
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
File: hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft (raw, json)
Hash identifier: E6EaE2VXo3qa1U6PD98fg5tlv+43pHVmBAx58aaoIUQ=
Subject key identifier: 5C:09:C4:E8:99:8F:79:5F:6D:0F:A9:BF:35:1B:03:0F:3C:FE:AB:D9
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 076C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
Manifest number: 072C
Signing time: Sat 28 Mar 2026 02:42:06 +0000
Manifest this update: Sat 28 Mar 2026 02:42:05 +0000
Manifest next update: Mon 30 Mar 2026 02:42:05 +0000
Files and hashes: 1: hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl (hash: KJDu9qRXTUeLu2xxPD5UtdPMX57ovAy24h3NzW0iUlY=)
2: 973F091E1FB311F18E80869FDAE4EC9C.roa (hash: CzHZTufJFyhjGHkpFVZuM6wyww8c6DnqEF6oCbO8Cz0=)
3: 15C50C50FC6B11EB9A564508D8A014CE.roa (hash: edvjHiFr4+tEmm64tF6z1Z3h19PfKmEG5a35CcgMLjw=)
4: 004B1DF2B36811F0A98458F0DAE4EC9C.roa (hash: zkIpkIt6ml3z7EI6+y3S5IJ7YdnJfqyc+dJmlhiixtc=)
5: 3B0BC528A8E011F08381ECAFDAE4EC9C.roa (hash: p8rygDaqMlfKM5+mFXH3h51l6FuqzUHfYdCJkipQXZk=)
6: E357B78EE4BB11F093E3DC7DDAE4EC9C.roa (hash: nY55XWPvIUdnKSOrgX9Yk5fegScFBg/GTaQgjQAjVKo=)
7: 6DA8BDECBEF711F0BC88C8C8DAE4EC9C.roa (hash: mr6RFujr9br3UnulbLDbQG/tKZZBLEAMX2oMaBzTflg=)
8: DF36CBCABEF711F08A36B0CADAE4EC9C.roa (hash: AOAhdb8NfSG9X3GlC/Vi6d309IftduVQ5MLyZDqd8CA=)
9: 582E5A0E1FB311F1988F6B9FDAE4EC9C.roa (hash: 0HSfpxd6RJw1dDAmVY8F6DqPcLyoD2dBDFLG8DPE+ZM=)
10: A0124150B36611F092119CE7DAE4EC9C.roa (hash: KPAVGIR+9gV2f09zVyhq7pMlJ/S3+kwqXxT6U4gqUlY=)
11: 2DF66802A48011F0BE03EEDADAE4EC9C.roa (hash: 0mGTNTPDmMnNbcUKybxv+SjjJhFpDKD/VU09yMxkTpA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Mar 2026 00:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1900 (0x76c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Mar 28 02:42:05 2026 GMT
Not After : Mar 30 02:42:05 2026 GMT
Subject: CN=69c73ffe-2be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:56:33:5a:b0:b8:e1:66:46:f6:6f:13:43:
51:c7:eb:73:05:ae:33:c6:19:5e:83:99:5a:14:66:
8d:f1:b6:7b:4c:36:04:9a:54:b9:21:3f:75:63:9c:
5d:a8:2f:5a:7e:21:b6:35:8b:1c:7a:32:c1:43:16:
20:eb:00:6b:6b:3c:08:6f:dc:1f:03:69:6d:de:41:
1f:cb:38:78:1b:c8:22:59:ff:d2:66:09:9d:a0:2c:
40:c2:a4:92:d3:53:e0:e0:ab:e9:8b:aa:49:28:35:
31:5c:0b:b5:cd:f6:f6:a0:1a:05:52:34:ec:bd:6e:
b2:b9:c2:2c:4f:ce:a2:bd:e8:b6:22:28:0a:53:00:
a8:6d:78:8d:26:63:a6:7d:19:ff:fa:3c:7d:18:51:
fb:85:a9:d4:59:6f:75:4d:1c:1e:e0:a6:e7:14:2d:
67:ed:fe:db:7d:93:b5:62:64:1f:3d:e4:51:3f:04:
1f:dc:a1:7d:88:1b:de:7d:aa:4c:ce:46:c3:31:6a:
07:06:10:3f:d2:95:b5:bb:a5:16:cd:36:90:01:e4:
85:f4:39:21:1d:78:22:f0:d9:bb:61:4e:d5:0a:bc:
29:53:23:a9:12:64:c0:f6:b7:78:6c:65:94:ff:b1:
d4:c5:5c:08:d8:1e:bd:fb:35:ef:e7:55:0d:76:8b:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:09:C4:E8:99:8F:79:5F:6D:0F:A9:BF:35:1B:03:0F:3C:FE:AB:D9
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:d6:f7:e9:69:61:06:b1:f0:b1:e4:ec:6c:2c:29:ef:f7:a5:
f8:d3:04:54:45:c4:19:fb:b8:76:94:e4:ca:65:fc:d5:f9:71:
6f:b5:55:f8:08:f0:a5:bf:7d:7f:89:e7:77:9d:bc:e1:c5:ed:
1a:e1:f2:ac:45:c5:f3:db:4d:93:7b:c6:67:96:f8:38:35:9e:
d3:77:35:5e:cb:e7:3b:e9:30:34:ac:f5:ee:88:1c:e1:19:0f:
ad:4d:2e:b8:56:f8:e3:85:4f:8b:d4:9b:2a:00:0b:dd:74:69:
c6:25:fd:2b:a2:8a:bd:9b:c7:97:3a:9e:a0:54:c9:98:bb:90:
06:db:5d:8b:77:31:7e:1a:03:61:ee:72:f7:83:9f:7c:76:a4:
63:49:3b:f0:5a:cb:08:da:dd:94:a0:de:de:20:e7:f0:af:09:
8d:f3:1f:80:24:67:da:78:e5:ec:74:6c:c0:c5:db:34:bc:b2:
9d:f3:3f:69:c6:fd:67:79:b4:64:9e:4e:0e:ab:0a:88:b9:bf:
ad:bb:d7:b8:2d:3c:99:6d:61:de:30:70:06:69:49:c1:7f:0d:
13:db:7d:01:f5:31:05:d6:84:a6:0a:f2:6d:cd:4d:b7:5e:c9:
c2:14:ac:0f:76:58:98:50:54:3c:2f:68:e6:88:56:1c:a3:39:
69:66:f6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:12:47 2026 by rpki-client