
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
File: kFAlcktjykllnsFAWPqwwTHFDp8.mft (raw, json)
Hash identifier: M8s0x8m8li8pe07u6YJpdkKjVgv87rT3lDK257GICtM=
Subject key identifier: F7:7B:E7:83:76:41:5F:6A:A2:6C:4A:55:74:08:A6:A2:4A:66:C6:3B
Authority key identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
Certificate issuer: /CN=F367CC68AF/serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Certificate serial: 9F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
Manifest number: 94
Signing time: Sun 19 Apr 2026 05:16:41 +0000
Manifest this update: Sun 19 Apr 2026 05:16:40 +0000
Manifest next update: Tue 21 Apr 2026 05:16:40 +0000
Files and hashes: 1: kFAlcktjykllnsFAWPqwwTHFDp8.crl (hash: TzkLUp8YY3b9Am5SNP33qHfxtXwrNGpbwx/eu4wdob4=)
2: 65FE1EFAD60F11F0B34D61F1DAE4EC9C.roa (hash: mHmRtPN3nZyRtaKXk1NyFAMoXJCcMKBcFKPMe58mtiY=)
3: 7FC14BC8D60F11F0939384F1DAE4EC9C.roa (hash: UWIFnq0Lrxsq+X5E3Jj5o9t7xwd79DXmyhte1Zg7m98=)
4: 5F36C9FED43A11F087C1DB7BDAE4EC9C.roa (hash: 4Qs9L5d+Awp2J42sO92B4p+sTgRxFXnSs6/Y3boWpeI=)
5: 12BB6CB0D61011F080EE71F5DAE4EC9C.roa (hash: jieQwbNjbO9s2qsCMK6/pp01R2MtwreNxzIjr89AhWs=)
6: A77BACE0D60E11F0A525F0ECDAE4EC9C.roa (hash: WTe1kO+YXrIxbOoIVpdaqpCDc9gvbrr/Ve7XA6zdn5w=)
7: C09D7446D60F11F0929B8FF3DAE4EC9C.roa (hash: jxUAEr+gL2A5pYodyrShkYHLF8BEr2fg48HKO/LfZok=)
8: F20A2EE8D60F11F0A4B15CF5DAE4EC9C.roa (hash: OwRd4G+mOpbXOMIkBo/pXf/BF2+Cvu67XOd6VreanjU=)
9: 295EF6E4D61011F099E8CAF5DAE4EC9C.roa (hash: rYes370ZUBvIJkRR4ObdZvVs20GYj/AIYKpkc3M+O8c=)
10: 462E5B98D61011F09797F9F5DAE4EC9C.roa (hash: OuOErrsFiqhdqJPzGVtN61HMOsmFGKM1fy11PY2D+1E=)
11: A814A5BED61111F0B21B3C80DAE4EC9C.roa (hash: awM7RQaOv0f+MQEh7zrBLEQLCpOGervbj3ug5CYTW4A=)
12: 9ED17FD8D60F11F0907EC1F1DAE4EC9C.roa (hash: PlomXlfc2/H7NcFtazpjEv+QjpLM7jasTSrZvSQvHKQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Apr 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CC68AF, serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Validity
Not Before: Apr 19 05:16:40 2026 GMT
Not After : Apr 21 05:16:40 2026 GMT
Subject: CN=69e46539-66e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:94:fb:b4:b0:d7:9e:2e:05:7f:cd:68:46:
48:0d:6b:8f:00:b9:e5:6b:43:3a:69:2d:05:d0:f9:
ea:04:18:2e:ca:1f:ef:cc:be:97:d2:ab:17:eb:c9:
ff:21:b7:29:d7:cf:b4:55:82:59:07:13:a2:be:cd:
f3:ae:48:1d:42:45:57:80:dc:c9:a8:e6:f2:54:ea:
52:70:82:20:25:5b:e8:91:21:fa:93:69:f0:a2:a5:
04:27:a8:c8:99:95:e6:b5:ce:18:ac:b0:aa:af:30:
05:0e:45:ee:60:c8:77:96:e6:18:f0:07:6f:9d:95:
79:b3:1c:65:db:33:1d:b6:9f:5e:51:7e:91:c8:c0:
eb:61:df:99:12:7f:a8:0d:24:22:3f:44:72:b3:73:
96:a7:84:b1:da:79:45:b5:6a:d6:bc:6d:c6:a6:96:
b5:09:18:00:7f:eb:28:55:4b:0e:8a:4c:db:57:fa:
aa:0b:ef:23:26:bd:ab:b3:a2:11:fe:be:94:c0:9b:
7d:36:4a:f7:d3:f6:84:57:4b:25:4c:04:a0:a5:5c:
a4:3b:da:c1:b3:54:70:f6:9d:98:5d:b2:b0:62:ea:
d9:96:34:ad:b1:63:16:bb:76:c3:cf:3d:c2:79:60:
75:17:01:b6:23:cc:56:12:7c:db:fa:73:d2:31:d1:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7B:E7:83:76:41:5F:6A:A2:6C:4A:55:74:08:A6:A2:4A:66:C6:3B
X509v3 Authority Key Identifier:
keyid:90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9d:01:ab:d8:75:f2:32:41:13:0a:2a:6e:ec:15:d4:cb:6f:
e7:9d:57:43:4d:3c:17:f9:fd:37:b9:43:14:26:49:9e:cb:7d:
ea:35:af:0a:4c:d0:99:16:76:d0:0c:07:9b:11:df:5d:83:07:
0c:d1:34:6c:11:0d:ee:be:9a:04:84:74:1f:8d:01:91:e2:c3:
35:85:8b:64:1d:20:7b:2a:1f:9e:6e:05:5d:a3:92:79:ef:5d:
28:32:6e:bc:93:dc:72:7d:0e:e9:bb:55:d0:aa:bd:2f:d6:35:
0a:12:6a:32:d2:a0:11:a4:eb:7a:dd:5a:69:30:d5:dc:4f:87:
21:28:fc:12:78:7a:ac:92:26:4d:94:46:5e:7c:09:c9:72:85:
9f:78:91:2e:b1:d5:2c:ce:a3:ef:5e:59:93:97:8f:16:33:06:
a2:41:77:b9:55:db:0f:d2:62:61:2d:5d:ee:06:d4:d9:44:63:
86:be:7e:3d:7d:c3:6c:47:fd:54:36:f1:87:a7:d6:92:89:20:
9d:af:49:ed:11:8c:ee:2d:24:2d:b8:bd:be:1b:15:8d:cf:45:
c3:31:00:af:ea:62:5d:c0:14:36:63:cf:4b:bf:55:8a:f4:e0:
68:59:59:c3:59:cb:73:c6:39:b4:52:b6:f2:bb:ef:91:0f:39:
bb:a6:ca:dc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0NDNjhBRjExMC8GA1UEBRMoOTA1MDI1NzI0QjYzQ0E0OTY1OUVDMTQwNThGQUIw
QzEzMUM1MEU5RjAeFw0yNjA0MTkwNTE2NDBaFw0yNjA0MjEwNTE2NDBaMBgxFjAU
BgNVBAMTDTY5ZTQ2NTM5LTY2ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8lpT7tLDXni4Ff81oRkgNa48AueVrQzppLQXQ+eoEGC7KH+/MvpfSqxfr
yf8htynXz7RVglkHE6K+zfOuSB1CRVeA3Mmo5vJU6lJwgiAlW+iRIfqTafCipQQn
qMiZlea1zhissKqvMAUORe5gyHeW5hjwB2+dlXmzHGXbMx22n15RfpHIwOth35kS
f6gNJCI/RHKzc5anhLHaeUW1ata8bcamlrUJGAB/6yhVSw6KTNtX+qoL7yMmvauz
ohH+vpTAm302SvfT9oRXSyVMBKClXKQ72sGzVHD2nZhdsrBi6tmWNK2xYxa7dsPP
PcJ5YHUXAbYjzFYSfNv6c9Ix0XNxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU93vn
g3ZBX2qibEpVdAimokpmxjswHwYDVR0jBBgwFoAUkFAlcktjykllnsFAWPqwwTHF
Dp8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdDQzY4LzUyNzQ5MUZDRDM1RDExRjA4NTgxNzk5N0RBRTRFQzlDL2tGQWxj
a3RqeWtsbG5zRkFXUHF3d1RIRkRwOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tGQWxja3RqeWtsbG5zRkFXUHF3d1RIRkRwOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0NDNjgvNTI3NDkxRkNEMzVEMTFGMDg1ODE3OTk3REFF
NEVDOUMva0ZBbGNrdGp5a2xsbnNGQVdQcXd3VEhGRHA4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPnQGr2HXyMkETCipu7BXUy2/nnVdD
TTwX+f03uUMUJkmey33qNa8KTNCZFnbQDAebEd9dgwcM0TRsEQ3uvpoEhHQfjQGR
4sM1hYtkHSB7Kh+ebgVdo5J5710oMm68k9xyfQ7pu1XQqr0v1jUKEmoy0qARpOt6
3VppMNXcT4chKPwSeHqskiZNlEZefAnJcoWfeJEusdUszqPvXlmTl48WMwaiQXe5
VdsP0mJhLV3uBtTZRGOGvn49fcNsR/1UNvGHp9aSiSCdr0ntEYzuLSQtuL2+GxWN
z0XDMQCv6mJdwBQ2Y89Lv1WK9OBoWVnDWctzxjm0Urbyu++RDzm7psrc
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:21 2026 by rpki-client