$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft File: _fS_ABOx8arKOVUbpibKJGg9rmY.mft (raw, json) Hash identifier: LD8IFVw6x1oZ49XO1o6niFmExUSKz0TKH6kSQaqNbhw= Subject key identifier: B3:F5:BF:92:AD:B9:8D:7D:0E:24:03:E1:28:ED:CA:7F:B8:11:E8:95 Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66 Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66 Certificate serial: 02C4 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft Manifest number: 02A1 Signing time: Sun 19 Oct 2025 04:05:08 +0000 Manifest this update: Sun 19 Oct 2025 04:05:07 +0000 Manifest next update: Tue 21 Oct 2025 04:05:07 +0000 Files and hashes: 1: _fS_ABOx8arKOVUbpibKJGg9rmY.crl (hash: 9ZevhhXRjKn88j5b/0erWVo8GW/gzw5W0lDEEY6WPZc=) 2: F105F828C4CE11EE939D5160775412E6.roa (hash: OVT2chMQ0Nq/o8KrWCxuVSBa6IdJd925oWRD0nztHjI=) 3: 6F89EC1EC4CE11EEB915BB5F775412E6.roa (hash: 0xzDQTGktY5SNT/oNqNDkR69eV9keuHEiaiK1qaTKh4=) 4: B1F8097EC4D211EE86535866775412E6.roa (hash: 59lN/fUbuBzBsApqG3IvBcdXKT4GXqevkBfORr82FQA=) 5: 8BA49FD0C4D211EE9EC4EB65775412E6.roa (hash: L8cuHjbSNz6+bJ/gQju0YrhFVS2tYAIiSMeuYmThWuI=) 6: DD77B4AAC4D211EEBEB69266775412E6.roa (hash: OydxnI/hxoPiyhR17/Tng3O2ILM83hRZhWDiNRN/dU4=) 7: 95C2E55CC4CE11EEB298E25F775412E6.roa (hash: 34ivVx7kCxvEM20aUk37oRsDslYZlA+xl4ns6+aB5gY=) 8: 93B700F2C4F311EE8E31E298775412E6.roa (hash: jxWkgZfYWgXiUGFUDEKR/McM7BfyCoS5P8Hm5K309v0=) 9: E93581BEC4CD11EEBD97B25E775412E6.roa (hash: 55Va12oDO8S1u6Db0FeTKlFuk9K47Rv37Hrdea7bPcE=) 10: 3DF8B8D4C4D211EEB1EC7C65775412E6.roa (hash: 9LziG0V2OwJ9n1u0dLn4KBFXmSSOMd2hKZ8b5zKpu9c=) 11: 4101D022C4CF11EEB2F10961775412E6.roa (hash: dLi4goldq2t98cgYBuvk9Jpn/HGg3ZCmLTC1jEDXh+8=) 12: FAD1EE98C4D311EEB8EF5B68775412E6.roa (hash: xrzrQk6N9A7y+gGJ1sq9ZLmMErelK63jEZa0HOn6EEE=) 13: 06EC9B8EC4CE11EE9CCFD65E775412E6.roa (hash: yxTa4SshiNJ7DHcSq54/OxpqqW1oYG+0q8Vz/U0eUK4=) 14: 4C0E8C0EC4C911EE87647756775412E6.roa (hash: 3hEwrhsuSNEta/SbVkYuC8E8cEE9Br3Bj2hXmqXW6Og=) 15: C1BC264CC4CD11EE89C2885E775412E6.roa (hash: /4XiUCjd/sd1xIFdMVmhioY/RKg6IR+Ajo98X8uy0lo=) 16: 48E43AECC4D311EE8C1B3F67775412E6.roa (hash: u/n56Tta7OlwGuEqOpX71XLsZT2jKpBxkP39WXUlLLc=) 17: 1A50080EC4D411EE9683B268775412E6.roa (hash: caLtTbJU+Ufv7BiWj1H9Gw+w4cpOtHWxcr1WeZuKjJ8=) 18: 81B67878C4C711EEA9FDDB53775412E6.roa (hash: vTf8z95jt6AfKb+uGSv38KFOEqTok2j1GUU2yZdAI08=) 19: 52716D10C4C811EEA1131155775412E6.roa (hash: xQRXL5xCOGFaycHwp48gngmbdbohfcnsUJoty1rMzbc=) 20: 2A6C3F60C4CE11EEA3D4FA5E775412E6.roa (hash: C+KA4N0o/N/27ljFsz4ZdSUMg3iOEQO8xBx9RPaXKNI=) 21: 4F31EC96C4CE11EEA565525F775412E6.roa (hash: