$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft File: -4Xgjl27Bclbe9Dafl_m_OOYJv8.mft (raw, json) Hash identifier: ipPaxaC66LKo0GIHD7lE/peKsKUWL0UEKoFwog/fXRs= Subject key identifier: E8:41:46:B9:79:04:47:10:D6:9E:E5:07:6E:5D:04:FE:B1:7F:9E:1C Authority key identifier: FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF Certificate issuer: /CN=F36C2BF2AF/serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF Certificate serial: 01DA Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft Manifest number: 01CE Signing time: Mon 04 Aug 2025 04:35:21 +0000 Manifest this update: Mon 04 Aug 2025 04:35:21 +0000 Manifest next update: Wed 06 Aug 2025 04:35:20 +0000 Files and hashes: 1: -4Xgjl27Bclbe9Dafl_m_OOYJv8.crl (hash: BpH0BbEWmOH3MgoImHvm2Fl2SzYTW92CaCfuw0zBTG0=) 2: 53E9AF201C4A11EF92B1620D7DDC24C2.roa (hash: KdhlIJ+hQm0D2JssqauHu+bI+aH2TH0/RDTYBo7Rfl4=) 3: 6BD3D72C1C4B11EFA0DF5FE57CDC24C2.roa (hash: kVAT6LvKNfd1TJNrUHJDtuhrBoJ6grfJU6Qzk3woG9A=) 4: 3C9F14321C4911EFAAC969317DDC24C2.roa (hash: /gSe9pWPhZ5Kr8gRd+6yNTm4qcpvwit2QsIwfbhWGVc=) 5: EBFBD6E61C4811EF8DA9FC307DDC24C2.roa (hash: Uo9oJGDvBKqk9WcNSro/GD2IK8co4yKnO+0R+FSe34k=) 6: 08C544981C4811EFBA18A22B7DDC24C2.roa (hash: tqhwIQRYgFOkg1i0m9P867NgozM8wyM/qc2l8ldhExg=) 7: 312C885E1C4A11EF9DE586157DDC24C2.roa (hash: GjHEWzUkDA6tsW5/6kpvZ3CU5zKEBXoesmUsNT+Jflo=) 8: 7E241A021C4811EF8F9DAE2C7DDC24C2.roa (hash: hxre5xYuTBxkwQmVRlBLeiMXMr0AnCvaVpMmejl5uhQ=) 9: FE708AD21C4911EF81BE34EA7CDC24C2.roa (hash: ZiopXrdqLTsU+61ziIshjn2/qWu+FsJbH9OdegqZ2vo=) 10: BF6D84E41C4811EF92649B307DDC24C2.roa (hash: Jbh8WY5UNAzz+osRgcagPYaVf8dyK5RVLpOyRMHMYas=) 11: 8604AD081C4911EF8DFB87357DDC24C2.roa (hash: MNoPychVF0mh+syf/DFmicmi7Wi0XntNJ0aJdW/gDe4=) 12: 440AE6387FC211EFACAB56B8762E951A.roa (hash: Rbkyo5rELKFe+Cn1UL0BmEWDgHbqtqW4Mc1h5Ma1xWM=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 06 Aug 2025 00:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36C2BF2AF, serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF Validity Not Before: Aug 4 04:35:21 2025 GMT Not After : Aug 6 04:35:20 2025 GMT Subject: CN=68903889-072d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d7:c5:8f:32:40:a8:70:22:dd:34:9d:49:4d: 62:4d:16:b3:e1:37:8d:07:60:c1:69:6e:ce:b2:3e: 19:8a:04:d3:62:90:bd:ba:fb:37:d4:63:e3:33:ce: 90:3f:b9:1b:d6:e2:d1:6a:0e:1f:d2:fc:43:66:73: cb:26:a0:f8:f7:07:b9:67:45:2b:14:46:e0:5a:bd: 46:9d:4d:a1:14:d8:82:aa:3e:4f:18:b2:29:69:c9: 55:e8:5d:6b:4f:4a:a0:ff:97:58:bc:7b:57:a5:0a: 56:e8:b1:88:6c:50:08:2d:60:2d:16:ea:fc:32:82: 0e:4c:11:04:9e:0a:9b:77:b8:ac:b1:ff:cc:f4:a3: 09:80:49:2a:cc:ff:b3:78:b5:fb:2f:69:ab:68:56: 96:63:4d:34:a6:7e:c1:6a:7d:42:0e:8e:83:20:7a: 44:c5:2d:40:9f:48:6f:61:62:e0:c9:bf:30:d1:95: 9d:68:d2:1a:24:a4:bd:02:b9:d9:40:ae:ff:35:ad: ba:a5:ef:b9:1f:8c:fe:6e:b2:38:ea:72:f9:c7:b9: 