$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft File: PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft (raw, json) Hash identifier: MJtH7SyZujTf7Fpc2GV6hWFeOyHTQfn9OOx/wxjiCHg= Subject key identifier: 3B:39:9E:6C:7A:18:7B:9D:C9:A6:89:2D:DE:4E:97:68:95:F1:77:89 Authority key identifier: 3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44 Certificate issuer: /CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44 Certificate serial: 07CF Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft Manifest number: 07B7 Signing time: Mon 11 Aug 2025 02:00:28 +0000 Manifest this update: Mon 11 Aug 2025 02:00:27 +0000 Manifest next update: Wed 13 Aug 2025 02:00:27 +0000 Files and hashes: 1: PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl (hash: ojMKayuKqz7Z86DkWdgULVidsDxt/xT/QfUpMyDAcNE=) 2: 3BA2665EC99E11EE86A1DB6A775412E6.roa (hash: rvuBIHZ0MsQsAnNFjdP7+k2TSvK7jCLmLslBiuksEqI=) 3: E1837E5AF24311EE883862C9775412E6.roa (hash: jqNH3huKCT5kT+AUi/uqzdedHx3wpcmsGIeRoxqgiaw=) 4: 08F1D7D0C99E11EEAE79B16A775412E6.roa (hash: WiJwwLdNdFaMsxNqsHzgy8OEyHtwMAs7d1aXr8Hkrgc=) 5: 443359E8C99B11EEB7426E66775412E6.roa (hash: eJwP1UmHsKDVGDi3xz1KEXx8NcHlZwtcW4ClWms4mh8=) 6: C2676006C99711EE9BB52C61775412E6.roa (hash: NVq8amuk8Yp0DqwnbjhmTB3EkjNU4QSAXBzS9xgY4jM=) 7: 983705B2C99611EEBF88425F775412E6.roa (hash: XJqJ7gN3jDfsB7Pjiht6+uqJPoJvzMlDF3QiUIEoqEI=) 8: EB509C2AC99D11EEB321876A775412E6.roa (hash: p2dpDdQb34gaCv5jDzsfZfSA7ioiyEsF2wPYi+ctFkc=) 9: FC8328E2C99711EEBB2C6E61775412E6.roa (hash: ECrLGXW4HGhv0A+5ZOhcAy86Q0opfMQJGNiQHV4n8eI=) 10: 92C82F9CC99711EEA514D260775412E6.roa (hash: Go8jrZxUVeAB3wwsylNTy4r7WY+TqHaRJK8STLGevKs=) 11: 27A3DFEEC99811EEBDD0A661775412E6.roa (hash: YUrsV0URWBMfqQ2ScnE6bIXBAZO6NHUCKtS8EDJHuV8=) 12: 203AD6B4C99711EEACE71860775412E6.roa (hash: Y4routOqi/xdmhqWXRfoss58qnjt9AO023CBa3Exqzs=) 13: 508DB2ECC99611EE9EC0FE5E775412E6.roa (hash: rwK9a3BNPMfOi+DFZv313IXZPRakzD4mPl627qdMUUA=) 14: BC272006C99B11EEB694FE66775412E6.roa (hash: NfSJftU35E7esFbejpm9fx8yq+4lHpxvcEhTk6+CBbc=) 15: C0824C54F24311EEAC2A08C9775412E6.roa (hash: HK1RgUmg7yyo7g5XCNEgpSTZhf4OHzEmzrKfYIY/qvg=) 16: 6578AC56C99711EEA22F7160775412E6.roa (hash: mF+qsWfeIIiqu5K/0h0PvdJsYj6tWZGXQAReqMCB/cA=) 17: A3E68908C99D11EEBCDBDD69775412E6.roa (hash: JHGShobNFQwFQaj9FU3+SLnUbdV9/2sN3XHwcPWqTIc=) 18: 74AB9A52C99D11EE966AB969775412E6.roa (hash: L6zdyCVDaIVgr+0hckVAHvQQy0uRUVNQxJCmvoAc0+g=) 19: 6DC4A582C99B11EEAA679266775412E6.roa (hash: MjTKJFnfxwa+7JMBxkfxSEbP+ssgAMkXFxn505219tQ=) 20: 226005C0C99E11EE8229D66A775412E6.roa (hash: fztcGGjZDl2A7WS5DFatscmgH/f3R5t75XLV1PV1STQ=) 21: 95876FBEC99B11EEBFE3CA66775412E6.roa (hash: 67MnwHHRIWAZKkGpUDkvHKd9YNZxKCNvG3lBkHztdAE=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 13 Aug 2025 00:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1999 (0x7cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36B33A4AF, serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44 Validity Not Before: Aug 11 02:00:27 2025 GMT Not After : Aug 13 02:00:27 2025 GMT Subject: CN=68994ebb-95c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:aa:78:07:6a:7b:63:35:5b:72:b7:41:73:08: b4:f2:c3:08:bc:e9:7a:e9:d2:06:23:16:cf:b2:d4: 3d:d0:67:d6:71:07:ba:1d:b3:c2:e6:7d:b5:08:ac: a6:24:bc:2e:c9:19:88:dd:50:c1:77:13:d1:9b:64: a0:d5:66:41:a1:86:77:e3:ff:40:54:91:94:dd:73: a8:a0:82:dd:8f:b0:01:88:82:17:2e:09:41:df:e6: 6b:79:bc:26:67:25:8a:c6:00:19:19:f7:19:74:17: 9a:76:9a:db:51:58:21:73:3a:c5:8f:87:f1:91:5e: 3b:8b:14:0b:8e:26:34:86:06:ce:37:c9:6f:53:0b: fa:36:7c:f9:0c:df:77:d0:82:05:57:7f:f7:b1:13: d9:30:82:48:8c:1c:ea:ec:ef:56:ed:82:32:b0:ef: b7:65:62:2a:f4:60:37:35:c2:df:46:a2:57:5c:55: 7d:00:f4:59:b7:08:fc:8e:52:01:f7:a6:37:85:41: f2:6b:15:99:63:a9:c0:4b:ce:01:e1:c2:3d:1f:12: 96:cb:af:1c:5a:c7:b3:18:95:7b:80:fa:5c:40:1e: 1e:94:5f:94:1c:ff:f7:43:e6:43:ac:29:77:9c:05: b4:71:57:93:06:81:e3:ea:b2:46:0d:f8:fd:c1:b1: 78:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:39:9E:6C:7A:18:7B:9D:C9:A6:89:2D:DE:4E:97:68:95:F1:77:89 X509v3 Authority Key Identifier: keyid:3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:aa:0f:6c:13:7b:35:45:89:fb:e0:1d:5c:d7:59:e8:70:18: 49:89:ab:33:a7:85:59:82:71:f0:26:1c:cd:17:11:03:d1:0f: a0:5e:4a:82:ef:6f:3f:96:0d:71:ae:2d:e4:1d:7b:ef:3d:ac: 52:5f:29:0a:3c:2f:c1:da:56:a9:46:0e:05:bf:5a:c7:a9:57: ee:60:cd:14:47:57:ac:2f:8a:f7:ce:c2:f9:77:4c:56:5d:ef: c3:03:67:70:2e:0b:d0:22:a3:1f:2d:cc:c0:a3:ee:21:17:97: dd:cb:b0:d3:5b:25:1b:97:8b:2b:53:e5:07:4c:3c:89:8e:73: f1:f3:6b:0a:3e:b2:b5:b5:a5:4b:7f:9a:19:d8:ef:93:77:f7: 54:07:31:17:97:84:43:e6:c9:ae:87:84:af:cc:a6:c1:2c:c9: f8:80:0e:b5:02:59:bb:41:57:a3:b3:52:dc:81:2d:04:83:6d: a7:d6:4e:62:53:33:df:0d:ad:78:6b:e5:a9:c4:70:aa:b0:9e: 02:5d:10:89:20:48:82:42:a8:12:cb:a3:ab:e2:fd:eb:f0:2e: 08:39:c4:80:c9:d0:35:0d:63:ce:40:87:3e:d8:71:bd:48:8b: 9c:a1:b9:0a:de:fb:6a:c9:fe:07:17:05:ce:18:59:0e:2c:df: ca:b6:c3:24 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICB88wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QjMzQTRBRjExMC8GA1UEBRMoM0UwQ0U2M0Q2MDQ1NUJENjVCQUEzMTU0QkU4MTIw NkM2N0U2OUQ0NDAeFw0yNTA4MTEwMjAwMjdaFw0yNTA4MTMwMjAwMjdaMBgxFjAU BgNVBAMTDTY4OTk0ZWJiLTk1YzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDRqngHantjNVtyt0FzCLTywwi86Xrp0gYjFs+y1D3QZ9ZxB7ods8LmfbUI rKYkvC7JGYjdUMF3E9GbZKDVZkGhhnfj/0BUkZTdc6iggt2PsAGIghcuCUHf5mt5 vCZnJYrGABkZ9xl0F5p2mttRWCFzOsWPh/GRXjuLFAuOJjSGBs43yW9TC/o2fPkM 33fQggVXf/exE9kwgkiMHOrs71btgjKw77dlYir0YDc1wt9GoldcVX0A9Fm3CPyO UgH3pjeFQfJrFZljqcBLzgHhwj0fEpbLrxxax7MYlXuA+lxAHh6UX5Qc//dD5kOs KXecBbRxV5MGgePqskYN+P3BsXj5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUOzme bHoYe53Jpokt3k6XaJXxd4kwHwYDVR0jBBgwFoAUPgzmPWBFW9ZbqjFUvoEgbGfm nUQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkIzM0E0LzJFNzQzNzgyQTFBQzExRUE5RkVCQzM3NEY4QUVBMjI4L1Bnem1Q V0JGVzlaYnFqRlV2b0VnYkdmbW5VUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1Bnem1QV0JGVzlaYnFqRlV2b0VnYkdmbW5VUS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QjMzQTQvMkU3NDM3ODJBMUFDMTFFQTlGRUJDMzc0RjhB RUEyMjgvUGd6bVBXQkZXOVpicWpGVXZvRWdiR2ZtblVRLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBXqg9sE3s1RYn74B1c11nocBhJiasz p4VZgnHwJhzNFxED0Q+gXkqC728/lg1xri3kHXvvPaxSXykKPC/B2lapRg4Fv1rH qVfuYM0UR1esL4r3zsL5d0xWXe/DA2dwLgvQIqMfLczAo+4hF5fdy7DTWyUbl4sr U+UHTDyJjnPx82sKPrK1taVLf5oZ2O+Td/dUBzEXl4RD5smuh4SvzKbBLMn4gA61 Alm7QVejs1LcgS0Eg22n1k5iUzPfDa14a+WpxHCqsJ4CXRCJIEiCQqgSy6Or4v3r 8C4IOcSAydA1DWPOQIc+2HG9SIucobkK3vtqyf4HFwXOGFkOLN/KtsMk -----END CERTIFICATE-----Generated at Mon Aug 11 04:28:03 2025 by rpki-client