
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
File: qO-WBRTjNkRNPN43sktm3DnUPRs.mft (raw, json)
Hash identifier: r9Z7BA0SqQgsvDkdXBpTKcXeTIX6cRrJuZ2wX8Mxgrc=
Subject key identifier: 43:FC:DF:09:5C:14:5E:D4:DE:06:C4:56:92:DB:67:11:92:F2:12:A5
Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Certificate serial: 0422
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
Manifest number: 040A
Signing time: Fri 17 Apr 2026 03:36:54 +0000
Manifest this update: Fri 17 Apr 2026 03:36:54 +0000
Manifest next update: Sun 19 Apr 2026 03:36:54 +0000
Files and hashes: 1: qO-WBRTjNkRNPN43sktm3DnUPRs.crl (hash: zKaTSU1xCWyPw3WJn8iggnYrY5BwgDRJ+sUDNbMGmVk=)
2: C64BDF325B8611EE8F5917154AD9E6FC.roa (hash: lOfMw6yYmupoBGzZG06JxE7nkGYN0SjR1YBL+6yU110=)
3: 3FC126045B7F11EE91B3797C4AD9E6FC.roa (hash: B4Jxb4zuiNxx8ARYO+8FuXUu5CFHZJCjPVqFobOB2EU=)
4: F592AE225B7E11EEAAD8A37B4AD9E6FC.roa (hash: H2+/hMWhZrQQ/v+xp+P99me7GUvAhaEZLEIOvuDJ8+o=)
5: 9389DEB25B7E11EE85FB5A794AD9E6FC.roa (hash: saW9gDDU1fU/ss5E5QByOp+7T1wbc1vVgpJ7XS+gk+s=)
6: 39E85D245B7F11EE90195D7C4AD9E6FC.roa (hash: eHbXQ/7kild+PjHeBFmSGxlAnlG3pi2uyC9o63m5Mio=)
7: 44122BBE5B7E11EEA5C359784AD9E6FC.roa (hash: dlLpBI0Us25zgjOKkdJouRreKgFknaWvSBpHKXaHN4Q=)
8: 0DDE14645B8711EEBE2DF3154AD9E6FC.roa (hash: OVYm5oOpe8XlJOHUYg0R0oIytfPmlhVRgGeohPVoeGg=)
9: E29E1C625B7D11EEAFF513774AD9E6FC.roa (hash: cL6yXVTdN5LFRK/8lI56JvUwQ8huIMxP3ArtUJsfAsg=)
10: 0DB547A45B7E11EE95F5E0774AD9E6FC.roa (hash: sgLUjm9KT8NBSGsfPuF7zb59LXdnTNhjWZlBuJluY4o=)
11: 82BE0D345B8711EE8AF170174AD9E6FC.roa (hash: du0kSdCk2tSzKNVUZIxuV5z/5Bcr0/T6HJ/NasAIv4s=)
12: 673167545B7E11EE98EEBD784AD9E6FC.roa (hash: adqbPWSj3qJmhRpUh3DUEWmWfDKPs4YfwC9ZlFS5ias=)
13: A97AA9E05B7E11EEAD5E8F794AD9E6FC.roa (hash: 3NkJ+hNEcmyOZzaQCsy/+Ozh2yGmiiWLNtnnqsmfG2I=)
14: C07457B08A3711F0A002C2E7DAE4EC9C.roa (hash: Pe7GZmcC+gV4uLFF5b8V8YgWqeJmXfjZci1uqWUJRZA=)
15: BBA7D8A05B8711EEA5880E184AD9E6FC.roa (hash: NwbjXk0kj8eY+sbmyk9mA7z7P4Od2Lqrhnl5SE+949A=)
16: 7D84FCC85B7E11EE930F05794AD9E6FC.roa (hash: LbVSQZqmCHBXF80jfRgZ632p1CiqtMRJRyKOIJ1fwIY=)
17: 5A3685F85B7D11EEB4B9A0754AD9E6FC.roa (hash: hua4m2v20w0RdcluLq3SvMVi3aYeRg47OfgA9wTRs3E=)
18: 1C0B2122019C11F1BBDB0E7FDAE4EC9C.roa (hash: xwJRkcjKrYUbtrVrTZw0KB8n5igOjLaAbAqiU+HglAk=)
19: D6AA10E05B7E11EE9B32467A4AD9E6FC.roa (hash: RAafA0ML5VlgZ60Y1uxp4EowWyBnwvs0LOD/pOddd5E=)
