$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft File: qO-WBRTjNkRNPN43sktm3DnUPRs.mft (raw, json) Hash identifier: 7dd6xAFH9RDN2dqI4ePrAm+ZH3UvZYmqdPPaiOAt5rk= Subject key identifier: 08:C4:54:B0:1E:05:E5:C4:07:DB:E0:75:06:CE:97:5D:B1:46:E6:16 Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Certificate serial: 0319 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft Manifest number: 0305 Signing time: Sun 10 Aug 2025 04:03:32 +0000 Manifest this update: Sun 10 Aug 2025 04:03:31 +0000 Manifest next update: Tue 12 Aug 2025 04:03:31 +0000 Files and hashes: 1: qO-WBRTjNkRNPN43sktm3DnUPRs.crl (hash: mgyTEzVgv+QLXcz78s1fjPGjo+j1Z4Vdo3OHoGDewsY=) 2: C64BDF325B8611EE8F5917154AD9E6FC.roa (hash: lOfMw6yYmupoBGzZG06JxE7nkGYN0SjR1YBL+6yU110=) 3: 221DE36C5B7F11EEBAA0307C4AD9E6FC.roa (hash: akgSyzvUhBZdD/Jo/1snS9zDQnQhIY/z4b5eUssk1L4=) 4: 3FC126045B7F11EE91B3797C4AD9E6FC.roa (hash: B4Jxb4zuiNxx8ARYO+8FuXUu5CFHZJCjPVqFobOB2EU=) 5: F592AE225B7E11EEAAD8A37B4AD9E6FC.roa (hash: H2+/hMWhZrQQ/v+xp+P99me7GUvAhaEZLEIOvuDJ8+o=) 6: 9389DEB25B7E11EE85FB5A794AD9E6FC.roa (hash: saW9gDDU1fU/ss5E5QByOp+7T1wbc1vVgpJ7XS+gk+s=) 7: 39E85D245B7F11EE90195D7C4AD9E6FC.roa (hash: eHbXQ/7kild+PjHeBFmSGxlAnlG3pi2uyC9o63m5Mio=) 8: 44122BBE5B7E11EEA5C359784AD9E6FC.roa (hash: dlLpBI0Us25zgjOKkdJouRreKgFknaWvSBpHKXaHN4Q=) 9: 0DDE14645B8711EEBE2DF3154AD9E6FC.roa (hash: OVYm5oOpe8XlJOHUYg0R0oIytfPmlhVRgGeohPVoeGg=) 10: E29E1C625B7D11EEAFF513774AD9E6FC.roa (hash: cL6yXVTdN5LFRK/8lI56JvUwQ8huIMxP3ArtUJsfAsg=) 11: 0DB547A45B7E11EE95F5E0774AD9E6FC.roa (hash: sgLUjm9KT8NBSGsfPuF7zb59LXdnTNhjWZlBuJluY4o=) 12: 82BE0D345B8711EE8AF170174AD9E6FC.roa (hash: du0kSdCk2tSzKNVUZIxuV5z/5Bcr0/T6HJ/NasAIv4s=) 13: 673167545B7E11EE98EEBD784AD9E6FC.roa (hash: adqbPWSj3qJmhRpUh3DUEWmWfDKPs4YfwC9ZlFS5ias=) 14: A97AA9E05B7E11EEAD5E8F794AD9E6FC.roa (hash: 3NkJ+hNEcmyOZzaQCsy/+Ozh2yGmiiWLNtnnqsmfG2I=) 15: EFB2EA005B8611EEB1C27E154AD9E6FC.roa (hash: ArKkYMPjrZ4ijgIQyF9Kcy4ua9ozHX8IBDIWFIk7DdU=) 16: BBA7D8A05B8711EEA5880E184AD9E6FC.roa (hash: NwbjXk0kj8eY+sbmyk9mA7z7P4Od2Lqrhnl5SE+949A=) 17: 7D84FCC85B7E11EE930F05794AD9E6FC.roa (hash: LbVSQZqmCHBXF80jfRgZ632p1CiqtMRJRyKOIJ1fwIY=) 18: 5A3685F85B7D11EEB4B9A0754AD9E6FC.roa (hash: hua4m2v20w0RdcluLq3SvMVi3aYeRg47OfgA9wTRs3E=) 19: D6AA10E05B7E11EE9B32467A4AD9E6FC.roa (hash: RAafA0ML5VlgZ60Y1uxp4EowWyBnwvs0LOD/pOddd5E=) 20: 9FF8CF2E5B8711EE9F40A5174AD9E6FC.roa (hash: lG9MW9PGMEKdmiEYPlQxLtvMK2I/+bgWEhfhck5fvqA=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 12 Aug 2025 00:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 793 (0x319) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3668CFEAF, serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Validity Not Before: Aug 10 04:03:31 2025 GMT Not After : Aug 12 04:03:31 2025 GMT Subject: CN=68981a14-6b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:31:56:de:6e:74:a5:e0:a2:f4:e3:37:70:f4: 06:d8:87:51:20:8d:ef:94:8f:45:ad:a6:b7:7b:85: 88:6f:f8:f7:ec:a4:90:62:b0:51:95:0f:aa:87:28: 36:dd:81:9d:5f:2d:38:cd:b5:53:97:5c:ab:77:8b: 1a:ec:0d:24:45:00:c7:4a:a6:a9:8e:73:dd:9d:a7: 41:c2:ad:4e:18:3c:30:e5:00:8c:d3:ba:4f:fe:5d: 