$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft File: qO-WBRTjNkRNPN43sktm3DnUPRs.mft (raw, json) Hash identifier: j7PtDoTWrYMs1K6N8+AIJZ/0RlBnPlG3YjaMb0XISTw= Subject key identifier: 15:53:C8:D9:87:C0:C8:4E:9E:9B:E6:33:18:80:FF:04:1F:1B:A4:E7 Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Certificate serial: 0366 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft Manifest number: 0350 Signing time: Mon 20 Oct 2025 03:44:23 +0000 Manifest this update: Mon 20 Oct 2025 03:44:22 +0000 Manifest next update: Wed 22 Oct 2025 03:44:22 +0000 Files and hashes: 1: qO-WBRTjNkRNPN43sktm3DnUPRs.crl (hash: ylAusCnaEaHXbEENWchfT6o8YOLUnIvBRSBi/d/+NA4=) 2: C64BDF325B8611EE8F5917154AD9E6FC.roa (hash: lOfMw6yYmupoBGzZG06JxE7nkGYN0SjR1YBL+6yU110=) 3: 221DE36C5B7F11EEBAA0307C4AD9E6FC.roa (hash: akgSyzvUhBZdD/Jo/1snS9zDQnQhIY/z4b5eUssk1L4=) 4: 3FC126045B7F11EE91B3797C4AD9E6FC.roa (hash: B4Jxb4zuiNxx8ARYO+8FuXUu5CFHZJCjPVqFobOB2EU=) 5: F592AE225B7E11EEAAD8A37B4AD9E6FC.roa (hash: H2+/hMWhZrQQ/v+xp+P99me7GUvAhaEZLEIOvuDJ8+o=) 6: 9389DEB25B7E11EE85FB5A794AD9E6FC.roa (hash: saW9gDDU1fU/ss5E5QByOp+7T1wbc1vVgpJ7XS+gk+s=) 7: 39E85D245B7F11EE90195D7C4AD9E6FC.roa (hash: eHbXQ/7kild+PjHeBFmSGxlAnlG3pi2uyC9o63m5Mio=) 8: 44122BBE5B7E11EEA5C359784AD9E6FC.roa (hash: dlLpBI0Us25zgjOKkdJouRreKgFknaWvSBpHKXaHN4Q=) 9: 0DDE14645B8711EEBE2DF3154AD9E6FC.roa (hash: OVYm5oOpe8XlJOHUYg0R0oIytfPmlhVRgGeohPVoeGg=) 10: E29E1C625B7D11EEAFF513774AD9E6FC.roa (hash: cL6yXVTdN5LFRK/8lI56JvUwQ8huIMxP3ArtUJsfAsg=) 11: 0DB547A45B7E11EE95F5E0774AD9E6FC.roa (hash: sgLUjm9KT8NBSGsfPuF7zb59LXdnTNhjWZlBuJluY4o=) 12: 82BE0D345B8711EE8AF170174AD9E6FC.roa (hash: du0kSdCk2tSzKNVUZIxuV5z/5Bcr0/T6HJ/NasAIv4s=) 13: 673167545B7E11EE98EEBD784AD9E6FC.roa (hash: adqbPWSj3qJmhRpUh3DUEWmWfDKPs4YfwC9ZlFS5ias=) 14: A97AA9E05B7E11EEAD5E8F794AD9E6FC.roa (hash: 3NkJ+hNEcmyOZzaQCsy/+Ozh2yGmiiWLNtnnqsmfG2I=) 15: C07457B08A3711F0A002C2E7DAE4EC9C.roa (hash: Pe7GZmcC+gV4uLFF5b8V8YgWqeJmXfjZci1uqWUJRZA=) 16: BBA7D8A05B8711EEA5880E184AD9E6FC.roa (hash: NwbjXk0kj8eY+sbmyk9mA7z7P4Od2Lqrhnl5SE+949A=) 17: 7D84FCC85B7E11EE930F05794AD9E6FC.roa (hash: LbVSQZqmCHBXF80jfRgZ632p1CiqtMRJRyKOIJ1fwIY=) 18: 5A3685F85B7D11EEB4B9A0754AD9E6FC.roa (hash: hua4m2v20w0RdcluLq3SvMVi3aYeRg47OfgA9wTRs3E=) 19: D6AA10E05B7E11EE9B32467A4AD9E6FC.roa (hash: RAafA0ML5VlgZ60Y1uxp4EowWyBnwvs0LOD/pOddd5E=) 20: 9FF8CF2E5B8711EE9F40A5174AD9E6FC.roa (hash: lG9MW9PGMEKdmiEYPlQxLtvMK2I/+bgWEhfhck5fvqA=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 22 Oct 2025 00:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 870 (0x366) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3668CFEAF, serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Validity Not Before: Oct 20 03:44:22 2025 GMT Not After : Oct 22 03:44:22 2025 GMT Subject: CN=68f5b017-a997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:eb:a1:09:a5:09:47:16:1e:7f:49:e0:3d:b3: 87:6f:6f:53:98:55:d5:27:a5:83:00:a9:ac:26:4f: 61:5d:aa:41:4a:af:7b:89:fe:6f:95:fe:bb:75:c4: 5a:41:7a:63:5f:2f:5c:37:60:7b:15:81:b1:91:08: 90:ec:1d:15:0e:bb:90:b4:4b:a4:5d:0d:62:62:fc: 47:98:1e:54:2a:17:bd:9f:06:73:98:0a:bb:09:63: 