$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft File: 3zdkgNzweht60WTeZKPqIV8kdUE.mft (raw, json) Hash identifier: UJRynuZT5xXbbi11WAG+zr3EyML8Jd3WGh93FTscffg= Subject key identifier: 63:8B:D9:56:7D:A6:8F:A5:D5:5F:A2:7C:A5:1E:42:2C:D9:74:D9:E5 Authority key identifier: DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41 Certificate issuer: /CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541 Certificate serial: 06E2 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft Manifest number: 06CC Signing time: Mon 20 Oct 2025 02:08:03 +0000 Manifest this update: Mon 20 Oct 2025 02:08:02 +0000 Manifest next update: Wed 22 Oct 2025 02:08:02 +0000 Files and hashes: 1: 3zdkgNzweht60WTeZKPqIV8kdUE.crl (hash: b+p7h+jrMe0RxsAm8c+eIETrql1NhuFDoJiZpQuQj5g=) 2: A3EC97C49EAA11EB9431AE42F8AEA228.roa (hash: ITdou6CBdoyIdGztCF0641fr0nfnRn3rDhTSbOWklSg=) 3: BD35823837EA11ED900673C9F1222468.roa (hash: K3b0R/z4frBDGrfF/mCTN3o21drYDHR1MM4314IVJ6A=) 4: 0982C456E24C11ECBCE3B3CEF1222468.roa (hash: rkWlw7/JbGs5TriVgLgAZr85y9glD0YVL8m1Iff/Uxs=) 5: A355EDC8A0DB11EB87F2FC7DF8AEA228.roa (hash: P3+HhN3YnB8DQjtTMhjEMHdHESBMFxFQZlU9EI7263k=) 6: 98E14F269EA711EBBE0A593EF8AEA228.roa (hash: FZ26ySvv3oron31W1iao0hhqAh46EM14zvc7xYlbQnc=) 7: 6E9310449EAA11EBB4E64442F8AEA228.roa (hash: Hv+jSs3D/YdVMnFhqJVvMuYCEdqqrHrk+9Aqx/UNgKo=) 8: C7ECC700714111ED8827C5E0F1222468.roa (hash: W6gLMNJRZ7K5rBGmlnWlV3y7BTYUlYaagswgafcBbHM=) 9: B0A72E82BFAD11ECBB31F3D65A40D577.roa (hash: vPmLIix5cxvVmhxpbkYB4/qDa0zKQvjG6CoH3d5Eq74=) 10: EC17DAD29EA911EBA0639941F8AEA228.roa (hash: tmy+9p0VWiMmZWA0QRZ2fgoauFE3Y6jS2hlQpUun5VU=) 11: 806F60A68EA811EEB351189F7D84E21B.roa (hash: NJlx9u+oJuJrEXnYDPQ5xdPQwiaXnmhnYC8axpDUM3s=) 12: 1B0C20009EAA11EB9740C941F8AEA228.roa (hash: 3XWadNjbvuaIh9S98dtVe+4vXm4B+aC8LiE6ycenb00=) 13: 09618552624A11EC8BFCB8A85A40D577.roa (hash: FIOUTy5cy2KzouDMbv2WtQevYzQleIp785GheY40Njk=) 14: 3FC1A89C791111EC8AF442855A40D577.roa (hash: KTULHI880xtCGIU0AMDedXoG0QU7sh0kYIcf5dcFCks=) 15: 884C0C72D2BD11ED8DC9AFA4F1222468.roa (hash: 2tRYYZYXesgnA4Rq+EJeXLYkWIBNCFi1xtzvwofm52c=) 16: 8BDFF64E9EAA11EB9E498842F8AEA228.roa (hash: zV3obduva5V+wbQ0DLEaMrifvrDZUFDKELgGrlIfqWQ=) 