
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
File: -4Xgjl27Bclbe9Dafl_m_OOYJv8.mft (raw, json)
Hash identifier: rT39gslFYEv5W3zQGMWt0uiC/Imy8GP3XxpW1owffKY=
Subject key identifier: 69:56:62:AC:89:E2:66:1C:26:4F:84:C0:5E:5F:36:98:5F:43:82:B6
Authority key identifier: FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF
Certificate issuer: /CN=F36C2BF2AF/serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF
Certificate serial: 0237
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
Manifest number: 022B
Signing time: Wed 05 Nov 2025 04:33:39 +0000
Manifest this update: Wed 05 Nov 2025 04:33:37 +0000
Manifest next update: Fri 07 Nov 2025 04:33:37 +0000
Files and hashes: 1: -4Xgjl27Bclbe9Dafl_m_OOYJv8.crl (hash: LGf9dUuU/9lxR78bxLzvydWmV2prMeBmOYna5Lmn7t4=)
2: 53E9AF201C4A11EF92B1620D7DDC24C2.roa (hash: KdhlIJ+hQm0D2JssqauHu+bI+aH2TH0/RDTYBo7Rfl4=)
3: 6BD3D72C1C4B11EFA0DF5FE57CDC24C2.roa (hash: kVAT6LvKNfd1TJNrUHJDtuhrBoJ6grfJU6Qzk3woG9A=)
4: 3C9F14321C4911EFAAC969317DDC24C2.roa (hash: /gSe9pWPhZ5Kr8gRd+6yNTm4qcpvwit2QsIwfbhWGVc=)
5: EBFBD6E61C4811EF8DA9FC307DDC24C2.roa (hash: Uo9oJGDvBKqk9WcNSro/GD2IK8co4yKnO+0R+FSe34k=)
6: 08C544981C4811EFBA18A22B7DDC24C2.roa (hash: tqhwIQRYgFOkg1i0m9P867NgozM8wyM/qc2l8ldhExg=)
7: 312C885E1C4A11EF9DE586157DDC24C2.roa (hash: GjHEWzUkDA6tsW5/6kpvZ3CU5zKEBXoesmUsNT+Jflo=)
8: 7E241A021C4811EF8F9DAE2C7DDC24C2.roa (hash: hxre5xYuTBxkwQmVRlBLeiMXMr0AnCvaVpMmejl5uhQ=)
9: FE708AD21C4911EF81BE34EA7CDC24C2.roa (hash: ZiopXrdqLTsU+61ziIshjn2/qWu+FsJbH9OdegqZ2vo=)
10: BF6D84E41C4811EF92649B307DDC24C2.roa (hash: Jbh8WY5UNAzz+osRgcagPYaVf8dyK5RVLpOyRMHMYas=)
11: 8604AD081C4911EF8DFB87357DDC24C2.roa (hash: MNoPychVF0mh+syf/DFmicmi7Wi0XntNJ0aJdW/gDe4=)
12: 440AE6387FC211EFACAB56B8762E951A.roa (hash: Rbkyo5rELKFe+Cn1UL0BmEWDgHbqtqW4Mc1h5Ma1xWM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567 (0x237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C2BF2AF, serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF
Validity
Not Before: Nov 5 04:33:37 2025 GMT
Not After : Nov 7 04:33:37 2025 GMT
Subject: CN=690ad3a3-4346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6e:86:33:94:38:f9:21:4c:4c:85:34:85:b8:
55:bb:78:43:4e:06:a4:81:6b:d5:e2:90:65:64:59:
53:b4:18:8a:f9:3e:e7:3d:05:25:28:32:f8:de:62:
bb:61:a9:d1:90:94:4b:8f:41:e9:c6:cc:0b:58:a6:
af:2b:28:09:51:f4:4e:12:27:9c:b3:da:9a:bf:f9:
6b:36:42:81:26:2c:fa:9e:76:18:64:0f:96:a6:b5:
df:70:cf:2b:d6:cf:e2:2e:83:48:7e:58:5b:38:2a:
2a:88:b4:cf:ed:50:15:6d:fb:bd:c9:57:e1:3e:bc:
42:4f:a7:82:2c:1a:e1:30:89:6a:76:20:0a:fb:b1:
c0:5b:95:f5:46:ed:74:12:df:37:d0:f2:9d:ab:47:
a9:de:ca:ec:4a:d7:14:68:d2:d7:0d:c7:1f:48:a4:
35:5d:f6:33:2a:c4:a6:7c:35:4e:c0:d3:5a:5e:f0:
62:92:51:02:1e:4a:92:13:e0:04:60:a5:7a:e1:d0:
e0:94:c2:7a:21:ba:6e:f4:8b:dc:34:0d:d7:82:b1:
23:1e:53:9d:47:ca:ca:45:87:6a:77:56:e0:c1:b0:
c8:1e:90:e1:d1:9c:06:8b:de:b5:db:01:06:f9:85:
94:2a:87:f0:a6:24:7f:e9:f4:bd:24:3e:bc:6f:8a:
84:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:56:62:AC:89:E2:66:1C:26:4F:84:C0:5E:5F:36:98:5F:43:82:B6
X509v3 Authority Key Identifier:
keyid:FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:67:ac:87:c0:cb:ca:9f:b3:83:3e:27:88:6f:74:2f:fe:8a:
02:23:d8:02:39:3b:f0:b7:d6:f9:0a:cb:f3:77:42:f1:05:42:
78:74:5b:8e:7b:67:75:79:08:7a:a3:14:be:16:5d:ad:93:dd:
44:8c:12:1a:a7:91:3d:9a:f6:5f:76:fa:8d:09:16:4e:8a:dc:
06:e0:11:ad:27:81:05:29:70:2b:7a:ba:ba:e4:73:14:9c:7f:
3a:fa:2a:d0:2e:8e:a5:e1:ed:43:4d:ca:26:e7:08:e5:3f:0d:
8b:71:8a:23:7e:ad:0f:2a:a7:62:8e:d4:32:0a:2c:48:6c:bf:
0e:56:1b:25:97:49:9f:b0:4a:31:d5:ef:e6:44:b3:49:f7:6a:
a9:50:c7:62:6a:37:9e:a8:b9:d3:2e:35:89:18:94:77:df:02:
c5:ab:a4:cd:68:d2:bc:3d:d4:de:05:ad:65:c2:30:29:c6:f2:
1d:d9:a2:2a:56:26:8a:bc:42:57:29:13:72:d0:73:7b:f8:bd:
07:0c:e5:99:74:e2:8a:b0:44:1e:43:2d:f7:62:8e:5e:03:7b:
3e:11:c1:86:e4:cb:10:eb:25:b2:33:ea:d4:49:8d:14:c6:f1:
28:e4:e6:4b:65:d6:a6:15:32:ee:2f:de:80:26:44:0c:4e:cf:
75:6d:6e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:42:51 2025 by rpki-client