$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft File: nxc4PrZn5Ue6AM-3-RT0KExYScw.mft (raw, json) Hash identifier: jMP6vuMEOzfQVIeuM5/CjnSr6+jEyoRnKrqdK+6S+Pg= Subject key identifier: F0:38:19:4F:FC:CE:8B:A9:E2:0B:F6:72:2B:6A:0A:11:C2:78:3A:F3 Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC Certificate issuer: /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC Certificate serial: 0E99 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft Manifest number: 0E8D Signing time: Sat 23 Aug 2025 00:55:56 +0000 Manifest this update: Sat 23 Aug 2025 00:55:55 +0000 Manifest next update: Mon 25 Aug 2025 00:55:55 +0000 Files and hashes: 1: nxc4PrZn5Ue6AM-3-RT0KExYScw.crl (hash: d+qcfLhIh2p7Hm8mLX5AZZ9VHTzof+bsbxS66lfries=) 2: 0F970AA45DDA11EEA9B9B7884AD9E6FC.roa (hash: FMUt2MM7DebKkBEnbyLy3J47YqdDugPo2mNzNBuOTcI=) 3: 1214F7F4585D11E59D5C7317F8AEA228.roa (hash: 0FpgqvuIfv2t7pEzVo665VBSLTVkVC883PZi8zGnUOQ=) 4: 4252D1905DDE11EEA38F26174AD9E6FC.roa (hash: YEcxnJNljEbbPt+jZqFFjrHFGQrlfrLBxbAphuQ3lR4=) 5: AA2ED722D22511EDA73BE0D2F1222468.roa (hash: Bz6y/9VDXHlj+h8pTwHUCwEbbK4O3DXKaYbf9T3u4Kk=) 6: F8A03EA22DD711ED9D0F7E83F1222468.roa (hash: A3D2coJfMGVfkM4t+C0wadunWeeP5Netmzy2NPiOcNE=) 7: B52245B0585C11E5AF923917F8AEA228.roa (hash: w98JhuMKbeVGaXUfnIIH2kCqGJut86/4raJT2iIszDU=) 8: DAD32A825DD911EE908D0E884AD9E6FC.roa (hash: jYCM5n5GYzsPy5dOD3c0IJ0ltyMzwLsK1AtouHVwLZ0=) 9: 67208BD45DDE11EEA367B1174AD9E6FC.roa (hash: dUOADrTH86yUTFdknQpwKyYi7Ckfi6ZQrgp/0K1+5iw=) 10: 3EB8BE4ED22611EDAF3CB0D4F1222468.roa (hash: 8rUeH5+hrD/1gu9Yu/+gBbmACyJtB7cXUwPkrzQinJI=) 11: 4C3C8DC6585C11E58ADCBB15F8AEA228.roa (hash: ztbK9LFQQYS+tWoyZX54zNQ+XC25dMZgasKrqJ1v5pE=) 12: 08DDC9D85DDE11EE97117A164AD9E6FC.roa (hash: YTPBR2O7UMDxBF3Dv5l5lllDC58HOmSCof2QHjhKZws=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 25 Aug 2025 00:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3737 (0xe99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC Validity Not Before: Aug 23 00:55:55 2025 GMT Not After : Aug 25 00:55:55 2025 GMT Subject: CN=68a9119c-9753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cb:06:5d:22:97:88:9e:8b:23:04:fe:f7:67: 60:d9:18:93:2b:a2:67:e7:aa:b5:42:8e:8d:12:d3: ff:1d:72:31:0b:b4:09:46:12:b6:f8:96:aa:59:b4: 4b:ac:16:d8:a2:b5:a0:0d:36:c4:8a:8e:29:96:2a: 44:b3:b3:61:61:97:d2:c3:b1:13:16:0a:89:e3:b4: 84:42:ba:15:4f:30:c8:12:0f:d4:fc:d9:27:87:59: c7:a2:a1:4d:c4:6a:84:e3:8a:0c:d4:68:04:8a:c5: e8:25:fa:0a:a2:46:94:51:bf:5c:2b:a4:32:fe:a0: 62:bb:55:16:00:a6:ed:af:68:43:90:4a:1f:d1:13: 66:63:9a:60:01:40:36:74:db:73:dd:72:c2:5f:02: ca:8a:0d:05:c0:fa:bb:bf:de:ec:2d:62:74:48:77: 30:f5:54:60:f2:8d:9c:9a:27:f7:51:78:1c:5c:e3: 77:d8:50:df:b1:37:03:30:98:5c:93:f2:b8:ae:3f: 6b:3b:a7:dc:63:cf:9a:67:70:9e:81:b1:e5:c3:46: 