$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft File: I_gUu0fVw67dUQPzb124opvj1x0.mft (raw, json) Hash identifier: cjth9jRfSQnJcfpUcQy/X84eqBSBpwPL13NXUuGKBmA= Subject key identifier: 6A:B4:8B:D7:E9:DF:0B:3F:2A:AC:A5:55:2E:67:F2:C5:9F:D6:20:D9 Authority key identifier: 23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D Certificate issuer: /CN=F36D9B5BAF/serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D Certificate serial: 0F4C Authority info access: rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft Manifest number: 0F35 Signing time: Wed 05 Nov 2025 00:51:14 +0000 Manifest this update: Wed 05 Nov 2025 00:51:14 +0000 Manifest next update: Fri 07 Nov 2025 00:51:14 +0000 Files and hashes: 1: I_gUu0fVw67dUQPzb124opvj1x0.crl (hash: DBj8TNK7qovYZkTtg9GPoU2yrp0XNNSi3Zl1HLqOnz0=) 2: 86606974028F11E98C883E0FF8AEA228.roa (hash: IsZ6cJV4+0zN9ms5jaDsieqPGhductkQxgMv7qyHTNI=) 3: 9BC8C8C001EA11EDB08796BAF1222468.roa (hash: i8+aHPPl6uhvn/Jq2NkUn53HTH09DtjcbJOz9MgQ1co=) 4: 48577586FE1C11E8BD980782F8AEA228.roa (hash: H3dWHGNGyzufXdXyAcUTICFJNlUoK78HWc23kkq1F/s=) 5: 5F34A6C2DE7D11EBBAC31B64F8AEA228.roa (hash: MWk8EFTOF3/10HYUuFgbnJ/fqlc/s+3SXXavsJ4h6cE=) 6: 3D3E31C6498E11EFBB02DB76762E951A.roa (hash: u0Z0y5U3GM/VfkEEbg/zEJIp4QkqBJm1umtwXpHXzsE=) 7: 132EAD18DE7D11EB86A3C563F8AEA228.roa (hash: iZGBXlM3XPYurzi9+dHJxzDxI/7/keWoCIvY/ASFKFI=) 8: B7C01426FED211E89B120309F8AEA228.roa (hash: Cu6wxRaLD5ODNZaYGqU1rGwfd0FTt/GsL/H9WnzG7Vs=) 9: 36E8B606FE1D11E88DCDCE82F8AEA228.roa (hash: SvO8wCmqFCCs7pvZRw0lkVxnGHmag+waEJa8/soA19E=) 10: 9C9A7614DE7C11EBB1191063F8AEA228.roa (hash: syinLKpAl//f2BEe6KYX31IZj04lDHjk0Tp/mellwQo=) 11: 5BA2465E037F11EDB5F8F0C0F1222468.roa (hash: TV0mQqI15fCBzn5VfeVjormHM3HjavPeVewlRIBDw4I=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 07 Nov 2025 00:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3916 (0xf4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36D9B5BAF, serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D Validity Not Before: Nov 5 00:51:14 2025 GMT Not After : Nov 7 00:51:14 2025 GMT Subject: CN=690a9f82-d711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:72:c3:77:05:97:e3:cb:eb:ad:3b:58:96: e9:e8:18:ef:23:ba:91:6c:c9:4b:5b:92:11:9a:47: ad:53:4c:ed:de:d7:05:f1:78:5c:3c:fa:c6:0b:80: eb:6e:8f:c5:ff:00:aa:e9:33:40:a1:84:df:47:62: 2c:9c:a3:34:38:1d:bd:c6:fa:3b:e2:ee:e7:49:52: 7e:1f:f1:18:75:3a:c1:be:f6:ab:17:1e:b4:bf:8f: 19:da:0e:29:2e:bd:e8:94:a9:76:ef:1a:f9:18:a1: 40:95:96:1a:01:14:f9:79:d1:03:bf:19:59:26:f4: 52:b2:7a:2a:b9:4a:c1:e1:36:b2:6f:e0:9f:4d:63: 6f:3f:c7:f3:02:46:b6:b1:1f:58:3c:7e:36:55:08: 77:08:a9:35:5a:b9:75:99:47:3d:c8:ee:0d:16:b7: 47:4a:80:29:ab:6a:bf:1e:3b:48:f5:1c:f3:ec:9f: bd:6a:72:ff:fb:47:9c:c8:9b:ec:0d:c0:a3:b8:d5: 69:50:b7:2d:c3:4a:a2:23:6c:c7:aa:04:a5:69:d7: 