$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft File: PVXHhOoXkS8OlgolxsqSDhACMAo.mft (raw, json) Hash identifier: tI17AFwMw0niSJ8VaApUoHyf97AqqAa7YrbfywBcCqk= Subject key identifier: FE:26:6C:A8:46:8D:F6:65:08:96:AF:A2:66:BD:50:F7:D9:F5:01:43 Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A Certificate issuer: /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A Certificate serial: 06DD Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft Manifest number: 06C8 Signing time: Wed 05 Nov 2025 02:13:20 +0000 Manifest this update: Wed 05 Nov 2025 02:13:19 +0000 Manifest next update: Fri 07 Nov 2025 02:13:19 +0000 Files and hashes: 1: PVXHhOoXkS8OlgolxsqSDhACMAo.crl (hash: 5Fnq3cpLuGNSiPAcvqMq+85jCXGNU9dwC8d3T2K8PRk=) 2: 4F98057C463A11EC8FC05E15D8A014CE.roa (hash: xBs6Vj/OeiFnzOXPhSwdSucFxUDsg3Mh5ATS3BYbuQQ=) 3: A081D0764BB711EC90B9B946D8A014CE.roa (hash: gyJOxBOesIDsoX+F0wCqdrw9sX0TpvZI+h6iVzCHXus=) 4: 8665119A463911EC88B22A14D8A014CE.roa (hash: 9v5B2xaH3Bc4zwDA3exaH6jQCediAk11PcOAPXe7o5k=) 5: D6EDC7E0517E11EEB8E0E4124AD9E6FC.roa (hash: FEIMhfmeS/WDUY9eK4oDCHAUgtEzM8qgwjxj7XmdiaM=) 6: 5A777F624BB811EC988AD647D8A014CE.roa (hash: 1YHFKzIw60VPhLGMqgaM8DC3X+uEENoWlpBODyIvx+8=) 7: 88C7F19A463A11EC8A6DCA15D8A014CE.roa (hash: anrHJdrDwUVVxzqA0H5Lv7h5BhwjhCFTP0rDmIVAs5g=) 8: 2D81E60CD70411EFA4774B68762E951A.roa (hash: WMzMow+21CqdCgojBhlWOGoOTPRBXGbF6iL94Q4Dv5A=) 9: D955A76630FE11ECB753D321D8A014CE.roa (hash: xjCeaYd+LKJvUwcXfMZMX504OiVLskv9I2sBgX5AZDo=) 10: 44276DB4463911EC8EA8D613D8A014CE.roa (hash: 4eP0uQUhgh8UojN9cwAJrEyBjLKtzCe+6TB80lYgykw=) 11: 29A1C4C4463B11ECBE2BB116D8A014CE.roa (hash: O5Px9+yMxD3h4TaIj58cVZ2T/wrbePoVvt5KjLdgZMg=) 12: C25BF862463911EC9C659114D8A014CE.roa (hash: TAmKKzQBDoLwr1xj5R0Z1MOOtgdIjMvjgf/j1EH6WSQ=) 13: 05AE8E624BB811ECB8B77047D8A014CE.roa (hash: IqZdrn6PDd5tCiFmENh9gtBL/vqPbtxvIIhISM2npRA=) 14: 5B28A01A463811ECB5776C12D8A014CE.roa (hash: sw9X0bgyaC8iP6hm/pS3038w/pYcaM83WRGaPy6yt0M=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 07 Nov 2025 00:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1757 (0x6dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A Validity Not Before: Nov 5 02:13:19 2025 GMT Not After : Nov 7 02:13:19 2025 GMT Subject: CN=690ab2c0-b897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:98:17:df:90:bc:28:28:5a:da:ed:7c:ab:bc: 79:43:41:a6:8c:c6:81:5a:b9:a4:a7:63:48:0d:93: cd:f6:4a:a4:99:9f:3c:51:1f:47:cd:1c:94:2a:a9: f6:b0:ad:11:1a:d6:ef:06:f9:22:16:02:83:ae:f0: 66:68:5b:5c:88:07:2a:23:7b:ea:93:1a:91:34:ff: 9b:d7:db:a9:5e:1c:4c:3a:25:cd:b3:8e:a2:d4:93: db:08:46:66:ca:97:c5:f8:40:cb:f1:97:56:52:95: 35:76:ae:f4:90:85:17:6a:2a:da:3c:76:52:53:bd: 