$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft File: YAxslYLhTzef1aWysY2CLjZRry4.mft (raw, json) Hash identifier: /mscV8+g3zaK2n6PBvIj2OyupZSkVCWb+7HYBzwg0G4= Subject key identifier: 9F:1C:67:A2:F0:70:14:E6:04:3D:B7:15:F7:D6:C1:53:42:1B:28:1A Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E Certificate issuer: /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E Certificate serial: 0638 Authority info access: rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft Manifest number: 05E9 Signing time: Tue 04 Nov 2025 03:56:15 +0000 Manifest this update: Tue 04 Nov 2025 03:56:15 +0000 Manifest next update: Thu 06 Nov 2025 03:56:15 +0000 Files and hashes: 1: YAxslYLhTzef1aWysY2CLjZRry4.crl (hash: HnHXrOQp0kQJRL+bqqPjWWtjmhJK4DTtHgLxEd/c16U=) 2: 1379F152525411F0AAD8BED5DAE4EC9C.roa (hash: wtN+gjAn09jZ2DVbgtcv7kK5zDQZ+qe0iSzT0Y0GqxA=) 3: 84D8F36CDF9911EFB663908A762E951A.roa (hash: ahGCGFkUnt3MxmRNn6UcOW6Ec9tfP0BMrN6nhGYNYw8=) 4: 33FD7536780911F09A637BC5DAE4EC9C.roa (hash: NdwuSjQ9S63dHajbOmk7OicSHAeEp/KnOfarLwwkbpU=) 5: 9DC45B8CB4BE11F084A4EEDEDAE4EC9C.roa (hash: U6viFYbvqJE7YEGWKkiWZTJIIipG0IMk3E+oER0wCdU=) 6: 5EF1F05EB4B911F0ADDA6EC1DAE4EC9C.roa (hash: Ou0YjQn+7QAdghBuzmfWSgrZxr+lPZXRk73LPiPreDE=) 7: 193DAF98B4BA11F087F2BAC5DAE4EC9C.roa (hash: J9cFl6zH0IT69Ntn4XyNg8q5lCFSiBWW4MMYmxWrlhs=) 8: 7E1DE6A4B4B911F099D47FC1DAE4EC9C.roa (hash: B5aEg70ObHVABncSYeSJICYmYg9ITCPw842Y5l1gss4=) 9: F96163BA0D3C11F0A96090AE762E951A.roa (hash: STvX1UKJGEptK0rpsnM8JuivFJ125gHz8sPopCXa7ps=) 10: 8BCCA240B4B911F0A7D988C1DAE4EC9C.roa (hash: GD3FY6LBfrhqy6JQRpXnbKJieg14mYnMeOfxfmb4mH8=) 11: 7F8E05AA2A3A11F0A2875F86DAE4EC9C.roa (hash: DvA6U1LFCUDnfnRPzsKSGkuy0orNxVbFRzLxYjPBNbA=) 12: E8003694296D11F095B057AADAE4EC9C.roa (hash: hRLMdSNoqTHvpYzy3f/DAB1L2Suq8i2mYZsOtPxTwSA=) 13: 7019D6F8B4B911F0941075C1DAE4EC9C.roa (hash: fp5Wg7R8e/jtSPxAbw3SaILbW3yr79zcXruNimCFOpU=) 14: 0DCD1D360C6F11F0B5B6B54C762E951A.roa (hash: gC7yG1h/hDdpGE1Rf0MsKLgVfzEsC4WrBGH03rs1oXY=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 06 Nov 2025 00:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1592 (0x638) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E Validity Not Before: Nov 4 03:56:15 2025 GMT Not After : Nov 6 03:56:15 2025 GMT Subject: CN=6909795f-b04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:13:b9:1e:e9:dc:8d:2f:0b:02:2a:13:31:5e: 47:63:03:ba:cb:bd:96:4b:b3:c6:58:62:75:37:37: 2c:5c:cc:ae:db:a6:29:20:d8:b5:f4:73:d9:0e:6e: f7:8e:b5:04:3f:cf:0b:7d:9c:49:7f:1f:8e:5a:b4: ad:8e:7d:32:78:71:80:7e:9d:30:57:40:f3:02:17: 21:5b:eb:54:b2:2b:8a:53:ff:f5:88:4f:d8:0d:39: b2:35:c8:b6:00:c4:2f:7e:9d:70:29:36:13:ab:f4: b8:10:76:13:98:92:12:4b:9a:78:04:b8:f3:72:d3: 58:d2:57:90:07:9c:da:0a:49:66:49:14:ca:17:11: 50:c3:95:96:f3:c2:19:6b:d2:1e:d0:5a:00:29:99: e5:02:03:f4:37:32:37:f7:1e:d9:37:0d:a6:a1:03: 