$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft File: nxc4PrZn5Ue6AM-3-RT0KExYScw.mft (raw, json) Hash identifier: zThCrRooqoxxHtcqAY3Gun+5R93Isn5rKk6v76OzrkE= Subject key identifier: 31:3A:BD:16:4B:EF:43:AD:FA:CF:82:F8:A5:0A:D6:46:8E:1E:5A:13 Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC Certificate issuer: /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC Certificate serial: 0ED8 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft Manifest number: 0EC9 Signing time: Sun 19 Oct 2025 00:55:40 +0000 Manifest this update: Sun 19 Oct 2025 00:55:39 +0000 Manifest next update: Tue 21 Oct 2025 00:55:39 +0000 Files and hashes: 1: nxc4PrZn5Ue6AM-3-RT0KExYScw.crl (hash: oa1Fsx4HsKgMul78mDf7ra5tvMS4BC1grOQl6bEJf9w=) 2: 0F970AA45DDA11EEA9B9B7884AD9E6FC.roa (hash: FMUt2MM7DebKkBEnbyLy3J47YqdDugPo2mNzNBuOTcI=) 3: CB802D6A9FD011F0B09E84F1DAE4EC9C.roa (hash: S80ZZFyyc08N7gI7of8t+4zntc1/6kCBNhlAw4585HY=) 4: 4252D1905DDE11EEA38F26174AD9E6FC.roa (hash: YEcxnJNljEbbPt+jZqFFjrHFGQrlfrLBxbAphuQ3lR4=) 5: AA2ED722D22511EDA73BE0D2F1222468.roa (hash: Bz6y/9VDXHlj+h8pTwHUCwEbbK4O3DXKaYbf9T3u4Kk=) 6: F8A03EA22DD711ED9D0F7E83F1222468.roa (hash: A3D2coJfMGVfkM4t+C0wadunWeeP5Netmzy2NPiOcNE=) 7: DAD32A825DD911EE908D0E884AD9E6FC.roa (hash: jYCM5n5GYzsPy5dOD3c0IJ0ltyMzwLsK1AtouHVwLZ0=) 8: 67208BD45DDE11EEA367B1174AD9E6FC.roa (hash: dUOADrTH86yUTFdknQpwKyYi7Ckfi6ZQrgp/0K1+5iw=) 9: 3EB8BE4ED22611EDAF3CB0D4F1222468.roa (hash: 8rUeH5+hrD/1gu9Yu/+gBbmACyJtB7cXUwPkrzQinJI=) 10: FA54B1109FD011F08E699CF1DAE4EC9C.roa (hash: F+/CQFEGh7hy0TbdeqQH+fkZYKvk2d9fKx2iVdi2NNY=) 11: 7FA6B8DC9FD011F09FBF73EDDAE4EC9C.roa (hash: mIreRYj0MVYZW7c/XBrrdQAMZGvWksvf2R6Ym6OT8rM=) 12: 08DDC9D85DDE11EE97117A164AD9E6FC.roa (hash: YTPBR2O7UMDxBF3Dv5l5lllDC58HOmSCof2QHjhKZws=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 21 Oct 2025 00:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3800 (0xed8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC Validity Not Before: Oct 19 00:55:39 2025 GMT Not After : Oct 21 00:55:39 2025 GMT Subject: CN=68f4370b-5f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:56:33:b0:a5:b6:87:99:7a:2f:12:7f:ba:00: eb:f4:27:7d:41:e3:8e:2f:d3:70:74:e2:c1:eb:ca: 59:d8:89:8a:24:fd:43:61:c2:dd:13:13:cc:30:d9: 24:26:54:09:da:db:4f:77:39:de:bf:a3:17:1c:fb: 40:2a:f7:fc:19:f0:63:3f:13:16:19:d4:af:7d:8e: 28:4b:29:44:3b:b6:d7:b1:3c:f6:e0:5c:e8:d8:ec: f6:3c:b5:b2:0a:0e:7f:b8:75:e3:87:a5:6e:e6:fd: 0d:6c:dc:0a:32:dc:33:3e:fc:88:06:3e:8e:9c:b4: ba:e9:db:cc:13:9f:68:44:b5:65:f7:38:c2:55:38: 46:de:24:30:44:25:64:f0:ba:ef:f0:64:66:be:2f: c8:fc:67:0b:9b:20:7c:34:3a:0d:73:ed:f7:66:b5: 05:38:e4:91:c3:a6:12:c4:d8:f2:a0:9f:93:bc:63: 43:bb:f4:6d:55:96:81:4e:05:ff:5f:f0:cd:a8:ef: c9:71:bd:ae:23:33:42:35:f8:82:86:66:65:a1:53: 