65:c0:3e:15:04:f4:f7:14:ac:b2:44:91:89:8a:75: a1:0a:5f:36:62:3c:73:6a:62:6e:81:82:29:a8:a9: 37:bc:55:4b:35:8e:73:48:24:ba:c1:90:7e:a7:3c: 86:26:f7:18:42:d7:c2:bf:a1:1b:eb:ba:76:b0:d7: 08:1b:43:3a:ec:32:14:89:a2:08:32:72:4f:62:b6: 3c:df:43:df:05:d0:8f:01:e8:d2:99:13:d9:d0:9d: bf:a6:11:62:7c:f6:37:fb:f6:2f:a7:dc:ef:51:6f: e7:3e:e0:ad:91:87:d2:44:e0:de:85:30:de:21:fe: be:3e:3a:e3:77:17:d0:ad:b4:dd:a0:5d:9a:e2:93: 2f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:26:6C:A8:46:8D:F6:65:08:96:AF:A2:66:BD:50:F7:D9:F5:01:43 X509v3 Authority Key Identifier: keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5a:07:31:c5:1c:c4:8c:0b:31:03:5d:ac:c3:45:49:03:c2: cf:a1:9d:09:9b:36:68:8e:2e:20:9e:12:19:95:d2:2a:8b:a0: 5c:ef:19:6f:c9:06:28:3e:fd:ce:d5:be:c9:04:25:88:69:fd: d1:23:2f:a4:52:71:d4:42:51:03:c5:f9:d6:48:17:a8:18:af: 29:cb:fb:38:4d:2b:35:25:e5:65:e0:c1:04:99:a6:ee:61:f3: 19:db:c6:b6:f2:15:57:fd:cc:e5:cf:43:85:fb:78:d1:d5:78: 31:39:f4:70:3e:1a:81:b4:b7:ce:2a:ec:66:34:96:ac:af:99: a4:3f:53:3c:d8:f8:58:f4:6c:63:b1:a5:4d:bc:25:50:f0:45: fc:f8:82:e4:c0:f9:28:ab:4b:9e:79:11:99:26:f7:88:90:04: ef:63:34:4f:7e:59:74:cf:f7:c1:97:b1:dc:d4:7c:fa:15:8e: c1:3b:75:35:c3:43:12:68:1d:b2:22:75:ce:24:e6:73:f1:00: b7:33:e6:d2:49:94:79:ac:38:33:e9:d9:6b:a0:85:78:25:44: de:72:9f:bd:1b:01:a8:d2:01:98:db:06:df:5e:9e:42:de:c5: 53:ee:3b:7d:4c:36:1b:55:87:63:2d:64:b3:86:0e:57:b4:cb: 2d:c4:30:7e -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky MEUxMDAyMzAwQTAeFw0yNTExMDUwMjEzMTlaFw0yNTExMDcwMjEzMTlaMBgxFjAU BgNVBAMTDTY5MGFiMmMwLWI4OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC8mBffkLwoKFra7XyrvHlDQaaMxoFauaSnY0gNk832SqSZnzxRH0fNHJQq qfawrREa1u8G+SIWAoOu8GZoW1yIByoje+qTGpE0/5vX26leHEw6Jc2zjqLUk9sI RmbKl8X4QMvxl1ZSlTV2rvSQhRdqKto8dlJTvWXAPhUE9PcUrLJEkYmKdaEKXzZi PHNqYm6BgimoqTe8VUs1jnNIJLrBkH6nPIYm9xhC18K/oRvrunaw1wgbQzrsMhSJ oggyck9itjzfQ98F0I8B6NKZE9nQnb+mEWJ89jf79i+n3O9Rb+c+4K2Rh9JE4N6F MN4h/r4+OuN3F9CttN2gXZriky+BAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU/iZs qEaN9mUIlq+iZr1Q99n1AUMwHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NDcxMkYvRTlDNEJBQTJBMEU4MTFFQjg4OTU4RDEwRjhB RUEyMjgvUFZYSGhPb1hrUzhPbGdvbHhzcVNEaEFDTUFvLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbWgcxxRzEjAsxA12sw0VJA8LPoZ0J mzZoji4gnhIZldIqi6Bc7xlvyQYoPv3O1b7JBCWIaf3RIy+kUnHUQlEDxfnWSBeo GK8py/s4TSs1JeVl4MEEmabuYfMZ28a28hVX/czlz0OF+3jR1XgxOfRwPhqBtLfO KuxmNJasr5mkP1M82PhY9GxjsaVNvCVQ8EX8+ILkwPkoq0ueeRGZJveIkATvYzRP fll0z/fBl7Hc1Hz6FY7BO3U1w0MSaB2yInXOJOZz8QC3M+bSSZR5rDgz6dlroIV4 JUTecp+9GwGo0gGY2wbfXp5C3sVT7jt9TDYbVYdjLWSzhg5XtMstxDB+ -----END CERTIFICATE-----Generated at Wed Nov 5 10:29:18 2025 by rpki-client