
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
File: SoPzGxsGBMptC3KkU9qj61h7TII.mft (raw, json)
Hash identifier: 2Glzkhx+03J/74cTptTZnrNFkKzSrfs1p2QFk9aauUs=
Subject key identifier: AA:EA:40:07:58:A3:D2:2A:B6:C2:A2:D0:2F:06:C7:44:D1:E5:E1:2C
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Certificate issuer: /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial: 03F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
Manifest number: 03E5
Signing time: Tue 04 Nov 2025 04:41:31 +0000
Manifest this update: Tue 04 Nov 2025 04:41:30 +0000
Manifest next update: Thu 06 Nov 2025 04:41:30 +0000
Files and hashes: 1: SoPzGxsGBMptC3KkU9qj61h7TII.crl (hash: GvEa2MzCMbgvQA3MeGrOafjrZiWjTBF0+Sw+3bY2KYo=)
2: C644833AEE7111EE86F7F361775412E6.roa (hash: YgdlYAvq9L3YlpIV33voCNPfR5sCeCWFkjxpZfRsE/k=)
3: 7B89F0F65C1011F097764BA7DAE4EC9C.roa (hash: eGy/v5dJ9Sg7LBFixJArYusJNOZkmFriL3Cy5EJmVsc=)
4: BFD118C27C3E11F0A02173AEDAE4EC9C.roa (hash: E8rOx5Kz5JNVd/9IEaiBcjxCcyJDlnKMUqqptEDdwRw=)
5: 42CC1EC00B7611EEA5D28A444AD9E6FC.roa (hash: hsH3WbP2I/ts2EY2aQeTrcaXJgp89zEB64yilwHc5pg=)
6: 1E00E01A052911EE84BBD2454AD9E6FC.roa (hash: sJsPXhS2u3JarGDtOh1UZa0tPJmz8vwB7/YeLKri/dk=)
7: F8481206047B11EE91F2EF354AD9E6FC.roa (hash: jtUAjy0+9QV2iQ02jzkoPCkRiaIb/F60j3I68U9pgH4=)
8: F65930865B2911F0A6F411CCDAE4EC9C.roa (hash: zlBIS1j6PkXW4nIJqeYYZE1QxvGn2R6vJr3qJUI1Apc=)
9: C210ED2E064611F094E66494762E951A.roa (hash: Gw9d4UydYI1TKn6YtgmxyrXffZXD7vcLeB5cryG7IG4=)
10: F4E7AB82052811EE94115E454AD9E6FC.roa (hash: 0f6Udr5nVgdqIgPgxaXYb0TifWritIk3wQmsNXYsjss=)
11: 1587E6CCEE7111EEAAFBB25C775412E6.roa (hash: zasoVhr4ZDA3BPJ+ug5ooyH3/rY2lwS6n6p8BUEgx2w=)
12: 4F0B564AF51511EEB208C151775412E6.roa (hash: XNyDHYdBwPvc7NbnPS7pTjwqkoohEdJw312l57VSDB8=)
13: 4A7830A0D18B11EFAB9E6B88762E951A.roa (hash: xV745XWxYsFhNII926E/fN4gSuSPSdyN3viLNfdZy9M=)
14: 31CFB30C052C11EEAC0EDC4E4AD9E6FC.roa (hash: 707c2EgzG32Mlw18CbzTHauUb9G8+7v2J+8ka2UNIbA=)
15: 506B37B0FD0A11EEA3B5DB34017001B1.roa (hash: 12EkqcvUqaX3EcpZliJ64g6Wrfs7WAZ3LR6j5D262RI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1012 (0x3f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Validity
Not Before: Nov 4 04:41:30 2025 GMT
Not After : Nov 6 04:41:30 2025 GMT
Subject: CN=690983fb-4640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a4:43:81:6f:28:14:02:cd:fd:16:4a:98:0c:
96:8b:fa:5d:d4:50:f4:0a:3f:14:a1:cf:c8:d6:29:
79:52:29:3a:0c:85:3e:f4:2a:85:5f:48:3c:98:f0:
0a:5a:3c:d6:a9:9c:33:a0:2f:e9:10:97:74:79:62:
8c:ba:70:4b:4f:90:0b:61:08:14:b7:11:78:b6:1c:
89:af:05:53:76:89:3c:f8:97:42:43:66:20:de:ed:
27:ed:b1:18:f6:2a:d3:90:26:91:12:49:a5:a8:f1:
b2:77:72:bd:ed:96:79:0c:24:99:f7:e3:50:a3:e8:
eb:07:0f:0d:f0:a1:f7:6e:67:a8:03:ed:96:b1:a8:
a9:02:28:11:2b:51:03:49:17:07:45:ca:de:06:d9:
7a:56:de:50:f8:c1:ce:98:61:56:ce:49:55:7f:59:
8f:45:33:f6:2a:93:a0:cd:32:f8:d1:53:f7:cd:7d:
