
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
File: rC5S7pK7wgWiMP93oZBB3dUU2PA.mft (raw, json)
Hash identifier: cngC6BXDFAbfvI28jDQAhaDwoQX9RWJ5FNKmJbv6yGw=
Subject key identifier: BF:BB:8D:AB:4B:18:23:8F:BD:87:DE:87:FA:40:0C:16:57:E1:EA:CA
Authority key identifier: AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
Certificate issuer: /CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Certificate serial: 0904
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
Manifest number: 08F4
Signing time: Thu 26 Mar 2026 01:55:22 +0000
Manifest this update: Thu 26 Mar 2026 01:55:21 +0000
Manifest next update: Sat 28 Mar 2026 01:55:21 +0000
Files and hashes: 1: rC5S7pK7wgWiMP93oZBB3dUU2PA.crl (hash: YZJHx8tVPFd7ejx5Px45BMRwApyMnCl35/PiwNk1O5M=)
2: D5B46FA6C23211EBB5593A16F8AEA228.roa (hash: oX59+2BALwGM+ztTKboJ5zjbW8Hls8vuUFk164gb+sE=)
3: B7327FCAC23011EB8EB93013F8AEA228.roa (hash: FzBJ+LD8lsMOLZHdwigkJL90+es1pormijWMN0h6XiE=)
4: 3E1C62F8ED1111EAAF8C1B4DF8AEA228.roa (hash: lomY/n2xTdezVmxQEF3P4Y0fMs0z0TPLBTmt8iTOt9E=)
5: 924F80688A4E11EC8639028F5A40D577.roa (hash: tnumgrytmuyUCUVB2UaM2OC8r2VqINNEld+/gxdsqJk=)
6: 88F6BBCEC23211EBBD21D715F8AEA228.roa (hash: 6D/mE5iRONvZimS8ac2OXzs/7V/jQV2FQOwxAWqpWYI=)
7: EB54553EC23111EBA9E0ED14F8AEA228.roa (hash: d6xcKTp32mia+OgefI0TfyXuPVcpWg3DEScglv+HMrY=)
8: B418664AC23211EB98B10F16F8AEA228.roa (hash: M//9HpMML29hfmlSXu9lsnbBB8fRM3Bjn7WpzCV2kL8=)
9: 43AF9CACC23211EBB3CE6515F8AEA228.roa (hash: c/Soa/93EsLQFmmPICHZAj3dDNjPlQJOplH1/UOW0ac=)
10: F1EEE55EC23011EB941AA913F8AEA228.roa (hash: yW4+Lfz5PGHi4Kx8TI9Rf9GfxFHBr9qFl92O6gcnuuU=)
11: 118B5046C23611EB8894801AF8AEA228.roa (hash: EdTXMixOen8QKO9g5Tn4JwTOrXpknviYLC1BSplg1UI=)
12: 69718BD0C23211EBADC2A715F8AEA228.roa (hash: TnY/7DA+BgejOFr04BM5hHh0ycu1/cZe42UI729de/E=)
13: A122BD06C23211EB87EB0616F8AEA228.roa (hash: tLtpZOHdatkZusOvIza1WgLkgIkjsRWUedCu9OwEzN8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2308 (0x904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA80DAF, serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Validity
Not Before: Mar 26 01:55:21 2026 GMT
Not After : Mar 28 01:55:21 2026 GMT
Subject: CN=69c4920a-ad92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:72:fc:e8:11:4d:67:6e:16:4d:55:09:39:
c5:6b:d1:ea:51:9d:32:23:0f:1a:b9:78:47:5f:80:
48:5a:2c:6e:56:22:d2:37:84:a0:eb:36:e5:7e:6e:
85:56:0f:eb:d5:09:f9:22:36:f9:65:3a:6f:71:00:
8f:05:9c:7c:19:75:a9:c5:e5:73:73:77:89:1b:0c:
42:25:12:b3:ce:f8:bb:de:d2:c7:9a:b2:91:fe:e1:
ae:28:e3:1e:45:db:70:02:45:aa:2e:90:a4:8f:91:
ac:32:52:43:47:11:59:2e:a8:98:6a:ed:72:64:aa:
9b:31:b9:4d:a0:d8:ed:2d:d1:bb:d7:a7:a4:4a:44:
2a:02:60:93:d2:19:a5:b2:5a:a6:d5:73:02:8c:8b:
b6:a9:27:df:99:82:18:e0:f2:0e:90:40:5b:89:f1:
a2:f9:77:16:8c:09:1a:7c:1c:1b:c2:b0:de:0e:ab:
8c:67:c8:00:8e:39:ec:c1:24:78:70:e1:20:a1:19:
48:3d:7f:ea:5e:f3:67:92:f3:3c:92:69:5a:e3:1a:
47:e9:22:5b:bf:31:a6:7c:38:ca:79:8b:45:e9:4b:
ad:ea:65:d7:35:59:02:f0:a3:6c:1e:80:c4:21:e8:
aa:2b:a0:10:d0:d3:a9:20:ea:d8:8e:2f:f5:26:7c:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BB:8D:AB:4B:18:23:8F:BD:87:DE:87:FA:40:0C:16:57:E1:EA:CA
X509v3 Authority Key Identifier:
keyid:AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e2:ef:55:71:d2:8b:fa:b6:92:ce:82:39:20:7f:6d:e8:47:
d2:96:42:69:02:d3:a4:02:bd:43:69:db:7a:d4:46:14:9e:f2:
dc:04:1c:1b:2f:fd:c9:6a:80:b2:ec:f1:23:32:c0:70:8d:62:
52:8e:1b:f2:63:40:f7:a7:89:83:5c:2a:02:b0:d0:90:52:9f:
2b:58:98:62:60:17:c4:15:4a:8c:0d:a9:d8:7c:1e:93:c9:c5:
15:f6:e6:27:74:ff:50:87:1e:64:9b:d5:fa:56:9c:d8:b6:13:
57:ec:c6:40:35:30:89:3b:96:e7:71:34:a1:1e:dd:56:ed:45:
7e:28:d1:ea:40:f0:a6:d9:d9:9f:53:9c:0d:81:3c:4e:c3:bc:
ae:76:b1:e9:d5:b8:49:3e:cb:3e:0d:78:b6:82:32:c1:1d:27:
c4:b0:7e:16:cf:33:37:d1:e0:dc:21:a0:57:3a:a2:c2:a9:c9:
1c:1b:d5:95:56:82:b6:4d:a1:9e:ae:cb:bd:f0:bf:ea:dc:6a:
07:bb:4b:73:b6:6a:a6:2b:07:44:38:22:9a:a7:3c:db:a3:52:
cc:0a:98:ff:d2:4c:40:83:8e:0a:ba:06:65:5d:88:cf:0d:a1:
75:91:c0:08:8b:5c:65:79:53:94:3f:3d:2f:5f:f4:5a:31:47:
9c:dd:eb:a1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCQQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkE4MERBRjExMC8GA1UEBRMoQUMyRTUyRUU5MkJCQzIwNUEyMzBGRjc3QTE5MDQx
RERENTE0RDhGMDAeFw0yNjAzMjYwMTU1MjFaFw0yNjAzMjgwMTU1MjFaMBgxFjAU
BgNVBAMTDTY5YzQ5MjBhLWFkOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC473L86BFNZ24WTVUJOcVr0epRnTIjDxq5eEdfgEhaLG5WItI3hKDrNuV+
boVWD+vVCfkiNvllOm9xAI8FnHwZdanF5XNzd4kbDEIlErPO+Lve0seaspH+4a4o
4x5F23ACRaoukKSPkawyUkNHEVkuqJhq7XJkqpsxuU2g2O0t0bvXp6RKRCoCYJPS
GaWyWqbVcwKMi7apJ9+Zghjg8g6QQFuJ8aL5dxaMCRp8HBvCsN4Oq4xnyACOOezB
JHhw4SChGUg9f+pe82eS8zySaVrjGkfpIlu/MaZ8OMp5i0XpS63qZdc1WQLwo2we
gMQh6KoroBDQ06kg6tiOL/UmfOirAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUv7uN
q0sYI4+9h96H+kAMFlfh6sowHwYDVR0jBBgwFoAUrC5S7pK7wgWiMP93oZBB3dUU
2PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJBODBEL0M3MDVEODcyNUEyNDExRUFCOEU5REMwOUY4QUVBMjI4L3JDNVM3
cEs3d2dXaU1QOTNvWkJCM2RVVTJQQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JDNVM3cEs3d2dXaU1QOTNvWkJCM2RVVTJQQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkE4MEQvQzcwNUQ4NzI1QTI0MTFFQUI4RTlEQzA5RjhB
RUEyMjgvckM1UzdwSzd3Z1dpTVA5M29aQkIzZFVVMlBBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBP4u9VcdKL+raSzoI5IH9t6EfSlkJp
AtOkAr1Dadt61EYUnvLcBBwbL/3JaoCy7PEjMsBwjWJSjhvyY0D3p4mDXCoCsNCQ
Up8rWJhiYBfEFUqMDanYfB6TycUV9uYndP9Qhx5km9X6VpzYthNX7MZANTCJO5bn
cTShHt1W7UV+KNHqQPCm2dmfU5wNgTxOw7yudrHp1bhJPss+DXi2gjLBHSfEsH4W
zzM30eDcIaBXOqLCqckcG9WVVoK2TaGersu98L/q3GoHu0tztmqmKwdEOCKapzzb
o1LMCpj/0kxAg44KugZlXYjPDaF1kcAIi1xleVOUPz0vX/RaMUec3euh
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:22:15 2026 by rpki-client