
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
File: DcakyCEJ_yyznB0aWMOOMDPFoP4.mft (raw, json)
Hash identifier: t3102UoDuZRBESrChqCnTWz7+tWdvwQS7hjBr30vIDU=
Subject key identifier: 4C:9A:6A:0C:A1:72:14:06:97:78:C8:D4:B0:AC:87:98:49:7D:7E:45
Authority key identifier: 0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
Certificate issuer: /CN=F36877BBAF/serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
Certificate serial: 0302
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
Manifest number: 02E6
Signing time: Thu 26 Mar 2026 05:00:53 +0000
Manifest this update: Thu 26 Mar 2026 05:00:52 +0000
Manifest next update: Sat 28 Mar 2026 05:00:52 +0000
Files and hashes: 1: DcakyCEJ_yyznB0aWMOOMDPFoP4.crl (hash: 78cA7Ai9ZZ/tfAcnwG86iAnAfon553fDrzTIk7h50z4=)
2: D36F9FC09E1211F0966632AEDAE4EC9C.roa (hash: bJSVRApPrsDM0DOSvCfvAqU85OY/qAv2av1QekfCggw=)
3: 840BAFE4D5CE11EF9F26DD77762E951A.roa (hash: sKdcVkYo4xUul2xhcopwWLTEZ0Coub2IAaU4zBm9Qoc=)
4: 5391E35A514E11F0B3FBEA9BDAE4EC9C.roa (hash: FgqtDyexUlItVpAKSV/WBoPJSeqrXF4SEH2sFDGm9KI=)
5: 44F7A312514D11F0BE5B7493DAE4EC9C.roa (hash: JjfCaY/DSyk/x0PG88+ivHyCCCQmlDsXI+ZkbsOp9Bk=)
6: C4B25498D5CF11EF8B385380762E951A.roa (hash: c0lIUY0MI/RJ9MopAqogt6LcUcP2aw6oEoJwJbuApDA=)
7: 7DD153FE514D11F0A35C1C97DAE4EC9C.roa (hash: 8bWJ3tM27kTbYQCS7pka2UKCEjGC//pzMPNEA8dwKMk=)
8: 7B24675800F311F18E4DA8EBDAE4EC9C.roa (hash: gxOS892rWa//UdGze2bCZeoQIzTnFobyOT8pCY9k+UM=)
9: F28EE676D5B911EFB1FFC972762E951A.roa (hash: EzqsSk1Co9k9NgSov+FZr7H05V+t9uoO/FrO5hKwcOM=)
10: 23D3EB78D5BA11EF86DD9F74762E951A.roa (hash: G4Ai8yoQfjwUNFDDrcLjtsPrrCfGiIRKwRB24pEHxY8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 770 (0x302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36877BBAF, serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
Validity
Not Before: Mar 26 05:00:52 2026 GMT
Not After : Mar 28 05:00:52 2026 GMT
Subject: CN=69c4bd85-0cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:7d:10:cc:12:60:57:68:cc:64:e5:e9:0a:
37:0d:07:5c:4b:0e:3c:ed:85:6a:95:d1:fb:c9:29:
a5:75:1d:f6:e9:73:7e:7e:36:7a:aa:3c:e8:e4:ec:
cf:c6:fc:a2:f2:fe:9b:57:59:58:aa:51:7f:e9:fc:
68:f3:d5:71:c2:cf:35:6d:2e:4d:63:53:7c:c4:de:
50:bb:58:98:26:6a:a3:bf:09:b4:69:f7:5a:83:19:
1f:cd:f6:da:0b:b0:1d:e7:21:d6:70:0a:7a:73:8d:
3c:2d:83:1a:81:cd:a3:c0:3c:b8:0a:45:ed:9a:aa:
e6:cd:60:a1:fc:93:2f:84:0b:61:f1:c7:13:94:9a:
79:0e:56:b2:7f:87:ff:e8:fc:08:d3:9b:9f:99:79:
d1:56:6a:d8:13:63:65:03:ee:4e:03:8c:ee:84:a3:
fa:4e:82:ba:23:53:ff:ac:47:66:e6:64:61:ba:32:
ef:d6:ad:79:39:12:0e:75:41:6e:32:89:96:ff:f1:
d0:9e:39:25:d7:f2:4c:cb:26:4b:36:66:bf:65:90:
3f:4b:e5:fe:a1:ea:b0:94:18:d2:ba:c4:35:32:11:
29:09:9c:53:eb:9c:35:33:d9:10:f3:fd:b6:35:25:
83:2c:d3:b0:8e:17:0f:18:4d:83:7c:b0:06:3f:13:
f9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9A:6A:0C:A1:72:14:06:97:78:C8:D4:B0:AC:87:98:49:7D:7E:45
X509v3 Authority Key Identifier:
keyid:0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:ad:1b:c9:3c:bb:f4:e8:66:51:11:4c:8e:a4:fe:48:b1:64:
57:f7:3f:71:7b:ba:20:fc:aa:cf:49:fb:e6:aa:96:3f:4a:a0:
24:04:fe:e2:df:4d:f7:22:76:c4:a7:20:69:f8:9d:62:e2:9a:
7c:63:73:59:2a:30:1b:fc:6c:62:c2:20:5a:32:68:90:d8:50:
ba:64:61:03:6a:35:4b:d7:5b:54:8f:da:d2:41:66:7d:2b:97:
77:26:b8:14:15:db:af:21:a3:f7:63:32:eb:ae:a1:24:ca:e8:
57:97:6f:88:6c:0f:d0:f4:79:b9:e0:a7:51:d5:18:8a:e7:cf:
53:ba:ea:35:f5:20:d1:69:59:23:80:05:99:8e:b9:d8:c1:d6:
c9:ea:e2:21:49:4e:26:c2:be:44:4a:78:b0:1f:c7:ec:99:49:
67:f1:4d:3c:04:f1:0d:1a:20:af:b9:c8:8f:4f:74:4c:45:41:
f2:7b:65:78:76:db:2a:4f:f8:78:47:88:bd:a7:81:b2:74:ce:
cd:5b:76:5b:fb:ba:7c:45:b4:ef:f6:72:52:14:6a:30:77:48:
20:fa:4d:51:89:17:71:6a:92:01:93:35:e9:ea:80:ee:db:d4:
72:b1:d8:30:d5:ad:24:b9:e6:a3:c4:9e:58:2c:8f:d0:2a:cf:
0a:96:2f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:30:13 2026 by rpki-client