$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft File: _fS_ABOx8arKOVUbpibKJGg9rmY.mft (raw, json) Hash identifier: JW6xAdiRWPowT/BEEhoO0hQcphdnPBFlSleCwkl+XsE= Subject key identifier: 92:B8:7D:A8:CD:22:95:C6:47:77:E3:4F:7A:12:6B:D7:EB:AF:70:71 Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66 Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66 Certificate serial: 028B Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft Manifest number: 0268 Signing time: Sat 23 Aug 2025 04:18:15 +0000 Manifest this update: Sat 23 Aug 2025 04:18:14 +0000 Manifest next update: Mon 25 Aug 2025 04:18:14 +0000 Files and hashes: 1: _fS_ABOx8arKOVUbpibKJGg9rmY.crl (hash: 5EeSuI9mrduBUuol1eqctZ3/fvMyhpgouxsEqkVZCyg=) 2: F105F828C4CE11EE939D5160775412E6.roa (hash: OVT2chMQ0Nq/o8KrWCxuVSBa6IdJd925oWRD0nztHjI=) 3: 6F89EC1EC4CE11EEB915BB5F775412E6.roa (hash: 0xzDQTGktY5SNT/oNqNDkR69eV9keuHEiaiK1qaTKh4=) 4: B1F8097EC4D211EE86535866775412E6.roa (hash: 59lN/fUbuBzBsApqG3IvBcdXKT4GXqevkBfORr82FQA=) 5: 8BA49FD0C4D211EE9EC4EB65775412E6.roa (hash: L8cuHjbSNz6+bJ/gQju0YrhFVS2tYAIiSMeuYmThWuI=) 6: DD77B4AAC4D211EEBEB69266775412E6.roa (hash: OydxnI/hxoPiyhR17/Tng3O2ILM83hRZhWDiNRN/dU4=) 7: 95C2E55CC4CE11EEB298E25F775412E6.roa (hash: 34ivVx7kCxvEM20aUk37oRsDslYZlA+xl4ns6+aB5gY=) 8: 93B700F2C4F311EE8E31E298775412E6.roa (hash: jxWkgZfYWgXiUGFUDEKR/McM7BfyCoS5P8Hm5K309v0=) 9: E93581BEC4CD11EEBD97B25E775412E6.roa (hash: 55Va12oDO8S1u6Db0FeTKlFuk9K47Rv37Hrdea7bPcE=) 10: 3DF8B8D4C4D211EEB1EC7C65775412E6.roa (hash: 9LziG0V2OwJ9n1u0dLn4KBFXmSSOMd2hKZ8b5zKpu9c=) 11: 4101D022C4CF11EEB2F10961775412E6.roa (hash: dLi4goldq2t98cgYBuvk9Jpn/HGg3ZCmLTC1jEDXh+8=) 12: FAD1EE98C4D311EEB8EF5B68775412E6.roa (hash: xrzrQk6N9A7y+gGJ1sq9ZLmMErelK63jEZa0HOn6EEE=) 13: 06EC9B8EC4CE11EE9CCFD65E775412E6.roa (hash: yxTa4SshiNJ7DHcSq54/OxpqqW1oYG+0q8Vz/U0eUK4=) 14: 4C0E8C0EC4C911EE87647756775412E6.roa (hash: 3hEwrhsuSNEta/SbVkYuC8E8cEE9Br3Bj2hXmqXW6Og=) 15: C1BC264CC4CD11EE89C2885E775412E6.roa (hash: /4XiUCjd/sd1xIFdMVmhioY/RKg6IR+Ajo98X8uy0lo=) 16: 48E43AECC4D311EE8C1B3F67775412E6.roa (hash: u/n56Tta7OlwGuEqOpX71XLsZT2jKpBxkP39WXUlLLc=) 17: 1A50080EC4D411EE9683B268775412E6.roa (hash: caLtTbJU+Ufv7BiWj1H9Gw+w4cpOtHWxcr1WeZuKjJ8=) 18: 81B67878C4C711EEA9FDDB53775412E6.roa (hash: vTf8z95jt6AfKb+uGSv38KFOEqTok2j1GUU2yZdAI08=) 19: 52716D10C4C811EEA1131155775412E6.roa (hash: xQRXL5xCOGFaycHwp48gngmbdbohfcnsUJoty1rMzbc=) 20: 2A6C3F60C4CE11EEA3D4FA5E775412E6.roa (hash: C+KA4N0o/N/27ljFsz4ZdSUMg3iOEQO8xBx9RPaXKNI=) 21: 4F31EC96C4CE11EEA565525F775412E6.roa (hash: HcZFH7qDjDPGPIsCX8qhmZSQf24/4pPHFAyHS4PESuo=) 