$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft File: rC5S7pK7wgWiMP93oZBB3dUU2PA.mft (raw, json) Hash identifier: JDO3YbaBlhSFTf32vw2/W5ORQ2mjK9YxPW8THrQcM4Y= Subject key identifier: 77:DC:0F:52:55:77:B4:74:E8:1E:8C:9D:4E:06:4B:54:82:0F:7B:38 Authority key identifier: AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0 Certificate issuer: /CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0 Certificate serial: 0863 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft Manifest number: 0853 Signing time: Mon 20 Oct 2025 01:44:42 +0000 Manifest this update: Mon 20 Oct 2025 01:44:41 +0000 Manifest next update: Wed 22 Oct 2025 01:44:41 +0000 Files and hashes: 1: rC5S7pK7wgWiMP93oZBB3dUU2PA.crl (hash: y1krGXuUHWrZTajd3pgnmpv3HhbAf5PKOblrPZ8imEo=) 2: D5B46FA6C23211EBB5593A16F8AEA228.roa (hash: oX59+2BALwGM+ztTKboJ5zjbW8Hls8vuUFk164gb+sE=) 3: B7327FCAC23011EB8EB93013F8AEA228.roa (hash: FzBJ+LD8lsMOLZHdwigkJL90+es1pormijWMN0h6XiE=) 4: 3E1C62F8ED1111EAAF8C1B4DF8AEA228.roa (hash: lomY/n2xTdezVmxQEF3P4Y0fMs0z0TPLBTmt8iTOt9E=) 5: 924F80688A4E11EC8639028F5A40D577.roa (hash: tnumgrytmuyUCUVB2UaM2OC8r2VqINNEld+/gxdsqJk=) 6: 88F6BBCEC23211EBBD21D715F8AEA228.roa (hash: 6D/mE5iRONvZimS8ac2OXzs/7V/jQV2FQOwxAWqpWYI=) 7: EB54553EC23111EBA9E0ED14F8AEA228.roa (hash: d6xcKTp32mia+OgefI0TfyXuPVcpWg3DEScglv+HMrY=) 8: B418664AC23211EB98B10F16F8AEA228.roa (hash: M//9HpMML29hfmlSXu9lsnbBB8fRM3Bjn7WpzCV2kL8=) 9: 43AF9CACC23211EBB3CE6515F8AEA228.roa (hash: c/Soa/93EsLQFmmPICHZAj3dDNjPlQJOplH1/UOW0ac=) 10: F1EEE55EC23011EB941AA913F8AEA228.roa (hash: yW4+Lfz5PGHi4Kx8TI9Rf9GfxFHBr9qFl92O6gcnuuU=) 11: 118B5046C23611EB8894801AF8AEA228.roa (hash: EdTXMixOen8QKO9g5Tn4JwTOrXpknviYLC1BSplg1UI=) 12: 69718BD0C23211EBADC2A715F8AEA228.roa (hash: TnY/7DA+BgejOFr04BM5hHh0ycu1/cZe42UI729de/E=) 13: A122BD06C23211EB87EB0616F8AEA228.roa (hash: tLtpZOHdatkZusOvIza1WgLkgIkjsRWUedCu9OwEzN8=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 22 Oct 2025 00:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2147 (0x863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36BA80DAF, serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0 Validity Not Before: Oct 20 01:44:41 2025 GMT Not After : Oct 22 01:44:41 2025 GMT Subject: CN=68f5940a-6b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ac:26:51:65:52:6e:50:64:d5:00:96:11:33: 45:95:97:26:d4:d0:cb:8f:56:de:b1:d1:6f:ea:6a: a7:1f:fb:9a:eb:0a:c7:75:bb:b3:c2:a4:3d:a7:36: ae:b3:cc:3d:27:1d:92:f5:36:96:64:d0:6e:e0:e6: 5b:cd:79:d4:83:55:d1:e9:33:c2:19:a1:3a:b7:69: dd:31:26:1d:ba:ee:e7:0f:a2:fc:74:df:1d:20:51: da:b3:d5:8e:41:4c:2b:eb:51:a3:6b:3e:9e:1d:51: 9a:4c:e5:5a:ed:62:d0:1b:f2:34:8a:d0:e1:d7:10: f7:8c:22:fd:5a:2b:c6:b3:c5:54:ac:4e:8e:28:4d: 91:91:04:53:38:57:e6:70:54:e2:55:46:8a:da:e0: dd:32:59:94:87:84:44:8d:9b:ab:16:52:65:a2:a3: 91:e9:ae:42:77:ae:ca:de:e5:34:ba:1c:c4:67:2d: 