$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft File: qO-WBRTjNkRNPN43sktm3DnUPRs.mft (raw, json) Hash identifier: a9qQy+8D6S3vlvncKjVuAbQket6mwEKLmtHfJz6v99w= Subject key identifier: 56:D4:F7:99:22:92:D2:FB:CA:C8:C7:18:4C:5C:D5:9B:7A:3B:E6:82 Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Certificate serial: 0326 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft Manifest number: 0312 Signing time: Sat 23 Aug 2025 03:54:03 +0000 Manifest this update: Sat 23 Aug 2025 03:54:02 +0000 Manifest next update: Mon 25 Aug 2025 03:54:02 +0000 Files and hashes: 1: qO-WBRTjNkRNPN43sktm3DnUPRs.crl (hash: OJTu/9MSOFiEFbkitoYfEf4/M+89qAolycIQLBxr2cI=) 2: C64BDF325B8611EE8F5917154AD9E6FC.roa (hash: lOfMw6yYmupoBGzZG06JxE7nkGYN0SjR1YBL+6yU110=) 3: 221DE36C5B7F11EEBAA0307C4AD9E6FC.roa (hash: akgSyzvUhBZdD/Jo/1snS9zDQnQhIY/z4b5eUssk1L4=) 4: 3FC126045B7F11EE91B3797C4AD9E6FC.roa (hash: B4Jxb4zuiNxx8ARYO+8FuXUu5CFHZJCjPVqFobOB2EU=) 5: F592AE225B7E11EEAAD8A37B4AD9E6FC.roa (hash: H2+/hMWhZrQQ/v+xp+P99me7GUvAhaEZLEIOvuDJ8+o=) 6: 9389DEB25B7E11EE85FB5A794AD9E6FC.roa (hash: saW9gDDU1fU/ss5E5QByOp+7T1wbc1vVgpJ7XS+gk+s=) 7: 39E85D245B7F11EE90195D7C4AD9E6FC.roa (hash: eHbXQ/7kild+PjHeBFmSGxlAnlG3pi2uyC9o63m5Mio=) 8: 44122BBE5B7E11EEA5C359784AD9E6FC.roa (hash: dlLpBI0Us25zgjOKkdJouRreKgFknaWvSBpHKXaHN4Q=) 9: 0DDE14645B8711EEBE2DF3154AD9E6FC.roa (hash: OVYm5oOpe8XlJOHUYg0R0oIytfPmlhVRgGeohPVoeGg=) 10: E29E1C625B7D11EEAFF513774AD9E6FC.roa (hash: cL6yXVTdN5LFRK/8lI56JvUwQ8huIMxP3ArtUJsfAsg=) 11: 0DB547A45B7E11EE95F5E0774AD9E6FC.roa (hash: sgLUjm9KT8NBSGsfPuF7zb59LXdnTNhjWZlBuJluY4o=) 12: 82BE0D345B8711EE8AF170174AD9E6FC.roa (hash: du0kSdCk2tSzKNVUZIxuV5z/5Bcr0/T6HJ/NasAIv4s=) 13: 673167545B7E11EE98EEBD784AD9E6FC.roa (hash: adqbPWSj3qJmhRpUh3DUEWmWfDKPs4YfwC9ZlFS5ias=) 14: A97AA9E05B7E11EEAD5E8F794AD9E6FC.roa (hash: 3NkJ+hNEcmyOZzaQCsy/+Ozh2yGmiiWLNtnnqsmfG2I=) 15: EFB2EA005B8611EEB1C27E154AD9E6FC.roa (hash: ArKkYMPjrZ4ijgIQyF9Kcy4ua9ozHX8IBDIWFIk7DdU=) 16: BBA7D8A05B8711EEA5880E184AD9E6FC.roa (hash: NwbjXk0kj8eY+sbmyk9mA7z7P4Od2Lqrhnl5SE+949A=) 17: 7D84FCC85B7E11EE930F05794AD9E6FC.roa (hash: LbVSQZqmCHBXF80jfRgZ632p1CiqtMRJRyKOIJ1fwIY=) 18: 5A3685F85B7D11EEB4B9A0754AD9E6FC.roa (hash: hua4m2v20w0RdcluLq3SvMVi3aYeRg47OfgA9wTRs3E=) 19: D6AA10E05B7E11EE9B32467A4AD9E6FC.roa (hash: RAafA0ML5VlgZ60Y1uxp4EowWyBnwvs0LOD/pOddd5E=) 20: 9FF8CF2E5B8711EE9F40A5174AD9E6FC.roa (hash: lG9MW9PGMEKdmiEYPlQxLtvMK2I/+bgWEhfhck5fvqA=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 25 Aug 2025 00:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 806 (0x326) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3668CFEAF, serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Validity Not Before: Aug 23 03:54:02 2025 GMT Not After : Aug 25 03:54:02 2025 GMT Subject: CN=68a93b5b-a1a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:aa:f9:7c:ec:71:54:88:e7:f0:f0:73:4e:87: cd:7e:a6:0f:b6:d1:66:a6:f3:36:57:61:2b:95:00: 4f:f1:99:f0:c3:a8:13:83:d5:29:a1:80:e4:85:df: 1c:95:9b:ce:b7:91:ed:ce:52:11:93:37:88:8d:ca: 3c:c4:bb:f9:33:2c:15:c7:bb:af:34:a3:bb:77:37: 1a:8e:76:2c:ed:7f:ac:1d:cc:7f:14:3d:f3:e0:0d: cb:0f:e3:8c:b5:cf:14:90:4b:1b:67:cb:97:66:d1: 1a:55:b5:07:cc:ee:7a:8a:4c:fd:34:d5:7c:6a:bb: 0d:36:59:e6:b8:53:1e:ff:fc:49:e7:83:65:17:56: fd:71:ff:fc:94:0c:ce:5a:38:9f:fc:b2:0e:a1:c7: a8:dc:3c:e1:e3:58:7f:49:80:9a:61:01:bd:c3:f9: 3b:81:4e:4f:06:13:51:70:ea:63:84:0e:d6:cb:a8: f3:1c:b2:4e:c7:6d:e4:05:7c:b0:94:40:29:5e:9e: 91:47:2f:1e:32:10:aa:b9:a6:cd:d4:48:95:3f:aa: 7a:b5:6d:e9:d6:8c:8b:61:37:8c:9b:44:db:56:2a: 05:e6:5f:e7:17:50:43:5b:15:60:17:b8:64:32:4e: 34:2a:25:95:d9:2f:77:28:cd:b8:fc:69:83:80:92: 98:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D4:F7:99:22:92:D2:FB:CA:C8:C7:18:4C:5C:D5:9B:7A:3B:E6:82 X509v3 Authority Key Identifier: keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:54:30:08:f2:5b:f5:7a:c0:d0:af:7c:28:39:03:77:92:c8: c8:ca:4f:71:a1:24:7e:b3:37:35:7f:bc:a1:22:a3:06:6a:8b: 45:7d:d1:78:9e:c5:11:e7:24:95:b9:54:37:f5:90:68:b3:c3: 2d:7e:6b:30:89:8b:27:25:95:3d:5c:77:69:14:5a:40:fb:b9: 6e:ac:ba:3a:29:2b:76:4e:64:0c:36:fa:21:1f:f0:9b:f6:e5: 50:f0:c4:8b:bd:28:5a:a5:60:9b:3d:41:58:ed:37:1c:85:06: 96:6f:25:23:df:da:78:88:fd:cb:28:b3:31:f5:19:d5:dd:c0: 21:27:7c:7f:be:d0:c0:57:66:c0:85:40:33:be:44:a0:3d:f0: 67:c2:5d:af:ab:a1:45:c2:79:aa:1f:c5:c4:1f:91:9f:f3:3f: fd:44:ec:0a:f0:94:7f:f4:f4:ba:8e:5d:13:3f:ae:6f:28:2c: 0d:5e:ce:f9:c9:d5:f8:9b:37:70:dc:fd:0b:86:4c:67:3d:54: 34:17:22:2d:54:ea:07:bb:24:e8:87:0e:cb:88:09:0b:16:66: 78:43:0e:bb:41:aa:b0:cb:9b:04:12:68:5e:24:11:88:31:25: cb:fd:29:ec:a3:56:03:e1:7f:5e:e1:99:07:fd:37:b8:e6:0f: 5e:7a:8c:a2 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAyYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NjhDRkVBRjExMC8GA1UEBRMoQThFRjk2MDUxNEUzMzY0NDREM0NERTM3QjI0QjY2 REMzOUQ0M0QxQjAeFw0yNTA4MjMwMzU0MDJaFw0yNTA4MjUwMzU0MDJaMBgxFjAU BgNVBAMTDTY4YTkzYjViLWExYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQChqvl87HFUiOfw8HNOh81+pg+20Wam8zZXYSuVAE/xmfDDqBOD1SmhgOSF 3xyVm863ke3OUhGTN4iNyjzEu/kzLBXHu680o7t3NxqOdiztf6wdzH8UPfPgDcsP 44y1zxSQSxtny5dm0RpVtQfM7nqKTP001Xxquw02Wea4Ux7//Enng2UXVv1x//yU DM5aOJ/8sg6hx6jcPOHjWH9JgJphAb3D+TuBTk8GE1Fw6mOEDtbLqPMcsk7HbeQF fLCUQClenpFHLx4yEKq5ps3USJU/qnq1benWjIthN4ybRNtWKgXmX+cXUENbFWAX uGQyTjQqJZXZL3cozbj8aYOAkpghAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUVtT3 mSKS0vvKyMcYTFzVm3o75oIwHwYDVR0jBBgwFoAUqO+WBRTjNkRNPN43sktm3DnU PRswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjY4Q0ZFLzk1RUZENzRDMzc1NzExRUVCQjE0MzIxODRBRDlFNkZDL3FPLVdC UlRqTmtSTlBONDNza3RtM0RuVVBScy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3FPLVdCUlRqTmtSTlBONDNza3RtM0RuVVBScy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NjhDRkUvOTVFRkQ3NEMzNzU3MTFFRUJCMTQzMjE4NEFE OUU2RkMvcU8tV0JSVGpOa1JOUE40M3NrdG0zRG5VUFJzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgVDAI8lv1esDQr3woOQN3ksjIyk9x oSR+szc1f7yhIqMGaotFfdF4nsUR5ySVuVQ39ZBos8MtfmswiYsnJZU9XHdpFFpA +7lurLo6KSt2TmQMNvohH/Cb9uVQ8MSLvShapWCbPUFY7TcchQaWbyUj39p4iP3L KLMx9RnV3cAhJ3x/vtDAV2bAhUAzvkSgPfBnwl2vq6FFwnmqH8XEH5Gf8z/9ROwK 8JR/9PS6jl0TP65vKCwNXs75ydX4mzdw3P0LhkxnPVQ0FyItVOoHuyTohw7LiAkL FmZ4Qw67Qaqwy5sEEmheJBGIMSXL/Snso1YD4X9e4ZkH/Te45g9eeoyi -----END CERTIFICATE-----Generated at Sat Aug 23 20:17:36 2025 by rpki-client