$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft File: OlU7bvgL-SIxL5a43cHyGajEEhs.mft (raw, json) Hash identifier: 6B8cV1bkmu1xz8wShrR8J4aO0yV3VovyxNCA1s8KiwI= Subject key identifier: 39:94:5D:F4:3E:A5:A6:A5:82:E0:38:66:23:EA:F6:C5:C0:A6:69:15 Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B Certificate serial: 03BC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft Manifest number: 0391 Signing time: Wed 06 Aug 2025 03:43:06 +0000 Manifest this update: Wed 06 Aug 2025 03:43:05 +0000 Manifest next update: Fri 08 Aug 2025 03:43:05 +0000 Files and hashes: 1: OlU7bvgL-SIxL5a43cHyGajEEhs.crl (hash: JPAIXAv6IxO2Y6O+UcbK1yKX93PQCBJBZhME1OiR9m0=) 2: 401DB4F42F1E11F09B881AB3DAE4EC9C.roa (hash: xj4UFgtRmUF6hPhDY8QCTAupvw1psvGB0HcdO8EfGgk=) 3: 00C569A2002D11F08D8D918C762E951A.roa (hash: J2zGLkOSE56js9RNvJ4OT497mQJdthstAM3GPqfXq4g=) 4: A9777DB400A111F0BFE5D984762E951A.roa (hash: /NRI84ju86WCQqU5dc2FqAKEMK10FL0ooHDMUCIRqrU=) 5: 8A0596E448DE11EF82EDFA4F762E951A.roa (hash: pTkaYfOMalP4Ac9YVOrNd/HL6aUPMLSzJ9NLjfsNk8k=) 6: 1C19002A58A711EF91CC474E762E951A.roa (hash: 28b+AJrYiZxyaN6PahnQJz38qCvJBTTx3Q3ULsHDeuc=) 7: 7050CF3A2EAB11F0B4B053A7DAE4EC9C.roa (hash: aOFRM5Th4Ppr9x/V2gxhKzhGJiZ2YiGkDB5kt+uThQY=) 8: A46FECBA0D4611EF94FE720E017001B1.roa (hash: 1+eZFsoTVxew2nM8QAmKo9cbdoGw9gIVLATJ2Cve9BY=) 9: 487DF37800FE11F09431944D762E951A.roa (hash: vFH43GxrKZ9rqeJkPBqFNCpNF2wmx+m29HBGPHLRYRU=) 10: 409CF10850E111F0986264E2DAE4EC9C.roa (hash: Rv8B7d0mX6Fqq83MoQ7dcQHGa++1Fp9qoSXiOUYArXg=) 11: AE6DAEF23FE311F08E1CA0BADAE4EC9C.roa (hash: NcoPOIw5nkiJxRXHYEGD+Qp0wgE7N4ijW+oi6r7fxHs=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 08 Aug 2025 03:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B Validity Not Before: Aug 6 03:43:05 2025 GMT Not After : Aug 8 03:43:05 2025 GMT Subject: CN=6892cf4a-a51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2a:9b:a2:99:8d:47:ce:bb:2d:cd:14:05:20: a5:73:5e:ba:fd:fc:c9:94:cc:60:b2:53:00:1a:cd: ee:2f:6f:92:07:34:ff:3d:15:a4:f0:f0:11:4f:21: e3:2b:6a:64:e3:d7:c1:30:23:a1:22:50:bc:f8:e5: cb:7c:47:72:f4:70:53:f2:9d:ed:1b:b2:c4:fc:40: e3:00:c7:b6:56:07:8d:36:40:59:97:bd:fb:1d:00: 4d:75:5d:7d:1a:f9:97:3e:e6:91:b1:9c:5b:5f:d7: 64:f5:a2:ad:bd:d9:33:c9:62:bb:00:04:dd:75:92: 85:84:df:cf:bc:9b:ca:cf:56:0c:50:13:88:81:56: 20:e1:56:15:40:b8:d6:a5:94:a3:cb:97:bc:40:f3: ad:f6:b9:3b:a3:63:64:2c:b5:48:d1:94:65:72:29: 38:6b:23:15:78:b3:37:ce:db:a8:2c:81:2a:5f:4d: 94:ea:48:bf:1a:d2:b4:32:4f:24:b9:64:a9:8a:06: 69:a2:f7:67:c7:19:60:7f:79:fc:4a:b2:99:22:c2: 5e:0d:e4:bc:ad:0d:6e:97:b8:88:06:71:74:62:12: b9:0e:ea:ef:8d:b0:03:4f:7c:1b:cc:0f:c7:bb:32: 7b:14:a7:7b:92:4f:4b:57:93:a1:c0:8a:50:0b:eb: 77:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:94:5D:F4:3E:A5:A6:A5:82:E0:38:66:23:EA:F6:C5:C0:A6:69:15 X509v3 Authority Key Identifier: keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:04:42:22:7a:85:0c:6c:34:db:bb:04:ce:ee:92:77:03:b3: c5:f0:1a:38:77:42:d1:9a:76:dd:cd:45:69:4d:cc:c0:f6:28: 5a:c0:8e:cb:1e:87:e3:ec:67:43:28:03:17:bc:6f:d0:16:f1: d8:d2:cf:41:08:b0:5c:fd:7f:c0:a1:a2:ba:bf:75:f0:d8:7e: 98:c2:eb:46:c8:99:85:d1:70:14:c8:2f:d2:b0:00:41:d9:50: fd:fa:5b:b2:bf:12:0d:f8:7b:1a:1d:ef:55:df:f7:a4:d6:cb: a6:54:11:5f:62:0a:5f:40:d6:9b:9f:ac:76:0f:70:17:8d:17: 19:60:ad:37:f1:d9:ac:55:21:e8:b6:10:ce:ac:e6:0b:89:09: 0c:05:ce:0a:b5:17:eb:a9:a5:ee:9d:65:cf:a3:47:63:bb:93: a7:70:87:21:74:65:c2:e4:2f:be:5c:48:1c:5a:5b:47:f9:76: 59:cf:b8:d3:72:06:46:4a:c9:fc:17:6e:d2:dd:0c:d2:f9:c8: 5d:7a:c0:16:53:01:0b:04:76:d0:f9:4a:b8:b1:d7:16:02:a5: 49:fd:bc:76:56:cf:6e:8a:8c:ed:64:ad:0e:3e:10:bd:23:77: 0f:9e:51:27:9e:da:09:3e:92:62:f8:50:02:18:da:6d:d9:e6: ef:90:ce:90 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RUY3RDBBRjExMC8GA1UEBRMoM0E1NTNCNkVGODBCRjkyMjMxMkY5NkI4RERDMUYy MTlBOEM0MTIxQjAeFw0yNTA4MDYwMzQzMDVaFw0yNTA4MDgwMzQzMDVaMBgxFjAU BgNVBAMTDTY4OTJjZjRhLWE1MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCmKpuimY1HzrstzRQFIKVzXrr9/MmUzGCyUwAaze4vb5IHNP89FaTw8BFP IeMramTj18EwI6EiULz45ct8R3L0cFPyne0bssT8QOMAx7ZWB402QFmXvfsdAE11 XX0a+Zc+5pGxnFtf12T1oq292TPJYrsABN11koWE38+8m8rPVgxQE4iBViDhVhVA uNallKPLl7xA8632uTujY2QstUjRlGVyKThrIxV4szfO26gsgSpfTZTqSL8a0rQy TyS5ZKmKBmmi92fHGWB/efxKspkiwl4N5LytDW6XuIgGcXRiErkO6u+NsANPfBvM D8e7MnsUp3uST0tXk6HAilAL63e3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUOZRd 9D6lpqWC4DhmI+r2xcCmaRUwHwYDVR0jBBgwFoAUOlU7bvgL+SIxL5a43cHyGajE EhswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRBRDlFNkZDL09sVTdi dmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL09sVTdidmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RUY3RDAvMzZFNDBBMTZGMkZCMTFFRDgyMUI5RDgwNEFE OUU2RkMvT2xVN2J2Z0wtU0l4TDVhNDNjSHlHYWpFRWhzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCEBEIieoUMbDTbuwTO7pJ3A7PF8Bo4 d0LRmnbdzUVpTczA9ihawI7LHofj7GdDKAMXvG/QFvHY0s9BCLBc/X/AoaK6v3Xw 2H6YwutGyJmF0XAUyC/SsABB2VD9+luyvxIN+HsaHe9V3/ek1sumVBFfYgpfQNab n6x2D3AXjRcZYK038dmsVSHothDOrOYLiQkMBc4KtRfrqaXunWXPo0dju5OncIch dGXC5C++XEgcWltH+XZZz7jTcgZGSsn8F27S3QzS+chdesAWUwELBHbQ+Uq4sdcW AqVJ/bx2Vs9uioztZK0OPhC9I3cPnlEnntoJPpJi+FACGNpt2ebvkM6Q -----END CERTIFICATE-----Generated at Thu Aug 7 00:47:07 2025 by rpki-client