$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft File: 1ijkyWq6nPsSRHeGe73xpENfD1s.mft (raw, json) Hash identifier: P5IVfflSeJEcPYPjIDC4hFJfGYBuJki+anpNJsDGGmM= Subject key identifier: F7:27:3B:7D:6E:8D:D6:46:76:EE:DB:EA:12:AA:46:0C:90:50:63:4D Authority key identifier: D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B Certificate issuer: /CN=F362412EAF/serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B Certificate serial: 02EF Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft Manifest number: 02E6 Signing time: Sun 19 Oct 2025 03:53:32 +0000 Manifest this update: Sun 19 Oct 2025 03:53:32 +0000 Manifest next update: Tue 21 Oct 2025 03:53:32 +0000 Files and hashes: 1: 1ijkyWq6nPsSRHeGe73xpENfD1s.crl (hash: czbFImaInGhxF0LDC96hrAcyRYIfaJjlCf/SwdpXiZg=) 2: ED02D88AE81A11EE8623BCC5775412E6.roa (hash: mvHTVhODmwdELfP/e2cG297ECeboGj2BsOL9AUtxSak=) 3: D9673B327E3811EEA513EB3B4AD9E6FC.roa (hash: UqaCdDOXPbSropYSiVv8/KHGfuPJpE0IwMmtg9u2HE0=) 4: AD4DC7B2E81B11EE9D0AAC4C775412E6.roa (hash: Rg0rPDoDCNsPvE5jk03o2oztgTr1S1Uz/K+MpVZVO/k=) 5: 413308947E3A11EE832D2F404AD9E6FC.roa (hash: Eb0obFXe3E6DORP4MxW4QBN2bM/zRSA3RlnaOBqHUN0=) 6: A9A46126E81A11EEAA8ECCC1775412E6.roa (hash: wd/nf2EuVpjl0YLy2l9YBPgNolj8qZpz1sk3ozhlrnw=) 7: EA19B9687E3911EE8853E63E4AD9E6FC.roa (hash: O86LwkUf5r8SNUYChgmFxO/FC3RubzrEdUN/7g3zOxM=) 8: 1970B130E81B11EEACE154C6775412E6.roa (hash: 5vNOWkuS5OOw6HL2Agkgo+3kaWgHGPZi7TRSlYZvPNs=) 9: 48AE0434E81B11EE876ADDC6775412E6.roa (hash: wJr/eaxq68q6pHClMi9x3b4zYhBKBXGZVN5loE10NCg=) 10: 63F96FF2BEB411EE9F8AD251775412E6.roa (hash: ndpKTdXcDoxXSkEuWmu2k8nfK/ZfndTlZeUQ+gODKm4=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 21 Oct 2025 00:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 751 (0x2ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F362412EAF, serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B Validity Not Before: Oct 19 03:53:32 2025 GMT Not After : Oct 21 03:53:32 2025 GMT Subject: CN=68f460bc-c2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3a:f8:61:bc:07:3c:0d:21:c4:22:20:82:92: 75:55:37:12:0a:53:a4:86:22:95:f2:1a:6c:e5:c3: c8:e1:a2:71:c5:18:16:55:3a:86:e8:65:2a:c5:3f: 35:bf:e8:0f:d0:72:82:53:36:52:b1:2e:c9:37:1a: df:7f:07:23:32:2b:a9:45:e6:e9:1f:ca:a8:6b:d9: e5:7f:a5:fa:ca:b4:d4:e3:c3:75:40:65:3b:9f:f0: 63:9e:8f:b9:1e:df:78:29:a1:5f:79:a3:db:ba:e5: 40:f5:9d:2c:2d:7e:c9:ce:ab:07:4f:69:d4:b1:fb: 5a:29:7c:5a:4e:68:d9:ce:4d:c4:2c:fd:6c:1b:6d: 91:5d:cc:9e:b4:94:70:d9:1c:28:97:f2:c7:a0:10: ae:26:42:74:ef:ea:30:3a:0e:d4:bf:a3:be:cd:af: b2:9b:ee:56:9e:ca:e8:8c:b7:da:08:e2:3a:8b:09: 66:53:0d:d0:d4:9e:c5:8e:f8:93:95:b7:ca:4a:f2: 75:43:35:78:4b:57:84:b1:b6:99:79:45:b2:b8:9a: 