2d:2b:4f:42:e5:fb:fe:7a:71:c6:15:b5:51:9e:6a: 41:1c:94:88:c2:47:43:d3:2c:d2:8c:04:76:fb:95: 53:da:73:38:c2:53:63:77:37:47:0b:11:c0:c4:32: cd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3A:BD:16:4B:EF:43:AD:FA:CF:82:F8:A5:0A:D6:46:8E:1E:5A:13 X509v3 Authority Key Identifier: keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:2d:15:46:bd:d5:cf:a0:7f:71:ad:11:c0:7c:1d:85:d3:66: ba:a0:bd:01:08:c5:a9:28:39:68:2a:11:c9:e7:e4:d9:85:45: a0:92:5c:67:7a:f7:b4:e2:88:d2:28:46:d8:e0:92:49:a7:4a: 4e:f6:d1:53:f4:f7:28:51:55:87:89:a6:a3:8e:cd:28:12:eb: 6b:09:10:c6:2f:6f:2d:40:ed:1c:c9:07:3a:b6:c2:95:b7:b1: ec:76:3e:b4:d8:39:31:0a:05:0d:04:49:85:88:d2:5c:fe:89: 99:e9:f9:d1:85:5f:1a:d1:1c:5e:f5:ec:72:f1:9d:81:c6:04: d7:64:3f:bb:b1:c9:f6:a2:73:89:3e:34:55:fb:0f:fa:0e:48: 7f:93:da:94:b5:d7:18:1d:38:10:46:83:73:db:5d:61:3b:2f: 38:35:33:ed:3d:77:98:08:fd:2b:63:6f:79:ec:af:db:51:01: 77:96:d8:63:16:46:a9:4e:5f:e1:67:4c:c4:71:54:dc:70:8a: a5:3f:4d:ca:ee:e5:e7:b3:16:8b:f2:f4:99:b4:61:43:f6:9c: fc:74:a2:1f:1f:4b:64:ef:ca:a4:31:5a:40:9e:f6:5e:77:df: 20:dc:7a:28:c2:83:33:6a:fc:f2:8b:12:9f:6c:ca:ae:09:76: 41:1a:18:99 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDtgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NTQ5QjFBRjExMC8GA1UEBRMoOUYxNzM4M0VCNjY3RTU0N0JBMDBDRkI3RjkxNEY0 Mjg0QzU4NDlDQzAeFw0yNTEwMTkwMDU1MzlaFw0yNTEwMjEwMDU1MzlaMBgxFjAU BgNVBAMTDTY4ZjQzNzBiLTVmMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCeVjOwpbaHmXovEn+6AOv0J31B444v03B04sHrylnYiYok/UNhwt0TE8ww 2SQmVAna2093Od6/oxcc+0Aq9/wZ8GM/ExYZ1K99jihLKUQ7ttexPPbgXOjY7PY8 tbIKDn+4deOHpW7m/Q1s3Aoy3DM+/IgGPo6ctLrp28wTn2hEtWX3OMJVOEbeJDBE JWTwuu/wZGa+L8j8ZwubIHw0Og1z7fdmtQU45JHDphLE2PKgn5O8Y0O79G1VloFO Bf9f8M2o78lxva4jM0I1+IKGZmWhUy0rT0Ll+/56ccYVtVGeakEclIjCR0PTLNKM BHb7lVPaczjCU2N3N0cLEcDEMs2PAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUMTq9 FkvvQ636z4L4pQrWRo4eWhMwHwYDVR0jBBgwFoAUnxc4PrZn5Ue6AM+3+RT0KExY ScwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjU0OUIxL0RGNzg4Qzk4NTYxMzExRTVCMUEwRTM2MEY4QUVBMjI4L254YzRQ clpuNVVlNkFNLTMtUlQwS0V4WVNjdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL254YzRQclpuNVVlNkFNLTMtUlQwS0V4WVNjdy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NTQ5QjEvREY3ODhDOTg1NjEzMTFFNUIxQTBFMzYwRjhB RUEyMjgvbnhjNFByWm41VWU2QU0tMy1SVDBLRXhZU2N3Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCILRVGvdXPoH9xrRHAfB2F02a6oL0B CMWpKDloKhHJ5+TZhUWgklxneve04ojSKEbY4JJJp0pO9tFT9PcoUVWHiaajjs0o EutrCRDGL28tQO0cyQc6tsKVt7Hsdj602DkxCgUNBEmFiNJc/omZ6fnRhV8a0Rxe 9exy8Z2BxgTXZD+7scn2onOJPjRV+w/6Dkh/k9qUtdcYHTgQRoNz211hOy84NTPt PXeYCP0rY2957K/bUQF3lthjFkapTl/hZ0zEcVTccIqlP03K7uXnsxaL8vSZtGFD 9pz8dKIfH0tk78qkMVpAnvZed98g3HoowoMzavzyixKfbMquCXZBGhiZ -----END CERTIFICATE-----Generated at Mon Oct 20 00:17:31 2025 by rpki-client