HcZFH7qDjDPGPIsCX8qhmZSQf24/4pPHFAyHS4PESuo=) 22: B3F2595EC4D311EE97A2CE67775412E6.roa (hash: ECdHU4AArULpOT1NztEszqbSD1WJnxMYYXF31fUvbrM=) 23: 68864AB4C4F311EE8BF25B98775412E6.roa (hash: 5ft3N//XILTGHx4xJyf0ZxLMMcxslek8pxu0nWzZdwE=) 24: 648C3F8CC4CF11EEB00B3061775412E6.roa (hash: FDVWcr2ZaAbCYXZ2KHJUxLsk/2sFqJr/Vx9+VGbIRJ4=) 25: 2283DBBEC4D311EEB2E6EA66775412E6.roa (hash: vDOXm9PXQ5Zd7c1zyElcj6kt2FJGk5QRFQWZ4OnkvEI=) 26: 870416B8C4C811EE906C4D55775412E6.roa (hash: Vbe2KHg+Or1EjP08Hg3ouXICYgnv4yFEfEZ5ZITCte4=) 27: D4A143FEC4D311EE8C6C1968775412E6.roa (hash: AgQ0WKMr6LdRsNIoXgyHASIpWGf5jCQAlVVsb6zmYZ8=) 28: 5DCB92C6C4D211EE8BD1A065775412E6.roa (hash: PsrWGlKMnmYkcFOTAbq8GoiP2U6q8o3llEg2ATal3EM=) 29: CCB4D870C59311EE927FFFA7775412E6.roa (hash: 9rD0WduujgyOlEWZ+vDkwaNAJhs7jTIfIlCfix8PC/0=) 30: 9073DE6CC4D311EEB0B9C867775412E6.roa (hash: elhNbqke+6Kl2ZATVb9O1DeKyGk/Aq6WgPyX415dPg0=) 31: 96B86BD6C4CD11EEA3C61A5E775412E6.roa (hash: 1/4BsRl0z2euLNjIiSiAv+wgrdGXz1NzXtlGPkiO18s=) 32: 684B797CC4D311EE816F8467775412E6.roa (hash: zrGP4qbV7TkM2QLEaYGOzJRGNrjbHqUR2QRTvJ966ic=) 33: BFE793D2C4CE11EE81D70760775412E6.roa (hash: YKo9lE8pH+B0lF4SQUvGTWgHthQjPN6oP/oPK/YNf8s=) 34: 1D9BA0C2C4CF11EE9D26CF60775412E6.roa (hash: 0X/6wOprzARBLwyRT7sbR4YEUnDHgpq1rvlRKwpi56E=) 35: FF49F7B4C4D211EEB6F1A266775412E6.roa (hash: qvVux5l6rnVThhETsGLH9EXoxv6/IKPh5G9ATtSGJFg=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 21 Oct 2025 04:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 708 (0x2c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3655D2CAF, serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66 Validity Not Before: Oct 19 04:05:07 2025 GMT Not After : Oct 21 04:05:07 2025 GMT Subject: CN=68f46374-03ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3a:3b:a7:5b:a6:85:26:e2:74:4e:e0:77:6b: a7:bb:19:18:07:6a:85:5b:ae:04:99:17:aa:a1:e4: d2:d7:aa:6b:69:ed:da:23:d2:e3:df:a7:c0:92:0e: 19:41:9c:33:a0:58:4f:89:5e:9f:3b:49:cb:68:1a: 80:80:83:ed:c3:86:c0:64:fb:04:02:b8:ab:bb:59: 73:06:d0:8a:07:c1:f0:e8:14:c8:41:e9:39:1d:dd: 49:53:69:e6:82:db:3c:6e:c3:a7:c1:7e:78:e7:1c: df:0e:9e:c0:72:c4:b9:de:59:a1:1f:d6:d4:d7:51: e0:9d:34:0d:1f:b7:7c:0d:2f:52:f8:e2:76:11:cc: 98:71:69:14:8d:a1:3e:b9:86:4c:e7:4e:d3:90:a6: d7:de:29:22:fe:0b:35:bd:84:73:35:ea:a9:70:da: bb:cf:10:ae:a8:42:03:17:80:3e:32:56:6f:38:45: 9e:12:37:95:79:83:16:f6:0c:86:fb:04:04:b7:a1: 2e:15:65:4c:87:4a:93:86:eb:14:71:fd:e3:bc:de: 4f:27:52:97:63:14:21:7d:32:03:c1:c9:17:e8:cb: ee:e5:b8:6f:c7:c1:f3:b5:ef:3a:8c:d2:87:a0:b7: 1f:77:93:e8:86:e4:aa:83:24:79:dc:30:24:e0:c6: 02:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F5:BF:92:AD:B9:8D:7D:0E:24:03:E1:28:ED:CA:7F:B8:11:E8:95 X509v3 Authority Key Identifier: keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:2b:5e:42:3b:37:d9:69:24:03:25:fa:ce:c0:66:d4:61:95: 55:62:15:bb:10:62:75:6e:12:6c:4a:08:fc:e2:4e:b5:ee:c5: 70:64:c1:55:d8:0e:3d:9c:e0:c5:68:75:e7:75:ac:0d:31:a9: b7:d0:a1:5d:cb:38:24:2b:d0:65:49:43:72:d7:ab:a3:58:0b: b2:90:58:51:39:56:14:ea:e4:d3:6b:4b:57:20:73:eb:83:46: 34:c3:98:92:ef:b6:d0:56:78:4f:39:44:95:05:ca:62:22:f7: e1:55:e7:8d:7f:5f:1c:0e:1d:38:0b:50:0f:ed:cb:25:0d:8f: 79:78:6f:df:47:26:35:81:fb:e4:4b:dc:cf:2d:a4:28:c1:d9: b1:e8:09:e4:fa:72:9f:38:0d:29:f5:72:2e:46:de:46:38:c7: 56:71:dc:cc:41:b2:e3:9d:9b:1c:08:cf:e3:23:31:4c:e8:3f: 80:f6:e3:1d:92:85:b3:e7:f7:0d:6d:e0:03:82:a7:24:53:5e: 5f:f0:ce:a5:ec:1f:ba:3e:92:8e:36:14:a9:42:4e:96:e7:56: a6:b8:c7:33:08:76:64:f6:77:3f:fc:3e:54:42:28:a1:3a:df: 64:9f:dd:0a:28:b0:cf:bb:4c:ca:82:2b:ad:fb:ef:6e:07:bf: 34:f6:b9:8a -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NTVEMkNBRjExMC8GA1UEBRMoRkRGNEJGMDAxM0IxRjFBQUNBMzk1NTFCQTYyNkNB MjQ2ODNEQUU2NjAeFw0yNTEwMTkwNDA1MDdaFw0yNTEwMjEwNDA1MDdaMBgxFjAU BgNVBAMTDTY4ZjQ2Mzc0LTAzYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDROjunW6aFJuJ0TuB3a6e7GRgHaoVbrgSZF6qh5NLXqmtp7doj0uPfp8CS DhlBnDOgWE+JXp87SctoGoCAg+3DhsBk+wQCuKu7WXMG0IoHwfDoFMhB6Tkd3UlT aeaC2zxuw6fBfnjnHN8OnsByxLneWaEf1tTXUeCdNA0ft3wNL1L44nYRzJhxaRSN oT65hkznTtOQptfeKSL+CzW9hHM16qlw2rvPEK6oQgMXgD4yVm84RZ4SN5V5gxb2 DIb7BAS3oS4VZUyHSpOG6xRx/eO83k8nUpdjFCF9MgPByRfoy+7luG/HwfO17zqM 0oegtx93k+iG5KqDJHncMCTgxgKLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUs/W/ kq25jX0OJAPhKO3Kf7gR6JUwHwYDVR0jBBgwFoAU/fS/ABOx8arKOVUbpibKJGg9 rmYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjU1RDJDLzFENjRDMkZDQzRDMzExRUU5QzQxOTk0Qzc3NTQxMkU2L19mU19B Qk94OGFyS09WVWJwaWJLSkdnOXJtWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL19mU19BQk94OGFyS09WVWJwaWJLSkdnOXJtWS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NTVEMkMvMUQ2NEMyRkNDNEMzMTFFRTlDNDE5OTRDNzc1 NDEyRTYvX2ZTX0FCT3g4YXJLT1ZVYnBpYktKR2c5cm1ZLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwK15COzfZaSQDJfrOwGbUYZVVYhW7 EGJ1bhJsSgj84k617sVwZMFV2A49nODFaHXndawNMam30KFdyzgkK9BlSUNy16uj WAuykFhROVYU6uTTa0tXIHPrg0Y0w5iS77bQVnhPOUSVBcpiIvfhVeeNf18cDh04 C1AP7cslDY95eG/fRyY1gfvkS9zPLaQowdmx6Ank+nKfOA0p9XIuRt5GOMdWcdzM QbLjnZscCM/jIzFM6D+A9uMdkoWz5/cNbeADgqckU15f8M6l7B+6PpKONhSpQk6W 51amuMczCHZk9nc//D5UQiihOt9kn90KKLDPu0zKgiut++9uB7809rmK -----END CERTIFICATE-----Generated at Mon Oct 20 05:21:26 2025 by rpki-client