$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft File: I_gUu0fVw67dUQPzb124opvj1x0.mft (raw, json) Hash identifier: 9HVB/CP21IvfYpTA+bviFbl6w4T0TeTm7ORyhrnh7mk= Subject key identifier: F9:39:C1:63:6E:AA:72:70:8F:A2:A4:DC:50:E0:AB:78:56:97:70:37 Authority key identifier: 23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D Certificate issuer: /CN=F36D9B5BAF/serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D Certificate serial: 0EF7 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft Manifest number: 0EE0 Signing time: Mon 11 Aug 2025 00:51:33 +0000 Manifest this update: Mon 11 Aug 2025 00:51:32 +0000 Manifest next update: Wed 13 Aug 2025 00:51:32 +0000 Files and hashes: 1: I_gUu0fVw67dUQPzb124opvj1x0.crl (hash: v6bMSzBWU4+24H/R5/i5bFRXXYkRklZmyoLDXuZutlg=) 2: 86606974028F11E98C883E0FF8AEA228.roa (hash: IsZ6cJV4+0zN9ms5jaDsieqPGhductkQxgMv7qyHTNI=) 3: 9BC8C8C001EA11EDB08796BAF1222468.roa (hash: i8+aHPPl6uhvn/Jq2NkUn53HTH09DtjcbJOz9MgQ1co=) 4: 48577586FE1C11E8BD980782F8AEA228.roa (hash: H3dWHGNGyzufXdXyAcUTICFJNlUoK78HWc23kkq1F/s=) 5: 5F34A6C2DE7D11EBBAC31B64F8AEA228.roa (hash: MWk8EFTOF3/10HYUuFgbnJ/fqlc/s+3SXXavsJ4h6cE=) 6: 3D3E31C6498E11EFBB02DB76762E951A.roa (hash: u0Z0y5U3GM/VfkEEbg/zEJIp4QkqBJm1umtwXpHXzsE=) 7: 132EAD18DE7D11EB86A3C563F8AEA228.roa (hash: iZGBXlM3XPYurzi9+dHJxzDxI/7/keWoCIvY/ASFKFI=) 8: B7C01426FED211E89B120309F8AEA228.roa (hash: Cu6wxRaLD5ODNZaYGqU1rGwfd0FTt/GsL/H9WnzG7Vs=) 9: 36E8B606FE1D11E88DCDCE82F8AEA228.roa (hash: SvO8wCmqFCCs7pvZRw0lkVxnGHmag+waEJa8/soA19E=) 10: 9C9A7614DE7C11EBB1191063F8AEA228.roa (hash: syinLKpAl//f2BEe6KYX31IZj04lDHjk0Tp/mellwQo=) 11: 5BA2465E037F11EDB5F8F0C0F1222468.roa (hash: TV0mQqI15fCBzn5VfeVjormHM3HjavPeVewlRIBDw4I=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 13 Aug 2025 00:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3831 (0xef7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36D9B5BAF, serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D Validity Not Before: Aug 11 00:51:32 2025 GMT Not After : Aug 13 00:51:32 2025 GMT Subject: CN=68993e95-c057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:97:e8:4f:13:ea:24:f6:bd:7d:1e:df:e0:72: ae:68:ca:21:24:7d:ba:33:24:8d:a3:03:b7:0c:9a: 55:61:58:11:88:e3:24:8c:30:d7:33:38:d7:3a:77: 2a:71:36:da:84:3c:b9:dc:d5:43:0a:e4:f6:4c:79: 79:6f:12:ef:89:0d:cb:ff:fe:60:40:cb:00:87:45: ca:42:c2:dd:40:e5:4a:fb:f1:8f:b2:d2:c7:ec:9f: 53:02:5d:fe:a7:f8:33:5a:09:86:c0:92:56:44:61: 30:1a:d9:95:42:78:18:af:62:80:aa:b0:07:7d:f1: 01:b8:94:04:8e:f4:f2:f7:0b:d9:1e:ff:d4:1e:e0: 5a:d2:c0:ef:e7:f8:7d:ce:31:f5:5a:f6:a4:fe:14: 8a:34:59:b4:1f:c8:cb:f2:f4:fb:7d:97:7e:6c:65: d4:0d:5a:de:53:e6:67:36:04:ac:11:85:f0:02:96: 25:85:6b:e6:d0:92:4f:40:50:aa:30:55:44:9a:de: 9d:07:bf:27:91:b2:99:0b:e1:90:5c:d8:52:75:57: 