$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft File: SoPzGxsGBMptC3KkU9qj61h7TII.mft (raw, json) Hash identifier: x+618XFKJMYvOpT13phy2f0NMB0v+jchjhihp1LIRhI= Subject key identifier: 2A:A5:FA:76:76:D2:77:E3:75:E7:85:24:6C:FB:5A:8A:94:1E:2E:74 Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82 Certificate issuer: /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82 Certificate serial: 039B Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft Manifest number: 038D Signing time: Sun 10 Aug 2025 03:44:44 +0000 Manifest this update: Sun 10 Aug 2025 03:44:44 +0000 Manifest next update: Tue 12 Aug 2025 03:44:43 +0000 Files and hashes: 1: SoPzGxsGBMptC3KkU9qj61h7TII.crl (hash: 7XziZ7gvHcxcpfjvp/OIr7UQ1oJ4igNWcqhOsww3gWU=) 2: C644833AEE7111EE86F7F361775412E6.roa (hash: YgdlYAvq9L3YlpIV33voCNPfR5sCeCWFkjxpZfRsE/k=) 3: 7B89F0F65C1011F097764BA7DAE4EC9C.roa (hash: eGy/v5dJ9Sg7LBFixJArYusJNOZkmFriL3Cy5EJmVsc=) 4: 42CC1EC00B7611EEA5D28A444AD9E6FC.roa (hash: hsH3WbP2I/ts2EY2aQeTrcaXJgp89zEB64yilwHc5pg=) 5: 1E00E01A052911EE84BBD2454AD9E6FC.roa (hash: sJsPXhS2u3JarGDtOh1UZa0tPJmz8vwB7/YeLKri/dk=) 6: F8481206047B11EE91F2EF354AD9E6FC.roa (hash: jtUAjy0+9QV2iQ02jzkoPCkRiaIb/F60j3I68U9pgH4=) 7: F65930865B2911F0A6F411CCDAE4EC9C.roa (hash: zlBIS1j6PkXW4nIJqeYYZE1QxvGn2R6vJr3qJUI1Apc=) 8: C210ED2E064611F094E66494762E951A.roa (hash: Gw9d4UydYI1TKn6YtgmxyrXffZXD7vcLeB5cryG7IG4=) 9: F4E7AB82052811EE94115E454AD9E6FC.roa (hash: 0f6Udr5nVgdqIgPgxaXYb0TifWritIk3wQmsNXYsjss=) 10: 1587E6CCEE7111EEAAFBB25C775412E6.roa (hash: zasoVhr4ZDA3BPJ+ug5ooyH3/rY2lwS6n6p8BUEgx2w=) 11: 4F0B564AF51511EEB208C151775412E6.roa (hash: XNyDHYdBwPvc7NbnPS7pTjwqkoohEdJw312l57VSDB8=) 12: 4A7830A0D18B11EFAB9E6B88762E951A.roa (hash: xV745XWxYsFhNII926E/fN4gSuSPSdyN3viLNfdZy9M=) 13: 31CFB30C052C11EEAC0EDC4E4AD9E6FC.roa (hash: 707c2EgzG32Mlw18CbzTHauUb9G8+7v2J+8ka2UNIbA=) 14: 506B37B0FD0A11EEA3B5DB34017001B1.roa (hash: 12EkqcvUqaX3EcpZliJ64g6Wrfs7WAZ3LR6j5D262RI=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 12 Aug 2025 03:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 923 (0x39b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82 Validity Not Before: Aug 10 03:44:44 2025 GMT Not After : Aug 12 03:44:43 2025 GMT Subject: CN=689815ac-4f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:34:0c:2b:1f:e0:64:89:6f:24:3b:ae:a7:61: 69:7c:bb:f5:ed:0b:85:df:46:cb:b5:24:04:f4:ec: f3:22:08:66:03:fb:a8:df:c4:90:c1:10:66:c2:ff: e0:8a:22:12:6e:7f:37:cf:fc:6f:2f:39:28:55:db: 12:5a:ee:ea:a9:53:e2:20:1c:db:3a:54:6f:c1:bd: f2:e5:85:5f:15:8a:4a:74:5d:27:b7:6b:ce:5b:7d: 1d:3d:c6:3e:c6:ed:71:a3:45:07:56:42:65:32:bf: 26:98:39:9b:4c:b8:eb:20:7a:f2:c7:58:f3:f0:91: ac:a2:f9:b3:50:d7:83:53:53:fe:ac:ea:2d:ff:43: 72:6e:b4:da:f4:60:f5:dc:76:ae:e9:1f:dd:5d:09: ad:e1:d0:c7:51:82:70:54:b6:fe:ec:5b:c4:bd:c5: a3:d1:fc:c1:2e:b5:3b:51:b3:94:a6:c3:e8:8a:ba: 