$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft File: SoPzGxsGBMptC3KkU9qj61h7TII.mft (raw, json) Hash identifier: nTMmxOs8d/Ed8P+YU8TYMwgliPY2S2ggoP/rsU8oV0c= Subject key identifier: 03:15:7D:BD:BC:FF:69:40:3F:C3:ED:3E:9A:81:6F:29:39:3B:C2:EF Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82 Certificate issuer: /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82 Certificate serial: 03AA Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft Manifest number: 039B Signing time: Sat 23 Aug 2025 03:36:04 +0000 Manifest this update: Sat 23 Aug 2025 03:36:03 +0000 Manifest next update: Mon 25 Aug 2025 03:36:03 +0000 Files and hashes: 1: SoPzGxsGBMptC3KkU9qj61h7TII.crl (hash: 0n+YEmUxecANCyDsOz+Fb1U9odegGEiJd1087VmF8fs=) 2: C644833AEE7111EE86F7F361775412E6.roa (hash: YgdlYAvq9L3YlpIV33voCNPfR5sCeCWFkjxpZfRsE/k=) 3: 7B89F0F65C1011F097764BA7DAE4EC9C.roa (hash: eGy/v5dJ9Sg7LBFixJArYusJNOZkmFriL3Cy5EJmVsc=) 4: BFD118C27C3E11F0A02173AEDAE4EC9C.roa (hash: E8rOx5Kz5JNVd/9IEaiBcjxCcyJDlnKMUqqptEDdwRw=) 5: 42CC1EC00B7611EEA5D28A444AD9E6FC.roa (hash: hsH3WbP2I/ts2EY2aQeTrcaXJgp89zEB64yilwHc5pg=) 6: 1E00E01A052911EE84BBD2454AD9E6FC.roa (hash: sJsPXhS2u3JarGDtOh1UZa0tPJmz8vwB7/YeLKri/dk=) 7: F8481206047B11EE91F2EF354AD9E6FC.roa (hash: jtUAjy0+9QV2iQ02jzkoPCkRiaIb/F60j3I68U9pgH4=) 8: F65930865B2911F0A6F411CCDAE4EC9C.roa (hash: zlBIS1j6PkXW4nIJqeYYZE1QxvGn2R6vJr3qJUI1Apc=) 9: C210ED2E064611F094E66494762E951A.roa (hash: Gw9d4UydYI1TKn6YtgmxyrXffZXD7vcLeB5cryG7IG4=) 10: F4E7AB82052811EE94115E454AD9E6FC.roa (hash: 0f6Udr5nVgdqIgPgxaXYb0TifWritIk3wQmsNXYsjss=) 11: 1587E6CCEE7111EEAAFBB25C775412E6.roa (hash: zasoVhr4ZDA3BPJ+ug5ooyH3/rY2lwS6n6p8BUEgx2w=) 12: 4F0B564AF51511EEB208C151775412E6.roa (hash: XNyDHYdBwPvc7NbnPS7pTjwqkoohEdJw312l57VSDB8=) 13: 4A7830A0D18B11EFAB9E6B88762E951A.roa (hash: xV745XWxYsFhNII926E/fN4gSuSPSdyN3viLNfdZy9M=) 14: 31CFB30C052C11EEAC0EDC4E4AD9E6FC.roa (hash: 707c2EgzG32Mlw18CbzTHauUb9G8+7v2J+8ka2UNIbA=) 15: 506B37B0FD0A11EEA3B5DB34017001B1.roa (hash: 12EkqcvUqaX3EcpZliJ64g6Wrfs7WAZ3LR6j5D262RI=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 25 Aug 2025 00:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82 Validity Not Before: Aug 23 03:36:03 2025 GMT Not After : Aug 25 03:36:03 2025 GMT Subject: CN=68a93724-371c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d1:17:24:a0:91:47:0f:7a:24:bd:1b:03:e9: e8:e1:77:a8:3e:c6:45:cc:c9:c5:36:5f:df:6a:85: 33:76:0d:8d:ad:76:af:98:d1:50:e1:e9:48:d4:36: 9e:9b:ed:f4:d2:ee:03:ea:05:e0:50:8c:4f:c9:f9: 5a:07:8b:fd:90:57:54:90:62:6f:e4:99:e6:b4:82: 54:98:e5:d5:40:16:55:e6:8f:d8:af:53:63:aa:6e: 6e:bb:a1:07:40:00:35:c9:f7:7a:cc:c9:03:07:78: dd:e0:7a:e9:71:23:89:ff:24:77:df:fd:e1:ba:1a: 03:96:cf:11:a3:d6:73:b4:c8:60:f4:a1:bb:9f:7e: 3e:e8:7d:26:fe:c6:7c:70:b1:70:51:d8:cc:00:52: ca:72:05:9d:26:ba:2a:d6:7c:73:1f:9a:09:78:06: f0:06:39:32:5d:09:74:b6:3a:c2:da:e8:52:ee:5c: c2:c0:12:43:32:c8:e9:21:87:d4:a6:fd:fc:76:c4: c8:fe:e6:6a:67:46:72:2e:0c:1c:91:df:e7:f5:93: c0:74:50:fb:75:92:8d:2d:fe:e3:3c:fe:e5:51:67: 88:4d:12:f9:63:03:37:c1:af:42:11:85:80:d3:3c: 70:97:0b:46:be:bc:9c:a5:c5:1e:b5:e8:d5:05:20: cd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:15:7D:BD:BC:FF:69:40:3F:C3:ED:3E:9A:81:6F:29:39:3B:C2:EF X509v3 Authority Key Identifier: keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:97:b8:cf:71:b0:7f:25:35:ca:77:e3:5c:7f:b3:f4:6b:54: 3a:9f:fa:40:c1:4b:12:80:9c:9f:72:37:1f:ab:8d:6e:81:8a: 89:0f:d7:d8:8d:c9:00:21:39:c2:fd:66:ce:e6:cb:ee:17:e0: ac:10:cd:3e:eb:45:69:e0:3f:2a:ec:5e:4c:a9:67:51:2e:92: 1e:ee:3d:88:e9:97:a3:f4:c3:79:03:8a:f1:2d:02:58:b0:0a: f4:98:22:ad:8d:62:c1:98:49:40:66:ee:0e:ee:d6:9d:e6:9d: d9:d6:a2:99:e5:5a:fe:81:b2:d7:8c:c7:1c:9a:14:9e:1e:fc: 4f:ad:af:6f:4b:e2:68:bd:6d:88:6f:39:92:8a:af:b9:6b:fd: cd:23:e6:11:45:0a:ee:6a:c9:e1:42:b9:c0:50:27:ce:e0:d6: b3:dd:18:99:9f:b8:c8:17:81:d9:50:67:7a:f0:ce:1a:e2:9a: 4e:97:0c:b9:a4:8f:95:8c:ba:79:eb:fc:7d:82:ec:f0:03:95: 62:36:c1:6b:d7:67:d4:1e:dd:f6:bd:4a:17:38:e3:f3:3d:b2: 6a:55:86:8b:f2:9f:24:3a:91:24:d2:47:2f:03:98:ee:9d:05: b1:85:21:bb:36:8c:5f:8d:af:18:61:76:46:dc:48:f1:f8:a2: 69:5e:c0:b2 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA6owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODFFRDBBRjExMC8GA1UEBRMoNEE4M0YzMUIxQjA2MDRDQTZEMEI3MkE0NTNEQUEz RUI1ODdCNEM4MjAeFw0yNTA4MjMwMzM2MDNaFw0yNTA4MjUwMzM2MDNaMBgxFjAU BgNVBAMTDTY4YTkzNzI0LTM3MWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDX0RckoJFHD3okvRsD6ejhd6g+xkXMycU2X99qhTN2DY2tdq+Y0VDh6UjU Np6b7fTS7gPqBeBQjE/J+VoHi/2QV1SQYm/kmea0glSY5dVAFlXmj9ivU2Oqbm67 oQdAADXJ93rMyQMHeN3geulxI4n/JHff/eG6GgOWzxGj1nO0yGD0obuffj7ofSb+ xnxwsXBR2MwAUspyBZ0muirWfHMfmgl4BvAGOTJdCXS2OsLa6FLuXMLAEkMyyOkh h9Sm/fx2xMj+5mpnRnIuDByR3+f1k8B0UPt1ko0t/uM8/uVRZ4hNEvljAzfBr0IR hYDTPHCXC0a+vJylxR616NUFIM1pAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUAxV9 vbz/aUA/w+0+moFvKTk7wu8wHwYDVR0jBBgwFoAUSoPzGxsGBMptC3KkU9qj61h7 TIIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjgxRUQwLzUyNTFDMDc4Q0UyNDExRURBMDkyRDBBQ0YxMjIyNDY4L1NvUHpH eHNHQk1wdEMzS2tVOXFqNjFoN1RJSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1NvUHpHeHNHQk1wdEMzS2tVOXFqNjFoN1RJSS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2ODFFRDAvNTI1MUMwNzhDRTI0MTFFREEwOTJEMEFDRjEy MjI0NjgvU29Qekd4c0dCTXB0QzNLa1U5cWo2MWg3VElJLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxl7jPcbB/JTXKd+Ncf7P0a1Q6n/pA wUsSgJyfcjcfq41ugYqJD9fYjckAITnC/WbO5svuF+CsEM0+60Vp4D8q7F5MqWdR LpIe7j2I6Zej9MN5A4rxLQJYsAr0mCKtjWLBmElAZu4O7tad5p3Z1qKZ5Vr+gbLX jMccmhSeHvxPra9vS+JovW2IbzmSiq+5a/3NI+YRRQruasnhQrnAUCfO4Naz3RiZ n7jIF4HZUGd68M4a4ppOlwy5pI+VjLp56/x9guzwA5ViNsFr12fUHt32vUoXOOPz PbJqVYaL8p8kOpEk0kcvA5junQWxhSG7Noxfja8YYXZG3Ejx+KJpXsCy -----END CERTIFICATE-----Generated at Sat Aug 23 19:15:11 2025 by rpki-client