c0:02:a3:e0:d3:57:7a:bb:9e:fd:66:03:4c:07:80:
f4:4c:fc:af:98:6e:ae:ce:66:93:20:da:f1:0e:f4:
63:73:33:86:53:ff:5e:91:d6:0a:95:ae:65:01:7b:
17:2a:44:4d:c0:ac:26:be:b2:82:d7:90:f2:93:99:
55:6e:d2:ae:95:f2:df:91:e4:ac:cf:17:7c:28:cb:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EA:40:07:58:A3:D2:2A:B6:C2:A2:D0:2F:06:C7:44:D1:E5:E1:2C
X509v3 Authority Key Identifier:
keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:81:28:a5:53:05:73:53:4b:8b:b9:29:72:87:6e:11:8e:a5:
31:08:81:93:42:0d:ac:e2:25:a2:9b:ad:3f:73:a6:e9:bb:92:
4d:d4:8e:62:e1:f8:1b:d1:f4:1a:2f:c1:e5:49:07:c2:55:0f:
3f:a3:8d:47:4d:29:13:6a:5f:69:ce:79:7f:2d:cb:d1:56:1e:
cd:f1:06:7c:8f:78:70:87:40:89:c0:8c:32:8e:15:11:75:8d:
41:ad:82:05:c8:c9:9f:65:dd:b1:46:1a:05:a6:ab:8f:a7:9e:
89:0d:cf:ec:e6:40:0c:50:69:63:d5:2c:f8:c9:dd:b1:cc:ee:
ea:3a:21:61:d4:87:e5:7d:3b:bd:cd:c1:4d:94:b8:31:f5:49:
f7:f4:c4:91:14:55:8e:20:d4:b6:be:17:5f:ea:19:53:f3:ee:
8d:a0:64:00:ef:41:ee:24:5d:35:4a:d0:af:01:56:38:09:8f:
74:eb:70:fc:ec:5d:08:88:82:e7:31:28:35:3f:ef:aa:e8:15:
94:30:3e:75:2f:21:3f:5f:be:bf:e6:6d:9e:23:58:fe:94:6d:
74:58:ee:df:6c:7f:df:52:c8:bd:b2:d3:4c:99:82:3d:eb:a3:
12:f1:2e:6a:b3:ef:18:f6:95:6f:40:58:79:58:79:fd:58:1b:
ab:49:81:b4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA/QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODFFRDBBRjExMC8GA1UEBRMoNEE4M0YzMUIxQjA2MDRDQTZEMEI3MkE0NTNEQUEz
RUI1ODdCNEM4MjAeFw0yNTExMDQwNDQxMzBaFw0yNTExMDYwNDQxMzBaMBgxFjAU
BgNVBAMTDTY5MDk4M2ZiLTQ2NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDpEOBbygUAs39FkqYDJaL+l3UUPQKPxShz8jWKXlSKToMhT70KoVfSDyY
8ApaPNapnDOgL+kQl3R5Yoy6cEtPkAthCBS3EXi2HImvBVN2iTz4l0JDZiDe7Sft
sRj2KtOQJpESSaWo8bJ3cr3tlnkMJJn341Cj6OsHDw3wofduZ6gD7ZaxqKkCKBEr
UQNJFwdFyt4G2XpW3lD4wc6YYVbOSVV/WY9FM/Yqk6DNMvjRU/fNfcACo+DTV3q7
nv1mA0wHgPRM/K+Ybq7OZpMg2vEO9GNzM4ZT/16R1gqVrmUBexcqRE3ArCa+soLX
kPKTmVVu0q6V8t+R5KzPF3woyw73AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUqupA
B1ij0iq2wqLQLwbHRNHl4SwwHwYDVR0jBBgwFoAUSoPzGxsGBMptC3KkU9qj61h7
TIIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgxRUQwLzUyNTFDMDc4Q0UyNDExRURBMDkyRDBBQ0YxMjIyNDY4L1NvUHpH
eHNHQk1wdEMzS2tVOXFqNjFoN1RJSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NvUHpHeHNHQk1wdEMzS2tVOXFqNjFoN1RJSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODFFRDAvNTI1MUMwNzhDRTI0MTFFREEwOTJEMEFDRjEy
MjI0NjgvU29Qekd4c0dCTXB0QzNLa1U5cWo2MWg3VElJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBOgSilUwVzU0uLuSlyh24RjqUxCIGT
Qg2s4iWim60/c6bpu5JN1I5i4fgb0fQaL8HlSQfCVQ8/o41HTSkTal9pznl/LcvR
Vh7N8QZ8j3hwh0CJwIwyjhURdY1BrYIFyMmfZd2xRhoFpquPp56JDc/s5kAMUGlj
1Sz4yd2xzO7qOiFh1IflfTu9zcFNlLgx9Un39MSRFFWOINS2vhdf6hlT8+6NoGQA
70HuJF01StCvAVY4CY9063D87F0IiILnMSg1P++q6BWUMD51LyE/X76/5m2eI1j+
lG10WO7fbH/fUsi9stNMmYI966MS8S5qs+8Y9pVvQFh5WHn9WBurSYG0
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:21:44 2025 by rpki-client