$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft File: kz9w25gXuEj4wIYagksQEX3FGSw.mft (raw, json) Hash identifier: 0p4tH5ILKuqQaoq8Lrw8qk+1Vm3zjzPlfSAniEUndSE= Subject key identifier: D9:AE:91:E8:8C:07:5D:63:D5:D3:5A:FA:AC:4A:64:59:26:5A:16:DF Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Certificate serial: 040B Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft Manifest number: 03FB Signing time: Wed 05 Nov 2025 03:31:25 +0000 Manifest this update: Wed 05 Nov 2025 03:31:25 +0000 Manifest next update: Fri 07 Nov 2025 03:31:25 +0000 Files and hashes: 1: kz9w25gXuEj4wIYagksQEX3FGSw.crl (hash: EEcQTRzNb1UwGIQvmCl4vBiChycmFIlQpzsOX96lxe4=) 2: B104EE44D53311EE8BE4F36C775412E6.roa (hash: RqxwUBj2Bc+OGaTDdk4x7to8RcdRWFqstSwOVMh1no8=) 3: 1E005EBCD53811EEA636DE73775412E6.roa (hash: NZukzj3sWyjYLO9ToCsVsgQAC/kq2Oo6mzyBtHQWmD8=) 4: 8ED6BADCD53311EEB2A2C36C775412E6.roa (hash: 4/E5JqKYHi82tnNDpVDrDiMaVaUcTpYsZcy/yA05uhA=) 5: 0DEEF6F0D53311EEB556F46B775412E6.roa (hash: P5ibcWLG9H1Kur9SCsMbIiX3jBWNN4xNF46xx72YQHI=) 6: A5A2959EDD3D11EEBAF174B7775412E6.roa (hash: ODN6UQwLRLuCmMW2LaPD2vWq9D+bquTGny4/1fInMQE=) 7: E5662DD4A17A11EEAB16F955D25BE465.roa (hash: nQB8uEKFdXSZvidfMMlhgfBX43bi5bFfOgAaXmAWfUM=) 8: 64C2AA52D53411EEB69B076E775412E6.roa (hash: ApnKXgX4qtwCc4Ec2u4PHGuX3hUujQ6rhZ5C7rafC04=) 9: 6DD19D16D53311EE8136926C775412E6.roa (hash: v2hwM/LETMN1QLgipB8E8B+3kZLiPan/2yTGEjfAszc=) 10: 4FFFB85ED53311EE9E536E6C775412E6.roa (hash: D+tEjQwBXIivLTAaXT7TthK1xPvy3VJOqpaVsbM3hVk=) 11: 3F0DCC84D53811EE9F160874775412E6.roa (hash: ZQcO3DmU3Brb6BRvD6IVWLlf8rwN0CI8i4MNTEzPGK0=) 12: BCD1ADAAD53511EEA3B22470775412E6.roa (hash: d12Kr2qwAhbDBscwoutPKxlu3aElunyjg9Yu2LBeVsw=) 13: E4B0AF5CDD3B11EE8C72BDB4775412E6.roa (hash: 0arozNRt9JTjzBkDd/i9r9NcNES2kthw5/x77T8UhJo=) 14: DF52896AD53711EE84074A73775412E6.roa (hash: uIa+9vsGlaMu/Injc/vzOUtcnqp2BVTquSWUrb4Yn00=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 07 Nov 2025 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1035 (0x40b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F364321AAR, serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Validity Not Before: Nov 5 03:31:25 2025 GMT Not After : Nov 7 03:31:25 2025 GMT Subject: CN=690ac50d-d603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:71:71:06:67:0d:db:24:e8:8f:8c:69:a3:50: f5:76:4a:76:ce:32:6d:46:7c:e6:4b:c5:88:74:d4: f2:f1:6b:cd:b4:5e:0b:96:77:27:c6:ed:19:37:87: b1:9b:90:cb:9d:8c:93:23:5b:b1:eb:2f:63:f8:8e: 1f:fe:e8:a5:8a:ce:a2:19:6e:fc:22:16:33:ba:6d: 3a:75:bf:0b:bb:0b:f0:a8:e7:1c:b3:4f:1f:6f:86: 0b:a0:71:93:f1:2f:16:00:29:f8:cd:16:94:45:fc: 15:f3:86:e4:9a:c1:09:c4:ac:82:9c:38:06:a8:c9: 49:a3:1f:a1:04:23:a1:71:f3:9d:3d:00:31:c2:4f: 8f:37:d8:98:4a:01:76:e7:ab:d4:36:d1:c6:7f:32: 1f:f7:f2:1b:e6:5b:6b:2e:69:69:0f:8d:6f:8c:4e: bb:a3:7d:53:6f:d3:8b:6e:64:67:12:46:c0:4f:c3: 