
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
File: _Y4EWISxZp69QwrlZnIdl0BKbOg.mft (raw, json)
Hash identifier: sUvb8lfVNwb1aVN8J+XbehLcPIhCRY0RZCePkXsN4M0=
Subject key identifier: E8:EE:AE:79:7C:10:46:8D:E7:C4:23:20:46:DB:D3:68:C0:51:BB:7A
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Certificate issuer: /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial: 09A4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
Manifest number: 0988
Signing time: Wed 05 Nov 2025 01:28:08 +0000
Manifest this update: Wed 05 Nov 2025 01:28:07 +0000
Manifest next update: Fri 07 Nov 2025 01:28:07 +0000
Files and hashes: 1: _Y4EWISxZp69QwrlZnIdl0BKbOg.crl (hash: mD/7OYBMHBzlVykl74hV6JFcZ+DrMntfgoa1vT6uUKM=)
2: 72FDA95EBED111EBB1E95938F8AEA228.roa (hash: BFwqjnvA7M7iOe8MrvjQVzzYtcahDaV6kGy9p/HlFzg=)
3: 8CFF0D3452E011EEB9E2557C4AD9E6FC.roa (hash: AjdT4e8a6WXfxGEzOMU2Ejz3vHkEPA/+xC+T83HmsUY=)
4: 7E2AA4AC953C11ECB825FCA95A40D577.roa (hash: V0xEm03mcnP/23ED2cL/AoR2czYuEnqqGtBl0cqLVJY=)
5: 771B25DAC1DC11EBAFF27A22F8AEA228.roa (hash: hB7LK5vkWRJBikNKLrZykTmcN1gbhqGJuoapPw28t74=)
6: 487A092ADA8611ED9609AEE52F6D8C1D.roa (hash: D/BuyKELkA6Kinn/ZmmBBy28n4BcPuuOdNb0VMO9tSc=)
7: EBFDEB1CDA8511EDAD8DC8E42F6D8C1D.roa (hash: T0K4k+0IgpuVi35+ZPDqnwWPZANeAHrt4BvXYlWbXMI=)
8: 417B7412681D11EABAE8A23BF8AEA228.roa (hash: EcSboq3Auo5ZSfF9dSrc6D9TXAo4UTRY5/uzWoCkLSY=)
9: A0A710B2C1DC11EBBC70BD22F8AEA228.roa (hash: nWisPdHBij3RvecNt34Yu238DLfWQU7kpk3sAXEBWpo=)
10: 9132C716F59111E9AF6CD33BF8AEA228.roa (hash: rXypH2zp9nVVHeDRCTVV4b8eCSlSkXxt3YUitRlyOEk=)
11: 9364DF78BED111EBB8FF9938F8AEA228.roa (hash: NRhe7qbaq8yZpi9FGOqJZVS+hbrFKmeWDZsrvab3+uA=)
12: 7F0A8334DA8611ED854699E62F6D8C1D.roa (hash: GP3NdP5uExbY2GZHQJ+RZAHZhDY8bRc/dyrY/rF4P6I=)
13: 238CE30A681D11EA8E2A7D3BF8AEA228.roa (hash: ydKx4ungEUC7wspHHxXIcDKz2U1m9S6af+pOZ0cF1vY=)
14: D7EB2302681D11EA9D36683CF8AEA228.roa (hash: AgNVSSf6L6GA3IHpXql3JWZ8L6ROJY9bnjmSjQeMQnU=)
15: F251F7A2681D11EA847A8F3CF8AEA228.roa (hash: CH6IVgy5lqquXIo/aSkiaRuN6dDR9B17P94pxUuhf4w=)
16: AF1ED052BED111EBAE20BD38F8AEA228.roa (hash: 4XRclk/yI8EJN8d2ChhuI+DM9Txu0zUGc/TXnREwp8M=)
17: A6F9E6BC52E711EEA98697134AD9E6FC.roa (hash: 522xUbFyDNAfNVyOqkEJj/kgs5vlVi6RihMtJZxJPIA=)
18: 51E7667A198311EDA6FEC5BFF1222468.roa (hash: 5AYXvFdqlcLtOaW600VeglJz5MATpO6Rt2/LbZme/P8=)
19: DBFF1E3C43DD11ED95883DBCF1222468.roa (hash: Y8zoZUQnQqpVoToxLOumwxqYjQxD2d4+Fg81697ZwlM=)
