$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft File: kz9w25gXuEj4wIYagksQEX3FGSw.mft (raw, json) Hash identifier: JkOdTbs5v7+11olsIbwU3PeiN/tgnj2olmZ32SFGvFM= Subject key identifier: AF:5C:E8:51:ED:21:C2:AB:15:2B:E8:51:3E:59:DC:67:88:0C:91:CD Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Certificate serial: 03C0 Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft Manifest number: 03B0 Signing time: Sat 23 Aug 2025 03:32:03 +0000 Manifest this update: Sat 23 Aug 2025 03:32:02 +0000 Manifest next update: Mon 25 Aug 2025 03:32:02 +0000 Files and hashes: 1: kz9w25gXuEj4wIYagksQEX3FGSw.crl (hash: hqN8lJQVvZgKvwIInH2l1y2HncvTQCwGYySwQR4A1KU=) 2: B104EE44D53311EE8BE4F36C775412E6.roa (hash: RqxwUBj2Bc+OGaTDdk4x7to8RcdRWFqstSwOVMh1no8=) 3: 1E005EBCD53811EEA636DE73775412E6.roa (hash: NZukzj3sWyjYLO9ToCsVsgQAC/kq2Oo6mzyBtHQWmD8=) 4: 8ED6BADCD53311EEB2A2C36C775412E6.roa (hash: 4/E5JqKYHi82tnNDpVDrDiMaVaUcTpYsZcy/yA05uhA=) 5: 0DEEF6F0D53311EEB556F46B775412E6.roa (hash: P5ibcWLG9H1Kur9SCsMbIiX3jBWNN4xNF46xx72YQHI=) 6: A5A2959EDD3D11EEBAF174B7775412E6.roa (hash: ODN6UQwLRLuCmMW2LaPD2vWq9D+bquTGny4/1fInMQE=) 7: E5662DD4A17A11EEAB16F955D25BE465.roa (hash: nQB8uEKFdXSZvidfMMlhgfBX43bi5bFfOgAaXmAWfUM=) 8: 64C2AA52D53411EEB69B076E775412E6.roa (hash: ApnKXgX4qtwCc4Ec2u4PHGuX3hUujQ6rhZ5C7rafC04=) 9: 6DD19D16D53311EE8136926C775412E6.roa (hash: v2hwM/LETMN1QLgipB8E8B+3kZLiPan/2yTGEjfAszc=) 10: 4FFFB85ED53311EE9E536E6C775412E6.roa (hash: D+tEjQwBXIivLTAaXT7TthK1xPvy3VJOqpaVsbM3hVk=) 11: 3F0DCC84D53811EE9F160874775412E6.roa (hash: ZQcO3DmU3Brb6BRvD6IVWLlf8rwN0CI8i4MNTEzPGK0=) 12: BCD1ADAAD53511EEA3B22470775412E6.roa (hash: d12Kr2qwAhbDBscwoutPKxlu3aElunyjg9Yu2LBeVsw=) 13: E4B0AF5CDD3B11EE8C72BDB4775412E6.roa (hash: 0arozNRt9JTjzBkDd/i9r9NcNES2kthw5/x77T8UhJo=) 14: DF52896AD53711EE84074A73775412E6.roa (hash: uIa+9vsGlaMu/Injc/vzOUtcnqp2BVTquSWUrb4Yn00=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 25 Aug 2025 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 960 (0x3c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F364321AAR, serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Validity Not Before: Aug 23 03:32:02 2025 GMT Not After : Aug 25 03:32:02 2025 GMT Subject: CN=68a93633-806a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:b6:9e:5f:62:91:31:cf:f4:4e:a7:ab:5e: 45:b7:a5:cb:a5:e5:7c:71:de:b2:fd:83:cc:46:1a: 5f:59:10:1c:d4:85:ba:fe:f0:5d:74:f6:b2:e6:1e: 95:81:a0:41:bf:4c:ce:11:55:40:b6:66:f5:5b:5f: d3:c3:61:3c:3e:08:dc:53:a5:9e:74:cb:e3:d0:f3: 07:29:3f:96:d8:fe:32:96:4e:23:11:72:15:3d:e5: 10:73:3a:50:74:a5:a8:1e:1d:ce:72:b9:f1:7f:14: 71:34:09:ac:5c:bc:d8:70:f8:6b:c3:07:de:35:5c: 7a:ed:2d:50:85:98:d0:41:b4:b5:ab:b5:f2:95:4c: e5:e8:ab:64:e3:18:d6:b7:4a:e5:be:03:66:9f:93: 68:c9:f9:76:c7:ed:ad:97:26:45:7b:01:96:3d:cc: 37:2a:26:9d:37:3b:8e:4a:4c:c0:04:83:d3:15:41: 