15:fd:88:b4:7b:74:d0:91:ec:8c:13:f6:d1:84:73: e4:21:ad:ef:52:0b:77:c4:1f:df:b7:c0:aa:50:ff: 81:01:08:0e:26:37:9b:29:cc:60:74:0b:3b:5b:30: 14:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:39:C1:63:6E:AA:72:70:8F:A2:A4:DC:50:E0:AB:78:56:97:70:37 X509v3 Authority Key Identifier: keyid:23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:26:3d:46:71:f6:5a:2b:01:29:0c:76:43:49:b0:db:74:65: 39:ff:2e:5d:37:22:78:de:52:29:01:ef:91:41:50:08:a6:c4: 4a:ca:95:7d:e6:97:e7:7c:73:f4:b8:2f:dc:26:9a:11:55:63: bb:c8:e7:58:be:5e:63:a4:5d:bd:24:e6:0d:a3:aa:17:47:2f: 0e:2f:13:f2:71:b1:a0:33:69:ee:c8:fb:3e:b0:d9:d6:91:72: 12:b8:df:63:e7:bc:7c:9f:c6:4b:ee:2b:c7:30:1f:a4:22:65: 1a:a5:7b:c8:39:87:03:42:3d:32:68:2d:37:d5:fb:17:78:90: 99:e6:df:b5:74:41:12:80:28:c8:f0:bc:cc:e0:e4:59:18:6a: 98:77:40:1c:2a:41:8e:89:ba:18:61:a4:a8:91:1f:ff:15:2d: 3a:67:17:94:62:e0:a6:77:19:8a:2c:86:5c:e8:1f:19:22:72: b1:c7:4e:87:79:60:6f:e0:c5:9e:fc:ae:7a:88:19:df:3a:c7: ee:b4:c4:40:c0:32:8d:bb:18:0f:b7:21:e9:d8:87:4c:26:06: 1d:ad:26:c6:e8:57:4a:d9:de:c4:07:6f:4e:8a:16:f2:01:b9: de:38:6f:c7:7c:03:10:64:d6:3f:e9:ca:78:63:61:19:eb:ee: 4b:78:23:a4 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDvcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RDlCNUJBRjExMC8GA1UEBRMoMjNGODE0QkI0N0Q1QzNBRURENTEwM0YzNkY1REI4 QTI5QkUzRDcxRDAeFw0yNTA4MTEwMDUxMzJaFw0yNTA4MTMwMDUxMzJaMBgxFjAU BgNVBAMTDTY4OTkzZTk1LWMwNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCal+hPE+ok9r19Ht/gcq5oyiEkfbozJI2jA7cMmlVhWBGI4ySMMNczONc6 dypxNtqEPLnc1UMK5PZMeXlvEu+JDcv//mBAywCHRcpCwt1A5Ur78Y+y0sfsn1MC Xf6n+DNaCYbAklZEYTAa2ZVCeBivYoCqsAd98QG4lASO9PL3C9ke/9Qe4FrSwO/n +H3OMfVa9qT+FIo0WbQfyMvy9Pt9l35sZdQNWt5T5mc2BKwRhfACliWFa+bQkk9A UKowVUSa3p0HvyeRspkL4ZBc2FJ1VxX9iLR7dNCR7IwT9tGEc+Qhre9SC3fEH9+3 wKpQ/4EBCA4mN5spzGB0CztbMBS9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+TnB Y26qcnCPoqTcUOCreFaXcDcwHwYDVR0jBBgwFoAUI/gUu0fVw67dUQPzb124opvj 1x0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkQ5QjVCLzlFMUJEMzc4MTM1QTExRTVCNjhENDI4NkY4QUVBMjI4L0lfZ1V1 MGZWdzY3ZFVRUHpiMTI0b3B2ajF4MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0lfZ1V1MGZWdzY3ZFVRUHpiMTI0b3B2ajF4MC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RDlCNUIvOUUxQkQzNzgxMzVBMTFFNUI2OEQ0Mjg2RjhB RUEyMjgvSV9nVXUwZlZ3NjdkVVFQemIxMjRvcHZqMXgwLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4Jj1GcfZaKwEpDHZDSbDbdGU5/y5d NyJ43lIpAe+RQVAIpsRKypV95pfnfHP0uC/cJpoRVWO7yOdYvl5jpF29JOYNo6oX Ry8OLxPycbGgM2nuyPs+sNnWkXISuN9j57x8n8ZL7ivHMB+kImUapXvIOYcDQj0y aC031fsXeJCZ5t+1dEESgCjI8LzM4ORZGGqYd0AcKkGOiboYYaSokR//FS06ZxeU YuCmdxmKLIZc6B8ZInKxx06HeWBv4MWe/K56iBnfOsfutMRAwDKNuxgPtyHp2IdM JgYdrSbG6FdK2d7EB29OihbyAbneOG/HfAMQZNY/6cp4Y2EZ6+5LeCOk -----END CERTIFICATE-----Generated at Mon Aug 11 05:14:07 2025 by rpki-client