65:83:ce:29:4d:ca:aa:da:0a:d4:e2:da:61:74:75: 02:a4:30:34:fe:74:e7:9b:f0:0e:c6:42:55:ba:90: 63:08:b0:9b:1f:4b:16:7f:21:bc:d1:63:ae:40:60: 8e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:27:3B:7D:6E:8D:D6:46:76:EE:DB:EA:12:AA:46:0C:90:50:63:4D X509v3 Authority Key Identifier: keyid:D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:33:81:89:d8:ad:ab:90:eb:52:4b:1c:23:b3:8f:12:c6:d5: 80:b3:ed:7d:bd:c9:25:ac:01:c4:6f:21:49:d5:a0:95:03:b6: 72:28:0d:d3:20:0f:f2:03:94:76:80:d3:8e:85:10:b5:f2:18: 78:2d:65:b3:26:93:17:48:4a:4e:8a:33:3f:32:8c:44:64:3f: 16:28:a8:85:54:5b:13:3b:fe:08:c7:60:38:44:da:28:b5:cb: a8:b3:74:60:89:b6:d6:ba:1a:d5:2c:cf:b7:1b:97:f6:b4:be: 1f:91:91:28:93:be:7c:ca:25:fb:c0:98:19:c1:0f:c2:f1:0e: 8a:ac:84:03:f6:47:08:ef:c3:06:c2:fc:48:7c:a0:05:76:64: 0f:c9:ab:b1:4f:51:87:ef:16:a4:bc:22:d6:5e:26:2d:a8:20: 02:df:85:77:09:17:3b:48:e9:15:03:c8:17:d4:df:86:01:f0: b6:65:33:83:45:ea:df:2c:cc:56:4a:f2:4e:80:86:1e:7b:ee: 43:1f:20:be:46:1b:c4:0c:40:4e:11:03:a1:39:24:b9:e6:83: d7:92:0f:cf:4b:1c:d8:0d:53:7f:ce:ce:70:14:0e:f1:05:a7: e8:08:ab:76:0d:00:a9:f0:a3:00:c2:20:2f:01:e3:c6:25:8c: 1c:e3:92:49 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MjQxMkVBRjExMC8GA1UEBRMoRDYyOEU0Qzk2QUJBOUNGQjEyNDQ3Nzg2N0JCREYx QTQ0MzVGMEY1QjAeFw0yNTEwMTkwMzUzMzJaFw0yNTEwMjEwMzUzMzJaMBgxFjAU BgNVBAMTDTY4ZjQ2MGJjLWMyZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDWOvhhvAc8DSHEIiCCknVVNxIKU6SGIpXyGmzlw8jhonHFGBZVOoboZSrF PzW/6A/QcoJTNlKxLsk3Gt9/ByMyK6lF5ukfyqhr2eV/pfrKtNTjw3VAZTuf8GOe j7ke33gpoV95o9u65UD1nSwtfsnOqwdPadSx+1opfFpOaNnOTcQs/WwbbZFdzJ60 lHDZHCiX8segEK4mQnTv6jA6DtS/o77Nr7Kb7laeyuiMt9oI4jqLCWZTDdDUnsWO +JOVt8pK8nVDNXhLV4Sxtpl5RbK4mmWDzilNyqraCtTi2mF0dQKkMDT+dOeb8A7G QlW6kGMIsJsfSxZ/IbzRY65AYI6fAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU9yc7 fW6N1kZ27tvqEqpGDJBQY00wHwYDVR0jBBgwFoAU1ijkyWq6nPsSRHeGe73xpENf D1swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjI0MTJFLzNBMjM5QTIwN0UzODExRUU4NTRFRTQzOTRBRDlFNkZDLzFpamt5 V3E2blBzU1JIZUdlNzN4cEVOZkQxcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLzFpamt5V3E2blBzU1JIZUdlNzN4cEVOZkQxcy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MjQxMkUvM0EyMzlBMjA3RTM4MTFFRTg1NEVFNDM5NEFE OUU2RkMvMWlqa3lXcTZuUHNTUkhlR2U3M3hwRU5mRDFzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvM4GJ2K2rkOtSSxwjs48SxtWAs+19 vcklrAHEbyFJ1aCVA7ZyKA3TIA/yA5R2gNOOhRC18hh4LWWzJpMXSEpOijM/MoxE ZD8WKKiFVFsTO/4Ix2A4RNootcuos3RgibbWuhrVLM+3G5f2tL4fkZEok758yiX7 wJgZwQ/C8Q6KrIQD9kcI78MGwvxIfKAFdmQPyauxT1GH7xakvCLWXiYtqCAC34V3 CRc7SOkVA8gX1N+GAfC2ZTODRerfLMxWSvJOgIYee+5DHyC+RhvEDEBOEQOhOSS5 5oPXkg/PSxzYDVN/zs5wFA7xBafoCKt2DQCp8KMAwiAvAePGJYwc45JJ -----END CERTIFICATE-----Generated at Mon Oct 20 00:03:57 2025 by rpki-client