22: B3F2595EC4D311EE97A2CE67775412E6.roa (hash: ECdHU4AArULpOT1NztEszqbSD1WJnxMYYXF31fUvbrM=) 23: 68864AB4C4F311EE8BF25B98775412E6.roa (hash: 5ft3N//XILTGHx4xJyf0ZxLMMcxslek8pxu0nWzZdwE=) 24: 648C3F8CC4CF11EEB00B3061775412E6.roa (hash: FDVWcr2ZaAbCYXZ2KHJUxLsk/2sFqJr/Vx9+VGbIRJ4=) 25: 2283DBBEC4D311EEB2E6EA66775412E6.roa (hash: vDOXm9PXQ5Zd7c1zyElcj6kt2FJGk5QRFQWZ4OnkvEI=) 26: 870416B8C4C811EE906C4D55775412E6.roa (hash: Vbe2KHg+Or1EjP08Hg3ouXICYgnv4yFEfEZ5ZITCte4=) 27: D4A143FEC4D311EE8C6C1968775412E6.roa (hash: AgQ0WKMr6LdRsNIoXgyHASIpWGf5jCQAlVVsb6zmYZ8=) 28: 5DCB92C6C4D211EE8BD1A065775412E6.roa (hash: PsrWGlKMnmYkcFOTAbq8GoiP2U6q8o3llEg2ATal3EM=) 29: CCB4D870C59311EE927FFFA7775412E6.roa (hash: 9rD0WduujgyOlEWZ+vDkwaNAJhs7jTIfIlCfix8PC/0=) 30: 9073DE6CC4D311EEB0B9C867775412E6.roa (hash: elhNbqke+6Kl2ZATVb9O1DeKyGk/Aq6WgPyX415dPg0=) 31: 96B86BD6C4CD11EEA3C61A5E775412E6.roa (hash: 1/4BsRl0z2euLNjIiSiAv+wgrdGXz1NzXtlGPkiO18s=) 32: 684B797CC4D311EE816F8467775412E6.roa (hash: zrGP4qbV7TkM2QLEaYGOzJRGNrjbHqUR2QRTvJ966ic=) 33: BFE793D2C4CE11EE81D70760775412E6.roa (hash: YKo9lE8pH+B0lF4SQUvGTWgHthQjPN6oP/oPK/YNf8s=) 34: 1D9BA0C2C4CF11EE9D26CF60775412E6.roa (hash: 0X/6wOprzARBLwyRT7sbR4YEUnDHgpq1rvlRKwpi56E=) 35: FF49F7B4C4D211EEB6F1A266775412E6.roa (hash: qvVux5l6rnVThhETsGLH9EXoxv6/IKPh5G9ATtSGJFg=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 25 Aug 2025 00:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 651 (0x28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3655D2CAF, serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66 Validity Not Before: Aug 23 04:18:14 2025 GMT Not After : Aug 25 04:18:14 2025 GMT Subject: CN=68a94107-bc59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:50:e9:ca:5a:7d:24:d5:0d:c5:b2:49:fc:c7: 10:71:e1:ff:e6:4d:0d:c1:fd:c4:5c:df:92:7d:d9: 51:15:ad:7a:25:be:08:6d:4b:ca:65:60:7b:5e:37: 9f:20:4a:26:45:de:f3:85:fb:be:4d:f5:0e:8f:c3: ab:3a:46:ad:df:ba:d4:03:75:65:73:3c:67:eb:37: 1c:f4:72:5f:76:ba:3c:e4:f8:2a:d9:a6:ba:87:f2: 3e:c3:7d:e9:01:b4:e1:3b:2f:5a:fa:e6:f1:13:65: 4e:ef:12:7a:ca:6e:77:96:e9:18:75:80:12:23:d8: 6b:6f:9e:e3:23:7e:64:72:06:39:45:8e:5a:99:1c: 55:d5:9c:43:46:51:3e:5f:54:68:dd:bf:d1:c2:f2: b8:91:47:74:3c:3d:ff:36:35:e6:84:d1:05:3c:14: 6f:bc:48:2b:6a:94:91:bd:8a:7f:af:43:39:4d:4d: 53:b2:d8:a9:97:53:d1:91:ab:4f:18:ea:f7:f9:2e: 8f:61:b8:85:0b:f5:b1:34:0b:d3:cc:b4:dd:02:af: c3:03:c3:8c:2c:5f:40:82:10:ff:84:4d:99:a8:7e: ba:4b:c7:d3:be:7b:48:bd:65:54:45:f8:c7:c5:de: 4f:7f:08:00:c5:fd:30:eb:ce:c7:cc:13:5a:b1:a4: c5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B8:7D:A8:CD:22:95:C6:47:77:E3:4F:7A:12:6B:D7:EB:AF:70:71 X509v3 Authority Key Identifier: keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:41:e2:65:92:c8:59:ac:25:e3:30:a1:76:64:5e:88:08:cc: ca:c4:9f:97:8d:70:10:dc:fb:86:88:10:a4:b2:cb:c2:05:46: d8:a2:d1:c3:74:79:38:ce:27:d7:ed:73:50:4d:50:cc:1e:04: 87:f2:97:81:ee:3c:02:af:ab:c4:a4:82:1b:03:1e:43:93:19: 23:a2:43:47:18:81:d8:d0:44:40:e5:cb:c8:8f:ed:29:22:ec: 17:10:b3:1e:77:6d:87:0b:8f:1a:17:4f:be:f5:03:21:d3:64: 3e:95:ab:87:99:ec:40:0a:4c:6f:28:d4:d9:ef:94:a4:1e:79: 45:43:5c:af:70:4d:b3:9d:80:82:74:1d:e5:94:04:8e:cb:3d: da:40:60:fa:97:0b:2a:57:60:41:58:88:e1:fc:a0:46:14:00: 29:7e:28:83:79:08:0b:53:6a:1c:a2:24:8b:6d:79:65:86:91: 43:32:65:5a:70:4e:a4:4e:30:bf:c4:f7:3e:42:19:41:3d:6b: 3b:74:75:5b:aa:1e:b4:13:68:16:37:4b:81:23:66:4f:19:df: 46:53:08:b7:54:c7:02:45:94:59:c9:3e:06:f2:e2:03:7b:00: fc:26:8b:fc:40:da:88:18:97:97:42:60:b7:02:7c:61:f4:71: 5b:8e:19:b0 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAoswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NTVEMkNBRjExMC8GA1UEBRMoRkRGNEJGMDAxM0IxRjFBQUNBMzk1NTFCQTYyNkNB MjQ2ODNEQUU2NjAeFw0yNTA4MjMwNDE4MTRaFw0yNTA4MjUwNDE4MTRaMBgxFjAU BgNVBAMTDTY4YTk0MTA3LWJjNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCfUOnKWn0k1Q3Fskn8xxBx4f/mTQ3B/cRc35J92VEVrXolvghtS8plYHte N58gSiZF3vOF+75N9Q6Pw6s6Rq3futQDdWVzPGfrNxz0cl92ujzk+CrZprqH8j7D fekBtOE7L1r65vETZU7vEnrKbneW6Rh1gBIj2GtvnuMjfmRyBjlFjlqZHFXVnENG UT5fVGjdv9HC8riRR3Q8Pf82NeaE0QU8FG+8SCtqlJG9in+vQzlNTVOy2KmXU9GR q08Y6vf5Lo9huIUL9bE0C9PMtN0Cr8MDw4wsX0CCEP+ETZmofrpLx9O+e0i9ZVRF +MfF3k9/CADF/TDrzsfME1qxpMUxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUkrh9 qM0ilcZHd+NPehJr1+uvcHEwHwYDVR0jBBgwFoAU/fS/ABOx8arKOVUbpibKJGg9 rmYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjU1RDJDLzFENjRDMkZDQzRDMzExRUU5QzQxOTk0Qzc3NTQxMkU2L19mU19B Qk94OGFyS09WVWJwaWJLSkdnOXJtWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL19mU19BQk94OGFyS09WVWJwaWJLSkdnOXJtWS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NTVEMkMvMUQ2NEMyRkNDNEMzMTFFRTlDNDE5OTRDNzc1 NDEyRTYvX2ZTX0FCT3g4YXJLT1ZVYnBpYktKR2c5cm1ZLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApQeJlkshZrCXjMKF2ZF6ICMzKxJ+X jXAQ3PuGiBCkssvCBUbYotHDdHk4zifX7XNQTVDMHgSH8peB7jwCr6vEpIIbAx5D kxkjokNHGIHY0ERA5cvIj+0pIuwXELMed22HC48aF0++9QMh02Q+lauHmexACkxv KNTZ75SkHnlFQ1yvcE2znYCCdB3llASOyz3aQGD6lwsqV2BBWIjh/KBGFAApfiiD eQgLU2ocoiSLbXllhpFDMmVacE6kTjC/xPc+QhlBPWs7dHVbqh60E2gWN0uBI2ZP Gd9GUwi3VMcCRZRZyT4G8uIDewD8Jov8QNqIGJeXQmC3Anxh9HFbjhmw -----END CERTIFICATE-----Generated at Sat Aug 23 12:25:25 2025 by rpki-client