
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
File: HdFv1ov_fKsauRxV2mH8DN_0F0M.mft (raw, json)
Hash identifier: E+lco9/1IUqhvDBeRRAuaBwNz8Ohf5zFkGcavFD2FS8=
Subject key identifier: 23:E8:47:C6:1D:4F:5A:5E:29:91:76:CD:5B:37:7C:81:0F:FE:40:F6
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 06B4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
Manifest number: 0665
Signing time: Wed 05 Nov 2025 02:33:22 +0000
Manifest this update: Wed 05 Nov 2025 02:33:21 +0000
Manifest next update: Fri 07 Nov 2025 02:33:21 +0000
Files and hashes: 1: HdFv1ov_fKsauRxV2mH8DN_0F0M.crl (hash: HH4E87x7Htl11a45l+wpF4GjOGzJsbjx9p6D0wXV90U=)
2: 10E2A890A01911F08A266CD6DAE4EC9C.roa (hash: uKu9ra8g3enObejQKUm/wjJcdExGU8pfNmFnYSCVAb4=)
3: C048D206A01811F0997A41D6DAE4EC9C.roa (hash: jhoKyB34pvQ8xNX0wPMbhbFsPkWoO13xc3OlqRsvcuI=)
4: 87292E6AA01A11F0B32F60DFDAE4EC9C.roa (hash: 4nhIZUohQE/GQcQXC4C3luqxwBzt+U4vIAe9MdQWT3w=)
5: 2AC075F0A01211F0B72F98A6DAE4EC9C.roa (hash: DK9ydq1ArB3m61vuEV0TSdIjbjRvzTpBgOxKOB1u+wk=)
6: 77AA62BAA01511F0949C90BEDAE4EC9C.roa (hash: 6sOD9vGb7J0UzCC20Wr5l2Kfav4Tkbio/BxVpX+Krt0=)
7: 8CEA5014A01411F0BFEF7AB9DAE4EC9C.roa (hash: ZmcJKQbrWBpIwE/ww8rZLi/ZhcQN8hLklhkP+Cw6Oig=)
8: E64C3C80A01411F0B09CCEB9DAE4EC9C.roa (hash: P67lgxodJONkr5xhx0/ZwVViknbWq1lQZGMlbP6XgkY=)
9: 69351E4CA01411F0BCA38EB5DAE4EC9C.roa (hash: qo4MdTAgB+4LLeVyw25K2zTCPmiwmmx5+hWl/ARollk=)
10: 46A7485EA01A11F08EC941DFDAE4EC9C.roa (hash: 7n38aPRG6DfSsFKjw2v4HaAQ/mbzm69U8oIgVsOvwZ8=)
11: 18112B68A01A11F09DD253DDDAE4EC9C.roa (hash: iHeBmMWWg3WS1fulXf5vlgJuM8lCwPKmaQN2zjvQXXM=)
12: 9E2163FAA01811F09E3578D2DAE4EC9C.roa (hash: eDRADB256Y80jHNt3k4fhbDC5ZHAHMd6Ca6OrAqbwIg=)
13: 0B6A72E4A01411F0AD73C0B4DAE4EC9C.roa (hash: Y4CZp0DWrQMWNjkjyjpL08rU6hNDzV3WDuwJ4b5/tIE=)
14: 3F380060A01311F0919EC6AFDAE4EC9C.roa (hash: ML1Fpn+T9RKdP9udPwEg1TO7ruJ5fEp150SBZcWBHGg=)
15: 7D736F44A01911F09753BADADAE4EC9C.roa (hash: LoMK2CKg1w2sxKBIOF7rjm0R24WlzIzFWpE/7DH5x8E=)
16: 33EB252EA01411F08F17EEB4DAE4EC9C.roa (hash: nzlwWU3jybg0Z5LtyVm9+qYiW7rcBwW9fpuAtDJVz3c=)
17: 508EE634A01911F087E8F1D6DAE4EC9C.roa (hash: 4FyWxdVz9ZB89dnEYa1UQaV9BgwPCDZcCQ64zRWzhRY=)
18: EA82641AA01311F09744A3B4DAE4EC9C.roa (hash: PvyVycDl600xSYGgD1LSND0w48iaigMGKSIG0uMiAw4=)
19: 9D32F69A977E11F097D5EA99DAE4EC9C.roa (hash: 8T6MXp4d7k4QlXY2d72nQUcRick423J+7EbbPvV9VsA=)
20: F19DC41AA01811F09F5B62D6DAE4EC9C.roa (hash: TZ8+f6VOZFccWd8TuXEcbvL38bAwB9OZXRVHDIZr0No=)
21: 4C032782A01511F0999B65BEDAE4EC9C.roa (hash: ANPrThqCPCkYsx7dRQ398hItHVf+UOOUIIoPdsOJOUo=)
22: A34959B8A01911F0A89ED4DADAE4EC9C.roa (hash: E3HAjnixDN1XWV/LOWT5w5sQJ03lSjiuDVqAWFJfBmI=)
23: C642CE7CA01411F0B494AFB9DAE4EC9C.roa (hash: aqI2o4BrWljOyaNlrUsbDBgDucPGaFRS97cYN1ybOns=)
24: 94B2F070A01511F0B59AAFBEDAE4EC9C.roa (hash: kwH5u3K/Hl+qIz66y3+qwY9El0PaIlycS18OnhiM728=)
25: 2F962140A01911F081B8AED6DAE4EC9C.roa (hash: ujK0C2V+Qi9u6MTQjYHs+CJbsfw5+IZrPSzJeVNBBYs=)
26: 04AB017A977D11F0A97D3391DAE4EC9C.roa (hash: nkdk6GBaqBguv0UXSrzYeA5QBtv1EdIeuvUWxhgAHHY=)
