$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft File: H025rGtjEIoZvc2-7P9EmELI1qA.mft (raw, json) Hash identifier: Zl3XYORFiyAIB15I+8X8Dn+SwONR7oSiUCfJayrRRcA= Subject key identifier: 7B:B1:07:0E:4B:65:D5:50:AC:15:C2:D7:A9:27:58:14:FB:DB:CB:B3 Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0 Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0 Certificate serial: 0627 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft Manifest number: 060F Signing time: Sun 10 Aug 2025 02:30:00 +0000 Manifest this update: Sun 10 Aug 2025 02:29:59 +0000 Manifest next update: Tue 12 Aug 2025 02:29:59 +0000 Files and hashes: 1: H025rGtjEIoZvc2-7P9EmELI1qA.crl (hash: enipVXS/26M+/l5bs5rTw9r+mPaH80XgXgJ8FCl0pwA=) 2: 147022E0FF7811EF8AD31A7F762E951A.roa (hash: qYTfJITsVD5T5eimpEou1GQGKMzGQHZktsprbHqNuAg=) 3: 97E5095A63C011EF90B900AC762E951A.roa (hash: CHhNHwLMIMRB1HS45x0TZaQ8HwPIwiq6phsmJWqlNls=) 4: A4A1D2764B2511EF8EF8344D762E951A.roa (hash: 1LENRmO0LraUT6L3MliWDe3/LJksiV6Jf6oYUUqLkKg=) 5: 37B83E60FFEE11EFABEA6E81762E951A.roa (hash: gsvCvW76OaOtF8689d8WlWC5LaBRhvA+SlkfDprHioM=) 6: E631AAE263E211EFB8CD0280762E951A.roa (hash: XSoqhxLLsPMFAUnlaR/flj6HqH5kA2geBpaO4zUAc7M=) 7: 78DBB3A8509111EE8C794A224AD9E6FC.roa (hash: SDX6NV8iUbdSzDkDOEULuuCRJop7B8rmcDLu1uSO9fs=) 8: DB5852DAF85D11EC930D6BE8F1222468.roa (hash: 24EK8b+p2r7qpQuA2QKiuCsydz+C8t9Qpt7D1suQdos=) 9: 0EB33C3E515B11ED8AE4D0AAF1222468.roa (hash: eiq5eNdm8hOD/A+aOoYrfS2hurAaCz5anYykVp73ybM=) 10: 873E69A426D411EE808251234AD9E6FC.roa (hash: aoo+0TPZ+18QyH80oIAYV8B61S0zAuLxyHBVzKd8FOQ=) 11: 0323315A4EB811F084FC41D3DAE4EC9C.roa (hash: cPuBysMNDw4xZiHYj3lZqWAcLVHha62uoIAKd7pImOg=) 12: 455DB88A63C011EF901665A8762E951A.roa (hash: pGHG04rI1V24GpX027/GUmlPC9Q173BRWV0hc0ib0ko=) 13: DBFE937C426511EEBE348D774AD9E6FC.roa (hash: QIaZqhKkN8RZ2TMX3IFJAuphOSd06o9Ok298FA+iNs4=) 14: BBDB457C50B211ED936AB1EFF1222468.roa (hash: Ic3/YAN//xfDApEXJkLHl3ajCQB8DF7eTF+JzdLiPrw=) 15: CBA17CF8509111EEB65831234AD9E6FC.roa (hash: wP6aKsEiYvGLq91LUKac5Hf0WJB6D/C/9SQUe8eJUqs=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 12 Aug 2025 00:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1575 (0x627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36960E7AF, serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0 Validity Not Before: Aug 10 02:29:59 2025 GMT Not After : Aug 12 02:29:59 2025 GMT Subject: CN=68980428-6a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:67:83:74:6a:b8:b1:9a:0d:42:9f:2e:98:09: 67:19:85:cb:9d:63:ac:52:dc:ae:82:24:27:80:95: 1d:e5:fa:0b:d5:d5:9a:a9:70:36:b6:9d:ff:bc:f0: 0f:3b:44:e2:51:34:56:a9:3a:17:ac:ef:4a:11:d0: 01:13:e5:c1:63:2b:2a:c5:e8:1a:cc:47:ff:36:17: 87:4b:fe:0a:99:c3:2c:87:ed:f3:22:7a:38:84:aa: ba:77:e6:81:38:05:95:e4:e9:3b:cf:c0:68:6d:66: 8b:dd:b0:a1:3d:68:6c:13:af:4b:cc:3c:76:70:72: 36:e1:6b:ff:4c:ec:f1:19:ad:30:ec:fd:54:44:e8: 3c:ba:99:35:15:9b:12:10:c3:4e:30:84:3c:48:73: 