20:51:d6:0d:6f:8b:ef:8f:45:63:28:f3:b8:54:8a: d2:0d:a4:c3:79:3b:de:b8:09:75:23:64:33:f5:5f: 71:69:8d:90:2a:40:37:97:32:40:46:4c:a7:3d:24: 42:7d:38:3e:c3:48:fc:b5:d3:f2:91:2e:22:bd:c5: 04:5f:e2:f8:6d:b0:6e:e4:3f:68:4c:8e:e4:db:93: 85:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5C:E8:51:ED:21:C2:AB:15:2B:E8:51:3E:59:DC:67:88:0C:91:CD X509v3 Authority Key Identifier: keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:ba:63:5d:9b:4a:ca:21:68:80:f4:85:a6:c0:c3:c4:44:af: 51:35:eb:f2:01:07:8c:26:e1:c4:df:e8:a6:7e:23:78:05:30: 37:bf:12:b6:b8:6b:c3:33:eb:94:24:fc:28:ba:48:8d:e4:fc: 96:59:f2:b0:74:61:09:f2:37:04:21:c2:13:e5:2a:b2:52:6e: 83:c2:aa:fa:af:b1:a6:ae:89:20:cf:4b:dc:b4:dc:2d:ce:1f: 30:07:71:67:c8:97:82:ad:7d:1e:e3:ef:e1:93:92:63:af:0a: e7:ce:65:05:72:2d:40:74:14:90:35:5c:c4:14:de:93:0c:6a: e5:69:9f:88:55:6e:96:3e:2f:e1:8e:ea:7b:55:95:77:a8:af: e2:b1:2d:df:f4:7b:0a:21:6e:f0:f8:95:09:ff:80:cb:2f:f1: 5a:fa:f5:a3:03:af:12:7e:e4:01:88:81:8d:fc:4b:3f:e6:2a: a9:cd:c9:75:8f:83:64:0d:3c:01:d9:64:d8:9d:60:1e:dc:cc: 9b:87:f4:36:2f:3b:5a:1a:13:02:06:5f:25:9d:b9:28:c0:4f: 23:20:17:1c:1d:6a:e6:2a:3f:7b:94:45:01:f2:ca:83:d4:09: f7:74:9d:0b:2c:6f:5c:ab:41:05:c8:19:8d:41:8d:1c:43:8c: 5e:39:f2:e2 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICA8AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDMyMUFBUjExMC8GA1UEBRMoOTMzRjcwREI5ODE3Qjg0OEY4QzA4NjFBODI0QjEw MTE3REM1MTkyQzAeFw0yNTA4MjMwMzMyMDJaFw0yNTA4MjUwMzMyMDJaMBgxFjAU BgNVBAMTDTY4YTkzNjMzLTgwNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCy9baeX2KRMc/0TqerXkW3pcul5Xxx3rL9g8xGGl9ZEBzUhbr+8F109rLm HpWBoEG/TM4RVUC2ZvVbX9PDYTw+CNxTpZ50y+PQ8wcpP5bY/jKWTiMRchU95RBz OlB0pageHc5yufF/FHE0CaxcvNhw+GvDB941XHrtLVCFmNBBtLWrtfKVTOXoq2Tj GNa3SuW+A2afk2jJ+XbH7a2XJkV7AZY9zDcqJp03O45KTMAEg9MVQSBR1g1vi++P RWMo87hUitINpMN5O964CXUjZDP1X3FpjZAqQDeXMkBGTKc9JEJ9OD7DSPy10/KR LiK9xQRf4vhtsG7kP2hMjuTbk4UjAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUr1zo Ue0hwqsVK+hRPlncZ4gMkc0wHwYDVR0jBBgwFoAUkz9w25gXuEj4wIYagksQEX3F GSwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQzMjFBLzQ5M0U0NjJFQkNEQTExRURBMUZCMEZCMEYxMjIyNDY4L2t6OXcy NWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu L2t6OXcyNWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl cG9zaXRvcnkvRjM2NDMyMUEvNDkzRTQ2MkVCQ0RBMTFFREExRkIwRkIwRjEyMjI0 Njgva3o5dzI1Z1h1RWo0d0lZYWdrc1FFWDNGR1N3Lm1mdDA1BggrBgEFBQcwDYYp aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5umNdm0rKIWiA9IWmwMPERK9RNevyAQeM JuHE3+imfiN4BTA3vxK2uGvDM+uUJPwoukiN5PyWWfKwdGEJ8jcEIcIT5SqyUm6D wqr6r7Gmrokgz0vctNwtzh8wB3FnyJeCrX0e4+/hk5JjrwrnzmUFci1AdBSQNVzE FN6TDGrlaZ+IVW6WPi/hjup7VZV3qK/isS3f9HsKIW7w+JUJ/4DLL/Fa+vWjA68S fuQBiIGN/Es/5iqpzcl1j4NkDTwB2WTYnWAe3Mybh/Q2LztaGhMCBl8lnbkowE8j IBccHWrmKj97lEUB8sqD1An3dJ0LLG9cq0EFyBmNQY0cQ4xeOfLi -----END CERTIFICATE-----Generated at Sat Aug 23 10:40:20 2025 by rpki-client