
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
File: wI8-3FkViULC3znxQl5uuCFovj4.mft (raw, json)
Hash identifier: itQXUh79K+bWBau6qkEhKBHlp4834Q4VyDra5GRYxIM=
Subject key identifier: 52:90:50:C8:5E:DB:97:D3:48:64:FA:89:E8:8B:78:FC:0A:D6:77:42
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Certificate issuer: /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial: 06A0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
Manifest number: 068E
Signing time: Wed 05 Nov 2025 02:21:05 +0000
Manifest this update: Wed 05 Nov 2025 02:21:04 +0000
Manifest next update: Fri 07 Nov 2025 02:21:04 +0000
Files and hashes: 1: wI8-3FkViULC3znxQl5uuCFovj4.crl (hash: UNr3HFDQLVUBprHB4Z4yE+duRxdWZkLrrq9nHd0KGkY=)
2: BE8B744223BF11ED85C484C4F1222468.roa (hash: mPfb/W1Lt6VuDNJFTu3CYZ/uoF57Z5GFzbMSNrIadIk=)
3: 47EC7EC423C111ED8C5569C9F1222468.roa (hash: X90d8Bp7be3eFZEm0tN0NlXAE4lcokMViNFvfEFubQ4=)
4: FA517E3A23C011EDA50A83C8F1222468.roa (hash: xQyOqRSRtBnzYBtEnci3/fZ1gbPy5vNLel67f1qXTlM=)
5: 7097890C25B711EDA0F42D8CF1222468.roa (hash: LCDQJRPalUgqEBA5/BHdcp5UayryRT5PLrlOTYXutHo=)
6: 71FA729823C111EDAB9AEEC9F1222468.roa (hash: ajHfktHCX6C5ICjcze8RYAaozdvM825xVJ6eHLup0/c=)
7: B23C0D6823C011ED85E19AC7F1222468.roa (hash: ycw2kblVv14coafRuI4bh8uZ423FHxoLlRXQjWcq7iE=)
8: 73A4A16E23C011EDABD4C1C6F1222468.roa (hash: Puzr/sJbdQB4MzskXStH2KcslcnVGHGWC7j0vSxPGck=)
9: 2B02A64023C011ED8728E5C5F1222468.roa (hash: G/yX4leE+tLKxVRQ080jUVUwSsOPiDnIG2vz/NduDOc=)
10: C896274C23C011ED9C3FD1C7F1222468.roa (hash: yZnBwovkgD+QQe0Ey+FhF46dMQlhjgVt/VRzQSjeVzU=)
11: E3E135C823C011ED954F2FC8F1222468.roa (hash: f1H3bY8RHDq2y8Y8/XygLs40Lsy2PWBYElNy/nq4D80=)
12: 232E5B1623C111EDB63CF4C8F1222468.roa (hash: 0o2DcmpoHMCfNZtf1lb07iznJrEi/XbnXGntHAj6Rms=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1696 (0x6a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C65C6AF, serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Validity
Not Before: Nov 5 02:21:04 2025 GMT
Not After : Nov 7 02:21:04 2025 GMT
Subject: CN=690ab491-7107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:87:d4:2e:fa:60:40:0e:ff:ae:06:d9:76:
0e:ef:49:63:bb:f5:19:40:e3:29:e3:20:68:6f:9f:
ed:66:91:22:45:94:37:bc:99:7c:8e:aa:61:11:bb:
d4:d6:7f:0a:8b:09:a8:d5:84:78:f5:10:05:1f:29:
cb:25:fc:62:4d:ec:12:40:2e:83:77:26:96:59:aa:
bc:80:24:54:b0:9c:bb:9b:a5:01:8d:fa:27:e8:e7:
ff:7a:aa:dc:53:e6:30:b8:1f:47:a5:4d:2c:a5:78:
24:22:da:cd:d0:55:6c:1c:c7:bf:31:94:8f:2c:bf:
1a:f7:ce:9c:56:9c:0b:f3:bc:80:a2:3a:2c:5a:89:
5b:06:4d:a5:8d:7f:85:8f:7b:dd:6e:34:11:41:55:
cd:3f:2b:98:24:d4:c5:d0:a8:55:a6:e4:b1:53:cd:
32:27:26:71:c5:53:ab:bf:08:58:40:18:54:61:a9:
64:1b:50:8e:e0:b4:15:34:0b:95:05:1e:a7:2b:f7:
66:64:ed:c3:10:67:9a:bd:81:c0:a4:64:ef:fd:0f:
8f:d9:45:77:ee:0a:97:91:e3:65:22:13:5d:fb:a1:
bd:fe:31:53:c0:d4:b0:b3:c5:1e:bb:4f:7a:c7:d2:
10:bd:b9:a3:24:be:a1:7c:78:cf:27:9e:85:9d:4d:
bb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:90:50:C8:5E:DB:97:D3:48:64:FA:89:E8:8B:78:FC:0A:D6:77:42
X509v3 Authority Key Identifier:
keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:16:7d:0b:a3:85:ce:fb:39:49:56:ff:1a:4c:81:8e:40:67:
92:d7:26:7a:c4:ac:fc:0c:9b:92:4b:43:a1:26:d8:9e:cd:9b:
bf:a6:4e:06:47:92:cc:31:99:b5:34:99:f3:bd:77:49:ee:33:
d3:5f:ee:dd:15:a5:4d:8a:b5:cf:39:ac:02:14:c3:d6:7a:65:
a7:42:41:67:c6:5c:d5:79:5e:58:d4:44:c6:28:f1:2c:de:e1:
3f:94:2f:13:df:ae:9e:55:94:9c:a4:57:6c:5f:7d:1a:56:f2:
a7:5f:9c:75:ae:48:19:a9:9b:07:61:a3:23:89:78:dd:86:02:
dc:13:e9:e0:c1:5b:b3:ea:01:a9:36:d6:16:cc:25:11:fb:f8:
11:53:2b:12:dc:2b:16:2b:63:72:fc:ab:b4:1b:cf:6c:93:95:
e0:53:15:51:70:bc:66:b5:ef:80:a6:b6:0e:dd:3a:c7:17:9b:
a6:11:8b:15:36:32:da:af:45:e1:54:f2:f2:6b:d7:38:64:07:
64:d0:cb:f6:1f:9c:e3:b3:98:78:76:2f:68:e3:16:17:69:5c:
f3:ee:c9:39:fe:18:c7:70:e0:c8:1a:1f:bb:5a:c3:2c:c5:d8:
77:46:89:e7:f9:13:c0:11:08:a8:d1:58:e4:4a:60:12:11:29:
48:e6:09:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:48:48 2025 by rpki-client