
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
File: S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft (raw, json)
Hash identifier: poMIb+g8oMeEg1u1UpNlgor2ZQ+VTQRM5IEAUyLhDOY=
Subject key identifier: 51:BE:F3:A0:15:DB:08:C7:40:63:94:E4:16:9A:E8:01:F3:FB:EE:8D
Authority key identifier: 4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70
Certificate issuer: /CN=F36A7021AF/serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70
Certificate serial: 02E4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
Manifest number: 02D9
Signing time: Thu 26 Mar 2026 04:57:53 +0000
Manifest this update: Thu 26 Mar 2026 04:57:52 +0000
Manifest next update: Sat 28 Mar 2026 04:57:52 +0000
Files and hashes: 1: S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl (hash: zDWFOgwL4Q2GW2uNGyTNZoFo3rSvFsAIAh3hfDwykEo=)
2: 13E45E1C0E8911EF82A4F35A017001B1.roa (hash: eSu/uNHefvRDyXuPd6bFN5AOugU7elsPo3xlxIjj8Jg=)
3: 8A38C304166411EFB6DD9865017001B1.roa (hash: BNl8LzAAIi2V4u4Uq6J4OERouFI7xdVKsG2qa+DYXuM=)
4: 5386CFDE0B8A11EF94113C6D017001B1.roa (hash: +ksSk336SAPxQuepQDqlYfI3yCwLjxok4/1qF910PT0=)
5: 67A273EE166411EFBD7C3965017001B1.roa (hash: XYlnou7kQfD138NpOpxfEa0ALGHIsAR97sWZnC83Ikk=)
6: 2342ECF6166411EF86A28464017001B1.roa (hash: LAeP18nBFk8e55lig13p1FU7erjKKZ2bUOy7MssyCfI=)
7: 10F75FE0166511EF9BA89F6A017001B1.roa (hash: tQ6IcNtYg4Q1dSfQDi4FIUeQKLa90qMyIm8jTAnmXuE=)
8: C37E4A0E166311EFB9A5E45F017001B1.roa (hash: Qp36Juuigfj3IghvTSmzrtpde3+TFB8XRGmUObCG6Jw=)
9: 258EC7AC02E911EF84DA781F017001B1.roa (hash: MKLHz01B1hcRnrm1BW8ZdbgoDIWCXXjJPB+3zMRkn5k=)
10: 45A131960E8911EFB58ADB5E017001B1.roa (hash: h14yox0jQvTPprZRCXkBDOwPFxmyJDOyS+ltHOkYJCY=)
11: ED324F4E166311EF80A74E60017001B1.roa (hash: yLMrRx31o9f3857chkGq2HGPGPmxnmeZmw24iYDHkdE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 740 (0x2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A7021AF, serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70
Validity
Not Before: Mar 26 04:57:52 2026 GMT
Not After : Mar 28 04:57:52 2026 GMT
Subject: CN=69c4bcd1-fe4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:92:c7:e4:3d:4f:ca:91:27:b7:d0:fc:2a:a9:
4f:e7:fe:f9:37:7e:96:e0:71:8e:34:5a:d5:0e:a4:
e6:ad:cc:c8:d2:cc:24:76:b6:2f:73:76:a3:13:5a:
26:f6:e4:e0:d7:cf:11:8e:87:26:12:14:5b:7b:7d:
c5:17:a5:c9:60:f9:2b:74:63:62:d8:c6:cd:4d:80:
ac:a0:0b:21:1e:13:3d:99:88:57:6b:eb:f0:62:85:
2c:f6:2c:76:a1:f5:71:15:57:38:8a:5c:e3:b2:09:
3e:19:4d:b8:a2:45:87:07:6b:83:80:9a:e1:45:43:
d3:d5:d2:76:b7:88:2c:1b:c5:c7:e0:22:32:68:eb:
c6:07:76:d4:19:76:13:c3:44:45:75:fc:e6:94:27:
c5:c2:72:3d:ae:e2:41:31:a5:38:bd:e2:83:ee:5f:
e1:cf:a5:8d:57:2f:10:0f:9b:8f:4d:a6:71:c6:71:
ee:1c:f6:20:7a:fd:64:34:8b:17:f5:13:a0:87:2a:
75:1f:d0:11:e0:ca:cb:68:be:4f:fa:9c:f7:c1:c4:
d8:b7:3e:5d:64:2c:6b:53:4b:40:20:23:03:76:30:
a0:22:1f:2e:bd:1d:ff:ad:e0:64:9d:80:9d:75:69:
9d:c2:21:0a:ce:69:f5:d2:4a:43:cc:3e:6a:fd:47:
cb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BE:F3:A0:15:DB:08:C7:40:63:94:E4:16:9A:E8:01:F3:FB:EE:8D
X509v3 Authority Key Identifier:
keyid:4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:d3:b2:a9:08:2d:33:61:c9:e2:6d:3c:39:30:8b:7f:d2:09:
d4:43:2a:2b:52:6d:4b:3f:84:e1:5a:e0:00:75:95:fd:b9:6b:
ee:b5:fd:5f:d9:9e:1c:bf:5f:20:bd:e4:9e:0f:db:5a:8b:ee:
09:e3:90:ff:2d:56:91:27:87:06:37:70:d5:ae:5c:a0:b0:2f:
80:3e:a4:29:e7:19:c2:09:0b:e3:bf:3c:81:df:da:c1:c0:d7:
1e:6c:55:8c:00:d0:89:8a:8b:d2:22:64:19:8a:0e:06:61:d0:
00:a2:70:de:63:89:ca:76:9e:92:b7:d2:78:44:d4:a5:04:3d:
1d:cf:d9:c6:21:8c:ce:7a:a8:d2:fe:b9:03:ab:b4:31:a6:5c:
de:a4:40:05:c4:48:eb:00:37:20:db:5a:ec:a8:cb:89:4f:9b:
7b:22:be:ca:c6:8e:9a:93:3b:df:2b:31:a8:f0:8b:73:34:02:
16:76:10:f0:2b:28:03:5a:eb:7f:99:76:f8:2a:4a:68:dd:b5:
e8:a9:c7:1b:28:ca:8a:68:a5:a6:00:33:19:c3:d6:79:51:f1:
54:5f:64:b0:d0:ac:2d:24:3c:4e:82:a4:2b:7e:aa:12:e6:0c:
5e:92:a0:5a:8a:c9:22:7a:e5:73:08:ba:b9:9f:11:42:aa:e9:
bd:38:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:40:02 2026 by rpki-client