$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft File: pfCiu4t57dbTfAd63-oIJRTAQg8.mft (raw, json) Hash identifier: h2eorjiIx2GvC+CV1m5X4sTup+FaiggzkTYn0kwhSHI= Subject key identifier: B9:CA:FF:8B:7D:1E:7D:C6:A8:B7:A8:E9:96:30:ED:71:17:59:A1:11 Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F Certificate issuer: /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Certificate serial: 021B Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft Manifest number: 020B Signing time: Sat 09 Aug 2025 04:36:55 +0000 Manifest this update: Sat 09 Aug 2025 04:36:54 +0000 Manifest next update: Mon 11 Aug 2025 04:36:54 +0000 Files and hashes: 1: pfCiu4t57dbTfAd63-oIJRTAQg8.crl (hash: dhvbzyFqZETefuhnRWxaSfj6j5IiYIOkyVbLnVLTcdo=) 2: 245B6D34FBED11EE8128962C017001B1.roa (hash: TrN9lcQpNeQiZwKFjsOsULheFfvRBy2GwIMFcOXP5rY=) 3: 60986EC6F10E11EEA398F1C8775412E6.roa (hash: UeXyeJMDi2GVx9uEPU+PiWuthmCddMz69n4V0SdxUZY=) 4: 4A3BF0B6E9F711EFB363B759762E951A.roa (hash: qnWjHMa6krZFafky4BYIbSFj8GVyr5kF/yN3x6ht2sE=) 5: 8C5EBF98B18D11EF93764599762E951A.roa (hash: LMCVfxRKPtEUcD+l4fHRZWVAaU9InzZT+jXi3ynNqyQ=) 6: 624DB26AFC1411EEA32C1066017001B1.roa (hash: SAKc0hgZ+mEboWzvP3K7DMfU8rpiR8UT+kWecca89NE=) 7: 767E76B2405F11F0B14520EADAE4EC9C.roa (hash: Psp54N8Zwbl9ziN2Vbyl63/0vnVM4zrW11s0ypx3pl8=) 8: 9BF619A8FCDC11EE8DA40146017001B1.roa (hash: po7czQ/bhDV7w3+Oz4IVCSJosx6dgGFsaZotpFYiUzU=) 9: 0C6B2666405B11F09F43C8CCDAE4EC9C.roa (hash: /9Ds38E/Nlm7VcSD/FOkPtqxtWfZMJuAf/6Y8lnD5JQ=) 10: ACB83E6242B211EFAFCCE28B762E951A.roa (hash: K3ivQ3+n4zlKylliwe/zTuRovNdpcW712O8vioTYjFg=) 11: A1B5AEEC442811EFA24AB347762E951A.roa (hash: WU/tv+bio89mYf5sL7OB/fhjHoVOLu5YlrkO6ttjHNQ=) 12: 7AFAA29E1F6111EFB0C39B397DDC24C2.roa (hash: e2WypnmRsaISjVRYfT/t99mLnGdtDrlVSL5Ti5URVMc=) 13: 6644E6CC4FE811EFBAAC404B762E951A.roa (hash: 48MYw/CHm3JnjY68hLvq+27NMpxBkJcznllBwP1oCwg=) 14: F6FBFB8E745D11F0BF6D9BD0DAE4EC9C.roa (hash: /YM80rpuDV3whpYSjJG05E1etVVfPSD6PQbBs+HcexM=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 11 Aug 2025 00:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Validity Not Before: Aug 9 04:36:54 2025 GMT Not After : Aug 11 04:36:54 2025 GMT Subject: CN=6896d067-aad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e1:dc:30:46:39:5e:8c:ba:65:95:f3:53:23: 8c:ce:fd:55:15:9d:ba:da:b5:b0:f2:32:94:38:be: c8:fd:fa:a6:6f:e8:e1:73:21:60:df:f9:a5:16:78: cb:45:de:ca:59:d4:27:6a:48:83:21:0d:7c:bf:69: f5:aa:1d:40:fc:2e:08:4c:89:76:c5:7f:17:7b:b2: 7f:bb:bf:2d:13:1a:ad:e7:46:d1:e3:29:9e:be:3b: 40:48:77:53:94:95:6b:b3:50:ea:5b:22:e6:a1:a5: 40:c5:d1:42:43:07:59:33:58:9c:84:67:9f:b7:df: 60:31:0c:65:86:99:63:b4:1d:63:5e:36:56:3b:eb: 3b:aa:47:8d:4d:22:cb:72:96:57:3b:a9:b1:6c:8e: a4:5b:b8:32:4c:10:10:4b:9d:c9:ba:d1:61:f8:b6: 5e:9e:f5:55:92:b7:72:3c:90:d3:08:2f:cf:b2:e1: e6:22:86:27:39:6a:df:0f:fb:64:27:bd:09:dd:a3: 18:c7:c0:a2:26:10:7b:9a:25:cd:f8:9f:25:21:c2: 2f:8d:cd:12:f5:ec:5a:c0:50:c9:61:ec:d7:78:b1: ae:1e:04:65:df:25:63:d6:4c:62:06:ab:bf:f1:37: 8f:0a:38:be:84:c7:c0:a5:e0:42:08:5b:b1:3b:5d: 76:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CA:FF:8B:7D:1E:7D:C6:A8:B7:A8:E9:96:30:ED:71:17:59:A1:11 X509v3 Authority Key Identifier: keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:c7:ab:15:01:dc:05:43:e4:40:53:88:ae:1b:70:47:f2:3b: 0d:cb:d3:1f:e2:59:4a:3c:0d:17:08:63:1b:7f:da:5c:c8:65: c1:a2:9b:85:9e:ad:93:ec:25:37:2d:05:29:31:7f:ad:4f:ad: af:29:33:f1:a1:ac:cf:0a:e1:04:73:e3:68:d6:ab:ca:2e:f3: 12:03:80:91:c2:a3:98:ff:f7:69:ef:05:9d:6d:bb:5a:47:f2: 53:c5:57:a8:fc:88:69:b1:fc:07:2b:d7:5b:7e:de:d8:69:4f: d9:70:43:64:6e:cb:17:6a:2d:72:c4:a1:64:56:03:12:9a:5e: 48:64:05:36:e7:18:20:d3:e7:6a:bb:f4:37:a3:14:47:df:fa: e8:74:f0:71:22:d4:24:69:7e:31:aa:92:86:83:48:4c:d1:bd: ae:51:34:d9:e0:54:35:30:b4:e2:8c:79:9a:47:c0:66:1c:62: 01:0e:86:50:67:93:ea:9e:18:a8:86:91:7e:71:94:41:38:ca: 9f:13:df:bc:9b:bf:62:33:f5:6c:97:af:1f:78:43:13:87:02: 38:07:c4:18:64:9a:26:c4:82:ec:98:37:84:23:d0:ed:3a:71: 97:46:b9:63:35:0f:00:9a:47:a5:4c:61:cc:0e:0d:6d:82:4d: bb:a6:13:9b -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAhswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 Q0IxQkVBRjExMC8GA1UEBRMoQTVGMEEyQkI4Qjc5RURENkQzN0MwNzdBREZFQTA4 MjUxNEMwNDIwRjAeFw0yNTA4MDkwNDM2NTRaFw0yNTA4MTEwNDM2NTRaMBgxFjAU BgNVBAMTDTY4OTZkMDY3LWFhZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDJ4dwwRjlejLpllfNTI4zO/VUVnbratbDyMpQ4vsj9+qZv6OFzIWDf+aUW eMtF3spZ1CdqSIMhDXy/afWqHUD8LghMiXbFfxd7sn+7vy0TGq3nRtHjKZ6+O0BI d1OUlWuzUOpbIuahpUDF0UJDB1kzWJyEZ5+332AxDGWGmWO0HWNeNlY76zuqR41N Istyllc7qbFsjqRbuDJMEBBLncm60WH4tl6e9VWSt3I8kNMIL8+y4eYihic5at8P +2QnvQndoxjHwKImEHuaJc34nyUhwi+NzRL17FrAUMlh7Nd4sa4eBGXfJWPWTGIG q7/xN48KOL6Ex8Cl4EIIW7E7XXYxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUucr/ i30efcaot6jpljDtcRdZoREwHwYDVR0jBBgwFoAUpfCiu4t57dbTfAd63+oIJRTA Qg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkNCMUJFL0YzMjI4RTg2RjBFRTExRUVBM0JFMEY1ODc3NTQxMkU2L3BmQ2l1 NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3BmQ2l1NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2Q0IxQkUvRjMyMjhFODZGMEVFMTFFRUEzQkUwRjU4Nzc1 NDEyRTYvcGZDaXU0dDU3ZGJUZkFkNjMtb0lKUlRBUWc4Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAx6sVAdwFQ+RAU4iuG3BH8jsNy9Mf 4llKPA0XCGMbf9pcyGXBopuFnq2T7CU3LQUpMX+tT62vKTPxoazPCuEEc+No1qvK LvMSA4CRwqOY//dp7wWdbbtaR/JTxVeo/IhpsfwHK9dbft7YaU/ZcENkbssXai1y xKFkVgMSml5IZAU25xgg0+dqu/Q3oxRH3/rodPBxItQkaX4xqpKGg0hM0b2uUTTZ 4FQ1MLTijHmaR8BmHGIBDoZQZ5PqnhiohpF+cZRBOMqfE9+8m79iM/Vsl68feEMT hwI4B8QYZJomxILsmDeEI9DtOnGXRrljNQ8AmkelTGHMDg1tgk27phOb -----END CERTIFICATE-----Generated at Sat Aug 9 10:46:21 2025 by rpki-client