
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft
File: I_gUu0fVw67dUQPzb124opvj1x0.mft (raw, json)
Hash identifier: sggdBUGZIxnGAiNjUpMOCy15AR5lPcwRwZb8AUU2+Pg=
Subject key identifier: 1C:9B:2D:4E:C9:E1:12:1D:38:12:69:3C:8E:87:37:04:A0:CA:32:54
Authority key identifier: 23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D
Certificate issuer: /CN=F36D9B5BAF/serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D
Certificate serial: 0FDC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft
Manifest number: 0FC5
Signing time: Thu 26 Mar 2026 00:51:30 +0000
Manifest this update: Thu 26 Mar 2026 00:51:29 +0000
Manifest next update: Sat 28 Mar 2026 00:51:29 +0000
Files and hashes: 1: I_gUu0fVw67dUQPzb124opvj1x0.crl (hash: 4pitL6e3OqpqZsbYmnM/HNBsDKFNOhuEbxHHFhahUWo=)
2: 86606974028F11E98C883E0FF8AEA228.roa (hash: IsZ6cJV4+0zN9ms5jaDsieqPGhductkQxgMv7qyHTNI=)
3: 9BC8C8C001EA11EDB08796BAF1222468.roa (hash: i8+aHPPl6uhvn/Jq2NkUn53HTH09DtjcbJOz9MgQ1co=)
4: 48577586FE1C11E8BD980782F8AEA228.roa (hash: H3dWHGNGyzufXdXyAcUTICFJNlUoK78HWc23kkq1F/s=)
5: 5F34A6C2DE7D11EBBAC31B64F8AEA228.roa (hash: MWk8EFTOF3/10HYUuFgbnJ/fqlc/s+3SXXavsJ4h6cE=)
6: 3D3E31C6498E11EFBB02DB76762E951A.roa (hash: u0Z0y5U3GM/VfkEEbg/zEJIp4QkqBJm1umtwXpHXzsE=)
7: 132EAD18DE7D11EB86A3C563F8AEA228.roa (hash: iZGBXlM3XPYurzi9+dHJxzDxI/7/keWoCIvY/ASFKFI=)
8: B7C01426FED211E89B120309F8AEA228.roa (hash: Cu6wxRaLD5ODNZaYGqU1rGwfd0FTt/GsL/H9WnzG7Vs=)
9: 36E8B606FE1D11E88DCDCE82F8AEA228.roa (hash: SvO8wCmqFCCs7pvZRw0lkVxnGHmag+waEJa8/soA19E=)
10: 9C9A7614DE7C11EBB1191063F8AEA228.roa (hash: syinLKpAl//f2BEe6KYX31IZj04lDHjk0Tp/mellwQo=)
11: 5BA2465E037F11EDB5F8F0C0F1222468.roa (hash: TV0mQqI15fCBzn5VfeVjormHM3HjavPeVewlRIBDw4I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft
rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4060 (0xfdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D9B5BAF, serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D
Validity
Not Before: Mar 26 00:51:29 2026 GMT
Not After : Mar 28 00:51:29 2026 GMT
Subject: CN=69c48312-87e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:26:8e:b6:a5:a7:96:05:0b:e4:83:c7:a4:9b:
1f:15:71:d8:80:b7:59:ed:83:0e:ee:8d:3e:85:33:
44:0f:06:62:b6:19:ad:24:0c:3f:1a:61:20:53:12:
cb:21:fc:e5:33:a0:e3:4b:2e:fc:ce:17:61:14:f0:
79:b8:b0:1d:f9:4c:7c:00:99:51:74:a8:2d:6c:f1:
45:b8:78:c1:b0:fc:9a:8c:22:58:86:83:52:2c:f6:
af:d0:10:7a:b1:21:0c:86:3c:7d:d4:1b:40:09:99:
cb:87:1d:2d:e5:3c:2f:2c:3c:c3:46:73:62:ac:91:
5e:e1:bf:37:71:76:73:34:ea:91:83:e4:cc:20:79:
c4:13:80:4d:7d:a6:a1:95:ef:9d:fc:8c:f3:18:0f:
ef:04:a5:e1:b1:b6:19:90:98:14:5b:a7:43:7f:b3:
be:91:ea:c3:b0:38:28:d7:2b:e4:f9:a7:af:d4:7c:
5f:29:02:98:08:43:49:16:86:8d:ea:ac:8a:b6:01:
96:9f:60:c6:60:11:b8:7e:7b:28:3d:fd:31:09:f3:
d1:4f:a1:78:b3:c0:8c:4a:bc:3b:0f:58:4a:3e:64:
38:e1:f0:63:7c:92:12:ca:88:6b:ce:a9:f4:2c:27:
1e:1f:68:a0:48:c9:3c:35:70:ee:5c:ff:a8:a0:21:
d6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9B:2D:4E:C9:E1:12:1D:38:12:69:3C:8E:87:37:04:A0:CA:32:54
X509v3 Authority Key Identifier:
keyid:23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:b9:2c:20:06:89:4a:dc:d0:16:a7:5b:00:f3:e3:3c:7d:eb:
90:46:98:fb:93:1e:50:ba:42:ea:72:d0:e7:57:d4:a0:99:6a:
06:11:09:bf:92:3d:c7:25:98:d9:cb:d6:d7:b5:0d:ae:7c:67:
a5:1a:31:e3:1d:66:30:d2:e4:3d:0d:00:5a:bd:75:ee:8f:dc:
c2:d1:d8:54:61:52:b2:d5:79:ff:d2:4c:ac:21:60:d7:7c:41:
47:26:b2:c6:cf:bf:f8:8e:1e:c4:a9:4c:58:6d:f1:48:f3:93:
8a:13:c6:f4:7d:74:9d:d8:32:9b:4d:c7:0e:7e:2d:27:60:e7:
f3:81:d1:7f:33:c4:84:fb:63:53:86:9e:dc:4b:b7:45:91:3f:
c5:b9:b8:52:c1:f1:b2:90:6a:5d:38:02:5b:a9:a2:41:7f:41:
c6:ed:fb:c6:ba:33:d6:70:a1:36:29:d8:2b:6a:52:61:10:b1:
d3:99:f3:22:c9:05:b9:23:c7:10:a4:3b:eb:9a:6c:4f:cd:7e:
51:08:79:a2:c6:2b:19:07:40:02:68:7b:25:c0:54:62:f6:35:
15:57:2b:b0:37:ec:c8:da:a6:ae:be:ff:8e:7e:2b:94:1b:dc:
e8:65:01:c3:49:ee:ec:b9:07:a1:a1:c1:6d:78:81:bc:26:0b:
2b:ba:ee:6b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICD9wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDlCNUJBRjExMC8GA1UEBRMoMjNGODE0QkI0N0Q1QzNBRURENTEwM0YzNkY1REI4
QTI5QkUzRDcxRDAeFw0yNjAzMjYwMDUxMjlaFw0yNjAzMjgwMDUxMjlaMBgxFjAU
BgNVBAMTDTY5YzQ4MzEyLTg3ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUJo62paeWBQvkg8ekmx8VcdiAt1ntgw7ujT6FM0QPBmK2Ga0kDD8aYSBT
Essh/OUzoONLLvzOF2EU8Hm4sB35THwAmVF0qC1s8UW4eMGw/JqMIliGg1Is9q/Q
EHqxIQyGPH3UG0AJmcuHHS3lPC8sPMNGc2KskV7hvzdxdnM06pGD5MwgecQTgE19
pqGV7538jPMYD+8EpeGxthmQmBRbp0N/s76R6sOwOCjXK+T5p6/UfF8pApgIQ0kW
ho3qrIq2AZafYMZgEbh+eyg9/TEJ89FPoXizwIxKvDsPWEo+ZDjh8GN8khLKiGvO
qfQsJx4faKBIyTw1cO5c/6igIdaNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUHJst
TsnhEh04Emk8joc3BKDKMlQwHwYDVR0jBBgwFoAUI/gUu0fVw67dUQPzb124opvj
1x0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ5QjVCLzlFMUJEMzc4MTM1QTExRTVCNjhENDI4NkY4QUVBMjI4L0lfZ1V1
MGZWdzY3ZFVRUHpiMTI0b3B2ajF4MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0lfZ1V1MGZWdzY3ZFVRUHpiMTI0b3B2ajF4MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDlCNUIvOUUxQkQzNzgxMzVBMTFFNUI2OEQ0Mjg2RjhB
RUEyMjgvSV9nVXUwZlZ3NjdkVVFQemIxMjRvcHZqMXgwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0uSwgBolK3NAWp1sA8+M8feuQRpj7
kx5QukLqctDnV9SgmWoGEQm/kj3HJZjZy9bXtQ2ufGelGjHjHWYw0uQ9DQBavXXu
j9zC0dhUYVKy1Xn/0kysIWDXfEFHJrLGz7/4jh7EqUxYbfFI85OKE8b0fXSd2DKb
TccOfi0nYOfzgdF/M8SE+2NThp7cS7dFkT/FubhSwfGykGpdOAJbqaJBf0HG7fvG
ujPWcKE2KdgralJhELHTmfMiyQW5I8cQpDvrmmxPzX5RCHmixisZB0ACaHslwFRi
9jUVVyuwN+zI2qauvv+OfiuUG9zoZQHDSe7suQehocFteIG8Jgsruu5r
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:12:18 2026 by rpki-client