
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
File: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft (raw, json)
Hash identifier: hGDBUXofY8+k34vlLhnFE17+pnVDtUJGfAn9tdwP9hc=
Subject key identifier: BF:49:4F:BD:74:7C:FC:AB:E6:90:8F:53:B2:6C:ED:76:FB:38:8D:F2
Authority key identifier: DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
Certificate issuer: /CN=F369591CRI/serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Certificate serial: 040E
Authority info access: rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
Manifest number: 03FB
Signing time: Wed 05 Nov 2025 03:33:05 +0000
Manifest this update: Wed 05 Nov 2025 03:33:04 +0000
Manifest next update: Fri 07 Nov 2025 03:33:04 +0000
Files and hashes: 1: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl (hash: 9Uktdc7SRmu+G15WkgDRbwPBCqbeyxYhOhc0YpGZrwM=)
2: 82219ECEA8E511F097F863D3DAE4EC9C.roa (hash: bcPInogd3xIR0s3sTN2It6IQWCB3KAgCeLuGiSvLwas=)
3: FEDC02C25C0711F0B890E9F0DAE4EC9C.roa (hash: qe7/Ho3hjXx1p+1X+gIsJxiQFYRX/3+okpR+BwibaKg=)
4: E3C267F25E4F11F0940EFC9BDAE4EC9C.roa (hash: /diZHt8dfDU8ymyLaJDOGusaWBebTUtvPjH5WbW4syU=)
5: 55E86B6260DD11F0A69775B5DAE4EC9C.roa (hash: 3qhuPqbCfVwBZHK72q/87zYpkIKPP1VmeTNuhLAijbk=)
6: 99141D08576111F080D583A2DAE4EC9C.roa (hash: cQTA6aPVu1R9IwPCQ/9eGLXpsOsSHn6GFJCWQdw5Yp0=)
7: C45FFB84A36611F0A3DDA0C5DAE4EC9C.roa (hash: f7+/OwcLs2vETrfnT8wudo6+umbH7FS0gnrek0hKon0=)
8: A8DB4ACE60DD11F0914539B9DAE4EC9C.roa (hash: Si/TX7Gk5wKi7Q8cmheHqqKR3iXrshzEj+Q8MY2UZ+M=)
9: 072D1082576311F088413DABDAE4EC9C.roa (hash: kdbBEJRsB56bxxE6rksSixZh/DLbv8XJMoYIBLPc8/g=)
10: A3FEFCB0577A11F0A98CD3C1DAE4EC9C.roa (hash: qgOiHPxC/Z9pgaIJ8OipsoRNTQGJykYjhiWofc3it3c=)
11: EA8394FEA84011F0A123C6ADDAE4EC9C.roa (hash: BlN6ZCd0jXJwuiZMNu47rtCr+FOtsw3oe++3RgGL1q4=)
12: 93BA4D0E577611F08300D0A7DAE4EC9C.roa (hash: xDzT9tDUOjaY4x+EeMf/Vz+dMgirOycbZAxHbc8lYgU=)
13: FE51ED62582911F0BD53CEBBDAE4EC9C.roa (hash: KhWFDo0vWu06AyFmvRpE1g14Vu+Rmq4RukcLEVcErN4=)
14: D69EE072B2FB11F0B7B245B7DAE4EC9C.roa (hash: qpCOGOVOdGPaWFwLUvwVE5eduGEP3cZDJGPFiGA53VI=)
15: BC741E48575B11F09D18457FDAE4EC9C.roa (hash: V7GQwUcMxp4LbXIcZRBBtPhEVIwEfdLYw7zTv+foDSo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1038 (0x40e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CRI, serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Validity
Not Before: Nov 5 03:33:04 2025 GMT
Not After : Nov 7 03:33:04 2025 GMT
Subject: CN=690ac571-d05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:6b:ba:7a:c1:00:c5:48:43:c6:30:19:b8:
53:ca:fc:2b:16:db:66:8e:02:90:95:6a:eb:fb:0e:
74:8c:de:61:a6:34:5b:02:b6:6c:81:e6:70:b9:4b:
26:76:0c:69:95:4a:d2:2d:c1:c8:66:d3:3d:f9:25:
da:06:2b:f2:9d:6b:30:19:67:7c:d7:b8:1a:99:7e:
a4:23:44:7a:28:ec:bb:55:7b:11:47:84:0d:25:dc:
cc:76:61:ed:2c:16:88:79:83:7e:62:98:f7:18:4a:
c7:e5:8c:25:e1:2f:be:07:5b:50:89:80:85:e9:3c:
3e:be:81:93:31:1c:c1:49:40:7d:11:ce:d3:c7:ce:
cf:63:de:b1:95:3e:83:67:6d:bf:28:9a:44:48:98:
15:95:52:62:a0:70:94:09:c4:26:d0:3e:1b:1d:03:
f9:f4:7a:50:4c:80:74:ae:cd:38:38:ed:bf:40:50:
00:19:b4:3a:2d:66:63:ec:93:c9:24:9d:64:ef:2c:
c9:9e:cf:35:83:2c:22:7f:f6:7b:63:1c:a1:12:c2:
b0:29:de:9e:72:24:c5:d4:bf:73:1a:71:02:bc:d0:
0c:41:22:b7:ee:86:53:70:25:5a:f9:74:c7:08:c3:
81:cb:82:97:0f:9a:c5:68:67:86:15:b7:2a:c4:40:
3f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:49:4F:BD:74:7C:FC:AB:E6:90:8F:53:B2:6C:ED:76:FB:38:8D:F2
X509v3 Authority Key Identifier:
keyid:DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:17:aa:c2:be:89:30:01:5f:ba:b9:3b:f9:be:d8:a5:78:2a:
ec:a1:89:da:b1:63:8a:21:db:3d:ff:27:69:2f:0e:b1:6b:80:
cd:a1:e8:2d:60:f8:f0:20:4b:04:2e:b2:1e:9a:ef:b7:4d:b9:
a7:b4:83:10:9e:01:7a:c3:58:54:58:5d:81:7b:58:5f:68:9a:
3a:46:c6:31:f7:33:f8:7b:74:1a:57:e6:bc:ae:65:19:cb:69:
1e:be:ef:9c:d9:78:37:fc:f3:8c:a3:b1:bb:65:00:17:41:cf:
10:3e:af:d3:79:ed:5f:39:2f:9d:15:f9:24:f2:29:f0:00:3b:
cd:b7:43:8c:33:df:ed:fd:b5:40:da:32:6d:d6:b6:a5:33:d4:
32:5a:a3:13:4c:0b:e7:f8:08:39:bb:74:2a:c6:7b:79:57:fa:
e9:16:70:b8:a0:7b:1e:d6:a4:8a:fd:9f:97:4c:97:73:f7:a9:
c0:2c:03:14:fb:f1:80:bc:d8:f8:89:7f:62:16:c3:86:40:e5:
89:fe:1b:00:41:1e:d6:4b:0f:49:4c:88:f4:3f:59:fa:5e:93:
c1:7f:f7:10:54:19:0c:24:9a:22:28:31:8e:d5:e9:15:88:46:
ed:5e:30:c6:54:d9:48:6b:30:38:f5:98:c4:6f:8b:a7:b6:f8:
16:6c:70:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:31:28 2025 by rpki-client