
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
File: S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft (raw, json)
Hash identifier: RzHKTe7AsGaT+H3N5le0M9O6tUN3+9MKXyhWBKAhAsQ=
Subject key identifier: E6:37:55:C1:D8:D4:6A:5C:75:3D:84:78:C3:38:B7:64:DE:CB:31:FD
Authority key identifier: 4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70
Certificate issuer: /CN=F36A7021AF/serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70
Certificate serial: 02FA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
Manifest number: 02EF
Signing time: Fri 17 Apr 2026 04:08:53 +0000
Manifest this update: Fri 17 Apr 2026 04:08:52 +0000
Manifest next update: Sun 19 Apr 2026 04:08:52 +0000
Files and hashes: 1: S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl (hash: uOuq6LZAbH/+9b/Hu1NH6CbR0w/PG6+F+JrZCPL5VnQ=)
2: 13E45E1C0E8911EF82A4F35A017001B1.roa (hash: eSu/uNHefvRDyXuPd6bFN5AOugU7elsPo3xlxIjj8Jg=)
3: 8A38C304166411EFB6DD9865017001B1.roa (hash: BNl8LzAAIi2V4u4Uq6J4OERouFI7xdVKsG2qa+DYXuM=)
4: 5386CFDE0B8A11EF94113C6D017001B1.roa (hash: +ksSk336SAPxQuepQDqlYfI3yCwLjxok4/1qF910PT0=)
5: 67A273EE166411EFBD7C3965017001B1.roa (hash: XYlnou7kQfD138NpOpxfEa0ALGHIsAR97sWZnC83Ikk=)
6: 2342ECF6166411EF86A28464017001B1.roa (hash: LAeP18nBFk8e55lig13p1FU7erjKKZ2bUOy7MssyCfI=)
7: 10F75FE0166511EF9BA89F6A017001B1.roa (hash: tQ6IcNtYg4Q1dSfQDi4FIUeQKLa90qMyIm8jTAnmXuE=)
8: C37E4A0E166311EFB9A5E45F017001B1.roa (hash: Qp36Juuigfj3IghvTSmzrtpde3+TFB8XRGmUObCG6Jw=)
9: 258EC7AC02E911EF84DA781F017001B1.roa (hash: MKLHz01B1hcRnrm1BW8ZdbgoDIWCXXjJPB+3zMRkn5k=)
10: 45A131960E8911EFB58ADB5E017001B1.roa (hash: h14yox0jQvTPprZRCXkBDOwPFxmyJDOyS+ltHOkYJCY=)
11: ED324F4E166311EF80A74E60017001B1.roa (hash: yLMrRx31o9f3857chkGq2HGPGPmxnmeZmw24iYDHkdE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 04:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 762 (0x2fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A7021AF, serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70
Validity
Not Before: Apr 17 04:08:52 2026 GMT
Not After : Apr 19 04:08:52 2026 GMT
Subject: CN=69e1b255-0354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:37:c3:47:2b:28:eb:80:39:97:99:d9:ac:ec:
d5:37:e9:7f:4c:01:36:9b:20:9d:33:c0:6b:7b:0c:
33:62:cd:f4:64:2a:f5:53:c3:0d:9c:9d:ed:59:73:
e7:7c:84:fe:6a:45:8d:01:79:0f:1d:7d:30:bd:ce:
3a:b5:8d:f9:3c:30:85:ed:25:de:1e:7d:08:23:e7:
22:fc:49:1f:1a:8c:1b:21:f9:c0:46:c1:e0:27:af:
4d:6b:5b:46:8d:6e:1f:04:92:e7:f6:05:8d:4a:0f:
91:f9:35:a5:8b:8a:79:88:ea:d6:1e:9c:bb:c8:10:
ac:10:f8:91:9c:91:6c:05:7a:90:e0:12:e9:5e:3f:
59:f1:65:78:5f:e9:fa:a1:af:ec:04:01:5f:af:47:
0e:4a:e1:f4:7a:45:d6:bf:a1:8d:8c:af:7e:24:f0:
70:9d:4c:8c:05:17:2c:df:ef:e6:36:61:79:80:4e:
02:64:22:c0:73:b9:5f:17:ee:9c:f4:96:53:30:59:
7a:fb:e3:12:9b:5e:8d:2b:27:f1:de:22:76:46:fc:
95:39:84:a7:30:8e:ce:b3:87:f2:fa:b7:6f:50:40:
70:43:5f:4e:20:0b:b7:bc:5a:b9:ff:8a:b9:1e:6d:
1f:47:3b:99:92:e7:84:29:1c:b5:4b:9a:d1:1f:87:
9e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:37:55:C1:D8:D4:6A:5C:75:3D:84:78:C3:38:B7:64:DE:CB:31:FD
X509v3 Authority Key Identifier:
keyid:4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:83:82:ad:73:b7:15:41:60:a6:b7:e3:3b:c9:02:8a:b4:ef:
d3:6e:fa:a8:4a:86:9d:7c:0f:df:56:db:87:9e:54:76:40:9c:
85:06:96:dc:1b:22:4e:34:20:15:8e:02:a2:ea:c3:9a:57:b9:
90:98:90:1a:48:5e:2b:69:b7:1a:86:1e:f9:a2:4f:77:90:49:
65:c9:49:c6:b0:a2:a6:8d:5a:27:3e:6a:d7:1e:a1:0f:d7:49:
e6:24:6d:f2:2c:10:3e:07:70:39:b1:fe:87:76:83:fe:f5:15:
45:b2:93:ef:64:c0:17:c0:d5:53:a1:fc:22:4a:13:f0:70:df:
97:f7:27:3c:54:68:7c:47:fa:0b:69:01:c4:f7:19:14:d5:1e:
6d:f8:26:61:3b:19:8f:c3:1c:4b:b4:f2:09:c0:55:74:40:df:
9c:3a:da:f5:d6:5d:32:1e:ba:e2:8f:d2:07:ad:fc:fb:cb:f0:
b9:b9:c6:71:28:24:17:51:16:47:ea:e3:d3:b0:57:c4:2f:b2:
54:b3:16:08:0d:1d:cf:b3:0f:16:83:d4:43:02:68:c4:2a:78:
c3:51:7b:3a:bb:01:40:cf:63:ac:04:6d:33:2d:b1:8f:dc:f0:
68:ed:24:41:67:d1:9c:ce:df:c5:b9:1a:3b:8a:3c:3f:22:73:
7a:66:7b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:07:55 2026 by rpki-client