17: 32F7F2FC9EAA11EB97EBF441F8AEA228.roa (hash: TOFg8z8/QllUB8rjCBN0BMuQMzI8dKWFP0PwxmRO42c=) 18: 50E626B29EAA11EB86172E42F8AEA228.roa (hash: mLDh441cHpoJvemUeR9tMVJFEiDMnH7uLyDeQGJi6ek=) 19: 365C8E5857FA11ECA60EBEB35A40D577.roa (hash: wOGfAQ9Pv53mToR0ZnCKbUzeq4qbARxxk+1x7WlPnk8=) 20: 3D415C420CC911EDBA4FEBC8F1222468.roa (hash: h2cyYPdvqsKecbOgrvnDc2rdhf3n2mu1oU/CKpdb2TY=) 21: BB6D0B4EA15111EDB90237D8F1222468.roa (hash: RXFTH7COLNat1EWyJGa03bPPYwNChNlTVBL4I7XF06A=) 22: 3BA89F7EC74511EFB913F8BC762E951A.roa (hash: r31DEOOcMxqWuyYxSuL7E+LyMqbWwnDCqF5E4HURob4=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 22 Oct 2025 00:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1762 (0x6e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F362B8A8AF, serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541 Validity Not Before: Oct 20 02:08:02 2025 GMT Not After : Oct 22 02:08:02 2025 GMT Subject: CN=68f59983-7c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a5:bd:9b:53:72:dd:1d:3d:32:b6:94:58:bd: cc:ce:7f:f0:1f:32:84:c4:b5:ab:df:04:df:e5:8f: ca:f8:22:d6:6d:77:d8:98:11:cc:f4:19:df:f3:8b: 25:78:1c:1f:f6:70:27:b5:52:dd:39:a2:73:2a:f4: ea:aa:64:3f:74:81:ff:1d:bc:15:b6:f0:a8:95:71: 15:f6:94:13:8d:f4:a7:50:da:77:7a:85:fe:12:42: e9:32:b4:bb:a6:61:24:b1:37:ad:33:5d:66:23:1b: 92:5e:16:fb:7c:31:9d:ad:05:db:a5:e0:5b:9e:b2: 6e:df:5b:59:95:a2:2c:68:85:60:82:e3:7d:cf:99: 1c:53:9c:d1:ab:df:d5:f5:25:ba:25:37:31:cc:83: 37:67:28:cf:70:2e:77:7a:12:70:90:58:c9:e2:a1: 5f:95:28:03:28:3d:23:a3:e8:81:32:3e:22:01:ce: 77:02:37:87:95:e5:0a:5b:e6:aa:18:08:92:d8:67: 52:f1:bd:95:78:f2:46:fc:b9:ba:37:e4:51:b9:8c: 29:fb:9f:83:3b:2a:13:87:8a:73:1e:7e:a6:cc:9d: 7c:4a:90:9e:31:61:65:42:ae:80:f4:44:4b:a4:c0: 9c:a7:ad:73:b4:9c:71:e9:fb:02:7c:6d:2e:d1:86: 4d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8B:D9:56:7D:A6:8F:A5:D5:5F:A2:7C:A5:1E:42:2C:D9:74:D9:E5 X509v3 Authority Key Identifier: keyid:DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:18:b2:39:f4:ed:70:55:54:2d:cd:73:63:70:46:4f:18:e5: 3c:a3:50:89:2d:fc:2d:d4:d1:a3:bd:83:5c:66:d1:aa:89:ee: 4a:c8:37:84:69:5c:e1:d9:4f:f2:db:76:fa:45:98:f7:b4:41: 18:ab:1a:69:56:7e:92:2e:03:dc:1b:41:a7:b6:44:4b:9d:6d: db:1b:a2:a1:11:1e:e3:08:64:9a:c5:4f:88:7a:a8:79:81:62: 2b:88:f5:fe:f1:00:c9:6c:3a:5f:9d:40:36:1e:6c:8f:bc:44: 33:aa:d1:86:ff:02:24:52:55:ef:88:e6:ca:0f:ae:b3:ca:23: 4f:bb:84:54:12:6a:5e:36:ae:f0:dc:1f:dc:96:5f:cc:24:36: 78:42:91:10:2d:ff:f8:ea:7f:d8:97:11:ed:95:ed:a3:c8:20: 0c:ad:dc:de:e4:a7:2b:a0:d6:f0:b7:2a:57:f0:83:bb:2c:34: 9c:d4:ac:fd:88:c8:b2:b9:dd:0d:76:b9:33:15:05:cf:24:65: 4e:ec:91:35:e0:04:f9:ce:43:99:8c:b0:32:86:d3:24:75:9f: e7:6d:d4:a4:fd:28:d8:c5:4f:74:b4:f3:f2:e4:bb:34:0d:17: 1f:e4:d8:87:a5:83:10:f9:bf:c4:eb:ab:b1:98:dc:8d:f7:9b: 26:27:8d:0c -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MkI4QThBRjExMC8GA1UEBRMoREYzNzY0ODBEQ0YwN0ExQjdBRDE2NERFNjRBM0VB MjE1RjI0NzU0MTAeFw0yNTEwMjAwMjA4MDJaFw0yNTEwMjIwMjA4MDJaMBgxFjAU BgNVBAMTDTY4ZjU5OTgzLTdjN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC7pb2bU3LdHT0ytpRYvczOf/AfMoTEtavfBN/lj8r4ItZtd9iYEcz0Gd/z iyV4HB/2cCe1Ut05onMq9OqqZD90gf8dvBW28KiVcRX2lBON9KdQ2nd6hf4SQuky tLumYSSxN60zXWYjG5JeFvt8MZ2tBdul4Fuesm7fW1mVoixohWCC433PmRxTnNGr 39X1JbolNzHMgzdnKM9wLnd6EnCQWMnioV+VKAMoPSOj6IEyPiIBzncCN4eV5Qpb 5qoYCJLYZ1LxvZV48kb8ubo35FG5jCn7n4M7KhOHinMefqbMnXxKkJ4xYWVCroD0 REukwJynrXO0nHHp+wJ8bS7Rhk13AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUY4vZ Vn2mj6XVX6J8pR5CLNl02eUwHwYDVR0jBBgwFoAU3zdkgNzweht60WTeZKPqIV8k dUEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjJCOEE4L0I1Qzk0RTRDOUMyNTExRUJBRDc4RkY1M0Y4QUVBMjI4LzN6ZGtn Tnp3ZWh0NjBXVGVaS1BxSVY4a2RVRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLzN6ZGtnTnp3ZWh0NjBXVGVaS1BxSVY4a2RVRS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MkI4QTgvQjVDOTRFNEM5QzI1MTFFQkFENzhGRjUzRjhB RUEyMjgvM3pka2dOendlaHQ2MFdUZVpLUHFJVjhrZFVFLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2GLI59O1wVVQtzXNjcEZPGOU8o1CJ Lfwt1NGjvYNcZtGqie5KyDeEaVzh2U/y23b6RZj3tEEYqxppVn6SLgPcG0GntkRL nW3bG6KhER7jCGSaxU+Ieqh5gWIriPX+8QDJbDpfnUA2HmyPvEQzqtGG/wIkUlXv iObKD66zyiNPu4RUEmpeNq7w3B/cll/MJDZ4QpEQLf/46n/YlxHtle2jyCAMrdze 5KcroNbwtypX8IO7LDSc1Kz9iMiyud0NdrkzFQXPJGVO7JE14AT5zkOZjLAyhtMk dZ/nbdSk/SjYxU90tPPy5Ls0DRcf5NiHpYMQ+b/E66uxmNyN95smJ40M -----END CERTIFICATE-----Generated at Mon Oct 20 07:38:51 2025 by rpki-client