$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft File: iCYpiV2NtXslQepI-hEmMl4pAgs.mft (raw, json) Hash identifier: XBJG8+T0a7KPqLeBgCxXcj+KMmc+d5IiZ0I4H0I6/Kg= Subject key identifier: 17:8D:E1:AA:E8:9B:60:E9:8D:FC:05:AD:C4:58:A4:BD:FE:20:A3:55 Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B Certificate issuer: /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B Certificate serial: 0FFB Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft Manifest number: 0FEB Signing time: Tue 28 Jul 2026 00:57:20 +0000 Manifest this update: Tue 28 Jul 2026 00:57:19 +0000 Manifest next update: Thu 30 Jul 2026 00:57:19 +0000 Files and hashes: 1: iCYpiV2NtXslQepI-hEmMl4pAgs.crl (hash: NJSLRfyDl5/cabSE3TMl9SKtg0ugqrHQR0bUNxYzHEg=) 2: AC9E51C2D4DE11EBADC42846F8AEA228.roa (hash: 5Ggz3Te0vgHLm/Kbv+y3MXeLbDbWl36tckNnmxxM2SA=) 3: 705E5CA8155611ECA3F1402FD8A014CE.roa (hash: BvaUlhFB8dhvbeBRjwtIRVfG1DlJ/s5hWEEmmbVV+rk=) 4: 1C5E9EFED4DF11EB9185D046F8AEA228.roa (hash: eN89IVYVfW57zUXGRLnTAOoNL9FLLc3vgrYPZzt46O0=) 5: 3469E5FA7B7211F1B243C300CF1D38B0.roa (hash: hX8O0ZYKk9oF6OhSZ3d33KQkrAldnrJfSsy0yCg08EU=) 6: FC67BBDA7B6E11F1A29088ECCE1D38B0.roa (hash: VuyY8Cp5a1XrJqlaUJnSJWCJHjs6SKQq/6s6QpmiIL8=) 7: AA3A8B5E155611ECB70DA62FD8A014CE.roa (hash: oylej++hlt4CSGV5/IZZeR0C3dM4otrHkh7MutLV9Go=) 8: BE6404FAD4DF11EBBA81A747F8AEA228.roa (hash: GH3Ja4snhwLWpp5ydwcxU3wl3XfH8RIdlELqY5Zsj+E=) 9: 78C71AF4D4DF11EB91BD5247F8AEA228.roa (hash: IMIVkoVO+LqKsmy3JpQMcRirZ3OyWFNrawFCvM6fDOk=) 10: 5CB73F807B6D11F1B9662CE4CE1D38B0.roa (hash: N/jRmpdjfA3JkvkzJNhjw9Td49wSKepzVaBgfp3FjXg=) 11: 5781D1FE7B6F11F1A27D61F0CE1D38B0.roa (hash: qY9gTFyxLeKKP3wsEKrrnFvi3gpHzdRPEYsotda9ylk=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 30 Jul 2026 00:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4091 (0xffb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3620ACFAF, serialNumber=882629895D8DB57B2541EA48FA1126325E29020B Validity Not Before: Jul 28 00:57:19 2026 GMT Not After : Jul 30 00:57:19 2026 GMT Subject: CN=6a67fe70-22e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:38:05:2d:37:8c:47:ce:04:7e:bf:a8:4f: ea:5c:1f:84:d5:6f:79:07:e2:70:b7:86:79:76:bf: ec:bf:74:df:73:be:b0:6e:11:90:16:57:f3:67:77: 08:ba:3b:7e:a0:c0:24:95:b6:fa:00:ac:08:da:28: dc:49:f0:81:9d:08:f0:93:da:14:65:a5:ed:59:3e: 0f:8e:dc:4d:30:d5:6d:84:02:ec:ba:02:4a:61:3a: 68:8b:e3:0a:a9:88:1e:3b:79:fa:d7:1c:01:c2:9e: 87:52:df:7a:38:25:0f:75:62:03:52:a7:e2:b4:0e: 26:68:84:9c:78:0b:22:53:c8:ad:16:cb:8b:7f:2e: ed:da:a3:05:c0:a4:ef:4a:13:94:b4:20:d0:4c:20: 91:39:5e:82:ea:33:f6:87:39:80:bb:47:08:ef:4c: 0d:13:c8:fe:37:73:1a:8b:65:6a:37:83:79:e7:b4: 55:18:ad:56:90:61:1d:f1:a6:83:44:58:ae:4f:07: 6c:d6:49:45:ce:96:b8:fa:8a:43:14:fe:4f:30:fd: b7:9f:6f:49:b3:b9:d3:68:e4:82:e9:75:37:ed:fc: c0:e0:a2:0e:84:87:77:d6:87:ba:f0:8c:4b:e9:00: aa:fa:80:85:77:eb:b1:cf:69:7b:3f:f3:b1:3c:6c: 3b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8D:E1:AA:E8:9B:60:E9:8D:FC:05:AD:C4:58:A4:BD:FE:20:A3:55 X509v3 Authority Key Identifier: keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:0c:51:6c:40:50:d8:04:53:43:fb:13:43:39:44:66:19:45: da:fd:b3:4d:d6:ef:29:e8:4c:49:db:86:d2:64:40:8f:7c:a5: 01:c3:32:e1:60:9b:91:16:c2:e8:f3:20:1f:dd:cc:db:34:38: 8d:c4:6d:51:21:87:e8:48:2f:88:c3:e9:7d:2e:c6:57:82:7d: 4c:c6:ce:a0:82:a4:fd:31:c8:cd:11:3a:44:e8:d1:db:ea:10: ad:a6:f7:d3:34:c2:4d:60:77:7c:c9:1d:3d:3d:1d:91:c8:cf: 67:fe:66:15:8c:1a:5c:13:c7:8f:9e:e0:fe:9d:3a:54:50:ae: e6:3d:f2:3d:f7:0f:29:d9:af:2e:55:f1:c4:cd:ed:13:43:02: a6:9b:ee:ff:74:28:2b:dd:d3:72:6b:40:c7:d4:09:e4:6e:90: 02:04:d8:98:00:54:3f:c4:45:ce:f6:09:49:42:ce:96:f1:51: a8:4d:db:a6:4b:99:5a:fa:12:97:28:aa:ed:15:f8:64:9e:c3: 43:9f:f0:c4:28:a5:fd:46:09:30:28:00:fc:de:08:fc:18:3c: 4e:31:44:0e:fb:61:98:d7:4d:33:16:bd:f5:ef:45:90:f0:77: 44:b8:25:fe:85:4b:bd:f4:65:3a:11:23:ee:cd:e1:70:e3:3d: c2:bb:b4:a0 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICD/swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MjBBQ0ZBRjExMC8GA1UEBRMoODgyNjI5ODk1RDhEQjU3QjI1NDFFQTQ4RkExMTI2 MzI1RTI5MDIwQjAeFw0yNjA3MjgwMDU3MTlaFw0yNjA3MzAwMDU3MTlaMBgxFjAU BgNVBAMTDTZhNjdmZTcwLTIyZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC8TDgFLTeMR84Efr+oT+pcH4TVb3kH4nC3hnl2v+y/dN9zvrBuEZAWV/Nn dwi6O36gwCSVtvoArAjaKNxJ8IGdCPCT2hRlpe1ZPg+O3E0w1W2EAuy6AkphOmiL 4wqpiB47efrXHAHCnodS33o4JQ91YgNSp+K0DiZohJx4CyJTyK0Wy4t/Lu3aowXA pO9KE5S0INBMIJE5XoLqM/aHOYC7RwjvTA0TyP43cxqLZWo3g3nntFUYrVaQYR3x poNEWK5PB2zWSUXOlrj6ikMU/k8w/befb0mzudNo5ILpdTft/MDgog6Eh3fWh7rw jEvpAKr6gIV367HPaXs/87E8bDtPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUF43h quibYOmN/AWtxFikvf4go1UwHwYDVR0jBBgwFoAUiCYpiV2NtXslQepI+hEmMl4p AgswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjIwQUNGLzkyNUUyQkU2NTg2RDExRTVBRUI1NUMyRkY4QUVBMjI4L2lDWXBp VjJOdFhzbFFlcEktaEVtTWw0cEFncy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2lDWXBpVjJOdFhzbFFlcEktaEVtTWw0cEFncy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MjBBQ0YvOTI1RTJCRTY1ODZEMTFFNUFFQjU1QzJGRjhB RUEyMjgvaUNZcGlWMk50WHNsUWVwSS1oRW1NbDRwQWdzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDRDFFsQFDYBFND+xNDOURmGUXa/bNN 1u8p6ExJ24bSZECPfKUBwzLhYJuRFsLo8yAf3czbNDiNxG1RIYfoSC+Iw+l9LsZX gn1Mxs6ggqT9McjNETpE6NHb6hCtpvfTNMJNYHd8yR09PR2RyM9n/mYVjBpcE8eP nuD+nTpUUK7mPfI99w8p2a8uVfHEze0TQwKmm+7/dCgr3dNya0DH1AnkbpACBNiY AFQ/xEXO9glJQs6W8VGoTdumS5la+hKXKKrtFfhknsNDn/DEKKX9RgkwKAD83gj8 GDxOMUQO+2GY100zFr3170WQ8HdEuCX+hUu99GU6ESPuzeFw4z3Cu7Sg -----END CERTIFICATE-----Generated at Tue Jul 28 19:40:02 2026 by rpki-client