3e:01:07:bd:57:13:2d:fc:1b:39:fb:40:9d:e2:d8: 90:ba:f1:23:4f:8b:d4:99:42:ee:3c:ed:fd:db:6b: 0e:80:a6:3d:07:81:ab:b5:79:d0:04:6d:08:0f:ed: 0d:54:53:44:d0:bc:ee:8f:d1:43:3e:f0:56:47:41: 71:f7:94:31:31:3e:44:35:23:90:4e:22:6c:d8:ac: d1:6e:cb:bd:d3:fa:4d:e8:63:c1:37:d8:e3:a5:b1: 4a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1C:67:A2:F0:70:14:E6:04:3D:B7:15:F7:D6:C1:53:42:1B:28:1A X509v3 Authority Key Identifier: keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:19:0e:61:3a:c9:fe:77:b2:73:65:08:ea:66:d9:0a:f4:b9: 3b:7f:fb:6c:4f:2d:57:ec:fc:56:9f:17:a6:e4:b7:d6:7b:bc: cf:4c:95:8a:3c:9b:f4:15:19:2f:d6:dc:39:c6:50:d0:52:fb: e9:d7:e6:05:63:53:62:e3:1d:10:51:e3:48:84:d4:1f:11:8a: 2b:6d:56:4e:ab:e9:0b:e3:f6:c6:81:5d:b7:e4:7b:28:f7:3d: eb:87:b3:f2:00:51:d3:df:2f:c8:78:6e:8a:02:89:9c:4b:c2: 4d:36:77:91:9e:1d:7f:53:48:6a:4e:24:e1:5b:43:00:4c:5f: 30:12:fb:8a:e1:fc:0c:0d:0e:68:c1:70:0e:36:d6:55:55:e4: ff:88:99:f1:90:d6:e1:d8:a0:aa:7e:65:a9:d5:ed:cf:23:dc: 2b:b9:b5:e3:b0:65:de:a1:44:2a:27:5d:e1:2e:d5:c6:be:0a: 65:9c:ff:2c:ad:41:cd:df:01:92:48:11:a4:28:c4:04:df:e2: c6:9e:dd:9c:1c:43:b8:a7:3d:8e:fe:7c:62:7c:40:ab:6b:79: 6c:85:d3:55:f7:35:f3:89:0f:2f:c1:71:aa:ae:af:59:e1:73: 8a:a8:0d:54:5a:2a:9b:65:fc:dd:45:40:b0:a9:3c:d1:1e:96: 13:cd:cb:f1 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICBjgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 M0JBMTlBUjExMC8GA1UEBRMoNjAwQzZDOTU4MkUxNEYzNzlGRDVBNUIyQjE4RDgy MkUzNjUxQUYyRTAeFw0yNTExMDQwMzU2MTVaFw0yNTExMDYwMzU2MTVaMBgxFjAU BgNVBAMTDTY5MDk3OTVmLWIwNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDbE7ke6dyNLwsCKhMxXkdjA7rLvZZLs8ZYYnU3NyxczK7bpikg2LX0c9kO bveOtQQ/zwt9nEl/H45atK2OfTJ4cYB+nTBXQPMCFyFb61SyK4pT//WIT9gNObI1 yLYAxC9+nXApNhOr9LgQdhOYkhJLmngEuPNy01jSV5AHnNoKSWZJFMoXEVDDlZbz whlr0h7QWgApmeUCA/Q3Mjf3Htk3DaahAz4BB71XEy38Gzn7QJ3i2JC68SNPi9SZ Qu487f3baw6Apj0Hgau1edAEbQgP7Q1UU0TQvO6P0UM+8FZHQXH3lDExPkQ1I5BO ImzYrNFuy73T+k3oY8E32OOlsUo1AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUnxxn ovBwFOYEPbcV99bBU0IbKBowHwYDVR0jBBgwFoAUYAxslYLhTzef1aWysY2CLjZR ry4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBENTc3L1lBeHNs WUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu L1lBeHNsWUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl cG9zaXRvcnkvRjM2M0JBMTkvRkJDQzczQjY5NjI5MTFFQzk1QjdCMUUwNUE0MEQ1 NzcvWUF4c2xZTGhUemVmMWFXeXNZMkNMalpScnk0Lm1mdDA1BggrBgEFBQcwDYYp aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQClGQ5hOsn+d7JzZQjqZtkK9Lk7f/tsTy1X 7PxWnxem5LfWe7zPTJWKPJv0FRkv1tw5xlDQUvvp1+YFY1Ni4x0QUeNIhNQfEYor bVZOq+kL4/bGgV235Hso9z3rh7PyAFHT3y/IeG6KAomcS8JNNneRnh1/U0hqTiTh W0MATF8wEvuK4fwMDQ5owXAONtZVVeT/iJnxkNbh2KCqfmWp1e3PI9wrubXjsGXe oUQqJ13hLtXGvgplnP8srUHN3wGSSBGkKMQE3+LGnt2cHEO4pz2O/nxifECra3ls hdNV9zXziQ8vwXGqrq9Z4XOKqA1UWiqbZfzdRUCwqTzRHpYTzcvx -----END CERTIFICATE-----Generated at Tue Nov 4 22:57:22 2025 by rpki-client