34:a2:50:0f:f5:27:54:38:61:a4:9b:eb:ee:91:ab: 72:91:3d:f7:19:f8:11:78:59:13:f6:ca:2a:3c:1e: fc:0c:c0:47:db:f1:50:9b:ba:b3:52:7c:12:e9:ee: d6:7d:f2:31:e3:dd:99:7e:f6:9d:a6:88:14:50:1a: ac:36:e0:a4:19:11:01:6b:07:3f:31:ce:16:50:ed: 72:40:02:4e:02:c1:09:9f:4b:72:73:65:5e:b5:77: 4d:b3:14:ab:79:2a:37:ec:7e:40:c1:5a:02:5b:cb: e5:0d:e2:c8:3e:18:73:b0:cb:36:ab:20:ca:ab:30: c7:af:c6:bc:ce:49:55:5e:40:3c:4e:57:40:d4:ec: be:b6:37:0e:6b:ad:cc:ba:4c:21:1b:67:c8:64:af: 8b:de:54:47:79:f2:9d:32:c5:ab:ab:85:42:68:a2: b2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C4:54:B0:1E:05:E5:C4:07:DB:E0:75:06:CE:97:5D:B1:46:E6:16 X509v3 Authority Key Identifier: keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:84:52:40:ee:09:6d:96:7b:98:1a:e9:64:01:65:99:51:3d: 80:02:a9:49:25:1b:8c:f2:c2:8e:54:b8:cd:e0:18:3a:71:5b: c0:80:8d:f3:4a:da:6f:f1:8e:dd:f4:48:e7:14:e9:20:af:bb: 64:c0:fb:d4:eb:87:95:85:8f:27:b2:f7:74:3e:8d:87:f8:26: 7f:fe:99:0b:cd:14:a4:d2:a0:3f:3a:f0:04:33:76:3e:68:fd: 93:7b:9c:60:05:f9:4b:00:09:90:c3:a3:4d:8f:c4:95:81:29: db:aa:be:62:1e:67:a0:82:7a:2c:aa:a8:f5:b7:f6:e8:1c:ef: 60:0d:99:4f:81:17:81:22:72:6d:57:6b:7c:b9:49:4f:b1:4c: 07:bb:a0:e3:f8:58:f6:d1:f0:04:0f:4f:08:4d:0c:3e:81:91: 88:cc:61:e1:fb:c2:01:36:ca:09:ff:92:16:2f:8c:2b:88:7d: 23:ea:21:d0:2f:5a:b9:48:7e:79:54:d0:b3:e3:1a:f0:21:39: 55:da:50:06:51:23:8e:f7:58:9f:af:51:f4:73:e5:9c:7f:17: 3b:92:44:b9:b9:c7:31:e5:fa:0f:bd:50:78:e8:22:37:9e:2b: 64:7e:a2:e2:12:12:9f:f1:de:bc:67:b6:3d:2d:23:d6:be:12: 4a:83:11:0b -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAxkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NjhDRkVBRjExMC8GA1UEBRMoQThFRjk2MDUxNEUzMzY0NDREM0NERTM3QjI0QjY2 REMzOUQ0M0QxQjAeFw0yNTA4MTAwNDAzMzFaFw0yNTA4MTIwNDAzMzFaMBgxFjAU BgNVBAMTDTY4OTgxYTE0LTZiM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDjMVbebnSl4KL04zdw9AbYh1Egje+Uj0Wtprd7hYhv+PfspJBisFGVD6qH KDbdgZ1fLTjNtVOXXKt3ixrsDSRFAMdKpqmOc92dp0HCrU4YPDDlAIzTuk/+XTSi UA/1J1Q4YaSb6+6Rq3KRPfcZ+BF4WRP2yio8HvwMwEfb8VCburNSfBLp7tZ98jHj 3Zl+9p2miBRQGqw24KQZEQFrBz8xzhZQ7XJAAk4CwQmfS3JzZV61d02zFKt5Kjfs fkDBWgJby+UN4sg+GHOwyzarIMqrMMevxrzOSVVeQDxOV0DU7L62Nw5rrcy6TCEb Z8hkr4veVEd58p0yxaurhUJoorLHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUCMRU sB4F5cQH2+B1Bs6XXbFG5hYwHwYDVR0jBBgwFoAUqO+WBRTjNkRNPN43sktm3DnU PRswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjY4Q0ZFLzk1RUZENzRDMzc1NzExRUVCQjE0MzIxODRBRDlFNkZDL3FPLVdC UlRqTmtSTlBONDNza3RtM0RuVVBScy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3FPLVdCUlRqTmtSTlBONDNza3RtM0RuVVBScy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NjhDRkUvOTVFRkQ3NEMzNzU3MTFFRUJCMTQzMjE4NEFE OUU2RkMvcU8tV0JSVGpOa1JOUE40M3NrdG0zRG5VUFJzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7hFJA7gltlnuYGulkAWWZUT2AAqlJ JRuM8sKOVLjN4Bg6cVvAgI3zStpv8Y7d9EjnFOkgr7tkwPvU64eVhY8nsvd0Po2H +CZ//pkLzRSk0qA/OvAEM3Y+aP2Te5xgBflLAAmQw6NNj8SVgSnbqr5iHmeggnos qqj1t/boHO9gDZlPgReBInJtV2t8uUlPsUwHu6Dj+Fj20fAED08ITQw+gZGIzGHh +8IBNsoJ/5IWL4wriH0j6iHQL1q5SH55VNCz4xrwITlV2lAGUSOO91ifr1H0c+Wc fxc7kkS5uccx5foPvVB46CI3nitkfqLiEhKf8d68Z7Y9LSPWvhJKgxEL -----END CERTIFICATE-----Generated at Sun Aug 10 15:58:40 2025 by rpki-client