$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft File: x4zcO11LE2dctIrTtjvgHsWoB_g.mft (raw, json) Hash identifier: chRO6TBN9eeD+n/jvVMGkxAldC+wtHWuL1OWWqy+FiA= Subject key identifier: 49:11:CD:95:7F:14:25:17:C4:8D:CA:7C:39:11:8D:2B:39:0A:11:33 Authority key identifier: C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8 Certificate issuer: /CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8 Certificate serial: 045C Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft Manifest number: 044D Signing time: Mon 04 Aug 2025 03:16:43 +0000 Manifest this update: Mon 04 Aug 2025 03:16:42 +0000 Manifest next update: Wed 06 Aug 2025 03:16:42 +0000 Files and hashes: 1: x4zcO11LE2dctIrTtjvgHsWoB_g.crl (hash: tSMMeQxCasc8yf/Cd4xg6ufGQwTERjCN8CSqRM7NmNM=) 2: 45E09460492011EDA58FEACFF1222468.roa (hash: W7ubFeQV8onhDcwxeg30ugXXalNtBd+ZG/y/BamgqXk=) 3: 99986272498611F0BE1E23EEDAE4EC9C.roa (hash: Z4gQzojiEKX5fZtqwTgoYBRKXPibvfeQJQnSktukfUM=) 4: 61F3ED46A71011EFA4F58993762E951A.roa (hash: S/a4NOGDMCYqavfy2n6nHPuJWnA8uLXKDGrhZokqBOA=) 5: 88A5B71428C311F0BEF0A0B4DAE4EC9C.roa (hash: ePq4EbCDmWiOxXuBQCEii4Bej/F9RXahE4beV/zVjQ0=) 6: 24769B8AC01B11EE87488562775412E6.roa (hash: Juiav7EMo7UB6/g3W5W1dR2kpf5FMViakz+hnSTb9pI=) 7: CE07EBFC434F11EE9E338E5E4AD9E6FC.roa (hash: lLKF/LQUCJrjFGeoKrxD3GvZk7yNLfxsdpj4p8cAFcg=) 8: BA5646848B9311EFB18C87BF762E951A.roa (hash: JPWhpnri236k1i+Gn96J/0YOtSYJC79c9FGJpIaebkg=) 9: 76506164C45911EFBD701FB3762E951A.roa (hash: 99UKUf4fnRe0MO3HcCv5JDIcqSTWLiXWxRxR3pGatmc=) 10: 73CC053C4EB611F0AE15C1C8DAE4EC9C.roa (hash: SQV1YsdD1Ajwa0W56ES+0u6UJCxHEKEeYvpdGKFa0ZE=) 11: C4CEB8AC398711EF843D2E9D762E951A.roa (hash: h7S0JCwsO3r6rweJjX0edCYo6Cy5Pss43I07DZlAHq8=) 12: 08DB71BC53EA11EF98E06585762E951A.roa (hash: 9y2Xf3yrmOHpN9GrNuG3T4PeZPIw6BfSrZ7oAs2gMlE=) 13: A278A9AC60E211EF938734A9762E951A.roa (hash: z1Jlw/yZ++yZq2QaqkGqkTifs65T2BP5GQxHjafo/Nk=) 14: 8390093077E011EF94B4F59C762E951A.roa (hash: /gwS+GQo/DPLk6XCYBj5Tt7o/4lhGYntAWZgy7TgGi0=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 06 Aug 2025 00:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1116 (0x45c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36FE19EAF, serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8 Validity Not Before: Aug 4 03:16:42 2025 GMT Not After : Aug 6 03:16:42 2025 GMT Subject: CN=6890261b-cab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a2:33:1d:84:d3:63:a0:1b:3b:c7:1c:ab:b7: e5:0e:fc:9a:dd:43:e1:ca:e7:58:c1:59:82:bb:b0: 35:9d:0f:97:64:0c:76:de:6e:a3:f9:a5:64:d3:f0: 04:15:2a:28:10:7e:84:6b:a0:26:9f:99:5f:3e:9e: 3b:1d:7a:0a:c5:ca:e4:25:73:62:41:7e:1d:91:28: 7b:ce:24:d6:7b:02:a6:65:ab:ce:89:c5:24:43:f2: 42:81:39:b1:44:71:be:13:6f:4b:02:0f:7c:83:19: b4:ec:21:e0:f8:bd:eb:cf:0e:33:5e:b9:3d:ac:67: c5:ee:95:94:00:2c:03:8b:ad:4b:5f:49:7b:b7:5d: 8f:a7:e8:ae:38:f9:2e:43:e1:8f:29:a4:6c:a3:75: df:17:8e:f1:6d:66:de:44:bf:3d:a3:7a:8b:a6:61: b1:c4:15:c0:ad:36:53:bf:76:62:bf:2f:42:25:fd: 78:00:05:14:8a:74:93:2b:30:18:1b:50:43:d6:1e: b1:9b:80:3d:4f:6b:84:92:27:74:bf:32:33:b6:e7: c2:20:16:75:e1:10:53:fc:73:80:6f:9c:46:c9:b5: 28:32:9f:51:f6:78:e2:6e:59:36:b1:4a:b7:e4:97: 90:df:51:c4:4e:3d:11:62:06:34:1a:ab:05:fc:3c: db:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:11:CD:95:7F:14:25:17:C4:8D:CA:7C:39:11:8D:2B:39:0A:11:33 X509v3 Authority Key Identifier: keyid:C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:b9:7c:19:5d:d8:6b:f7:30:df:e0:9a:e1:59:fc:23:fc:f3: 58:02:db:d7:f0:cb:0e:82:f1:52:cd:a3:d3:41:2d:3b:3e:7a: b0:af:ad:93:f8:59:a5:e8:7e:87:23:ff:a5:6f:bc:db:31:9c: b6:66:06:82:6a:3c:1e:84:c3:42:b1:a3:1e:bd:78:8f:30:3b: e9:fb:a2:38:14:89:e1:7d:41:ba:be:3b:f3:9b:04:23:dd:ba: 03:1b:1d:61:97:57:e4:ca:25:d5:7a:6c:e8:97:a2:1b:89:24: 71:a3:01:ef:2b:58:ed:54:f5:72:3b:a5:53:d3:cc:a4:bf:f3: 7e:c5:68:69:1b:a8:b3:50:f5:49:00:0e:bf:86:20:5f:f7:95: 0c:6a:ce:55:7f:94:0d:05:be:69:6a:dc:7b:33:b3:c0:49:42: 11:85:7b:f5:0f:d8:4d:5d:60:e0:6d:ce:52:a5:66:4c:af:28: bb:92:d0:5c:9b:da:14:56:d5:6e:e0:08:57:54:21:60:e4:80: 4b:96:d8:b1:84:39:c7:9e:60:31:f3:92:2b:b0:94:e3:0d:66: 86:ad:ae:20:88:99:39:86:3d:29:8f:3e:5e:07:35:2f:e8:62: 31:19:a9:82:51:97:72:39:d0:86:6b:06:f1:9c:f0:65:1c:38: e0:e8:75:6a -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBFwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RkUxOUVBRjExMC8GA1UEBRMoQzc4Q0RDM0I1RDRCMTM2NzVDQjQ4QUQzQjYzQkUw MUVDNUE4MDdGODAeFw0yNTA4MDQwMzE2NDJaFw0yNTA4MDYwMzE2NDJaMBgxFjAU BgNVBAMTDTY4OTAyNjFiLWNhYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDqojMdhNNjoBs7xxyrt+UO/JrdQ+HK51jBWYK7sDWdD5dkDHbebqP5pWTT 8AQVKigQfoRroCafmV8+njsdegrFyuQlc2JBfh2RKHvOJNZ7AqZlq86JxSRD8kKB ObFEcb4Tb0sCD3yDGbTsIeD4vevPDjNeuT2sZ8XulZQALAOLrUtfSXu3XY+n6K44 +S5D4Y8ppGyjdd8XjvFtZt5Evz2jeoumYbHEFcCtNlO/dmK/L0Il/XgABRSKdJMr MBgbUEPWHrGbgD1Pa4SSJ3S/MjO258IgFnXhEFP8c4BvnEbJtSgyn1H2eOJuWTax Srfkl5DfUcROPRFiBjQaqwX8PNu9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUSRHN lX8UJRfEjcp8ORGNKzkKETMwHwYDVR0jBBgwFoAUx4zcO11LE2dctIrTtjvgHsWo B/gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkZFMTlFL0FCN0U3OEJFNDhERjExRURBNzYxQjI5Q0YxMjIyNDY4L3g0emNP MTFMRTJkY3RJclR0anZnSHNXb0JfZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3g0emNPMTFMRTJkY3RJclR0anZnSHNXb0JfZy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RkUxOUUvQUI3RTc4QkU0OERGMTFFREE3NjFCMjlDRjEy MjI0NjgveDR6Y08xMUxFMmRjdElyVHRqdmdIc1dvQl9nLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2uXwZXdhr9zDf4JrhWfwj/PNYAtvX 8MsOgvFSzaPTQS07Pnqwr62T+Fml6H6HI/+lb7zbMZy2ZgaCajwehMNCsaMevXiP MDvp+6I4FInhfUG6vjvzmwQj3boDGx1hl1fkyiXVemzol6IbiSRxowHvK1jtVPVy O6VT08ykv/N+xWhpG6izUPVJAA6/hiBf95UMas5Vf5QNBb5patx7M7PASUIRhXv1 D9hNXWDgbc5SpWZMryi7ktBcm9oUVtVu4AhXVCFg5IBLltixhDnHnmAx85IrsJTj DWaGra4giJk5hj0pjz5eBzUv6GIxGamCUZdyOdCGawbxnPBlHDjg6HVq -----END CERTIFICATE-----Generated at Mon Aug 4 11:09:44 2025 by rpki-client