
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft
File: I_gUu0fVw67dUQPzb124opvj1x0.mft (raw, json)
Hash identifier: R725qvXT3LPflQbCnwdcFlVNCUaIQXh06z1mtHxq07M=
Subject key identifier: 47:FA:AD:48:A9:5E:0E:38:11:B8:44:71:E9:DC:30:A7:1E:B8:FF:E6
Authority key identifier: 23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D
Certificate issuer: /CN=F36D9B5BAF/serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D
Certificate serial: 0FC4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft
Manifest number: 0FAD
Signing time: Mon 02 Mar 2026 00:50:48 +0000
Manifest this update: Mon 02 Mar 2026 00:50:48 +0000
Manifest next update: Wed 04 Mar 2026 00:50:48 +0000
Files and hashes: 1: I_gUu0fVw67dUQPzb124opvj1x0.crl (hash: +j1ecZRXMH3euP7x+/kHS/lVRWiM8yu4puzTypMIwLM=)
2: 86606974028F11E98C883E0FF8AEA228.roa (hash: IsZ6cJV4+0zN9ms5jaDsieqPGhductkQxgMv7qyHTNI=)
3: 9BC8C8C001EA11EDB08796BAF1222468.roa (hash: i8+aHPPl6uhvn/Jq2NkUn53HTH09DtjcbJOz9MgQ1co=)
4: 48577586FE1C11E8BD980782F8AEA228.roa (hash: H3dWHGNGyzufXdXyAcUTICFJNlUoK78HWc23kkq1F/s=)
5: 5F34A6C2DE7D11EBBAC31B64F8AEA228.roa (hash: MWk8EFTOF3/10HYUuFgbnJ/fqlc/s+3SXXavsJ4h6cE=)
6: 3D3E31C6498E11EFBB02DB76762E951A.roa (hash: u0Z0y5U3GM/VfkEEbg/zEJIp4QkqBJm1umtwXpHXzsE=)
7: 132EAD18DE7D11EB86A3C563F8AEA228.roa (hash: iZGBXlM3XPYurzi9+dHJxzDxI/7/keWoCIvY/ASFKFI=)
8: B7C01426FED211E89B120309F8AEA228.roa (hash: Cu6wxRaLD5ODNZaYGqU1rGwfd0FTt/GsL/H9WnzG7Vs=)
9: 36E8B606FE1D11E88DCDCE82F8AEA228.roa (hash: SvO8wCmqFCCs7pvZRw0lkVxnGHmag+waEJa8/soA19E=)
10: 9C9A7614DE7C11EBB1191063F8AEA228.roa (hash: syinLKpAl//f2BEe6KYX31IZj04lDHjk0Tp/mellwQo=)
11: 5BA2465E037F11EDB5F8F0C0F1222468.roa (hash: TV0mQqI15fCBzn5VfeVjormHM3HjavPeVewlRIBDw4I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft
rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D9B5BAF, serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D
Validity
Not Before: Mar 2 00:50:48 2026 GMT
Not After : Mar 4 00:50:48 2026 GMT
Subject: CN=69a4dee8-09cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:54:a3:f8:b3:80:08:07:68:e4:20:d1:86:
52:e7:e1:6a:71:45:3d:5c:88:46:2a:27:2d:66:2e:
22:66:51:e4:bf:47:75:db:e9:3c:83:30:88:e3:10:
4f:f1:fc:29:b7:67:8c:2a:5d:9e:8d:0d:9c:d1:96:
d2:4f:92:02:de:a9:50:58:60:00:31:98:1d:4a:98:
7f:d5:3b:66:2d:99:c4:92:70:5d:21:aa:55:36:c2:
07:e1:ec:e6:65:e9:85:87:9c:4c:63:9e:97:4f:a9:
36:f5:6e:72:0e:9d:22:8f:86:85:f0:8a:06:bc:73:
fe:8a:13:9e:cb:81:ed:52:d4:5c:62:8e:a2:20:8c:
1c:45:67:8e:7c:c9:ac:f7:58:f6:22:98:c4:c6:0e:
e1:4a:af:cd:6f:95:5d:9d:a1:8c:d7:e7:ca:1e:63:
81:64:ad:28:4c:40:6a:e4:09:6a:ad:07:42:bd:71:
87:a2:be:86:4b:7e:92:7d:b0:84:cb:23:e9:4c:61:
a9:bf:b9:99:8a:89:82:76:20:b0:df:c3:23:e4:33:
dd:73:65:8b:a2:4d:b4:2f:48:54:19:db:84:fc:bc:
ba:f3:01:84:9b:ed:d0:75:b7:fb:bf:1a:06:50:e2:
36:34:cb:10:6f:d4:0f:14:20:fc:90:5f:60:c3:62:
76:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FA:AD:48:A9:5E:0E:38:11:B8:44:71:E9:DC:30:A7:1E:B8:FF:E6
X509v3 Authority Key Identifier:
keyid:23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:1f:03:f5:12:90:69:a6:b1:f6:f3:cd:3c:e0:e8:9e:70:78:
df:6d:9b:2f:58:75:67:39:44:d1:ed:b1:e3:a3:14:a4:62:31:
cd:60:e0:b2:85:4e:f5:4b:33:3b:cf:56:26:56:82:74:a5:46:
c4:c1:b7:70:0b:73:c4:bd:b3:c6:7c:dd:80:3b:bc:42:54:a0:
1b:6a:0d:af:07:8f:ca:d3:08:6d:65:94:a1:fa:cc:a2:c0:9e:
14:d2:77:ac:ad:dd:ca:2f:51:5e:50:75:22:35:be:9d:cd:77:
bf:d7:0a:08:f9:ef:dc:d6:28:55:11:1a:4a:0f:d9:68:d6:16:
01:8b:9f:0b:bf:13:6e:e3:fd:d1:f5:17:e2:9a:a7:0f:69:cf:
13:82:a0:a2:8d:0c:a3:4a:61:1c:33:cd:9a:94:81:96:48:72:
fe:1f:d1:14:99:c1:ce:86:b4:cf:db:d2:0b:0d:8e:ff:e5:d5:
e1:67:2a:c4:39:e5:c3:cf:9e:2c:72:c1:f8:0c:67:e9:73:60:
68:73:44:d0:a6:b4:78:0f:79:c1:4c:28:5b:33:75:44:1e:06:
52:fc:67:10:02:39:e4:ae:a3:29:78:fc:07:91:62:17:ae:bb:
5d:b3:dd:5c:67:ae:5c:99:bf:f1:d4:7f:93:cf:ee:6a:ec:86:
ed:4a:b8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:11:51 2026 by rpki-client