20: 60E94C82DA8611EDB9B5F0E52F6D8C1D.roa (hash: uN0Q1zV+VPkcLgC9gryjBgSon2OLOyHeE5NbuOjD/vU=)
21: 14FC84CEDA8611EDAD5B23E52F6D8C1D.roa (hash: S6+GPt3mMdOMUzMxpxdXeFeENM7hq23EiAhTHkvC6fQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2468 (0x9a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E373DAF, serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Validity
Not Before: Nov 5 01:28:07 2025 GMT
Not After : Nov 7 01:28:07 2025 GMT
Subject: CN=690aa828-b605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:78:e5:1c:58:29:8e:2e:75:84:49:65:a4:28:
1d:36:bb:bc:0b:f2:79:78:7e:a4:9d:00:42:25:b8:
73:6f:30:26:93:f5:62:15:64:87:e4:bd:3c:6b:e3:
8c:a8:e6:ef:5c:c6:3b:68:98:3c:94:ad:90:7f:20:
b6:3a:39:87:c8:26:c4:29:09:f6:f6:2f:5d:fa:88:
76:a5:ae:41:db:52:2c:bd:d3:7d:f3:d5:9c:bb:9f:
7f:d7:98:fe:4f:c0:e2:97:99:0e:ee:81:31:4b:54:
c9:6a:43:9d:16:bf:e4:6e:cd:2e:5c:3f:9d:95:4b:
1c:d3:9e:02:83:29:f4:88:2b:3a:3f:5d:74:4b:e3:
63:40:22:e9:85:c4:85:8e:c0:6a:85:18:be:c2:a6:
fb:7a:9b:b9:41:81:4d:e7:a9:d4:bf:3f:ae:a7:31:
9b:45:72:99:71:9e:b8:a9:0e:b0:0a:8d:94:b2:88:
c8:9c:11:ad:35:d7:ad:55:1d:8a:7d:64:6b:e3:69:
25:ec:b1:66:a1:6b:e8:3b:6d:77:c3:29:1b:0f:73:
a6:05:ba:9c:d4:3b:22:07:ee:61:44:6a:bf:31:12:
7a:0c:d6:c9:ee:5c:31:f3:aa:e2:9b:61:d4:af:c8:
c6:64:df:76:3c:ec:76:62:c3:88:f5:92:3a:0c:a7:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EE:AE:79:7C:10:46:8D:E7:C4:23:20:46:DB:D3:68:C0:51:BB:7A
X509v3 Authority Key Identifier:
keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:47:5c:c5:1d:47:30:0e:04:17:54:d9:85:95:55:c9:cc:d2:
5f:4b:e0:c7:de:ed:25:10:24:d7:11:82:2c:50:71:f4:c7:c2:
ed:2e:2f:81:70:ec:e3:78:44:12:6d:af:ed:b2:69:4f:cd:aa:
5c:b6:ba:a2:ad:fa:66:4e:08:fe:2b:c3:f8:87:13:d1:ed:63:
67:d2:f4:d0:d7:ae:65:71:7d:e7:fc:56:6c:85:96:df:68:b7:
e2:4e:76:f0:8f:52:ba:51:d0:ce:9b:8a:a8:1c:e3:9d:0c:31:
29:fa:30:23:9c:bb:38:31:62:52:50:0d:a9:79:70:a4:44:36:
82:55:08:86:cd:b4:b3:27:3c:a7:28:2d:c1:67:f8:26:f0:e4:
a0:66:0c:51:7e:6b:76:46:14:85:cb:93:89:28:a3:7b:39:c5:
fd:4d:35:bd:4a:1d:86:70:49:cd:0e:33:57:ef:53:71:75:65:
8d:ee:4d:8e:f9:a6:bd:8b:ac:59:c8:da:03:d1:42:26:85:28:
5a:29:77:2a:5f:a3:d7:40:5a:57:10:fe:5b:45:35:32:c4:90:
59:ea:c3:90:ef:12:a3:8d:d8:de:d9:27:72:30:a3:d7:97:d9:
c6:ef:3d:ca:82:5a:40:32:4c:4c:a2:ca:ed:4c:c5:a4:92:b2:
06:5a:28:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:04:07 2025 by rpki-client