
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
File: _fS_ABOx8arKOVUbpibKJGg9rmY.mft (raw, json)
Hash identifier: PnrxJb6UmQBC74H7beCJwSXrW7h9z8RabiEgR7jEFoU=
Subject key identifier: 42:83:8C:7E:C8:B9:D1:E9:8B:27:E4:30:2C:27:77:D4:69:1B:EA:2C
Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Certificate serial: 02D6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
Manifest number: 02B3
Signing time: Wed 05 Nov 2025 04:21:21 +0000
Manifest this update: Wed 05 Nov 2025 04:21:20 +0000
Manifest next update: Fri 07 Nov 2025 04:21:20 +0000
Files and hashes: 1: _fS_ABOx8arKOVUbpibKJGg9rmY.crl (hash: vmbjmpCZwoGeJInnpw+Ym2Md/x/49NbyFJ2E5Bb4MGA=)
2: F105F828C4CE11EE939D5160775412E6.roa (hash: OVT2chMQ0Nq/o8KrWCxuVSBa6IdJd925oWRD0nztHjI=)
3: 6F89EC1EC4CE11EEB915BB5F775412E6.roa (hash: 0xzDQTGktY5SNT/oNqNDkR69eV9keuHEiaiK1qaTKh4=)
4: B1F8097EC4D211EE86535866775412E6.roa (hash: 59lN/fUbuBzBsApqG3IvBcdXKT4GXqevkBfORr82FQA=)
5: 8BA49FD0C4D211EE9EC4EB65775412E6.roa (hash: L8cuHjbSNz6+bJ/gQju0YrhFVS2tYAIiSMeuYmThWuI=)
6: DD77B4AAC4D211EEBEB69266775412E6.roa (hash: OydxnI/hxoPiyhR17/Tng3O2ILM83hRZhWDiNRN/dU4=)
7: 95C2E55CC4CE11EEB298E25F775412E6.roa (hash: 34ivVx7kCxvEM20aUk37oRsDslYZlA+xl4ns6+aB5gY=)
8: 93B700F2C4F311EE8E31E298775412E6.roa (hash: jxWkgZfYWgXiUGFUDEKR/McM7BfyCoS5P8Hm5K309v0=)
9: E93581BEC4CD11EEBD97B25E775412E6.roa (hash: 55Va12oDO8S1u6Db0FeTKlFuk9K47Rv37Hrdea7bPcE=)
10: 3DF8B8D4C4D211EEB1EC7C65775412E6.roa (hash: 9LziG0V2OwJ9n1u0dLn4KBFXmSSOMd2hKZ8b5zKpu9c=)
11: 4101D022C4CF11EEB2F10961775412E6.roa (hash: dLi4goldq2t98cgYBuvk9Jpn/HGg3ZCmLTC1jEDXh+8=)
12: FAD1EE98C4D311EEB8EF5B68775412E6.roa (hash: xrzrQk6N9A7y+gGJ1sq9ZLmMErelK63jEZa0HOn6EEE=)
13: 06EC9B8EC4CE11EE9CCFD65E775412E6.roa (hash: yxTa4SshiNJ7DHcSq54/OxpqqW1oYG+0q8Vz/U0eUK4=)
14: 4C0E8C0EC4C911EE87647756775412E6.roa (hash: 3hEwrhsuSNEta/SbVkYuC8E8cEE9Br3Bj2hXmqXW6Og=)
15: C1BC264CC4CD11EE89C2885E775412E6.roa (hash: /4XiUCjd/sd1xIFdMVmhioY/RKg6IR+Ajo98X8uy0lo=)
16: 48E43AECC4D311EE8C1B3F67775412E6.roa (hash: u/n56Tta7OlwGuEqOpX71XLsZT2jKpBxkP39WXUlLLc=)
17: 1A50080EC4D411EE9683B268775412E6.roa (hash: caLtTbJU+Ufv7BiWj1H9Gw+w4cpOtHWxcr1WeZuKjJ8=)
18: 81B67878C4C711EEA9FDDB53775412E6.roa (hash: vTf8z95jt6AfKb+uGSv38KFOEqTok2j1GUU2yZdAI08=)
19: 52716D10C4C811EEA1131155775412E6.roa (hash: xQRXL5xCOGFaycHwp48gngmbdbohfcnsUJoty1rMzbc=)
20: 2A6C3F60C4CE11EEA3D4FA5E775412E6.roa (hash: C+KA4N0o/N/27ljFsz4ZdSUMg3iOEQO8xBx9RPaXKNI=)
21: 4F31EC96C4CE11EEA565525F775412E6.roa (hash: HcZFH7qDjDPGPIsCX8qhmZSQf24/4pPHFAyHS4PESuo=)