70:28:f7:d2:ae:f0:51:ca:26:9a:b5:d1:21:76:c4: c5:1c:af:33:54:52:0e:05:e2:f0:2c:96:b1:8c:eb: 03:d4:7d:ba:b7:7b:58:1a:86:d1:7b:d9:b1:93:b3: 75:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:38:19:4F:FC:CE:8B:A9:E2:0B:F6:72:2B:6A:0A:11:C2:78:3A:F3 X509v3 Authority Key Identifier: keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:59:13:16:12:97:df:e5:17:ed:54:74:34:73:67:2a:67:96: dd:b8:86:12:c4:9b:09:e3:d5:4c:51:20:95:18:24:a0:50:c8: 0c:bd:d9:29:cb:e7:c8:04:c8:b7:0d:c8:34:80:7c:c3:77:94: f7:41:6a:65:a4:a6:d7:f2:2b:f9:dc:96:43:99:d1:af:8c:ce: 15:94:98:58:2c:72:58:a2:b9:89:ee:91:73:cc:0b:18:15:f0: 96:b8:fd:0e:c3:f8:c7:1c:7b:a3:f6:1d:ea:ae:55:1d:c1:7a: 74:db:05:84:b6:0c:86:48:01:17:db:7e:e4:24:c9:c3:24:62: fa:77:11:9f:a4:7a:aa:90:a1:b7:10:f8:25:97:50:89:bd:26: 12:64:02:a2:3b:7c:4a:db:ae:87:63:76:04:04:fd:19:26:42: 94:63:cc:74:0c:35:c2:08:d1:da:69:00:84:a6:86:01:0f:cf: 2d:22:a0:c1:47:a1:05:52:ea:ae:f8:35:a9:2d:3d:9b:c3:82: 90:80:ed:b7:5e:c9:ce:3c:17:5b:cd:e5:95:ec:37:18:89:eb: 50:85:43:ba:a0:07:34:ce:ba:d6:ca:7f:a3:4e:7d:7b:47:8c: 4b:b3:b2:af:2e:26:3f:3b:2d:a0:dc:9b:5b:17:a6:fd:c6:82: ae:f0:12:a0 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDpkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NTQ5QjFBRjExMC8GA1UEBRMoOUYxNzM4M0VCNjY3RTU0N0JBMDBDRkI3RjkxNEY0 Mjg0QzU4NDlDQzAeFw0yNTA4MjMwMDU1NTVaFw0yNTA4MjUwMDU1NTVaMBgxFjAU BgNVBAMTDTY4YTkxMTljLTk3NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDKywZdIpeInosjBP73Z2DZGJMromfnqrVCjo0S0/8dcjELtAlGErb4lqpZ tEusFtiitaANNsSKjimWKkSzs2Fhl9LDsRMWConjtIRCuhVPMMgSD9T82SeHWcei oU3EaoTjigzUaASKxegl+gqiRpRRv1wrpDL+oGK7VRYApu2vaEOQSh/RE2ZjmmAB QDZ023PdcsJfAsqKDQXA+ru/3uwtYnRIdzD1VGDyjZyaJ/dReBxc43fYUN+xNwMw mFyT8riuP2s7p9xjz5pncJ6BseXDRnAo99Ku8FHKJpq10SF2xMUcrzNUUg4F4vAs lrGM6wPUfbq3e1gahtF72bGTs3X1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU8DgZ T/zOi6niC/ZyK2oKEcJ4OvMwHwYDVR0jBBgwFoAUnxc4PrZn5Ue6AM+3+RT0KExY ScwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjU0OUIxL0RGNzg4Qzk4NTYxMzExRTVCMUEwRTM2MEY4QUVBMjI4L254YzRQ clpuNVVlNkFNLTMtUlQwS0V4WVNjdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL254YzRQclpuNVVlNkFNLTMtUlQwS0V4WVNjdy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NTQ5QjEvREY3ODhDOTg1NjEzMTFFNUIxQTBFMzYwRjhB RUEyMjgvbnhjNFByWm41VWU2QU0tMy1SVDBLRXhZU2N3Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnWRMWEpff5RftVHQ0c2cqZ5bduIYS xJsJ49VMUSCVGCSgUMgMvdkpy+fIBMi3Dcg0gHzDd5T3QWplpKbX8iv53JZDmdGv jM4VlJhYLHJYormJ7pFzzAsYFfCWuP0Ow/jHHHuj9h3qrlUdwXp02wWEtgyGSAEX 237kJMnDJGL6dxGfpHqqkKG3EPgll1CJvSYSZAKiO3xK266HY3YEBP0ZJkKUY8x0 DDXCCNHaaQCEpoYBD88tIqDBR6EFUuqu+DWpLT2bw4KQgO23XsnOPBdbzeWV7DcY ietQhUO6oAc0zrrWyn+jTn17R4xLs7KvLiY/Oy2g3JtbF6b9xoKu8BKg -----END CERTIFICATE-----Generated at Sat Aug 23 12:27:33 2025 by rpki-client