$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft File: S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft (raw, json) Hash identifier: w4FredSl9Mn/lQrz5kJfERLI/hFZa++gP9Y3vXw0nxs= Subject key identifier: CF:6A:D7:89:1F:1B:27:9D:1C:C2:E3:7D:3A:1D:F7:75:E7:E1:B8:04 Authority key identifier: 4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70 Certificate issuer: /CN=F36A7021AF/serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70 Certificate serial: 0245 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft Manifest number: 023A Signing time: Tue 21 Oct 2025 04:12:49 +0000 Manifest this update: Tue 21 Oct 2025 04:12:48 +0000 Manifest next update: Thu 23 Oct 2025 04:12:48 +0000 Files and hashes: 1: S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl (hash: DhknZUx8sqOGiF0ZzY+j3nj9cPqZCPivsHgBTLgOLWM=) 2: 13E45E1C0E8911EF82A4F35A017001B1.roa (hash: eSu/uNHefvRDyXuPd6bFN5AOugU7elsPo3xlxIjj8Jg=) 3: 8A38C304166411EFB6DD9865017001B1.roa (hash: BNl8LzAAIi2V4u4Uq6J4OERouFI7xdVKsG2qa+DYXuM=) 4: 5386CFDE0B8A11EF94113C6D017001B1.roa (hash: +ksSk336SAPxQuepQDqlYfI3yCwLjxok4/1qF910PT0=) 5: 67A273EE166411EFBD7C3965017001B1.roa (hash: XYlnou7kQfD138NpOpxfEa0ALGHIsAR97sWZnC83Ikk=) 6: 2342ECF6166411EF86A28464017001B1.roa (hash: LAeP18nBFk8e55lig13p1FU7erjKKZ2bUOy7MssyCfI=) 7: 10F75FE0166511EF9BA89F6A017001B1.roa (hash: tQ6IcNtYg4Q1dSfQDi4FIUeQKLa90qMyIm8jTAnmXuE=) 8: C37E4A0E166311EFB9A5E45F017001B1.roa (hash: Qp36Juuigfj3IghvTSmzrtpde3+TFB8XRGmUObCG6Jw=) 9: 258EC7AC02E911EF84DA781F017001B1.roa (hash: MKLHz01B1hcRnrm1BW8ZdbgoDIWCXXjJPB+3zMRkn5k=) 10: 45A131960E8911EFB58ADB5E017001B1.roa (hash: h14yox0jQvTPprZRCXkBDOwPFxmyJDOyS+ltHOkYJCY=) 11: ED324F4E166311EF80A74E60017001B1.roa (hash: yLMrRx31o9f3857chkGq2HGPGPmxnmeZmw24iYDHkdE=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 23 Oct 2025 00:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36A7021AF, serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70 Validity Not Before: Oct 21 04:12:48 2025 GMT Not After : Oct 23 04:12:48 2025 GMT Subject: CN=68f70841-05f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ed:ec:e2:ed:82:b7:17:19:86:56:db:7e:0e: ce:39:3f:31:b1:3c:77:95:92:69:35:00:97:71:a1: b9:44:49:2f:70:00:68:51:37:93:52:b0:95:46:80: a7:26:3a:e0:71:5f:e3:86:af:4c:99:00:03:84:ec: 4d:96:bf:5c:4a:ba:02:6f:09:96:6a:d7:8a:e0:5c: 4a:a6:a3:d0:8a:fa:d0:58:e7:e7:b2:10:85:35:54: b1:b3:3f:30:53:e3:70:45:5e:ab:ee:54:c6:80:76: d4:4f:ae:bc:19:b0:af:c2:62:b9:ae:81:23:5c:dd: 68:14:a2:c6:17:50:16:cd:5c:30:50:e9:88:2c:89: be:b1:71:a3:1a:e0:3d:c1:f8:5a:93:cd:c1:9d:37: 95:6a:3a:cc:0d:3b:2a:8c:c2:41:77:2a:ca:3c:d1: 13:cb:be:a7:55:23:9e:e6:25:e9:a3:85:e8:6f:8d: 39:27:af:7c:3b:5c:d7:f2:6e:06:6b:ad:38:16:c5: 