22: B3F2595EC4D311EE97A2CE67775412E6.roa (hash: ECdHU4AArULpOT1NztEszqbSD1WJnxMYYXF31fUvbrM=)
23: 68864AB4C4F311EE8BF25B98775412E6.roa (hash: 5ft3N//XILTGHx4xJyf0ZxLMMcxslek8pxu0nWzZdwE=)
24: 648C3F8CC4CF11EEB00B3061775412E6.roa (hash: FDVWcr2ZaAbCYXZ2KHJUxLsk/2sFqJr/Vx9+VGbIRJ4=)
25: 2283DBBEC4D311EEB2E6EA66775412E6.roa (hash: vDOXm9PXQ5Zd7c1zyElcj6kt2FJGk5QRFQWZ4OnkvEI=)
26: 870416B8C4C811EE906C4D55775412E6.roa (hash: Vbe2KHg+Or1EjP08Hg3ouXICYgnv4yFEfEZ5ZITCte4=)
27: D4A143FEC4D311EE8C6C1968775412E6.roa (hash: AgQ0WKMr6LdRsNIoXgyHASIpWGf5jCQAlVVsb6zmYZ8=)
28: 5DCB92C6C4D211EE8BD1A065775412E6.roa (hash: PsrWGlKMnmYkcFOTAbq8GoiP2U6q8o3llEg2ATal3EM=)
29: CCB4D870C59311EE927FFFA7775412E6.roa (hash: 9rD0WduujgyOlEWZ+vDkwaNAJhs7jTIfIlCfix8PC/0=)
30: 9073DE6CC4D311EEB0B9C867775412E6.roa (hash: elhNbqke+6Kl2ZATVb9O1DeKyGk/Aq6WgPyX415dPg0=)
31: 96B86BD6C4CD11EEA3C61A5E775412E6.roa (hash: 1/4BsRl0z2euLNjIiSiAv+wgrdGXz1NzXtlGPkiO18s=)
32: 684B797CC4D311EE816F8467775412E6.roa (hash: zrGP4qbV7TkM2QLEaYGOzJRGNrjbHqUR2QRTvJ966ic=)
33: BFE793D2C4CE11EE81D70760775412E6.roa (hash: YKo9lE8pH+B0lF4SQUvGTWgHthQjPN6oP/oPK/YNf8s=)
34: 1D9BA0C2C4CF11EE9D26CF60775412E6.roa (hash: 0X/6wOprzARBLwyRT7sbR4YEUnDHgpq1rvlRKwpi56E=)
35: FF49F7B4C4D211EEB6F1A266775412E6.roa (hash: qvVux5l6rnVThhETsGLH9EXoxv6/IKPh5G9ATtSGJFg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 726 (0x2d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655D2CAF, serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Validity
Not Before: Nov 5 04:21:20 2025 GMT
Not After : Nov 7 04:21:20 2025 GMT
Subject: CN=690ad0c1-84d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:8b:4f:f6:21:36:b0:8f:42:7c:94:2b:fa:
38:7d:94:16:93:41:82:90:93:d3:75:bf:29:b3:d7:
ef:52:df:ac:2b:c0:d6:ec:42:51:94:fb:f5:92:52:
02:0a:61:be:5c:44:22:1a:b6:4b:77:e9:5d:b4:69:
1c:2b:aa:44:fe:17:20:00:a3:15:37:8e:1e:8f:13:
ba:4f:c0:a4:b4:18:70:16:7c:dd:a2:0d:52:ad:57:
fe:99:47:54:9f:7c:3a:3b:f5:a0:f0:2f:27:0d:7d:
50:c0:d9:31:f6:82:c6:33:86:a3:14:6d:7e:e7:3b:
45:8e:be:2a:df:54:69:b9:1b:1a:04:2e:ce:fe:ee:
c2:8c:2c:35:9c:d1:87:86:fe:67:39:7f:8a:0f:15:
11:c8:24:a3:0c:72:b7:4c:43:f2:93:74:16:de:82:
ee:fa:fb:57:82:cb:09:46:c4:98:ac:32:ca:bf:1c:
be:a0:de:55:f0:35:c4:e6:b7:4f:ad:31:2f:ba:83:
2d:6d:5b:64:ce:7e:81:0b:52:20:75:3b:26:c2:03:
e7:02:67:40:17:07:29:79:3c:78:6a:7c:6d:dd:cb:
fb:e5:75:fd:a2:c5:12:90:c1:4d:d7:c7:df:59:64:
c1:57:e8:79:86:3a:24:bc:41:f2:f1:87:4b:04:5b:
1f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:83:8C:7E:C8:B9:D1:E9:8B:27:E4:30:2C:27:77:D4:69:1B:EA:2C
