$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft File: 1ijkyWq6nPsSRHeGe73xpENfD1s.mft (raw, json) Hash identifier: Qj1Knqw420uR3M0ZJSfl8cnsgFCMmkcHUp2sxPqonjc= Subject key identifier: 1A:83:F3:75:24:65:AD:1C:5A:B5:47:65:B2:52:30:E4:25:94:69:CE Authority key identifier: D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B Certificate issuer: /CN=F362412EAF/serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B Certificate serial: 02B6 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft Manifest number: 02AD Signing time: Sat 23 Aug 2025 04:05:54 +0000 Manifest this update: Sat 23 Aug 2025 04:05:53 +0000 Manifest next update: Mon 25 Aug 2025 04:05:53 +0000 Files and hashes: 1: 1ijkyWq6nPsSRHeGe73xpENfD1s.crl (hash: TLWqFZ8qEz4vumByD5DT/yS38QkQqKVhHQ3Sb9h1Hrs=) 2: ED02D88AE81A11EE8623BCC5775412E6.roa (hash: mvHTVhODmwdELfP/e2cG297ECeboGj2BsOL9AUtxSak=) 3: D9673B327E3811EEA513EB3B4AD9E6FC.roa (hash: UqaCdDOXPbSropYSiVv8/KHGfuPJpE0IwMmtg9u2HE0=) 4: AD4DC7B2E81B11EE9D0AAC4C775412E6.roa (hash: Rg0rPDoDCNsPvE5jk03o2oztgTr1S1Uz/K+MpVZVO/k=) 5: 413308947E3A11EE832D2F404AD9E6FC.roa (hash: Eb0obFXe3E6DORP4MxW4QBN2bM/zRSA3RlnaOBqHUN0=) 6: A9A46126E81A11EEAA8ECCC1775412E6.roa (hash: wd/nf2EuVpjl0YLy2l9YBPgNolj8qZpz1sk3ozhlrnw=) 7: EA19B9687E3911EE8853E63E4AD9E6FC.roa (hash: O86LwkUf5r8SNUYChgmFxO/FC3RubzrEdUN/7g3zOxM=) 8: 1970B130E81B11EEACE154C6775412E6.roa (hash: 5vNOWkuS5OOw6HL2Agkgo+3kaWgHGPZi7TRSlYZvPNs=) 9: 48AE0434E81B11EE876ADDC6775412E6.roa (hash: wJr/eaxq68q6pHClMi9x3b4zYhBKBXGZVN5loE10NCg=) 10: 63F96FF2BEB411EE9F8AD251775412E6.roa (hash: ndpKTdXcDoxXSkEuWmu2k8nfK/ZfndTlZeUQ+gODKm4=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 25 Aug 2025 00:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F362412EAF, serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B Validity Not Before: Aug 23 04:05:53 2025 GMT Not After : Aug 25 04:05:53 2025 GMT Subject: CN=68a93e22-95b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6b:b3:a0:37:76:47:5a:b5:f7:72:c2:a4:0b: b5:84:2b:fa:ee:50:de:f8:6b:fd:21:a2:e4:f2:c7: c6:d7:2c:34:50:d8:b6:d8:6d:86:6d:fa:4d:05:16: b0:7e:53:86:a6:02:4f:21:3b:e3:d6:4b:f6:0a:4e: 4c:65:28:39:c1:74:9e:df:ab:ee:69:6f:1e:3d:07: d5:59:b5:86:f4:d9:7c:dc:22:35:34:cf:c2:ad:fd: f4:8f:8e:c5:f7:3d:cd:dd:86:ee:89:57:0f:05:9c: 51:d5:87:2a:4e:4e:bd:c8:ba:c9:4b:ac:84:66:a4: c5:d0:48:89:fd:86:3b:3a:4e:17:cd:9d:99:1e:15: 38:3d:43:96:52:64:22:69:22:7e:3e:f8:ff:ab:0c: c9:c5:a8:59:86:5c:4d:8e:94:fa:10:7f:0d:02:84: 56:c1:98:13:3b:00:94:9f:68:ab:50:eb:5a:a7:07: b1:42:e5:a5:fe:3a:62:05:55:51:6e:d1:8f:40:12: cc:8f:9f:bc:de:72:d2:50:5a:eb:46:03:21:91:04: 03:2d:cb:97:a5:f4:09:14:41:01:2d:df:05:fb:3d: f8:4a:93:be:df:0c:d0:f2:91:62:f3:6d:57:a8:08: db:bb:a6:32:4a:15:c1:ce:6b:b8:b7:9d:4c:d1:70: cf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:83:F3:75:24:65:AD:1C:5A:B5:47:65:B2:52:30:E4:25:94:69:CE X509v3 Authority Key Identifier: keyid:D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:b8:32:ae:c9:e8:f9:6a:79:ea:74:9c:0c:d1:86:b4:62:2c: 23:34:a7:83:09:a5:d1:3e:2d:56:9d:92:04:c3:70:33:6a:83: 6c:16:c3:6c:66:65:d9:df:65:bb:51:51:7d:87:53:a2:cb:d2: 75:f9:01:8d:a9:37:26:ad:da:d3:00:f7:c9:7b:f2:4f:fb:67: 7d:e9:e6:24:9b:47:09:38:a2:83:87:f9:d7:a0:cf:ed:ea:46: 1f:95:f1:aa:29:1d:37:f0:ec:9c:f3:b7:2f:80:04:89:32:24: a2:05:72:a4:2d:20:02:38:89:36:01:84:78:88:c2:57:66:77: 50:c4:cf:ac:f6:fe:06:ab:e6:d8:cf:7e:5a:64:35:6b:11:6a: 89:a1:3e:80:f0:f4:8c:7b:93:c7:d9:45:0a:2a:c2:04:0f:64: 52:36:aa:4d:f9:e4:f9:5c:94:43:49:aa:91:96:99:b7:e2:7f: 78:c2:8d:bd:5b:36:08:ad:c2:f3:cf:8a:c3:35:a3:33:e5:39: 22:aa:49:52:f2:5e:bc:c0:3a:94:e3:cd:79:42:d8:61:ba:ba: b6:d6:c5:07:48:e9:fd:a8:ca:5d:3d:b6:df:89:29:e6:69:f0: c9:62:5c:81:84:fe:67:3e:d5:01:a3:d5:8d:c0:fe:3c:7a:04: 90:3d:43:67 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICArYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MjQxMkVBRjExMC8GA1UEBRMoRDYyOEU0Qzk2QUJBOUNGQjEyNDQ3Nzg2N0JCREYx QTQ0MzVGMEY1QjAeFw0yNTA4MjMwNDA1NTNaFw0yNTA4MjUwNDA1NTNaMBgxFjAU BgNVBAMTDTY4YTkzZTIyLTk1YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDfa7OgN3ZHWrX3csKkC7WEK/ruUN74a/0houTyx8bXLDRQ2LbYbYZt+k0F FrB+U4amAk8hO+PWS/YKTkxlKDnBdJ7fq+5pbx49B9VZtYb02XzcIjU0z8Kt/fSP jsX3Pc3dhu6JVw8FnFHVhypOTr3IuslLrIRmpMXQSIn9hjs6ThfNnZkeFTg9Q5ZS ZCJpIn4++P+rDMnFqFmGXE2OlPoQfw0ChFbBmBM7AJSfaKtQ61qnB7FC5aX+OmIF VVFu0Y9AEsyPn7zectJQWutGAyGRBAMty5el9AkUQQEt3wX7PfhKk77fDNDykWLz bVeoCNu7pjJKFcHOa7i3nUzRcM8VAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUGoPz dSRlrRxatUdlslIw5CWUac4wHwYDVR0jBBgwFoAU1ijkyWq6nPsSRHeGe73xpENf D1swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjI0MTJFLzNBMjM5QTIwN0UzODExRUU4NTRFRTQzOTRBRDlFNkZDLzFpamt5 V3E2blBzU1JIZUdlNzN4cEVOZkQxcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLzFpamt5V3E2blBzU1JIZUdlNzN4cEVOZkQxcy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MjQxMkUvM0EyMzlBMjA3RTM4MTFFRTg1NEVFNDM5NEFE OUU2RkMvMWlqa3lXcTZuUHNTUkhlR2U3M3hwRU5mRDFzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjuDKuyej5annqdJwM0Ya0YiwjNKeD CaXRPi1WnZIEw3AzaoNsFsNsZmXZ32W7UVF9h1Oiy9J1+QGNqTcmrdrTAPfJe/JP +2d96eYkm0cJOKKDh/nXoM/t6kYflfGqKR038Oyc87cvgASJMiSiBXKkLSACOIk2 AYR4iMJXZndQxM+s9v4Gq+bYz35aZDVrEWqJoT6A8PSMe5PH2UUKKsIED2RSNqpN +eT5XJRDSaqRlpm34n94wo29WzYIrcLzz4rDNaMz5TkiqklS8l68wDqU4815Qthh urq21sUHSOn9qMpdPbbfiSnmafDJYlyBhP5nPtUBo9WNwP48egSQPUNn -----END CERTIFICATE-----Generated at Sat Aug 23 12:45:51 2025 by rpki-client