99:cf:83:69:e1:27:35:9a:2f:9e:0e:d3:10:ba:7d: 9b:dc:1a:44:bf:00:f6:f0:17:52:46:d3:98:a9:18: 99:64:87:28:0d:0e:2e:98:14:d7:25:69:45:24:d0: e3:95:84:dd:9d:5e:d1:5c:31:7e:23:5d:59:10:50: b5:4e:0e:65:d6:10:89:05:38:c6:cd:12:e2:8a:9e: 45:c3:da:30:7d:c0:ad:05:1c:10:88:9b:b6:b7:e8: 2c:97:77:27:66:15:ac:d4:57:e0:77:a9:f0:67:26: 3a:2a:05:bf:4c:b5:64:5f:c3:40:56:eb:88:1e:9c: a8:66:c4:54:b8:4f:b6:91:04:65:a8:5f:99:da:1d: 18:78:f7:64:58:26:4a:dd:2f:ca:56:05:4a:5e:3c: 39:63:ef:d3:fd:51:49:ff:36:ad:9d:15:c6:ac:5a: 35:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:53:C8:D9:87:C0:C8:4E:9E:9B:E6:33:18:80:FF:04:1F:1B:A4:E7 X509v3 Authority Key Identifier: keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:78:1f:37:f7:64:af:0e:b9:27:24:4d:e1:61:b4:ae:78:e2: dc:86:b8:96:3f:d8:a7:ea:ef:5a:64:cd:e4:c7:a7:67:4e:0c: b2:5c:7b:13:70:9d:eb:96:76:08:5b:57:db:16:34:f2:b7:62: 43:5d:cd:00:87:9e:cc:bf:3e:07:34:0a:e8:82:b0:ed:67:ca: f4:1f:62:4a:09:0a:a9:ae:1e:8b:91:24:b9:fc:a5:8b:c0:fa: a9:a2:cc:c0:40:5f:f9:7e:60:36:74:91:c7:62:67:54:a8:ef: 09:14:46:16:9b:3a:a8:d3:b2:69:33:5d:b0:63:94:a3:69:78: 84:3a:25:c8:06:21:b5:f5:ab:f5:24:53:c4:82:f8:ad:db:34: 43:4a:46:26:e4:02:d4:f6:a3:83:e9:5a:a0:2b:4d:98:1d:51: 72:bd:57:95:6c:90:49:98:2d:9a:b9:9d:7c:61:3d:98:39:76: 3a:53:67:c9:f2:80:89:78:8e:f2:37:13:58:f7:ee:ba:37:01: 33:fa:e7:f8:9c:fa:5e:8e:b8:df:a0:9e:db:f0:53:90:39:a2: dc:67:b3:f3:4d:9b:75:eb:4e:0e:34:dc:13:e6:31:23:cf:25: 3f:5b:70:19:56:ce:e1:cf:88:94:28:7c:23:f2:e1:62:f5:fa: 0c:e3:dc:c0 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA2YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NjhDRkVBRjExMC8GA1UEBRMoQThFRjk2MDUxNEUzMzY0NDREM0NERTM3QjI0QjY2 REMzOUQ0M0QxQjAeFw0yNTEwMjAwMzQ0MjJaFw0yNTEwMjIwMzQ0MjJaMBgxFjAU BgNVBAMTDTY4ZjViMDE3LWE5OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCl66EJpQlHFh5/SeA9s4dvb1OYVdUnpYMAqawmT2FdqkFKr3uJ/m+V/rt1 xFpBemNfL1w3YHsVgbGRCJDsHRUOu5C0S6RdDWJi/EeYHlQqF72fBnOYCrsJY5nP g2nhJzWaL54O0xC6fZvcGkS/APbwF1JG05ipGJlkhygNDi6YFNclaUUk0OOVhN2d XtFcMX4jXVkQULVODmXWEIkFOMbNEuKKnkXD2jB9wK0FHBCIm7a36CyXdydmFazU V+B3qfBnJjoqBb9MtWRfw0BW64genKhmxFS4T7aRBGWoX5naHRh492RYJkrdL8pW BUpePDlj79P9UUn/Nq2dFcasWjVHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUFVPI 2YfAyE6em+YzGID/BB8bpOcwHwYDVR0jBBgwFoAUqO+WBRTjNkRNPN43sktm3DnU PRswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjY4Q0ZFLzk1RUZENzRDMzc1NzExRUVCQjE0MzIxODRBRDlFNkZDL3FPLVdC UlRqTmtSTlBONDNza3RtM0RuVVBScy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3FPLVdCUlRqTmtSTlBONDNza3RtM0RuVVBScy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NjhDRkUvOTVFRkQ3NEMzNzU3MTFFRUJCMTQzMjE4NEFE OUU2RkMvcU8tV0JSVGpOa1JOUE40M3NrdG0zRG5VUFJzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/eB8392SvDrknJE3hYbSueOLchriW P9in6u9aZM3kx6dnTgyyXHsTcJ3rlnYIW1fbFjTyt2JDXc0Ah57Mvz4HNArogrDt Z8r0H2JKCQqprh6LkSS5/KWLwPqposzAQF/5fmA2dJHHYmdUqO8JFEYWmzqo07Jp M12wY5SjaXiEOiXIBiG19av1JFPEgvit2zRDSkYm5ALU9qOD6VqgK02YHVFyvVeV bJBJmC2auZ18YT2YOXY6U2fJ8oCJeI7yNxNY9+66NwEz+uf4nPpejrjfoJ7b8FOQ OaLcZ7PzTZt1604ONNwT5jEjzyU/W3AZVs7hz4iUKHwj8uFi9foM49zA -----END CERTIFICATE-----Generated at Mon Oct 20 17:13:41 2025 by rpki-client