
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
File: kFAlcktjykllnsFAWPqwwTHFDp8.mft (raw, json)
Hash identifier: PbJH7a+2rP24/7KGqbFmeUG6MLCmGzFT9CViJTCdOT4=
Subject key identifier: 2F:53:EC:3A:4E:B5:70:3D:C4:8A:FF:B6:B4:C8:98:B4:AE:F1:D4:45
Authority key identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
Certificate issuer: /CN=F367CC68AF/serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Certificate serial: 6E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
Manifest number: 63
Signing time: Sun 01 Mar 2026 03:35:59 +0000
Manifest this update: Sun 01 Mar 2026 03:35:58 +0000
Manifest next update: Tue 03 Mar 2026 03:35:58 +0000
Files and hashes: 1: kFAlcktjykllnsFAWPqwwTHFDp8.crl (hash: EVCQVM+B0SkOarEzxAqQV/0AsTLKgROwf1qLuQFcsdo=)
2: 65FE1EFAD60F11F0B34D61F1DAE4EC9C.roa (hash: mHmRtPN3nZyRtaKXk1NyFAMoXJCcMKBcFKPMe58mtiY=)
3: 7FC14BC8D60F11F0939384F1DAE4EC9C.roa (hash: UWIFnq0Lrxsq+X5E3Jj5o9t7xwd79DXmyhte1Zg7m98=)
4: 5F36C9FED43A11F087C1DB7BDAE4EC9C.roa (hash: 4Qs9L5d+Awp2J42sO92B4p+sTgRxFXnSs6/Y3boWpeI=)
5: 12BB6CB0D61011F080EE71F5DAE4EC9C.roa (hash: jieQwbNjbO9s2qsCMK6/pp01R2MtwreNxzIjr89AhWs=)
6: A77BACE0D60E11F0A525F0ECDAE4EC9C.roa (hash: WTe1kO+YXrIxbOoIVpdaqpCDc9gvbrr/Ve7XA6zdn5w=)
7: C09D7446D60F11F0929B8FF3DAE4EC9C.roa (hash: jxUAEr+gL2A5pYodyrShkYHLF8BEr2fg48HKO/LfZok=)
8: F20A2EE8D60F11F0A4B15CF5DAE4EC9C.roa (hash: OwRd4G+mOpbXOMIkBo/pXf/BF2+Cvu67XOd6VreanjU=)
9: 295EF6E4D61011F099E8CAF5DAE4EC9C.roa (hash: rYes370ZUBvIJkRR4ObdZvVs20GYj/AIYKpkc3M+O8c=)
10: 462E5B98D61011F09797F9F5DAE4EC9C.roa (hash: OuOErrsFiqhdqJPzGVtN61HMOsmFGKM1fy11PY2D+1E=)
11: A814A5BED61111F0B21B3C80DAE4EC9C.roa (hash: awM7RQaOv0f+MQEh7zrBLEQLCpOGervbj3ug5CYTW4A=)
12: 9ED17FD8D60F11F0907EC1F1DAE4EC9C.roa (hash: PlomXlfc2/H7NcFtazpjEv+QjpLM7jasTSrZvSQvHKQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CC68AF, serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Validity
Not Before: Mar 1 03:35:58 2026 GMT
Not After : Mar 3 03:35:58 2026 GMT
Subject: CN=69a3b41f-6ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:6b:75:27:04:dc:68:8b:6e:e9:36:12:8d:
5f:6a:b8:b0:0d:11:c9:b7:1c:12:a9:9e:a7:78:7e:
a3:90:1a:41:ee:9f:ba:9f:aa:e3:4b:5f:6d:0d:2d:
f4:a7:90:63:b3:26:37:05:06:ae:f1:04:f8:22:43:
a5:b5:37:21:30:90:42:72:4e:d1:5e:6c:6d:9e:c0:
ae:b3:47:a9:96:62:98:de:cf:fe:46:fa:f2:df:cd:
ba:28:0c:4d:86:d8:9f:71:29:02:c4:be:08:58:f2:
19:6f:08:c9:3a:c7:92:e5:7c:cf:b4:aa:37:8f:65:
00:52:10:5b:00:cb:a0:77:e2:85:72:0e:47:bb:3c:
84:58:3a:c2:61:9c:02:83:8b:34:f8:b5:36:f7:a8:
e7:94:51:05:8b:56:d7:e7:df:35:1b:89:3b:2c:5e:
57:3c:b1:da:5e:06:2b:20:c7:76:b2:b2:2c:a7:5a:
3c:13:90:56:2f:d2:b6:73:03:e1:8a:3d:5a:89:f2:
25:1f:38:59:e4:5a:c3:1a:18:ce:b9:26:b5:0c:66:
9c:0b:17:15:19:fb:6b:a0:be:7b:7f:41:ac:c3:8b:
88:57:75:c4:40:16:c2:21:5f:f9:99:e2:d3:fd:b1:
d6:7e:90:11:1d:83:13:27:bf:41:cf:82:ec:14:18:
e8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:53:EC:3A:4E:B5:70:3D:C4:8A:FF:B6:B4:C8:98:B4:AE:F1:D4:45
X509v3 Authority Key Identifier:
keyid:90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:28:dc:38:f2:c8:3a:86:75:b9:ad:d0:6c:3e:2b:b1:cb:95:
5e:8b:56:ca:53:9c:67:ad:21:69:2f:94:f3:ea:9e:d5:a4:11:
2d:46:a5:03:2f:f4:f5:f8:b4:1f:0e:58:15:d4:c2:c4:a1:1b:
07:6a:93:4c:d6:f9:ca:0e:98:1c:05:db:5c:d6:36:d6:0b:f6:
31:a3:5f:18:23:00:24:aa:93:45:fc:34:8d:87:7c:1d:f1:70:
cc:d8:f2:4b:ba:c8:1e:4a:8f:cc:e4:3b:63:e3:06:2e:07:22:
62:e3:0d:ef:2a:06:60:6e:ec:31:1c:51:df:fc:e8:d9:62:f5:
52:bb:69:91:b0:69:e5:0e:bb:55:99:53:da:47:e7:1b:6f:2e:
89:87:d9:a1:57:59:b0:0f:45:bc:37:cd:20:17:90:10:13:c2:
20:a6:36:c0:dc:ca:21:53:d8:4a:52:5d:2e:4f:36:80:c0:ba:
88:68:13:26:41:bb:c1:b2:1c:10:38:39:a0:82:0a:30:05:f2:
29:93:f2:d8:80:77:22:95:8a:21:63:aa:13:d7:72:ce:38:d0:
f7:f3:8c:e6:b3:73:e4:1e:20:31:5f:db:ed:4b:02:c0:71:0d:
f1:8b:ae:18:f9:3a:1a:40:d7:78:0b:62:ae:c8:da:ae:53:bf:
81:0a:38:0d
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBbjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
Q0M2OEFGMTEwLwYDVQQFEyg5MDUwMjU3MjRCNjNDQTQ5NjU5RUMxNDA1OEZBQjBD
MTMxQzUwRTlGMB4XDTI2MDMwMTAzMzU1OFoXDTI2MDMwMzAzMzU1OFowGDEWMBQG
A1UEAxMNNjlhM2I0MWYtNmZmNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANgOa3UnBNxoi27pNhKNX2q4sA0RybccEqmep3h+o5AaQe6fup+q40tfbQ0t
9KeQY7MmNwUGrvEE+CJDpbU3ITCQQnJO0V5sbZ7ArrNHqZZimN7P/kb68t/NuigM
TYbYn3EpAsS+CFjyGW8IyTrHkuV8z7SqN49lAFIQWwDLoHfihXIOR7s8hFg6wmGc
AoOLNPi1Nveo55RRBYtW1+ffNRuJOyxeVzyx2l4GKyDHdrKyLKdaPBOQVi/StnMD
4Yo9WonyJR84WeRawxoYzrkmtQxmnAsXFRn7a6C+e39BrMOLiFd1xEAWwiFf+Zni
0/2x1n6QER2DEye/Qc+C7BQY6KkCAwEAAaOCArgwggK0MB0GA1UdDgQWBBQvU+w6
TrVwPcSK/7a0yJi0rvHURTAfBgNVHSMEGDAWgBSQUCVyS2PKSWWewUBY+rDBMcUO
nzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0NDNjgvNTI3NDkxRkNEMzVEMTFGMDg1ODE3OTk3REFFNEVDOUMva0ZBbGNr
dGp5a2xsbnNGQVdQcXd3VEhGRHA4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMva0ZBbGNrdGp5a2xsbnNGQVdQcXd3VEhGRHA4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY3Q0M2OC81Mjc0OTFGQ0QzNUQxMUYwODU4MTc5OTdEQUU0
RUM5Qy9rRkFsY2t0anlrbGxuc0ZBV1Bxd3dUSEZEcDgubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAGso3DjyyDqGdbmt0Gw+K7HLlV6LVspT
nGetIWkvlPPqntWkES1GpQMv9PX4tB8OWBXUwsShGwdqk0zW+coOmBwF21zWNtYL
9jGjXxgjACSqk0X8NI2HfB3xcMzY8ku6yB5Kj8zkO2PjBi4HImLjDe8qBmBu7DEc
Ud/86Nli9VK7aZGwaeUOu1WZU9pH5xtvLomH2aFXWbAPRbw3zSAXkBATwiCmNsDc
yiFT2EpSXS5PNoDAuohoEyZBu8GyHBA4OaCCCjAF8imT8tiAdyKViiFjqhPXcs44
0PfzjOazc+QeIDFf2+1LAsBxDfGLrhj5OhpA13gLYq7I2q5Tv4EKOA0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:53 2026 by rpki-client