2d:32:4b:6a:4e:5d:4d:b9:50:2e:99:33:46:b1:34: f0:e4:d5:c3:7e:23:d4:fb:57:c3:58:db:f4:ee:39: 62:0c:f0:af:db:a7:1b:1b:96:10:8d:72:dd:b8:7c: eb:b0:b1:0a:d1:9e:57:59:81:76:67:4b:c3:bc:a4: e2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6A:D7:89:1F:1B:27:9D:1C:C2:E3:7D:3A:1D:F7:75:E7:E1:B8:04 X509v3 Authority Key Identifier: keyid:4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ea:8f:bd:cf:98:c5:56:eb:2e:16:6f:c0:31:5a:d5:c3:0e: 1b:10:2c:ed:45:c6:31:94:63:6e:d4:d2:ba:8d:d6:56:77:7a: 1e:41:4f:eb:06:83:c1:22:0c:84:95:04:17:43:24:b1:40:61: ea:2c:fc:73:a3:5f:d6:3a:93:65:56:c5:e7:64:e8:4f:8d:85: 4f:4c:0a:23:1b:dc:a0:84:26:12:fa:ab:22:ff:22:2e:0c:cf: 33:01:73:f1:88:e1:0a:d1:37:4b:e8:59:36:6e:1c:3a:96:c5: 0a:fb:a3:9e:71:f8:8b:0a:09:19:62:b1:78:eb:69:6f:d1:ca: 7c:68:1d:7b:46:4d:6b:e7:cf:bd:07:d3:d8:18:a7:8f:65:ef: 2f:fa:8d:63:ad:e9:75:4d:ce:77:c2:e3:d5:b3:93:3f:11:46: e2:f5:25:da:58:02:52:fe:c6:93:05:00:8f:43:ee:9d:83:0d: b9:68:c8:df:70:0c:1d:47:8e:14:be:99:ab:e7:64:23:25:40: 75:7d:00:36:5c:7b:6c:b5:c6:0c:ec:20:2b:cd:d5:e0:74:71: 0b:c0:b4:36:97:07:b4:9a:4a:55:50:f2:97:36:23:cc:69:53: 01:43:19:f4:c4:ba:6e:bb:75:53:dd:4c:87:26:f7:bd:b6:14: 3f:8b:ab:70 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QTcwMjFBRjExMC8GA1UEBRMoNEI0ODY2MjAwNDA4OUY1QkI2ODE5NEFCMDRCODMw Q0Q0MzNBMkI3MDAeFw0yNTEwMjEwNDEyNDhaFw0yNTEwMjMwNDEyNDhaMBgxFjAU BgNVBAMTDTY4ZjcwODQxLTA1ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDm7ezi7YK3FxmGVtt+Ds45PzGxPHeVkmk1AJdxoblESS9wAGhRN5NSsJVG gKcmOuBxX+OGr0yZAAOE7E2Wv1xKugJvCZZq14rgXEqmo9CK+tBY5+eyEIU1VLGz PzBT43BFXqvuVMaAdtRPrrwZsK/CYrmugSNc3WgUosYXUBbNXDBQ6Ygsib6xcaMa 4D3B+FqTzcGdN5VqOswNOyqMwkF3Kso80RPLvqdVI57mJemjhehvjTknr3w7XNfy bgZrrTgWxS0yS2pOXU25UC6ZM0axNPDk1cN+I9T7V8NY2/TuOWIM8K/bpxsblhCN ct24fOuwsQrRnldZgXZnS8O8pOIRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUz2rX iR8bJ50cwuN9Oh33defhuAQwHwYDVR0jBBgwFoAUS0hmIAQIn1u2gZSrBLgwzUM6 K3AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkE3MDIxL0U1MDM5OTFDMDJDMzExRUZCRDEyNzdGNTAwNzAwMUIxL1MwaG1J QVFJbjF1MmdaU3JCTGd3elVNNkszQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1MwaG1JQVFJbjF1MmdaU3JCTGd3elVNNkszQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QTcwMjEvRTUwMzk5MUMwMkMzMTFFRkJEMTI3N0Y1MDA3 MDAxQjEvUzBobUlBUUluMXUyZ1pTckJMZ3d6VU02SzNBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB66o+9z5jFVusuFm/AMVrVww4bECzt RcYxlGNu1NK6jdZWd3oeQU/rBoPBIgyElQQXQySxQGHqLPxzo1/WOpNlVsXnZOhP jYVPTAojG9yghCYS+qsi/yIuDM8zAXPxiOEK0TdL6Fk2bhw6lsUK+6OecfiLCgkZ YrF462lv0cp8aB17Rk1r58+9B9PYGKePZe8v+o1jrel1Tc53wuPVs5M/EUbi9SXa WAJS/saTBQCPQ+6dgw25aMjfcAwdR44Uvpmr52QjJUB1fQA2XHtstcYM7CArzdXg dHELwLQ2lwe0mkpVUPKXNiPMaVMBQxn0xLpuu3VT3UyHJve9thQ/i6tw -----END CERTIFICATE-----Generated at Tue Oct 21 07:25:47 2025 by rpki-client