$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft File: kz9w25gXuEj4wIYagksQEX3FGSw.mft (raw, json) Hash identifier: Co3PqeeotiEnqgqkH5I1DtLVijNxmPmtqATE4V0SwOc= Subject key identifier: ED:2D:90:58:DD:A5:D9:0B:65:E1:88:2B:65:96:63:8A:1C:D3:2C:C7 Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Certificate serial: 03B2 Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft Manifest number: 03A2 Signing time: Sat 09 Aug 2025 03:41:35 +0000 Manifest this update: Sat 09 Aug 2025 03:41:34 +0000 Manifest next update: Mon 11 Aug 2025 03:41:34 +0000 Files and hashes: 1: kz9w25gXuEj4wIYagksQEX3FGSw.crl (hash: 1G1jxGpQfje3FJKeubKdbrOdIyXYehbo/l8H6cR+UHk=) 2: B104EE44D53311EE8BE4F36C775412E6.roa (hash: RqxwUBj2Bc+OGaTDdk4x7to8RcdRWFqstSwOVMh1no8=) 3: 1E005EBCD53811EEA636DE73775412E6.roa (hash: NZukzj3sWyjYLO9ToCsVsgQAC/kq2Oo6mzyBtHQWmD8=) 4: 8ED6BADCD53311EEB2A2C36C775412E6.roa (hash: 4/E5JqKYHi82tnNDpVDrDiMaVaUcTpYsZcy/yA05uhA=) 5: 0DEEF6F0D53311EEB556F46B775412E6.roa (hash: P5ibcWLG9H1Kur9SCsMbIiX3jBWNN4xNF46xx72YQHI=) 6: A5A2959EDD3D11EEBAF174B7775412E6.roa (hash: ODN6UQwLRLuCmMW2LaPD2vWq9D+bquTGny4/1fInMQE=) 7: E5662DD4A17A11EEAB16F955D25BE465.roa (hash: nQB8uEKFdXSZvidfMMlhgfBX43bi5bFfOgAaXmAWfUM=) 8: 64C2AA52D53411EEB69B076E775412E6.roa (hash: ApnKXgX4qtwCc4Ec2u4PHGuX3hUujQ6rhZ5C7rafC04=) 9: 6DD19D16D53311EE8136926C775412E6.roa (hash: v2hwM/LETMN1QLgipB8E8B+3kZLiPan/2yTGEjfAszc=) 10: 4FFFB85ED53311EE9E536E6C775412E6.roa (hash: D+tEjQwBXIivLTAaXT7TthK1xPvy3VJOqpaVsbM3hVk=) 11: 3F0DCC84D53811EE9F160874775412E6.roa (hash: ZQcO3DmU3Brb6BRvD6IVWLlf8rwN0CI8i4MNTEzPGK0=) 12: BCD1ADAAD53511EEA3B22470775412E6.roa (hash: d12Kr2qwAhbDBscwoutPKxlu3aElunyjg9Yu2LBeVsw=) 13: E4B0AF5CDD3B11EE8C72BDB4775412E6.roa (hash: 0arozNRt9JTjzBkDd/i9r9NcNES2kthw5/x77T8UhJo=) 14: DF52896AD53711EE84074A73775412E6.roa (hash: uIa+9vsGlaMu/Injc/vzOUtcnqp2BVTquSWUrb4Yn00=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 11 Aug 2025 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 946 (0x3b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F364321AAR, serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Validity Not Before: Aug 9 03:41:34 2025 GMT Not After : Aug 11 03:41:34 2025 GMT Subject: CN=6896c36f-556c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1a:c7:fb:14:e9:d0:0d:15:e7:52:11:f1:4f: 11:6e:70:c9:82:21:b1:9e:d2:a0:cc:2f:20:af:20: 64:aa:77:ad:84:48:64:65:17:7c:ad:2a:9d:9c:60: 5b:2a:86:9d:c4:3b:98:d4:a8:a1:c8:b1:14:2a:74: ca:23:da:0d:cf:7c:e9:b7:a8:59:e2:37:ed:5e:d3: 68:d2:f8:bd:bd:07:2d:df:ab:4e:cf:8f:09:ec:4e: d5:32:3e:2f:12:cd:e7:e7:d9:d6:c0:c1:e1:ae:0a: c0:d6:12:06:8a:8c:d5:7c:33:76:8f:25:33:23:73: 66:dd:54:f1:52:ea:e0:94:c8:49:c1:bf:2e:5f:74: 66:29:b6:22:91:e1:77:9a:d1:48:89:01:ad:88:24: 13:96:39:9d:99:ef:cf:de:a0:67:cd:5e:7b:81:37: a8:b2:e4:21:85:33:ff:aa:c9:8c:82:ec:8b:9a:bf: fc:c4:47:3f:7c:dd:04:31:2c:2d:f5:35:f2:3f:64: ca:40:0b:d8:7c:7f:49:0b:23:6f:8a:7f:78:a2:5a: 12:2f:4c:a3:45:c0:40:54:be:2a:31:ca:72:74:2a: 68:b2:31:a1:60:ae:94:49:cf:0e:fa:ca:1e:93:16: 5c:59:9d:b7:ac:63:3a:11:3a:0c:82:e9:ff:23:a8: b0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2D:90:58:DD:A5:D9:0B:65:E1:88:2B:65:96:63:8A:1C:D3:2C:C7 X509v3 Authority Key Identifier: keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a7:35:4d:b7:2c:62:8d:82:ee:44:2a:6c:b3:42:71:a3:e4: d9:0e:43:28:3d:96:8d:5d:1f:b6:32:87:fb:e7:19:fa:f4:64: b2:16:91:a7:4c:24:12:15:b7:3e:94:a9:fb:25:5c:6b:86:2d: b0:62:8d:33:9d:67:a9:2c:37:10:85:fa:45:10:b8:d2:14:27: 44:c3:50:39:e1:3b:96:2d:f8:9f:d5:4d:3e:fa:e0:cb:ca:bb: d9:86:b9:9a:8d:54:ff:1d:d3:76:3c:ba:94:d7:5c:6d:58:64: e6:84:4c:b0:c5:4b:32:6c:cc:d6:4d:fd:a9:0a:59:77:e2:cf: 25:94:a5:d8:68:bc:eb:ad:db:30:a8:fc:ad:7e:86:e6:c9:ba: 03:9c:8b:ca:ec:de:79:ba:ea:45:3a:83:43:bb:fa:e8:5e:cd: 4f:f7:ae:bb:1c:e4:0c:40:8d:8e:d7:61:3a:c6:74:a6:e5:74: 67:8a:c0:a1:9f:9f:d0:48:e8:0a:8a:d8:82:44:bb:8f:27:41: 77:99:49:2b:e8:f6:a5:0b:1a:89:79:aa:50:95:39:42:72:42: 33:86:bc:c5:b5:43:c2:5a:bf:df:03:b7:8e:ae:8e:8e:50:06: d7:95:9c:80:32:95:60:16:03:0e:32:4d:cc:cc:04:cf:ec:1a: d8:4c:b3:8f -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICA7IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDMyMUFBUjExMC8GA1UEBRMoOTMzRjcwREI5ODE3Qjg0OEY4QzA4NjFBODI0QjEw MTE3REM1MTkyQzAeFw0yNTA4MDkwMzQxMzRaFw0yNTA4MTEwMzQxMzRaMBgxFjAU BgNVBAMTDTY4OTZjMzZmLTU1NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDQGsf7FOnQDRXnUhHxTxFucMmCIbGe0qDMLyCvIGSqd62ESGRlF3ytKp2c YFsqhp3EO5jUqKHIsRQqdMoj2g3PfOm3qFniN+1e02jS+L29By3fq07PjwnsTtUy Pi8Szefn2dbAweGuCsDWEgaKjNV8M3aPJTMjc2bdVPFS6uCUyEnBvy5fdGYptiKR 4Xea0UiJAa2IJBOWOZ2Z78/eoGfNXnuBN6iy5CGFM/+qyYyC7Iuav/zERz983QQx LC31NfI/ZMpAC9h8f0kLI2+Kf3iiWhIvTKNFwEBUvioxynJ0KmiyMaFgrpRJzw76 yh6TFlxZnbesYzoROgyC6f8jqLBjAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU7S2Q WN2l2Qtl4YgrZZZjihzTLMcwHwYDVR0jBBgwFoAUkz9w25gXuEj4wIYagksQEX3F GSwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQzMjFBLzQ5M0U0NjJFQkNEQTExRURBMUZCMEZCMEYxMjIyNDY4L2t6OXcy NWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu L2t6OXcyNWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl cG9zaXRvcnkvRjM2NDMyMUEvNDkzRTQ2MkVCQ0RBMTFFREExRkIwRkIwRjEyMjI0 Njgva3o5dzI1Z1h1RWo0d0lZYWdrc1FFWDNGR1N3Lm1mdDA1BggrBgEFBQcwDYYp aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtpzVNtyxijYLuRCpss0Jxo+TZDkMoPZaN XR+2Mof75xn69GSyFpGnTCQSFbc+lKn7JVxrhi2wYo0znWepLDcQhfpFELjSFCdE w1A54TuWLfif1U0++uDLyrvZhrmajVT/HdN2PLqU11xtWGTmhEywxUsybMzWTf2p Cll34s8llKXYaLzrrdswqPytfobmyboDnIvK7N55uupFOoNDu/roXs1P9667HOQM QI2O12E6xnSm5XRnisChn5/QSOgKitiCRLuPJ0F3mUkr6PalCxqJeapQlTlCckIz hrzFtUPCWr/fA7eOro6OUAbXlZyAMpVgFgMOMk3MzATP7BrYTLOP -----END CERTIFICATE-----Generated at Sat Aug 9 23:17:51 2025 by rpki-client