$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft File: S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft (raw, json) Hash identifier: +hjfKNjvuGU18T1d3q6lbucLw0ej5DQAV3N42O3DT1s= Subject key identifier: E8:32:04:5E:9B:DD:F6:02:E2:2D:5C:93:87:01:83:12:C8:46:64:9B Authority key identifier: 4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70 Certificate issuer: /CN=F36A7021AF/serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70 Certificate serial: 0255 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft Manifest number: 024A Signing time: Wed 05 Nov 2025 04:31:26 +0000 Manifest this update: Wed 05 Nov 2025 04:31:25 +0000 Manifest next update: Fri 07 Nov 2025 04:31:25 +0000 Files and hashes: 1: S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl (hash: xm4YpZ6DaJo8ZqwUl0PGxKcReDKWHoq0JWbHhsJznA4=) 2: 13E45E1C0E8911EF82A4F35A017001B1.roa (hash: eSu/uNHefvRDyXuPd6bFN5AOugU7elsPo3xlxIjj8Jg=) 3: 8A38C304166411EFB6DD9865017001B1.roa (hash: BNl8LzAAIi2V4u4Uq6J4OERouFI7xdVKsG2qa+DYXuM=) 4: 5386CFDE0B8A11EF94113C6D017001B1.roa (hash: +ksSk336SAPxQuepQDqlYfI3yCwLjxok4/1qF910PT0=) 5: 67A273EE166411EFBD7C3965017001B1.roa (hash: XYlnou7kQfD138NpOpxfEa0ALGHIsAR97sWZnC83Ikk=) 6: 2342ECF6166411EF86A28464017001B1.roa (hash: LAeP18nBFk8e55lig13p1FU7erjKKZ2bUOy7MssyCfI=) 7: 10F75FE0166511EF9BA89F6A017001B1.roa (hash: tQ6IcNtYg4Q1dSfQDi4FIUeQKLa90qMyIm8jTAnmXuE=) 8: C37E4A0E166311EFB9A5E45F017001B1.roa (hash: Qp36Juuigfj3IghvTSmzrtpde3+TFB8XRGmUObCG6Jw=) 9: 258EC7AC02E911EF84DA781F017001B1.roa (hash: MKLHz01B1hcRnrm1BW8ZdbgoDIWCXXjJPB+3zMRkn5k=) 10: 45A131960E8911EFB58ADB5E017001B1.roa (hash: h14yox0jQvTPprZRCXkBDOwPFxmyJDOyS+ltHOkYJCY=) 11: ED324F4E166311EF80A74E60017001B1.roa (hash: yLMrRx31o9f3857chkGq2HGPGPmxnmeZmw24iYDHkdE=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 07 Nov 2025 00:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36A7021AF, serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70 Validity Not Before: Nov 5 04:31:25 2025 GMT Not After : Nov 7 04:31:25 2025 GMT Subject: CN=690ad31d-3c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c9:2a:1a:b8:2f:fc:80:f9:10:e9:78:a5:ee: b0:cf:67:96:fe:5f:f6:9b:77:a8:db:f8:b1:13:49: 9f:b8:d1:97:1a:90:53:ee:90:a1:93:65:d6:75:5b: 29:05:3c:2a:99:91:d2:37:1d:fa:3e:fc:3d:8f:f4: 5f:94:63:bb:1c:56:03:c8:0a:1e:74:78:74:a0:1e: e6:b5:9a:15:9c:65:bf:4a:fe:1e:ca:72:70:68:4c: bc:cd:68:e3:2d:07:15:39:6d:44:33:a5:62:17:a2: d3:89:f3:a5:5f:22:54:d2:74:6e:ca:20:e4:e7:1d: e8:70:e9:74:b7:cb:b0:e2:8e:29:d2:47:c9:f3:c1: d9:68:18:f5:01:56:1d:72:32:a0:f3:ed:28:09:d2: d2:40:aa:df:f8:8f:4d:04:1c:19:67:d8:e9:c0:fc: e5:e3:67:dd:95:f4:bc:c1:d9:81:db:a2:23:e2:28: db:5a:fa:d7:3a:a9:de:1a:a4:0e:35:97:95:25:a8: 