X509v3 Authority Key Identifier:
keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:f1:54:a0:42:8e:d0:85:01:2c:08:d8:29:2c:88:11:ef:99:
3b:e9:91:33:b1:1d:ba:0a:13:28:ac:33:e0:62:2d:27:9b:86:
2a:05:30:fe:e4:58:b9:01:5b:57:48:d3:6a:94:f2:01:28:2e:
3f:5f:3d:95:a8:f7:ba:4d:cf:33:20:0b:dc:19:36:9e:94:9d:
a3:5b:e7:40:7c:9e:63:18:e1:8b:d5:f2:ae:e7:a4:00:66:b8:
6a:aa:e7:c9:f0:b1:b7:7d:82:3f:65:1d:41:55:71:f5:29:f6:
b4:0d:55:33:ab:fc:47:60:a7:3f:e6:1d:ec:b0:0f:d5:e7:29:
22:5f:f9:08:e0:5e:5f:5f:43:ab:5a:69:66:35:83:0e:ff:39:
2d:f4:96:0d:80:89:90:12:eb:7b:d0:fc:91:0e:28:71:b4:ce:
0e:19:98:be:f9:90:7c:f2:22:95:c3:7e:a3:56:e4:4a:48:52:
5e:f4:bf:a0:50:22:59:22:dc:cb:49:b9:ee:05:ac:2f:c2:60:
78:a1:27:29:80:8c:db:2b:00:74:b7:fe:5a:7a:0c:b5:7f:c3:
d0:d3:6c:4a:d9:ef:aa:27:8f:a2:7c:77:f9:1d:62:4b:32:ae:
8a:41:3b:fe:e5:96:c1:66:fe:b8:d4:0e:75:d6:1e:2a:06:71:
a1:78:b0:97
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAtYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTVEMkNBRjExMC8GA1UEBRMoRkRGNEJGMDAxM0IxRjFBQUNBMzk1NTFCQTYyNkNB
MjQ2ODNEQUU2NjAeFw0yNTExMDUwNDIxMjBaFw0yNTExMDcwNDIxMjBaMBgxFjAU
BgNVBAMTDTY5MGFkMGMxLTg0ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwNItP9iE2sI9CfJQr+jh9lBaTQYKQk9N1vymz1+9S36wrwNbsQlGU+/WS
UgIKYb5cRCIatkt36V20aRwrqkT+FyAAoxU3jh6PE7pPwKS0GHAWfN2iDVKtV/6Z
R1SffDo79aDwLycNfVDA2TH2gsYzhqMUbX7nO0WOvirfVGm5GxoELs7+7sKMLDWc
0YeG/mc5f4oPFRHIJKMMcrdMQ/KTdBbegu76+1eCywlGxJisMsq/HL6g3lXwNcTm
t0+tMS+6gy1tW2TOfoELUiB1OybCA+cCZ0AXByl5PHhqfG3dy/vldf2ixRKQwU3X
x99ZZMFX6HmGOiS8QfLxh0sEWx9DAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQoOM
fsi50emLJ+QwLCd31Gkb6iwwHwYDVR0jBBgwFoAU/fS/ABOx8arKOVUbpibKJGg9
rmYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU1RDJDLzFENjRDMkZDQzRDMzExRUU5QzQxOTk0Qzc3NTQxMkU2L19mU19B
Qk94OGFyS09WVWJwaWJLSkdnOXJtWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL19mU19BQk94OGFyS09WVWJwaWJLSkdnOXJtWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTVEMkMvMUQ2NEMyRkNDNEMzMTFFRTlDNDE5OTRDNzc1
NDEyRTYvX2ZTX0FCT3g4YXJLT1ZVYnBpYktKR2c5cm1ZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBR8VSgQo7QhQEsCNgpLIgR75k76ZEz
sR26ChMorDPgYi0nm4YqBTD+5Fi5AVtXSNNqlPIBKC4/Xz2VqPe6Tc8zIAvcGTae
lJ2jW+dAfJ5jGOGL1fKu56QAZrhqqufJ8LG3fYI/ZR1BVXH1Kfa0DVUzq/xHYKc/
5h3ssA/V5ykiX/kI4F5fX0OrWmlmNYMO/zkt9JYNgImQEut70PyRDihxtM4OGZi+
+ZB88iKVw36jVuRKSFJe9L+gUCJZItzLSbnuBawvwmB4oScpgIzbKwB0t/5aegy1
f8PQ02xK2e+qJ4+ifHf5HWJLMq6KQTv+5ZbBZv641A511h4qBnGheLCX
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:44:32 2025 by rpki-client