67:0e:75:d7:91:25:1f:ac:6c:b2:7c:e2:c8:de:02: 57:a4:37:2d:00:cd:99:46:2e:5b:dc:26:9c:eb:37: 71:42:70:05:5b:d7:e4:56:38:fe:18:86:8c:4c:c6: 1e:46:35:ef:25:79:02:5b:fe:e4:12:35:48:78:bf: 99:25:62:f9:fc:46:c9:d5:c0:23:32:89:85:2e:8d: 2d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DC:0F:52:55:77:B4:74:E8:1E:8C:9D:4E:06:4B:54:82:0F:7B:38 X509v3 Authority Key Identifier: keyid:AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:e7:6e:e5:c6:c8:17:04:ce:4e:ff:81:ec:35:49:4e:1d:84: d3:3a:b1:b9:66:7f:da:43:d4:e2:8b:62:e8:11:e8:c8:c2:e5: d7:06:5a:e3:ac:6c:d8:7b:69:82:7f:54:ac:7e:ce:d2:d0:5e: fc:ac:4e:cb:ec:35:fa:31:9b:fd:dd:b5:79:15:e4:4c:d1:0a: 91:95:b6:5d:8a:a5:95:bd:6b:69:6e:f3:07:0e:d1:91:0a:eb: f2:98:22:56:44:ce:64:05:0b:39:36:ca:75:21:01:52:35:c5: 33:db:a4:5a:cf:1b:21:99:91:b5:10:fb:c8:86:d8:0d:f2:9f: d9:d1:c6:99:0d:65:6d:da:bc:95:28:9a:ad:9d:ce:c4:f1:2b: 19:7d:2c:34:8a:53:f2:8c:4f:35:2f:b5:cf:cc:50:39:f8:8d: 0f:2a:12:75:88:92:8f:07:51:4b:23:09:dc:8a:c7:ef:cb:54: e6:40:c8:54:69:18:23:87:89:55:11:3d:33:d3:3a:12:04:ad: f5:11:0f:fe:e4:a1:f2:f9:52:1c:59:b4:1f:81:f8:d1:e2:c9: f9:d9:e1:24:97:2f:5e:83:ba:be:1f:90:d4:0e:ae:ec:08:fc: f8:19:79:c8:4c:34:c4:5e:cf:7c:eb:85:a1:9c:5a:4a:c2:d9: a3:1a:6e:79 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCGMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QkE4MERBRjExMC8GA1UEBRMoQUMyRTUyRUU5MkJCQzIwNUEyMzBGRjc3QTE5MDQx RERENTE0RDhGMDAeFw0yNTEwMjAwMTQ0NDFaFw0yNTEwMjIwMTQ0NDFaMBgxFjAU BgNVBAMTDTY4ZjU5NDBhLTZiOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDRrCZRZVJuUGTVAJYRM0WVlybU0MuPVt6x0W/qaqcf+5rrCsd1u7PCpD2n Nq6zzD0nHZL1NpZk0G7g5lvNedSDVdHpM8IZoTq3ad0xJh267ucPovx03x0gUdqz 1Y5BTCvrUaNrPp4dUZpM5VrtYtAb8jSK0OHXEPeMIv1aK8azxVSsTo4oTZGRBFM4 V+ZwVOJVRora4N0yWZSHhESNm6sWUmWio5HprkJ3rsre5TS6HMRnLWcOddeRJR+s bLJ84sjeAlekNy0AzZlGLlvcJpzrN3FCcAVb1+RWOP4YhoxMxh5GNe8leQJb/uQS NUh4v5klYvn8RsnVwCMyiYUujS1DAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUd9wP UlV3tHToHoydTgZLVIIPezgwHwYDVR0jBBgwFoAUrC5S7pK7wgWiMP93oZBB3dUU 2PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkJBODBEL0M3MDVEODcyNUEyNDExRUFCOEU5REMwOUY4QUVBMjI4L3JDNVM3 cEs3d2dXaU1QOTNvWkJCM2RVVTJQQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3JDNVM3cEs3d2dXaU1QOTNvWkJCM2RVVTJQQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QkE4MEQvQzcwNUQ4NzI1QTI0MTFFQUI4RTlEQzA5RjhB RUEyMjgvckM1UzdwSzd3Z1dpTVA5M29aQkIzZFVVMlBBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCo527lxsgXBM5O/4HsNUlOHYTTOrG5 Zn/aQ9Tii2LoEejIwuXXBlrjrGzYe2mCf1Ssfs7S0F78rE7L7DX6MZv93bV5FeRM 0QqRlbZdiqWVvWtpbvMHDtGRCuvymCJWRM5kBQs5Nsp1IQFSNcUz26RazxshmZG1 EPvIhtgN8p/Z0caZDWVt2ryVKJqtnc7E8SsZfSw0ilPyjE81L7XPzFA5+I0PKhJ1 iJKPB1FLIwncisfvy1TmQMhUaRgjh4lVET0z0zoSBK31EQ/+5KHy+VIcWbQfgfjR 4sn52eEkly9eg7q+H5DUDq7sCPz4GXnITDTEXs9864WhnFpKwtmjGm55 -----END CERTIFICATE-----Generated at Mon Oct 20 04:46:47 2025 by rpki-client