27: 93B9577EA01311F0B7824FB0DAE4EC9C.roa (hash: mkR2GLOQGEWqlqYNGWBX32sAXhIvbJfjR8LQZ8jggh0=)
28: C2CC2352A01311F0BA2D6BB2DAE4EC9C.roa (hash: 8dkPZG1bVKa6ng9BDONfAwpgPvxPAcZCz/nmcH4/hSQ=)
29: FD658BE4A01211F0BF85CAABDAE4EC9C.roa (hash: Jjrt4iFN9aQQeExy1Q5uaDTAkOEyoLMTHJMPctSRjM0=)
30: 6DA4387EA01311F08B3FF2AFDAE4EC9C.roa (hash: SoreU7BbeZI0MVABkoxSNUmBXY1Qer83v7w3hSgZbOk=)
31: CC94B1F0A01911F0A21BE7DADAE4EC9C.roa (hash: eol3C2aK1kCFY/RXjcfLIKnAxFpxEJhGrZQgt5Mo8mo=)
32: 28E4B6B2A01511F0BAD17CBCDAE4EC9C.roa (hash: O+8YfGKgcic5dSt9d0Vx7+HftSOAGPejOIugvkS/Q/Y=)
33: 072D5AC4A01511F09A0839BADAE4EC9C.roa (hash: yix9tcBAo74wcqdhwzt3WKH7uoqvm4BIlGZZkDl24+U=)
34: BE045106A01211F094A319ABDAE4EC9C.roa (hash: iFrlWdC+BKPWivrrH+4J7SzVi5ek4QeDzjIdOx16K2s=)
35: EE2BF774A01911F0B0CB31DBDAE4EC9C.roa (hash: HrO9DcmxgUKYwJpAAbnzvgRqkHtqT2odz+DewxsVQ7g=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1716 (0x6b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Nov 5 02:33:21 2025 GMT
Not After : Nov 7 02:33:21 2025 GMT
Subject: CN=690ab772-4771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:23:a1:25:70:e1:1e:01:7f:5e:49:92:cb:
c9:14:ce:38:24:ec:20:df:45:7d:a3:9b:a4:22:0c:
29:44:da:9a:aa:85:df:08:07:3a:0a:ad:ca:3b:d0:
29:c7:e4:43:1e:e7:51:6b:d5:f1:42:22:54:d3:43:
f0:da:11:fe:5e:f9:40:3c:cb:9a:18:7d:b2:84:dd:
8a:3d:2d:b2:10:31:82:7c:18:56:92:09:44:a6:30:
9e:b8:53:ba:c8:53:d9:7a:cd:5d:a7:7a:f9:ea:7a:
46:15:34:dc:33:a4:40:71:c3:da:4f:6c:f9:88:d7:
58:16:57:3f:63:d6:43:ac:e6:4d:4f:4a:1a:22:13:
c6:d6:46:fc:5e:c9:52:1b:f0:66:24:79:b1:03:1a:
d6:62:d1:dd:9b:bc:74:42:2e:bf:bf:dd:45:7b:18:
22:04:84:4d:e9:15:f3:0c:7e:69:78:c1:d0:f4:f4:
3d:71:f6:0a:76:74:9d:36:97:44:f5:cc:bd:eb:6c:
89:21:d8:94:6c:db:c8:23:93:27:b6:cd:0b:38:d5:
58:ec:db:c1:5a:61:50:af:5d:44:07:8e:f9:a2:31:
ec:52:63:48:f5:98:64:f0:82:e2:b1:fa:a1:b6:46:
68:c7:b4:6d:fc:fd:2b:b2:24:02:35:67:46:32:04:
e0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E8:47:C6:1D:4F:5A:5E:29:91:76:CD:5B:37:7C:81:0F:FE:40:F6
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:fb:9e:fa:e9:9a:13:91:e3:66:2b:d5:cd:2a:95:3b:b4:ec:
de:64:36:0c:1a:6a:98:ef:e8:1b:ee:de:64:ef:09:7d:65:65:
87:98:a4:d5:95:f9:65:0d:20:cd:60:30:e1:18:e7:cf:27:8f:
41:08:2f:7e:cd:89:2b:70:88:cf:04:4b:b0:a4:7e:68:4b:6c:
f1:2f:0f:30:f0:97:ed:77:9c:96:e6:ba:fb:fe:1a:8e:0d:b7:
f5:ef:19:17:43:18:bf:28:84:fc:f2:7e:cb:9d:17:0a:f0:ee:
aa:13:4e:9c:68:0c:5c:bf:35:1d:23:b2:02:17:92:f3:c7:72:
4e:c8:e7:ce:e9:fc:ca:99:46:8e:94:16:10:00:9c:94:19:bf:
66:d8:5b:d9:b9:de:bf:b4:90:fb:59:ad:f2:44:13:82:55:8b:
33:b6:05:cb:5b:0b:24:a5:71:66:a1:eb:b9:8f:e3:47:d3:bc:
a2:9b:86:64:40:ff:c7:d8:a9:20:5b:1c:4f:20:db:22:69:75:
ad:de:6a:11:5d:4e:da:0c:90:9e:c6:83:11:65:e9:7c:b5:8f:
91:13:b7:c9:7e:cd:e3:12:9c:13:bf:40:45:1d:38:3a:ac:19:
53:9e:b5:ac:bd:44:6d:30:8e:97:e3:dd:65:44:c2:8e:88:84:
78:69:84:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:17:32 2025 by rpki-client