7f:4f:73:cc:b9:44:97:73:f6:e2:8e:01:20:f3:9f: 36:48:16:dd:6f:f6:15:9a:e6:99:1f:c3:48:7b:88: fd:43:3c:18:20:57:4a:38:cf:ec:41:cf:3b:cf:21: 44:ab:b2:ce:ba:16:ba:20:4c:d8:1c:38:db:1e:d3: 01:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:32:04:5E:9B:DD:F6:02:E2:2D:5C:93:87:01:83:12:C8:46:64:9B X509v3 Authority Key Identifier: keyid:4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f5:37:39:94:9f:10:82:8f:6d:5c:b3:0a:b6:52:32:ba:8c: 58:a0:13:54:29:4e:02:c7:fe:e2:d8:7c:53:6d:08:47:b1:0d: 16:d1:cb:32:15:11:d1:5c:75:83:b5:a3:b2:aa:81:a0:6b:09: 8a:25:68:d5:36:0d:1c:f8:f3:c7:6f:e0:53:b8:cf:79:f9:09: 94:1d:14:09:e1:8b:00:30:30:66:71:34:ca:25:4e:d9:6b:bc: 1a:37:45:cd:8a:7d:ef:8f:f0:58:a4:57:c3:ac:8f:6e:cb:9c: ef:db:04:ea:b2:39:e2:ac:a6:8d:8f:59:08:3c:86:80:95:a0: ca:ee:fe:21:36:7e:fc:7c:ce:9a:c6:24:7d:1e:a3:4f:cf:b7: 9b:dd:31:69:98:c6:1e:a0:1f:44:c5:86:37:99:0a:c3:3c:1e: 40:d3:2e:08:48:d1:39:5d:3b:c5:75:c9:dd:47:37:5a:f0:24: 3e:1e:4e:d4:f4:fc:5a:35:b6:23:14:2c:4c:ed:fd:26:ed:0d: bd:47:d7:f9:28:2f:c6:2b:5f:d7:8b:b6:ea:30:1e:3b:4c:ef: f5:a3:ce:43:af:2f:f9:6a:ee:6f:41:a1:7a:03:da:a3:b3:4c: 47:06:30:d5:a2:d6:dc:37:09:b6:c2:43:24:de:2f:1b:08:1a: 14:bf:f9:75 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QTcwMjFBRjExMC8GA1UEBRMoNEI0ODY2MjAwNDA4OUY1QkI2ODE5NEFCMDRCODMw Q0Q0MzNBMkI3MDAeFw0yNTExMDUwNDMxMjVaFw0yNTExMDcwNDMxMjVaMBgxFjAU BgNVBAMTDTY5MGFkMzFkLTNjNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC0ySoauC/8gPkQ6Xil7rDPZ5b+X/abd6jb+LETSZ+40ZcakFPukKGTZdZ1 WykFPCqZkdI3Hfo+/D2P9F+UY7scVgPICh50eHSgHua1mhWcZb9K/h7KcnBoTLzN aOMtBxU5bUQzpWIXotOJ86VfIlTSdG7KIOTnHehw6XS3y7DijinSR8nzwdloGPUB Vh1yMqDz7SgJ0tJAqt/4j00EHBln2OnA/OXjZ92V9LzB2YHboiPiKNta+tc6qd4a pA41l5UlqH9Pc8y5RJdz9uKOASDznzZIFt1v9hWa5pkfw0h7iP1DPBggV0o4z+xB zzvPIUSrss66FrogTNgcONse0wHrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU6DIE Xpvd9gLiLVyThwGDEshGZJswHwYDVR0jBBgwFoAUS0hmIAQIn1u2gZSrBLgwzUM6 K3AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkE3MDIxL0U1MDM5OTFDMDJDMzExRUZCRDEyNzdGNTAwNzAwMUIxL1MwaG1J QVFJbjF1MmdaU3JCTGd3elVNNkszQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1MwaG1JQVFJbjF1MmdaU3JCTGd3elVNNkszQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QTcwMjEvRTUwMzk5MUMwMkMzMTFFRkJEMTI3N0Y1MDA3 MDAxQjEvUzBobUlBUUluMXUyZ1pTckJMZ3d6VU02SzNBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA99Tc5lJ8Qgo9tXLMKtlIyuoxYoBNU KU4Cx/7i2HxTbQhHsQ0W0csyFRHRXHWDtaOyqoGgawmKJWjVNg0c+PPHb+BTuM95 +QmUHRQJ4YsAMDBmcTTKJU7Za7waN0XNin3vj/BYpFfDrI9uy5zv2wTqsjnirKaN j1kIPIaAlaDK7v4hNn78fM6axiR9HqNPz7eb3TFpmMYeoB9ExYY3mQrDPB5A0y4I SNE5XTvFdcndRzda8CQ+Hk7U9PxaNbYjFCxM7f0m7Q29R9f5KC/GK1/Xi7bqMB47 TO/1o85Dry/5au5vQaF6A9qjs0xHBjDVotbcNwm2wkMk3i8bCBoUv/l1 -----END CERTIFICATE-----Generated at Wed Nov 5 11:59:42 2025 by rpki-client