$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft File: YKDl0axmyK47fJ5qjvW8BLi7uI4.mft (raw, json) Hash identifier: WfXstMJlZrp7HnbVN3pvu7IgIEwXmTOL+PdT7nSdYwo= Subject key identifier: 3B:B5:CC:E4:52:E5:BE:33:44:1E:11:45:50:72:E6:FD:AE:7E:F8:E3 Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E Certificate serial: 0743 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft Manifest number: 06A1 Signing time: Mon 20 Oct 2025 02:38:09 +0000 Manifest this update: Mon 20 Oct 2025 02:38:08 +0000 Manifest next update: Wed 22 Oct 2025 02:38:08 +0000 Files and hashes: 1: YKDl0axmyK47fJ5qjvW8BLi7uI4.crl (hash: rUNhRqe5/CfO1zG8EnONvywRY4b7ZGDgIKNNdUzHDC4=) 2: 488D3EB060B211EF87A97782762E951A.roa (hash: MVYbN3+gCL8uNH5R81Zu9Ge2lQxWhVsfh/rM4ZRyn/w=) 3: BC9C52986C5811F099231397DAE4EC9C.roa (hash: HouG8yLobXovUgqovzMNrrKkzd8yvO2tiqmIiHxJg5I=) 4: 9D00E53A042411F0AE942178762E951A.roa (hash: 3lO4ySirvSBJZhZS0yYuZYZ1ZoMcdgb1UxXC64iMMus=) 5: 1A324760AD1C11F0B48C04E0DAE4EC9C.roa (hash: VVjxKgFBzFQgyT9t4SB+EPQMQZRZhAvUFxvADBJ26rU=) 6: 702BAEE858AA11F0AE7EFB8BDAE4EC9C.roa (hash: HZftb7SkoPVv8c3p79wmuz6GJ/7AyE9u3ys6HyH6VV8=) 7: 293DA02E0E9411EFB4C6A635017001B1.roa (hash: 3+KIiU4tfg4VsfxzRAEbpE5pkr5DnXevqMRkIzk01FM=) 8: 0134E030985211F0B12098EEDAE4EC9C.roa (hash: AUFSQmX19XAAmoVgOMPlmN1NI+kIE+ZG79yWUrVzZ6A=) 9: 6C7ACBF26E0A11EFAC0C4258762E951A.roa (hash: 4grD6nGcP4ytHOjXft0LrvgGLuVL2rG269xNQf6k+eI=) 10: 372AC08C8CB511EF9888555B762E951A.roa (hash: etRxaBFYkDrFKylBsUD/HBMJSKuCjzex1c6EZ66GzPQ=) 11: 3D55B2F0C43211EF8166C3BD762E951A.roa (hash: Af+fAJ8B4YCQU1OF1pDiIpmVk8a59qwsOLlr9TGYlBo=) 12: 8CE95C44659611F0BC0DBF85DAE4EC9C.roa (hash: o1jzPlAl/4cwBPSPVuQC+Ns+6Vf9WBT0byC5yceG9JI=) 13: 94B69FC84F1B11EFBF7CDAAE762E951A.roa (hash: KbxuO2uDPTezjLzyouQUc4XGgC1J865f/dnmoPHmv0Q=) 14: 0C083320B24F11EF80B52F71762E951A.roa (hash: swBYnhkImW9LhM0qswhHNCFqzYvKajWSuD7zcbFshH8=) 15: 373D29E4095511F096A41CBE762E951A.roa (hash: myBILke2RQ0OYPU057gGO3OXC3ByHG2noie9RgjT7qM=) 16: 467A6B4248DF11EFA203A954762E951A.roa (hash: j6LGYpvEwxNC35muXut5alaxgRUMQT87ILx6kToC8Qs=) 17: E2FD811CBC6511EF9197B567762E951A.roa (hash: EXiNgxy7d0tjLX1SpsLd379Zi3cAwKIMh7UFB0zyfF0=) 18: 646F613C003311F0A1A285B3762E951A.roa (hash: bJ1ILmkYuUC3NN3I2YJ1a0bc80c543GbkB4NCNMhrPc=) 19: A8566A94136C11EF9A119E33017001B1.roa (hash: 8n6hGcHTkYJois2LH442hMoRDS4eG3DkPDkUW4heEZ8=) 20: BC5D3D90032D11F09ED36D5F762E951A.roa (hash: fZkSIZKqHjYLVMmlSF8FT38HnKjU0BqJ7lEBUixZVJ0=) 21: 509B5B80154B11EFAAF66569017001B1.roa (hash: XKlm75kmISAu8xaI2z4uwQrQDSSx5mypluivOS+f5kk=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 22 Oct 2025 00:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1859 (0x743) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E Validity Not Before: Oct 20 02:38:08 2025 GMT Not After : Oct 22 02:38:08 2025 GMT Subject: CN=68f5a091-b39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:ad:9b:0b:47:44:e0:0f:ab:b0:d6:54:73: 69:52:77:10:c3:30:5e:56:5a:e8:30:32:da:a3:ef: 89:ad:03:2e:1e:34:c2:90:3e:de:b5:9d:b6:48:f4: c1:92:e0:15:e8:f8:c3:6a:39:06:43:08:46:2a:75: 8f:c6:cc:16:df:0c:89:96:e2:4e:61:74:0a:ff:74: 88:a5:66:48:f5:79:f7:87:18:bf:d6:11:44:cd:62: 82:f6:f9:cf:2a:0a:22:08:ad:c1:e3:52:d6:7d:60: f2:33:ab:a4:54:c8:28:47:03:f1:20:56:7f:13:ec: 60:7c:51:1c:0a:92:f5:b2:1d:55:ea:86:e5:d8:fe: ec:ef:d1:cd:a4:fd:ce:e1:14:b5:be:d4:ff:74:70: 68:62:47:00:19:ee:20:8c:9c:fd:ca:1c:c2:2f:12: 0a:40:b9:47:3e:9f:c4:2e:65:dd:c2:34:2b:5e:cc: f8:81:26:5b:97:ee:b0:0b:0f:03:02:bf:ab:56:24: a3:4f:88:36:92:58:4f:3a:be:1c:8f:7d:61:e3:f9: d1:4e:9c:12:75:20:25:4f:04:35:5e:1e:dc:73:d3: 37:5f:02:4d:2e:3a:8e:af:31:71:a8:c8:76:66:37: e7:14:06:9b:0a:55:0a:dc:d6:63:4e:5d:02:d6:f8: db:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B5:CC:E4:52:E5:BE:33:44:1E:11:45:50:72:E6:FD:AE:7E:F8:E3 X509v3 Authority Key Identifier: keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:c0:05:06:9e:5f:e6:1c:0f:35:3e:f2:1f:66:79:16:b0:03: 47:57:fd:52:c1:c7:ba:00:34:4d:da:c2:4a:d2:ca:fa:f2:5e: 40:f5:7c:cc:af:55:ed:5d:af:89:58:b8:c3:25:b5:90:52:18: f5:ac:57:c0:cf:a0:66:0e:45:ff:c4:65:ff:bf:9a:3c:6c:e7: 00:0a:72:0c:29:9c:8b:40:58:e1:f4:fd:37:c4:4e:7d:39:08: e1:bb:c7:ff:fd:41:a2:4e:5d:67:08:8c:a4:96:3d:8c:8b:5f: 50:46:4d:8e:3d:95:d3:22:b2:4f:37:a5:7b:5c:70:b8:0c:16: fd:4c:0d:de:26:bd:56:1e:b9:c1:a8:8a:ec:b2:1b:05:66:c9: 12:99:99:57:8f:15:be:c7:be:de:9b:6d:f7:cb:7f:8e:71:d6: 27:31:7e:9d:a6:08:82:70:a7:ff:ef:34:6a:0b:fb:26:29:d2: c3:eb:62:0e:fb:80:40:89:1b:eb:e7:5f:cc:03:8c:7b:99:4a: 4b:ec:bf:14:a9:8b:cd:c5:ec:c8:9c:d7:f9:92:b0:5c:8f:96: 55:00:df:8a:16:5a:49:c7:d4:ee:98:e8:96:6f:ca:d6:69:ae: b5:10:ad:56:4d:e2:7d:61:15:1c:45:79:f4:86:7a:03:a8:08: c5:b8:4c:f1 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICB0MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD MDRCOEJCQjg4RTAeFw0yNTEwMjAwMjM4MDhaFw0yNTEwMjIwMjM4MDhaMBgxFjAU BgNVBAMTDTY4ZjVhMDkxLWIzOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCxVa2bC0dE4A+rsNZUc2lSdxDDMF5WWugwMtqj74mtAy4eNMKQPt61nbZI 9MGS4BXo+MNqOQZDCEYqdY/GzBbfDImW4k5hdAr/dIilZkj1efeHGL/WEUTNYoL2 +c8qCiIIrcHjUtZ9YPIzq6RUyChHA/EgVn8T7GB8URwKkvWyHVXqhuXY/uzv0c2k /c7hFLW+1P90cGhiRwAZ7iCMnP3KHMIvEgpAuUc+n8QuZd3CNCtezPiBJluX7rAL DwMCv6tWJKNPiDaSWE86vhyPfWHj+dFOnBJ1ICVPBDVeHtxz0zdfAk0uOo6vMXGo yHZmN+cUBpsKVQrc1mNOXQLW+NsnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUO7XM 5FLlvjNEHhFFUHLm/a5++OMwHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7 uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MTQ2NTkvNjY1NkRFNzQ2REY4MTFFQ0JDQzIxMDc2NUE0 MEQ1NzcvWUtEbDBheG15SzQ3Zko1cWp2VzhCTGk3dUk0Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSwAUGnl/mHA81PvIfZnkWsANHV/1S wce6ADRN2sJK0sr68l5A9XzMr1XtXa+JWLjDJbWQUhj1rFfAz6BmDkX/xGX/v5o8 bOcACnIMKZyLQFjh9P03xE59OQjhu8f//UGiTl1nCIyklj2Mi19QRk2OPZXTIrJP N6V7XHC4DBb9TA3eJr1WHrnBqIrsshsFZskSmZlXjxW+x77em233y3+OcdYnMX6d pgiCcKf/7zRqC/smKdLD62IO+4BAiRvr51/MA4x7mUpL7L8UqYvNxezInNf5krBc j5ZVAN+KFlpJx9TumOiWb8rWaa61EK1WTeJ9YRUcRXn0hnoDqAjFuEzx -----END CERTIFICATE-----Generated at Mon Oct 20 11:30:36 2025 by rpki-client