1c:50:0a:fb:61:89:5e:a4:79:a1:c9:41:92:b7:80: c4:d1:e6:fb:de:c7:24:76:82:42:f7:f5:3b:70:6d: ef:5f:06:c2:cd:6e:01:d9:c7:9d:93:c7:b0:6a:3e: 8a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B4:8B:D7:E9:DF:0B:3F:2A:AC:A5:55:2E:67:F2:C5:9F:D6:20:D9 X509v3 Authority Key Identifier: keyid:23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:80:db:04:b6:2b:bb:1d:9f:e1:80:e8:43:ca:a1:7f:5d:b0: e7:fb:f3:8a:f8:3d:33:e5:75:63:f0:e5:7d:69:ae:91:9f:63: ac:46:84:61:84:98:a0:2a:e9:d8:ae:71:ac:f6:58:15:ac:e6: e3:6a:bd:d3:2f:b3:e8:95:17:f9:d2:a3:be:35:47:17:93:5e: 99:32:8c:27:6d:35:97:cb:7b:15:0c:f8:71:8d:e0:dd:e9:eb: 4f:3b:72:6c:61:f3:a3:72:da:ec:79:c9:6f:e2:3c:39:09:b4: ad:be:d9:d2:79:4a:47:a3:a1:fd:66:86:a7:9f:8c:06:be:8e: 0f:00:d4:f9:b6:fe:ea:04:7e:34:dc:ab:ba:f2:fe:7a:57:0a: 67:fe:0c:e4:60:e3:58:d0:c6:91:9d:0e:cc:08:79:1f:c4:89: bd:41:80:59:cf:fa:a4:e7:7a:da:f6:a8:bd:19:f9:99:ee:93: 90:3b:86:fa:6f:f8:32:da:51:71:f4:10:a3:95:10:2d:88:37: 47:bd:a4:84:fb:b6:29:26:ea:12:c7:a0:36:d8:81:b8:ee:71: bf:e5:87:bd:7f:fe:46:93:4c:ff:36:93:1f:c6:82:93:d1:c8: ab:72:70:5a:08:54:6d:8f:a3:65:3b:3c:eb:fe:5f:0a:68:c8: f5:41:69:a7 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICD0wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RDlCNUJBRjExMC8GA1UEBRMoMjNGODE0QkI0N0Q1QzNBRURENTEwM0YzNkY1REI4 QTI5QkUzRDcxRDAeFw0yNTExMDUwMDUxMTRaFw0yNTExMDcwMDUxMTRaMBgxFjAU BgNVBAMTDTY5MGE5ZjgyLWQ3MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCzd3LDdwWX48vrrTtYlunoGO8jupFsyUtbkhGaR61TTO3e1wXxeFw8+sYL gOtuj8X/AKrpM0ChhN9HYiycozQ4Hb3G+jvi7udJUn4f8Rh1OsG+9qsXHrS/jxna DikuveiUqXbvGvkYoUCVlhoBFPl50QO/GVkm9FKyeiq5SsHhNrJv4J9NY28/x/MC RraxH1g8fjZVCHcIqTVauXWZRz3I7g0Wt0dKgCmrar8eO0j1HPPsn71qcv/7R5zI m+wNwKO41WlQty3DSqIjbMeqBKVp1xxQCvthiV6keaHJQZK3gMTR5vvexyR2gkL3 9Ttwbe9fBsLNbgHZx52Tx7BqPoqHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUarSL 1+nfCz8qrKVVLmfyxZ/WINkwHwYDVR0jBBgwFoAUI/gUu0fVw67dUQPzb124opvj 1x0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkQ5QjVCLzlFMUJEMzc4MTM1QTExRTVCNjhENDI4NkY4QUVBMjI4L0lfZ1V1 MGZWdzY3ZFVRUHpiMTI0b3B2ajF4MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0lfZ1V1MGZWdzY3ZFVRUHpiMTI0b3B2ajF4MC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RDlCNUIvOUUxQkQzNzgxMzVBMTFFNUI2OEQ0Mjg2RjhB RUEyMjgvSV9nVXUwZlZ3NjdkVVFQemIxMjRvcHZqMXgwLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBggNsEtiu7HZ/hgOhDyqF/XbDn+/OK +D0z5XVj8OV9aa6Rn2OsRoRhhJigKunYrnGs9lgVrObjar3TL7PolRf50qO+NUcX k16ZMownbTWXy3sVDPhxjeDd6etPO3JsYfOjctrseclv4jw5CbStvtnSeUpHo6H9 Zoann4wGvo4PANT5tv7qBH403Ku68v56Vwpn/gzkYONY0MaRnQ7MCHkfxIm9QYBZ z/qk53ra9qi9GfmZ7pOQO4b6b/gy2lFx9BCjlRAtiDdHvaSE+7YpJuoSx6A22IG4 7nG/5Ye9f/5Gk0z/NpMfxoKT0circnBaCFRtj6NlOzzr/l8KaMj1QWmn -----END CERTIFICATE-----Generated at Wed Nov 5 15:34:39 2025 by rpki-client