
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
File: KnzueRgruFkbsTXdv7vulMHfQIc.mft (raw, json)
Hash identifier: kWGT2YYD75u3k+Ba4VXufRwi0bn46C+O3RsOZOUGAjY=
Subject key identifier: 3D:D3:49:45:85:39:CC:EB:1D:7E:C7:AF:F5:E2:85:13:AC:E8:B3:29
Authority key identifier: 2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87
Certificate issuer: /CN=F366CE6FAF/serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
Certificate serial: 031D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
Manifest number: 0314
Signing time: Wed 05 Nov 2025 04:00:24 +0000
Manifest this update: Wed 05 Nov 2025 04:00:24 +0000
Manifest next update: Fri 07 Nov 2025 04:00:24 +0000
Files and hashes: 1: KnzueRgruFkbsTXdv7vulMHfQIc.crl (hash: xi3eMyXEM8qYOiFpjFQNA0IW9kgdyzXuEYof2+QL9yk=)
2: 1A85425E69BB11EEBF5E904C4AD9E6FC.roa (hash: Kx/Y8dEbUYeqoToY5LpNSdsXIlBKib23+2DqdNa43/Y=)
3: FD189F0E69BA11EEBE81314C4AD9E6FC.roa (hash: UK6i2dFbIWYL9h4T/dpZ4yF8qA519gysmxncwqhjDNc=)
4: E44337C869BA11EE88CB094C4AD9E6FC.roa (hash: 1d8FtYAZsHDPTXDngJ49htpRva8POmc7nirQyWgiDXo=)
5: 3BB28D0269BA11EEABA4ED494AD9E6FC.roa (hash: Q1XgZ9ZmDeVtE4gxia+GOYWXfxLUPO9DALH0Nrtl+eg=)
6: B8B5DACA69BA11EEBD303C4B4AD9E6FC.roa (hash: uoqftiTs2TQ3rEVnLUYDWPuBL54Tw5Qh6vFz0fe7JV4=)
7: 98FDCD4669BA11EE95130C4B4AD9E6FC.roa (hash: V8tXop4xNSLK7NTMuObTNFw9mcHKdpwbwIJqeSi9teo=)
8: 6399788A69BA11EE9D71534A4AD9E6FC.roa (hash: kaAHuzndBPzeMjc2nNN3ZcTB7Ew41AHipGqkh1wKLvg=)
9: C7D92E1869B911EE953F70484AD9E6FC.roa (hash: SdAbuipwR7EHxw/Hbwbw2PDVH2wv4MuQ83A/IxBI9GQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl
rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 797 (0x31d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366CE6FAF, serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
Validity
Not Before: Nov 5 04:00:24 2025 GMT
Not After : Nov 7 04:00:24 2025 GMT
Subject: CN=690acbd8-7649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:1a:32:c5:ca:51:9b:05:6f:89:24:e0:aa:
78:c8:b6:d7:14:45:dd:99:fe:e0:a8:e6:51:67:49:
b8:91:7c:81:3e:76:ea:2a:56:e7:54:27:d0:3f:ec:
48:18:97:6b:08:7c:57:34:8b:62:2d:af:1d:ef:fc:
aa:09:6a:07:50:e5:de:c9:9b:fb:39:8e:dd:be:06:
6b:a9:5b:73:1d:b6:d3:4c:fd:63:cb:25:bd:91:63:
f3:ca:8e:9d:11:b2:97:3d:01:89:a7:d8:9d:1e:c7:
56:3f:1d:51:e9:87:e4:1d:36:aa:04:7b:f9:4e:76:
7f:8c:5c:5a:c5:f0:25:a8:f0:52:cb:48:4b:d5:7e:
49:a0:45:9b:59:7b:61:f0:89:1d:5c:1e:69:28:d8:
a6:00:2a:5d:d3:7d:1d:31:b2:ed:d2:ed:81:aa:94:
13:23:1b:b2:34:f5:14:4e:e5:c0:68:4a:f6:ac:98:
d8:46:cf:4b:b0:5b:1c:0a:35:0f:7a:bd:d0:26:0f:
50:82:cf:08:c2:1f:7e:a9:35:bb:69:cd:14:d3:94:
3d:16:b4:f5:a6:9d:48:03:4b:d4:7e:c0:e4:d2:63:
15:fd:67:47:0d:ae:90:12:77:9e:ca:f6:a5:c8:de:
74:8d:cd:50:8e:49:bc:cb:35:29:96:db:21:70:bd:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D3:49:45:85:39:CC:EB:1D:7E:C7:AF:F5:E2:85:13:AC:E8:B3:29
X509v3 Authority Key Identifier:
keyid:2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:2e:b6:1f:6b:c4:4b:3b:27:e4:62:c5:54:14:d1:b0:2a:49:
6d:18:09:c2:0c:0c:7f:13:7e:5b:c2:ca:64:36:3b:2a:42:7a:
ff:42:ac:67:47:53:b7:5f:95:43:e5:ca:fa:76:a8:09:8b:bb:
15:2c:ca:e6:91:60:ef:5a:2c:ab:52:ec:4d:40:46:c5:e4:1d:
7a:51:9e:68:ce:79:e5:13:cc:8e:7b:a0:d3:e9:e2:f6:8d:dd:
74:0f:90:6d:82:38:f7:71:a7:af:50:71:89:5a:2b:84:4f:57:
8a:dc:1a:23:c2:1e:28:08:2a:a3:f4:b5:1d:13:fe:64:17:ea:
bc:ed:4d:29:c9:13:33:6e:8d:0f:21:a6:c2:4c:aa:02:82:15:
69:46:75:6f:c9:97:d3:e0:98:0d:11:4f:b8:8f:42:91:18:b1:
dd:d1:42:04:c2:44:00:1c:60:98:95:22:52:56:08:49:2a:cc:
7e:4d:c8:e9:06:4a:bc:2d:a9:5f:4b:40:1c:ac:39:0b:a2:f2:
48:d8:f6:54:f8:8d:28:e7:bb:55:43:51:8f:d6:ce:89:6a:75:
3c:83:44:a7:71:1e:0d:5e:f9:d5:26:f9:07:6a:fb:91:98:49:
22:4a:e9:6d:01:0a:c5:76:85:7a:e5:7c:e7:cf:7c:2b:e7:e1:
58:9f:0c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:20:33 2025 by rpki-client