57:94:e5:ca:0c:ad:54:bf:fc:23:20:c2:a8:50:b2: 0c:a6:f3:d1:f3:cb:97:34:c4:2b:e4:f2:ab:cd:89: a0:a9:e4:77:82:20:0b:67:ce:12:08:cc:a1:14:34: 94:52:15:ec:76:ee:a3:e2:9e:2d:9d:e8:31:79:f2: 8d:e4:a1:2d:7a:8b:1d:5d:ba:4c:51:cd:e3:71:3b: 73:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A5:FA:76:76:D2:77:E3:75:E7:85:24:6C:FB:5A:8A:94:1E:2E:74 X509v3 Authority Key Identifier: keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:2f:f1:c9:ae:d7:f6:22:f3:22:78:92:3b:1e:5f:c4:6a:2f: ba:c9:35:b1:16:35:48:8b:b2:70:d7:26:ac:da:31:a0:21:90: cc:f2:89:b2:37:23:65:fa:28:1d:c5:6b:0e:6b:7c:42:56:2a: a5:41:50:13:01:1a:62:5c:d9:72:5b:3c:9b:66:72:ee:e5:4f: d1:36:19:d8:da:bc:0f:8a:fe:e7:a4:2c:fb:54:01:6e:53:cb: 13:e8:38:6c:15:bd:6f:11:ce:44:41:f3:6b:01:1d:d1:25:fa: fb:66:54:6f:2b:b4:86:8d:00:54:d3:9b:5b:2a:24:da:a7:ee: 88:b8:bf:47:af:02:56:ab:28:42:50:7a:7a:28:aa:58:02:80: 1a:25:e3:57:dc:8d:94:b0:00:2d:02:4d:d7:da:93:e0:32:1c: d7:3a:d5:b9:4d:14:f7:c7:fa:c2:b9:94:0d:e4:b5:c4:45:7a: ea:f3:8b:c4:5f:9e:a4:c6:f7:54:d1:99:cf:9d:2e:3f:3b:5f: e6:3f:04:43:35:eb:4e:f0:d9:f7:0e:21:af:f3:75:d0:9f:c2: 3e:4d:98:8b:1a:f7:cd:d5:15:36:9e:6a:5f:7a:c2:03:1a:16: 59:58:4f:95:00:1e:4e:89:b0:c3:bd:13:38:02:29:3c:7b:d2: ba:fe:cf:4e -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA5swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODFFRDBBRjExMC8GA1UEBRMoNEE4M0YzMUIxQjA2MDRDQTZEMEI3MkE0NTNEQUEz RUI1ODdCNEM4MjAeFw0yNTA4MTAwMzQ0NDRaFw0yNTA4MTIwMzQ0NDNaMBgxFjAU BgNVBAMTDTY4OTgxNWFjLTRmNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQD4NAwrH+BkiW8kO66nYWl8u/XtC4XfRsu1JAT07PMiCGYD+6jfxJDBEGbC /+CKIhJufzfP/G8vOShV2xJa7uqpU+IgHNs6VG/BvfLlhV8Vikp0XSe3a85bfR09 xj7G7XGjRQdWQmUyvyaYOZtMuOsgevLHWPPwkayi+bNQ14NTU/6s6i3/Q3JutNr0 YPXcdq7pH91dCa3h0MdRgnBUtv7sW8S9xaPR/MEutTtRs5Smw+iKuleU5coMrVS/ /CMgwqhQsgym89Hzy5c0xCvk8qvNiaCp5HeCIAtnzhIIzKEUNJRSFex27qPini2d 6DF58o3koS16ix1dukxRzeNxO3N1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKqX6 dnbSd+N154UkbPtaipQeLnQwHwYDVR0jBBgwFoAUSoPzGxsGBMptC3KkU9qj61h7 TIIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjgxRUQwLzUyNTFDMDc4Q0UyNDExRURBMDkyRDBBQ0YxMjIyNDY4L1NvUHpH eHNHQk1wdEMzS2tVOXFqNjFoN1RJSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1NvUHpHeHNHQk1wdEMzS2tVOXFqNjFoN1RJSS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2ODFFRDAvNTI1MUMwNzhDRTI0MTFFREEwOTJEMEFDRjEy MjI0NjgvU29Qekd4c0dCTXB0QzNLa1U5cWo2MWg3VElJLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC6L/HJrtf2IvMieJI7Hl/Eai+6yTWx FjVIi7Jw1yas2jGgIZDM8omyNyNl+igdxWsOa3xCViqlQVATARpiXNlyWzybZnLu 5U/RNhnY2rwPiv7npCz7VAFuU8sT6DhsFb1vEc5EQfNrAR3RJfr7ZlRvK7SGjQBU 05tbKiTap+6IuL9HrwJWqyhCUHp6KKpYAoAaJeNX3I2UsAAtAk3X2pPgMhzXOtW5 TRT3x/rCuZQN5LXERXrq84vEX56kxvdU0ZnPnS4/O1/mPwRDNetO8Nn3DiGv83XQ n8I+TZiLGvfN1RU2nmpfesIDGhZZWE+VAB5OibDDvRM4Aik8e9K6/s9O -----END CERTIFICATE-----Generated at Mon Aug 11 04:10:24 2025 by rpki-client