$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft File: S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft (raw, json) Hash identifier: lBMCtSJZ18KzN9AKhvvXzXithhejf6fDCiwHevu8eUU= Subject key identifier: 51:29:41:39:32:5B:F1:A4:4A:54:2D:20:B1:F1:0D:69:56:67:93:F0 Authority key identifier: 4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70 Certificate issuer: /CN=F36A7021AF/serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70 Certificate serial: 020A Authority info access: rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft Manifest number: 01FF Signing time: Sat 23 Aug 2025 04:29:01 +0000 Manifest this update: Sat 23 Aug 2025 04:29:00 +0000 Manifest next update: Mon 25 Aug 2025 04:29:00 +0000 Files and hashes: 1: S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl (hash: CYnNIL53PYJ2P9/f0XSPeUlQUnm4Xtvq62bndG2SU/0=) 2: 13E45E1C0E8911EF82A4F35A017001B1.roa (hash: eSu/uNHefvRDyXuPd6bFN5AOugU7elsPo3xlxIjj8Jg=) 3: 8A38C304166411EFB6DD9865017001B1.roa (hash: BNl8LzAAIi2V4u4Uq6J4OERouFI7xdVKsG2qa+DYXuM=) 4: 5386CFDE0B8A11EF94113C6D017001B1.roa (hash: +ksSk336SAPxQuepQDqlYfI3yCwLjxok4/1qF910PT0=) 5: 67A273EE166411EFBD7C3965017001B1.roa (hash: XYlnou7kQfD138NpOpxfEa0ALGHIsAR97sWZnC83Ikk=) 6: 2342ECF6166411EF86A28464017001B1.roa (hash: LAeP18nBFk8e55lig13p1FU7erjKKZ2bUOy7MssyCfI=) 7: 10F75FE0166511EF9BA89F6A017001B1.roa (hash: tQ6IcNtYg4Q1dSfQDi4FIUeQKLa90qMyIm8jTAnmXuE=) 8: C37E4A0E166311EFB9A5E45F017001B1.roa (hash: Qp36Juuigfj3IghvTSmzrtpde3+TFB8XRGmUObCG6Jw=) 9: 258EC7AC02E911EF84DA781F017001B1.roa (hash: MKLHz01B1hcRnrm1BW8ZdbgoDIWCXXjJPB+3zMRkn5k=) 10: 45A131960E8911EFB58ADB5E017001B1.roa (hash: h14yox0jQvTPprZRCXkBDOwPFxmyJDOyS+ltHOkYJCY=) 11: ED324F4E166311EF80A74E60017001B1.roa (hash: yLMrRx31o9f3857chkGq2HGPGPmxnmeZmw24iYDHkdE=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 25 Aug 2025 00:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36A7021AF, serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70 Validity Not Before: Aug 23 04:29:00 2025 GMT Not After : Aug 25 04:29:00 2025 GMT Subject: CN=68a9438d-3173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a5:5a:6e:7c:e4:30:af:98:1e:2c:0f:09:c0: 9a:3c:4c:39:2d:e1:a4:7a:fa:22:c3:b9:02:32:d1: fa:34:63:89:e4:87:6b:0b:ab:69:b7:a1:aa:b8:ed: 69:b5:26:8f:76:12:96:34:ec:7a:3c:e2:1d:55:ed: 30:a6:c9:b3:3e:ca:b5:b5:d4:69:0f:e0:63:f8:66: f3:53:b2:3b:b9:86:c6:7b:5c:36:5a:28:9d:6d:63: c4:4c:a4:f7:cf:0f:61:c3:08:a4:45:52:f6:76:e5: 98:68:16:eb:db:7b:b5:3b:7a:e3:21:fe:e4:13:e9: ec:b0:93:4a:7d:c4:6f:c4:6e:49:cf:34:9a:1c:4a: 14:ce:bf:40:12:96:9b:33:8d:da:a7:b8:59:b4:c1: 68:1f:7f:64:81:e5:21:6f:65:3c:ad:02:60:c5:d8: 01:4a:c7:73:7c:7b:99:10:69:34:50:99:fd:90:2e: 68:27:ec:cc:73:1c:1f:b7:2d:6c:3f:82:64:59:c5: d7:b0:2f:47:c9:1b:1f:35:27:58:b9:f2:b5:cf:b1: ad:3b:26:23:1e:8d:07:b3:ee:a3:28:bf:c8:75:15: 9e:49:10:10:d7:25:b7:2c:f9:14:95:4a:c4:1a:20: 64:e0:95:37:d7:91:a2:c8:70:3f:47:cb:9b:4d:ed: 00:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:29:41:39:32:5B:F1:A4:4A:54:2D:20:B1:F1:0D:69:56:67:93:F0 X509v3 Authority Key Identifier: keyid:4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:dc:e0:75:d4:09:51:e1:46:d9:08:16:2f:25:94:ee:c2:43: d4:ce:b3:3f:1a:9d:e4:f5:35:b2:b0:42:d7:fe:8f:f8:f1:fa: d9:31:29:ce:63:4c:e9:d3:13:a4:46:61:36:b8:d8:38:aa:18: 3e:93:4a:3b:08:37:7d:9a:1b:3b:f1:35:7b:2e:3b:a1:14:48: 46:69:a1:7c:0c:fb:f2:da:c6:4d:73:31:41:9a:6c:6e:33:a6: 6a:38:80:a2:da:d7:c2:88:61:44:d0:cd:8f:56:f1:ff:64:54: 6d:06:22:b9:f3:a7:a0:88:3b:80:ca:10:ee:05:7d:b9:70:24: 32:41:08:fc:ed:41:cf:c0:c2:2b:88:19:c4:f0:09:8b:fa:38: 65:06:ee:8e:5b:b8:af:f5:9b:78:da:74:ef:49:42:08:94:6c: bf:7f:8d:f7:a5:02:2b:ae:7c:1e:ef:89:b5:46:73:ee:7b:06: 92:ae:17:1f:c2:6e:bc:38:e2:13:7f:2d:3e:41:e7:34:d0:d1: 40:c1:e1:57:c4:a7:dd:89:47:d1:63:e2:9b:17:11:fc:ea:7f: 43:1a:34:81:38:91:eb:7c:8f:d0:ce:a6:c0:05:78:24:54:ca: 08:ef:74:3a:b4:da:68:72:19:6d:50:fb:05:d6:97:e8:81:49: 95:96:de:2b -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAgowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QTcwMjFBRjExMC8GA1UEBRMoNEI0ODY2MjAwNDA4OUY1QkI2ODE5NEFCMDRCODMw Q0Q0MzNBMkI3MDAeFw0yNTA4MjMwNDI5MDBaFw0yNTA4MjUwNDI5MDBaMBgxFjAU BgNVBAMTDTY4YTk0MzhkLTMxNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCtpVpufOQwr5geLA8JwJo8TDkt4aR6+iLDuQIy0fo0Y4nkh2sLq2m3oaq4 7Wm1Jo92EpY07Ho84h1V7TCmybM+yrW11GkP4GP4ZvNTsju5hsZ7XDZaKJ1tY8RM pPfPD2HDCKRFUvZ25ZhoFuvbe7U7euMh/uQT6eywk0p9xG/EbknPNJocShTOv0AS lpszjdqnuFm0wWgff2SB5SFvZTytAmDF2AFKx3N8e5kQaTRQmf2QLmgn7MxzHB+3 LWw/gmRZxdewL0fJGx81J1i58rXPsa07JiMejQez7qMov8h1FZ5JEBDXJbcs+RSV SsQaIGTglTfXkaLIcD9Hy5tN7QBTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUUSlB OTJb8aRKVC0gsfENaVZnk/AwHwYDVR0jBBgwFoAUS0hmIAQIn1u2gZSrBLgwzUM6 K3AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkE3MDIxL0U1MDM5OTFDMDJDMzExRUZCRDEyNzdGNTAwNzAwMUIxL1MwaG1J QVFJbjF1MmdaU3JCTGd3elVNNkszQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1MwaG1JQVFJbjF1MmdaU3JCTGd3elVNNkszQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QTcwMjEvRTUwMzk5MUMwMkMzMTFFRkJEMTI3N0Y1MDA3 MDAxQjEvUzBobUlBUUluMXUyZ1pTckJMZ3d6VU02SzNBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBj3OB11AlR4UbZCBYvJZTuwkPUzrM/ Gp3k9TWysELX/o/48frZMSnOY0zp0xOkRmE2uNg4qhg+k0o7CDd9mhs78TV7Ljuh FEhGaaF8DPvy2sZNczFBmmxuM6ZqOICi2tfCiGFE0M2PVvH/ZFRtBiK586egiDuA yhDuBX25cCQyQQj87UHPwMIriBnE8AmL+jhlBu6OW7iv9Zt42nTvSUIIlGy/f433 pQIrrnwe74m1RnPuewaSrhcfwm68OOITfy0+Qec00NFAweFXxKfdiUfRY+KbFxH8 6n9DGjSBOJHrfI/QzqbABXgkVMoI73Q6tNpochltUPsF1pfogUmVlt4r -----END CERTIFICATE-----Generated at Sat Aug 23 16:04:01 2025 by rpki-client