88:43:eb:22:07:8b:04:39:4f:d3:a5:36:42:7b:1e: 0a:63:77:5f:cc:5c:c1:d8:6c:b8:c8:c7:57:f0:43: 9c:5b:5f:2d:eb:5f:34:2d:2f:e5:53:9a:86:55:16: a9:79:a2:7a:90:8a:7a:6a:cc:13:e9:bf:06:9c:2f: 29:b4:5e:fd:13:f2:b3:88:ab:d2:7f:0a:1f:8c:e6: fd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AE:91:E8:8C:07:5D:63:D5:D3:5A:FA:AC:4A:64:59:26:5A:16:DF X509v3 Authority Key Identifier: keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:c5:b6:74:cc:86:5e:96:b2:6b:67:6d:9c:cc:c5:6c:ff:ec: d8:b7:55:6f:16:0f:66:77:e3:02:61:9e:ad:e3:ac:82:9c:49: ae:a1:15:a4:fd:8d:d7:0a:6a:9e:14:85:b8:79:b3:a2:10:c3: 65:a2:50:62:6b:06:46:4a:9f:41:fa:3e:89:4b:82:02:5a:e3: 13:29:bb:ca:3b:84:66:53:a2:06:e6:e7:e7:97:7b:d7:a4:5b: 39:6e:28:86:dd:06:04:80:71:12:d8:87:67:7d:54:25:ba:e5: fb:c2:29:88:10:c3:84:2c:ac:4d:ad:7c:f8:e4:0d:ef:d9:24: 3b:f3:a8:67:f3:15:e0:65:29:ba:90:fa:ec:32:63:63:da:f0: 65:21:48:c2:93:5a:b8:e5:aa:26:88:0c:2e:8b:45:b7:b5:4f: 13:fe:36:2b:0f:6e:0a:98:fe:1b:7d:c8:fc:a7:86:0d:9b:50: b9:39:ca:fb:8b:7d:7f:e9:0b:d1:d2:f7:5b:41:c3:21:41:98: d9:ac:c2:3d:69:07:e7:95:6c:03:fd:d3:29:e3:89:4c:fc:cf: b8:2e:1e:f6:4a:12:80:e1:a5:37:57:3a:ed:3a:75:bd:d2:9c: a8:2c:35:b7:72:07:01:83:8b:76:44:23:a0:2d:ea:b6:fd:7f: b5:12:24:20 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICBAswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDMyMUFBUjExMC8GA1UEBRMoOTMzRjcwREI5ODE3Qjg0OEY4QzA4NjFBODI0QjEw MTE3REM1MTkyQzAeFw0yNTExMDUwMzMxMjVaFw0yNTExMDcwMzMxMjVaMBgxFjAU BgNVBAMTDTY5MGFjNTBkLWQ2MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC4cXEGZw3bJOiPjGmjUPV2SnbOMm1GfOZLxYh01PLxa820XguWdyfG7Rk3 h7GbkMudjJMjW7HrL2P4jh/+6KWKzqIZbvwiFjO6bTp1vwu7C/Co5xyzTx9vhgug cZPxLxYAKfjNFpRF/BXzhuSawQnErIKcOAaoyUmjH6EEI6Fx8509ADHCT4832JhK AXbnq9Q20cZ/Mh/38hvmW2suaWkPjW+MTrujfVNv04tuZGcSRsBPw4hD6yIHiwQ5 T9OlNkJ7Hgpjd1/MXMHYbLjIx1fwQ5xbXy3rXzQtL+VTmoZVFql5onqQinpqzBPp vwacLym0Xv0T8rOIq9J/Ch+M5v3TAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU2a6R 6IwHXWPV01r6rEpkWSZaFt8wHwYDVR0jBBgwFoAUkz9w25gXuEj4wIYagksQEX3F GSwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQzMjFBLzQ5M0U0NjJFQkNEQTExRURBMUZCMEZCMEYxMjIyNDY4L2t6OXcy NWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu L2t6OXcyNWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl cG9zaXRvcnkvRjM2NDMyMUEvNDkzRTQ2MkVCQ0RBMTFFREExRkIwRkIwRjEyMjI0 Njgva3o5dzI1Z1h1RWo0d0lZYWdrc1FFWDNGR1N3Lm1mdDA1BggrBgEFBQcwDYYp aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAUxbZ0zIZelrJrZ22czMVs/+zYt1VvFg9m d+MCYZ6t46yCnEmuoRWk/Y3XCmqeFIW4ebOiEMNlolBiawZGSp9B+j6JS4ICWuMT KbvKO4RmU6IG5ufnl3vXpFs5biiG3QYEgHES2IdnfVQluuX7wimIEMOELKxNrXz4 5A3v2SQ786hn8xXgZSm6kPrsMmNj2vBlIUjCk1q45aomiAwui0W3tU8T/jYrD24K mP4bfcj8p4YNm1C5Ocr7i31/6QvR0vdbQcMhQZjZrMI9aQfnlWwD/dMp44lM/M+4 Lh72ShKA4aU3VzrtOnW90pyoLDW3cgcBg4t2RCOgLeq2/X+1EiQg -----END CERTIFICATE-----Generated at Wed Nov 5 07:53:00 2025 by rpki-client