE90195D7C4AD9E6FC.roa (hash: eHbXQ/7kild+PjHeBFmSGxlAnlG3pi2uyC9o63m5Mio=)
7: 44122BBE5B7E11EEA5C359784AD9E6FC.roa (hash: dlLpBI0Us25zgjOKkdJouRreKgFknaWvSBpHKXaHN4Q=)
8: 0DDE14645B8711EEBE2DF3154AD9E6FC.roa (hash: OVYm5oOpe8XlJOHUYg0R0oIytfPmlhVRgGeohPVoeGg=)
9: E29E1C625B7D11EEAFF513774AD9E6FC.roa (hash: cL6yXVTdN5LFRK/8lI56JvUwQ8huIMxP3ArtUJsfAsg=)
10: 0DB547A45B7E11EE95F5E0774AD9E6FC.roa (hash: sgLUjm9KT8NBSGsfPuF7zb59LXdnTNhjWZlBuJluY4o=)
11: 82BE0D345B8711EE8AF170174AD9E6FC.roa (hash: du0kSdCk2tSzKNVUZIxuV5z/5Bcr0/T6HJ/NasAIv4s=)
12: 673167545B7E11EE98EEBD784AD9E6FC.roa (hash: adqbPWSj3qJmhRpUh3DUEWmWfDKPs4YfwC9ZlFS5ias=)
13: A97AA9E05B7E11EEAD5E8F794AD9E6FC.roa (hash: 3NkJ+hNEcmyOZzaQCsy/+Ozh2yGmiiWLNtnnqsmfG2I=)
14: C07457B08A3711F0A002C2E7DAE4EC9C.roa (hash: Pe7GZmcC+gV4uLFF5b8V8YgWqeJmXfjZci1uqWUJRZA=)
15: BBA7D8A05B8711EEA5880E184AD9E6FC.roa (hash: NwbjXk0kj8eY+sbmyk9mA7z7P4Od2Lqrhnl5SE+949A=)
16: 7D84FCC85B7E11EE930F05794AD9E6FC.roa (hash: LbVSQZqmCHBXF80jfRgZ632p1CiqtMRJRyKOIJ1fwIY=)
17: 5A3685F85B7D11EEB4B9A0754AD9E6FC.roa (hash: hua4m2v20w0RdcluLq3SvMVi3aYeRg47OfgA9wTRs3E=)
18: 1C0B2122019C11F1BBDB0E7FDAE4EC9C.roa (hash: xwJRkcjKrYUbtrVrTZw0KB8n5igOjLaAbAqiU+HglAk=)
19: D6AA10E05B7E11EE9B32467A4AD9E6FC.roa (hash: RAafA0ML5VlgZ60Y1uxp4EowWyBnwvs0LOD/pOddd5E=)
20: 9FF8CF2E5B8711EE9F40A5174AD9E6FC.roa (hash: lG9MW9PGMEKdmiEYPlQxLtvMK2I/+bgWEhfhck5fvqA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1036 (0x40c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668CFEAF, serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Validity
Not Before: Mar 26 04:17:50 2026 GMT
Not After : Mar 28 04:17:50 2026 GMT
Subject: CN=69c4b36f-487c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:03:ed:da:7c:0b:b8:81:c5:73:13:0b:26:
23:5f:35:50:be:f7:14:e8:05:82:83:f5:da:7f:4c:
bd:a3:47:8a:d4:f4:ca:c4:83:f2:7a:7a:54:d1:cb:
18:dc:eb:74:2f:44:21:f5:eb:0d:13:f9:a6:e7:bb:
81:2c:b2:48:0a:bd:bf:18:df:57:ce:28:7e:ee:e0:
9b:56:18:38:0a:26:57:68:f3:29:37:24:b0:fa:e6:
7e:84:61:ad:d2:f7:8b:2d:60:a5:a8:21:f2:34:57:
4b:73:e0:35:90:58:69:23:09:7a:fb:12:01:e2:c3:
53:af:cf:cf:b6:c4:c3:b1:a0:a6:56:b7:8c:01:68:
3c:26:73:aa:0b:a9:2e:71:b4:5f:d9:74:83:4b:c8:
04:ed:bd:a2:7d:e3:b2:43:2a:47:ac:0e:7e:c0:9d:
15:cc:5f:77:a5:28:9c:9f:f7:90:75:8f:68:e9:9d:
90:2f:57:fe:12:5d:bc:e8:2a:7f:5e:fe:11:71:4c:
79:d4:da:69:c7:44:4c:af:67:02:1d:cf:a9:cf:f5:
1a:12:59:70:a5:71:6c:7b:54:a6:c5:65:b2:8b:2a:
9a:25:47:84:9d:31:87:c5:18:f3:3b:66:de:55:79:
09:4d:aa:30:bb:b6:94:a9:cd:75:58:e9:53:f4:c7:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D2:65:5B:23:B5:03:B7:59:9B:C4:F6:1F:97:7A:0E:D7:F3:5B:7B
X509v3 Authority Key Identifier:
keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:27:60:05:06:f2:e5:e2:38:15:dc:aa:92:61:5a:62:5b:64:
d9:61:fc:83:32:a0:7d:5b:63:93:06:12:da:0f:72:3c:5d:d2:
ae:55:02:02:23:b3:fd:09:7d:58:fa:8a:04:66:5a:5e:91:46:
83:65:ea:3f:18:43:22:a4:c0:d9:20:aa:d1:03:3c:63:64:77:
9b:89:6f:5c:10:51:cb:c9:c5:bf:a5:3f:fd:ea:99:e6:2d:96:
96:6b:58:a8:a5:ae:2b:4f:2b:23:41:1f:48:6b:2c:63:7e:f7:
88:c7:6d:9c:95:64:41:57:e0:a5:4e:eb:ad:a6:1c:e8:3d:7c:
cd:92:da:b7:48:16:ff:87:00:1e:aa:e8:65:fa:fd:4b:62:2a:
00:ed:67:da:aa:94:aa:90:67:86:a5:fc:bd:7f:7e:24:b0:2b:
6c:40:3f:8a:65:ba:fc:06:82:fc:8f:04:1e:bf:65:ef:28:0d:
71:f7:95:65:b4:21:2a:52:1b:d8:25:31:34:8f:3c:f3:5b:26:
50:98:c5:18:aa:7f:cf:c5:eb:91:5b:be:47:c3:e2:58:a2:a8:
e9:95:b2:a0:82:82:e6:30:82:39:02:7d:1c:6c:f9:89:c3:cc:
8b:03:97:f8:92:f9:25:13:5d:5e:c9:2e:bb:ba:55:95:da:a0:
14:93:cb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:23 2026 by rpki-client