20: 9FF8CF2E5B8711EE9F40A5174AD9E6FC.roa (hash: lG9MW9PGMEKdmiEYPlQxLtvMK2I/+bgWEhfhck5fvqA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 03:36:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1058 (0x422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668CFEAF, serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Validity
Not Before: Apr 17 03:36:54 2026 GMT
Not After : Apr 19 03:36:54 2026 GMT
Subject: CN=69e1aad6-d92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:9e:a0:02:f9:0b:c1:16:40:25:20:cd:93:26:
5d:e7:7c:1c:6d:36:06:aa:25:ee:7c:de:89:64:45:
9c:b9:64:e0:69:3f:29:84:59:5d:4e:d8:02:92:fb:
e3:26:d9:f9:63:77:4d:56:1d:fd:cd:1e:2e:0e:b4:
84:56:b5:b7:bf:f7:e8:de:ba:1a:b5:0e:e8:cd:10:
0d:d2:18:d6:8c:06:53:5d:d4:3c:7a:22:1f:54:cd:
88:5c:d5:86:9d:10:44:51:1a:7a:29:8b:a9:12:76:
56:2d:32:0f:3d:14:ab:72:e7:e4:33:71:06:15:cb:
0c:2d:d7:40:be:82:ad:fa:dd:d4:3e:e3:cb:66:53:
a3:34:3a:d4:e2:ee:28:71:39:8b:e0:65:f8:e9:e8:
1b:9a:94:9d:24:dd:52:c4:ac:f3:b9:50:11:e5:6a:
35:db:dd:80:2c:95:f2:9f:5c:7f:db:66:35:e7:87:
5f:92:6d:1a:65:ac:7a:82:ab:20:c7:7b:7a:68:4a:
01:db:fe:38:2b:37:35:d0:73:95:d6:30:55:3e:82:
95:ce:a4:6e:76:0c:37:e9:5d:3e:ab:57:3e:fe:a2:
df:35:6b:98:4e:e9:01:05:f8:db:59:0f:80:41:92:
27:14:2a:0e:1a:4a:75:2b:b7:01:e5:bb:bd:6a:96:
a7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FC:DF:09:5C:14:5E:D4:DE:06:C4:56:92:DB:67:11:92:F2:12:A5
X509v3 Authority Key Identifier:
keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:15:f2:37:b5:f6:4e:70:aa:8c:68:b3:ad:e7:71:df:30:39:
bc:38:be:a3:80:eb:01:2d:58:7c:79:ef:5f:c8:f3:87:91:f7:
b3:6d:03:7a:4d:44:07:fe:c5:55:41:52:3e:5b:99:42:fc:7a:
bf:f1:f1:2a:60:4f:03:3d:45:10:8f:52:59:b3:71:10:ad:30:
70:92:b6:12:f8:c3:45:b8:21:9f:6b:94:b9:7f:ab:5d:ef:1f:
36:1d:41:ff:f3:88:b7:b5:b5:92:79:c8:c8:03:dd:2b:90:10:
87:46:e0:84:19:72:7c:91:5c:28:a1:05:48:df:10:76:1a:95:
21:a2:db:e0:b4:bb:c5:ad:5a:f8:a3:50:cf:68:9a:67:ca:a0:
7f:24:fb:30:76:df:3f:10:e5:c3:b8:d9:1c:35:93:02:8c:bc:
78:f8:83:04:29:f8:34:0e:b5:90:12:e6:44:45:f5:0f:6e:9a:
61:24:7d:1c:44:13:29:de:a6:2c:77:15:12:5c:39:aa:45:a1:
68:44:eb:89:1d:3f:c3:5f:c4:9d:0b:11:b3:51:d5:27:59:c0:
96:73:6d:b1:a2:fa:f7:13:69:37:21:6f:1b:fa:ea:c2:c4:2f:
38:b2:48:84:19:8c:9b:84:e8:3c:a6:34:8b:fd:4d:6e:a8:93:
7f:9e:26:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:08:53 2026 by rpki-client