5e:cb:87:92:95:8c:4f:47:24:5d:cb:ee:3c:76:cb: 42:b1:14:93:73:81:45:33:7c:7a:8e:95:9f:c9:b1: 36:ea:4c:48:98:c8:33:9a:c4:2b:39:43:19:9a:16: e1:81:a1:ea:88:05:46:d8:a6:4c:91:a7:d8:3e:98: f6:a3:de:70:28:22:6a:17:ca:f3:e1:43:2e:61:fa: 93:2a:1f:0f:87:23:0d:be:dc:62:bc:eb:ff:3b:15: 02:58:83:da:3b:e7:eb:a0:e4:a1:11:11:cc:11:3e: 2c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B1:07:0E:4B:65:D5:50:AC:15:C2:D7:A9:27:58:14:FB:DB:CB:B3 X509v3 Authority Key Identifier: keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:b5:82:f5:26:e3:fc:14:e5:1f:bb:02:74:d3:cb:b2:62:45: 89:8f:90:33:e3:38:a0:7f:ab:fa:ad:9d:a4:19:aa:30:c8:02: e5:fb:44:70:13:7d:e9:e6:5c:03:61:cb:ba:ce:86:4f:56:c0: 58:03:08:a3:ed:68:7c:7b:a7:c4:71:af:2b:4d:c6:cb:ed:72: 85:7d:12:70:53:2b:e6:40:8f:3e:dd:9d:c9:be:4f:21:bd:63: 89:4a:20:81:4b:5c:62:ab:d8:27:6c:15:f8:34:d1:91:8e:26: db:ba:e3:2f:00:0a:6c:28:c5:1f:f6:3e:8e:bf:80:6c:a1:d5: 0d:79:11:f7:a5:4a:51:34:e1:2c:40:1c:30:20:e8:4e:18:61: 30:bf:66:38:8c:15:26:ef:05:2b:99:e6:85:0d:1b:59:05:2e: eb:b7:6b:4b:77:53:8b:dd:6f:2a:c8:12:1d:e3:59:63:e0:06: be:af:55:56:73:c6:8f:24:24:e5:a6:ca:14:35:ac:63:91:ff: 18:57:33:80:13:23:2c:22:00:c9:ff:a7:36:75:7c:e0:bf:e1: e3:02:64:2f:62:2f:f9:13:78:4f:42:ad:23:4c:a9:95:ad:ef: 5e:42:b4:81:02:32:d1:d0:0e:ce:f5:f4:6e:d7:26:4f:7a:20: 62:85:2c:b8 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBicwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 OTYwRTdBRjExMC8GA1UEBRMoMUY0REI5QUM2QjYzMTA4QTE5QkRDREJFRUNGRjQ0 OTg0MkM4RDZBMDAeFw0yNTA4MTAwMjI5NTlaFw0yNTA4MTIwMjI5NTlaMBgxFjAU BgNVBAMTDTY4OTgwNDI4LTZhMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDDZ4N0arixmg1Cny6YCWcZhcudY6xS3K6CJCeAlR3l+gvV1ZqpcDa2nf+8 8A87ROJRNFapOhes70oR0AET5cFjKyrF6BrMR/82F4dL/gqZwyyH7fMiejiEqrp3 5oE4BZXk6TvPwGhtZovdsKE9aGwTr0vMPHZwcjbha/9M7PEZrTDs/VRE6Dy6mTUV mxIQw04whDxIc17Lh5KVjE9HJF3L7jx2y0KxFJNzgUUzfHqOlZ/JsTbqTEiYyDOa xCs5QxmaFuGBoeqIBUbYpkyRp9g+mPaj3nAoImoXyvPhQy5h+pMqHw+HIw2+3GK8 6/87FQJYg9o75+ug5KEREcwRPixzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUe7EH Dktl1VCsFcLXqSdYFPvby7MwHwYDVR0jBBgwFoAUH025rGtjEIoZvc2+7P9EmELI 1qAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjk2MEU3LzFDMEFFNjNFRUI3NzExRUI4MERFN0MxRUQ4QTAxNENFL0gwMjVy R3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0gwMjVyR3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2OTYwRTcvMUMwQUU2M0VFQjc3MTFFQjgwREU3QzFFRDhB MDE0Q0UvSDAyNXJHdGpFSW9admMyLTdQOUVtRUxJMXFBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRtYL1JuP8FOUfuwJ008uyYkWJj5Az 4zigf6v6rZ2kGaowyALl+0RwE33p5lwDYcu6zoZPVsBYAwij7Wh8e6fEca8rTcbL 7XKFfRJwUyvmQI8+3Z3Jvk8hvWOJSiCBS1xiq9gnbBX4NNGRjibbuuMvAApsKMUf 9j6Ov4BsodUNeRH3pUpRNOEsQBwwIOhOGGEwv2Y4jBUm7wUrmeaFDRtZBS7rt2tL d1OL3W8qyBId41lj4Aa+r1VWc8aPJCTlpsoUNaxjkf8YVzOAEyMsIgDJ/6c2dXzg v+HjAmQvYi/5E3hPQq0jTKmVre9eQrSBAjLR0A7O9fRu1yZPeiBihSy4 -----END CERTIFICATE-----Generated at Sun Aug 10 20:59:14 2025 by rpki-client