$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft File: hv7S7RnCBnpIIiG2RdYMRaTVap0.mft (raw, json) Hash identifier: xLp/Y3Yds+A6s2DsUrC2aUoNUqXzUWHBWqeB6oRkk5c= Subject key identifier: C6:D8:99:E4:E2:E8:53:65:93:9C:64:C4:50:AC:B5:BC:C4:E1:8C:1A Authority key identifier: 86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D Certificate issuer: /CN=F36472E5AF/serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D Certificate serial: 0EA0 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft Manifest number: 0E8E Signing time: Sat 23 Aug 2025 00:56:36 +0000 Manifest this update: Sat 23 Aug 2025 00:56:35 +0000 Manifest next update: Mon 25 Aug 2025 00:56:35 +0000 Files and hashes: 1: hv7S7RnCBnpIIiG2RdYMRaTVap0.crl (hash: 0cGk/oSw25W6NuNe/xaOhWEAcSgbQHsjyYi6MReNzb8=) 2: 2B358C9ACA5411E9AB56C482F8AEA228.roa (hash: 542MHTZAg9mxUFxY3zCZ7p5fwSnjIWtxUnE6kTXmKMs=) 3: 75BB83CECAEE11E9B8750B77F8AEA228.roa (hash: LHVz9xioiQqgDCsiihzIIq+BrjcIvxLKI5LrrXrO3Io=) 4: A584C0ACCAEE11E98C9F3777F8AEA228.roa (hash: COm4IJeTkrJL34O4UJLzMLGNyExGXZ/i492sB/CX0wc=) 5: A9E94F06CAED11E980367876F8AEA228.roa (hash: VrJL3SQd6C3FUUbw0uhJehHrmjG9Xx4v9iS8CcKGSXY=) 6: CEB8F1B0CAED11E988A78B76F8AEA228.roa (hash: jDtuwq3j8HQc76mLF36nBIH2uMggEhhIl6ncNoeaoaY=) 7: 8611EC46CAED11E989D36576F8AEA228.roa (hash: FshGOOOuJbA/9loXNipyvDMsi9pllSp+7FKxuJNVYeU=) 8: 5DC47678CAED11E9859E2C76F8AEA228.roa (hash: +mStn8j1lsfaOcAkA+IpFnx3VVw/ZA+elfj24TZJJoA=) 9: 58D4146ECA5411E9AACFFC82F8AEA228.roa (hash: llqq6mhR2LiQ9Zf86+DgrcW9HILB2CWU6cLF3bhjP9A=) 10: 2EFA614ECAEE11E98511EC76F8AEA228.roa (hash: 2zLMI8rOWrZ63E40k/ceZtOXzw9Rmk5l8voPk4gGNgk=) 11: 655F290413AE11F09DCA6CAC762E951A.roa (hash: MtTA05if95p/mNtRLM4nlSrYgGLQ7Pky8WnDGWJT8Mc=) 12: 393244FCCAED11E9B99FF875F8AEA228.roa (hash: 4xNbES12DfxpVPkV3v2uKcMGkgu9iGiVU5CNykYBjGs=) 13: 8B76B110CD5B11E982F62408F8AEA228.roa (hash: /cWu2nL6HSrRP3knTHp+eSDgxNpMwgwnD7k3nWXKasE=) 14: 0475EE6856D811E5B0E8AA60F8AEA228.roa (hash: rnfvCe8zm7FPtXxrLAwPlwPmid5ucEEvHSHMH0qNarY=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 25 Aug 2025 00:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3744 (0xea0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36472E5AF, serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D Validity Not Before: Aug 23 00:56:35 2025 GMT Not After : Aug 25 00:56:35 2025 GMT Subject: CN=68a911c3-5102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9c:5b:36:b4:06:ae:91:e0:1c:4c:3a:f2:8e: 89:10:10:08:23:08:9d:94:37:47:97:fe:b4:40:39: 29:19:0b:86:52:eb:af:7d:f7:fb:3c:6a:db:09:2a: 47:72:c1:8e:0b:9d:6e:4a:16:f6:07:06:11:46:f0: 56:20:25:fb:d4:7c:a9:1b:4d:f9:cf:ad:22:68:14: 66:25:ec:62:f4:ed:87:ac:d6:c5:4f:27:3d:0a:3e: b2:52:66:72:93:cb:69:e5:8a:71:e0:48:3e:e5:8d: a8:21:57:7e:42:c4:b1:c0:41:d7:9a:80:99:13:a0: 5e:e0:3d:4f:88:4f:ca:c9:76:1e:08:b8:1c:5a:85: a8:dc:4d:48:cd:5b:70:4b:b8:f2:b2:db:91:02:21: 2c:0d:44:8e:bd:1a:8d:93:cd:d7:af:c8:26:9a:f7: b4:d3:44:2e:55:b1:9a:21:b4:47:38:c3:19:b0:85: 6b:38:4a:f5:d7:66:1f:ba:9c:18:3a:68:df:d5:50: 93:5e:9e:28:b0:59:ff:94:e2:0f:7c:b4:90:93:cc: 89:43:55:62:80:1e:b2:6d:fa:34:ab:9e:49:50:b3: 43:e9:b8:02:11:06:1d:65:63:33:09:e5:02:3b:a0: e1:05:f3:ed:bf:3e:6d:e6:fe:16:c5:b8:c2:d6:79: ff:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D8:99:E4:E2:E8:53:65:93:9C:64:C4:50:AC:B5:BC:C4:E1:8C:1A X509v3 Authority Key Identifier: keyid:86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:b5:eb:83:68:6e:9d:dc:0e:49:98:ba:17:c3:9e:3d:34:95: 14:25:0c:bd:b1:ce:89:6f:48:8b:7e:e5:40:c7:05:f5:6e:ce: a6:e9:d5:6d:02:17:40:1c:e8:39:a9:7d:76:f1:b8:89:e7:7b: d9:37:b5:f3:25:d3:2c:0a:23:de:3e:a3:de:19:4e:85:de:c4: 20:a2:50:06:c0:3f:26:a2:9f:79:f3:d5:43:46:9d:37:31:e4: b4:6d:4d:5e:e9:2c:a4:95:89:36:53:1f:67:f7:ed:3b:18:e4: 63:bf:85:e6:46:89:00:2e:79:d0:b2:a9:cd:ca:3b:e6:42:ba: d1:01:23:f7:71:9d:b2:b5:47:ba:a4:47:05:ce:b5:71:00:f3: 4b:64:42:01:4c:32:dc:ac:f0:5f:62:f9:0b:cc:66:38:40:31: a5:e7:13:7f:ab:46:b6:7e:53:a1:97:8a:b3:6e:4a:18:81:02: 7a:a5:bb:02:22:32:fa:10:6c:42:b0:2e:ef:22:e1:4d:06:e8: 23:83:f8:e5:f9:bd:3f:70:b1:5d:61:92:45:11:d3:26:f5:83: 1b:0e:29:40:e9:b4:6a:09:95:ed:9e:3b:55:aa:e0:52:5e:be: 3e:a5:08:f0:6d:47:ef:31:7f:76:75:1b:f4:80:db:e5:54:a3: fa:d5:f2:5f -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDqAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDcyRTVBRjExMC8GA1UEBRMoODZGRUQyRUQxOUMyMDY3QTQ4MjIyMUI2NDVENjBD NDVBNEQ1NkE5RDAeFw0yNTA4MjMwMDU2MzVaFw0yNTA4MjUwMDU2MzVaMBgxFjAU BgNVBAMTDTY4YTkxMWMzLTUxMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDJnFs2tAaukeAcTDryjokQEAgjCJ2UN0eX/rRAOSkZC4ZS66999/s8atsJ KkdywY4LnW5KFvYHBhFG8FYgJfvUfKkbTfnPrSJoFGYl7GL07Yes1sVPJz0KPrJS ZnKTy2nlinHgSD7ljaghV35CxLHAQdeagJkToF7gPU+IT8rJdh4IuBxahajcTUjN W3BLuPKy25ECISwNRI69Go2TzdevyCaa97TTRC5VsZohtEc4wxmwhWs4SvXXZh+6 nBg6aN/VUJNeniiwWf+U4g98tJCTzIlDVWKAHrJt+jSrnklQs0PpuAIRBh1lYzMJ 5QI7oOEF8+2/Pm3m/hbFuMLWef/fAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUxtiZ 5OLoU2WTnGTEUKy1vMThjBowHwYDVR0jBBgwFoAUhv7S7RnCBnpIIiG2RdYMRaTV ap0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQ3MkU1LzhEQjY1NDdBNTZENzExRTU4NTM1NkQ2MEY4QUVBMjI4L2h2N1M3 Um5DQm5wSUlpRzJSZFlNUmFUVmFwMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2h2N1M3Um5DQm5wSUlpRzJSZFlNUmFUVmFwMC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NDcyRTUvOERCNjU0N0E1NkQ3MTFFNTg1MzU2RDYwRjhB RUEyMjgvaHY3UzdSbkNCbnBJSWlHMlJkWU1SYVRWYXAwLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCyteuDaG6d3A5JmLoXw549NJUUJQy9 sc6Jb0iLfuVAxwX1bs6m6dVtAhdAHOg5qX128biJ53vZN7XzJdMsCiPePqPeGU6F 3sQgolAGwD8mop9589VDRp03MeS0bU1e6SyklYk2Ux9n9+07GORjv4XmRokALnnQ sqnNyjvmQrrRASP3cZ2ytUe6pEcFzrVxAPNLZEIBTDLcrPBfYvkLzGY4QDGl5xN/ q0a2flOhl4qzbkoYgQJ6pbsCIjL6EGxCsC7vIuFNBugjg/jl+b0/cLFdYZJFEdMm 9YMbDilA6bRqCZXtnjtVquBSXr4+pQjwbUfvMX92dRv0gNvlVKP61fJf -----END CERTIFICATE-----Generated at Sat Aug 23 14:26:19 2025 by rpki-client