43:b3:2b:bb:86:02:b1:d7:6c:66:11:0c:43:28:9f: 1e:0c:f8:9c:c9:12:b3:b4:76:20:14:b4:d4:85:23: 87:a6:5f:85:86:88:3b:00:d0:b4:3c:b0:6a:cd:80: ba:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:41:46:B9:79:04:47:10:D6:9E:E5:07:6E:5D:04:FE:B1:7F:9E:1C X509v3 Authority Key Identifier: keyid:FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:cc:71:5c:bf:59:fd:b8:a3:fe:26:48:b3:3a:52:67:96:94: de:c4:86:b5:0b:00:53:32:f3:3e:f1:30:9a:0d:b1:ed:13:86: 82:4b:45:15:d6:e0:8f:f4:4d:53:f4:02:61:e0:49:8d:c2:0d: 24:d7:f7:dc:11:2b:2b:0b:4a:05:8e:8c:de:64:ac:33:59:3f: 7a:82:dd:a9:d5:18:b3:eb:30:8c:08:25:6d:dc:35:f1:2b:82: f1:37:f2:33:38:ba:c7:2b:c5:e3:70:ec:60:1e:1b:db:9b:2b: 76:7d:19:ee:28:e3:d9:6b:79:63:31:cd:e6:ea:2e:15:10:e1: 29:82:81:b6:33:70:32:3c:3d:25:6c:04:97:35:1f:33:89:5e: 23:91:17:d6:81:4c:0e:99:0d:1c:a2:74:1e:ec:18:fa:56:43: dc:23:59:9e:38:6c:ae:1c:25:f2:e1:89:70:15:49:bd:89:1b: c4:d0:a3:de:b0:aa:d7:8a:b8:f7:81:ee:ed:89:7c:e7:f5:bd: e3:0d:0e:37:eb:db:ca:e2:e6:b8:cc:77:60:eb:70:1d:45:c2: 52:fe:37:0f:64:d4:ac:29:c3:68:e6:f8:34:6f:39:31:33:0f: 7e:07:1a:54:dc:8f:b8:a0:59:76:df:c1:77:ac:7b:46:1c:2c: 10:a1:07:ab -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAdowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QzJCRjJBRjExMC8GA1UEBRMoRkI4NUUwOEU1REJCMDVDOTVCN0JEMERBN0U1RkU2 RkNFMzk4MjZGRjAeFw0yNTA4MDQwNDM1MjFaFw0yNTA4MDYwNDM1MjBaMBgxFjAU BgNVBAMTDTY4OTAzODg5LTA3MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDW18WPMkCocCLdNJ1JTWJNFrPhN40HYMFpbs6yPhmKBNNikL26+zfUY+Mz zpA/uRvW4tFqDh/S/ENmc8smoPj3B7lnRSsURuBavUadTaEU2IKqPk8YsilpyVXo XWtPSqD/l1i8e1elClbosYhsUAgtYC0W6vwygg5MEQSeCpt3uKyx/8z0owmASSrM /7N4tfsvaatoVpZjTTSmfsFqfUIOjoMgekTFLUCfSG9hYuDJvzDRlZ1o0hokpL0C udlArv81rbql77kfjP5usjjqcvnHuUOzK7uGArHXbGYRDEMonx4M+JzJErO0diAU tNSFI4emX4WGiDsA0LQ8sGrNgLr5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU6EFG uXkERxDWnuUHbl0E/rF/nhwwHwYDVR0jBBgwFoAU+4Xgjl27Bclbe9Dafl/m/OOY Jv8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkMyQkYyL0RBQkFCODdFMTlFQzExRUZCQ0JGNUUyQzAxNzAwMUIxLy00WGdq bDI3QmNsYmU5RGFmbF9tX09PWUp2OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLy00WGdqbDI3QmNsYmU5RGFmbF9tX09PWUp2OC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QzJCRjIvREFCQUI4N0UxOUVDMTFFRkJDQkY1RTJDMDE3 MDAxQjEvLTRYZ2psMjdCY2xiZTlEYWZsX21fT09ZSnY4Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBezHFcv1n9uKP+JkizOlJnlpTexIa1 CwBTMvM+8TCaDbHtE4aCS0UV1uCP9E1T9AJh4EmNwg0k1/fcESsrC0oFjozeZKwz WT96gt2p1Riz6zCMCCVt3DXxK4LxN/IzOLrHK8XjcOxgHhvbmyt2fRnuKOPZa3lj Mc3m6i4VEOEpgoG2M3AyPD0lbASXNR8ziV4jkRfWgUwOmQ0conQe7Bj6VkPcI1me OGyuHCXy4YlwFUm9iRvE0KPesKrXirj3ge7tiXzn9b3jDQ4369vK4ua4zHdg63Ad RcJS/jcPZNSsKcNo5vg0bzkxMw9+BxpU3I+4oFl238F3rHtGHCwQoQer -----END CERTIFICATE-----Generated at Mon Aug 4 14:57:04 2025 by rpki-client