$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft File: -4Xgjl27Bclbe9Dafl_m_OOYJv8.mft (raw, json) Hash identifier: uklHQaGM7/HBI173MTeueVwKtkWs9cu99zn0Qx8j2Jw= Subject key identifier: 3F:90:B6:83:44:8D:C4:11:5A:CA:C2:C4:49:56:F7:D4:3A:96:EE:5D Authority key identifier: FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF Certificate issuer: /CN=F36C2BF2AF/serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF Certificate serial: 0227 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft Manifest number: 021B Signing time: Mon 20 Oct 2025 04:19:28 +0000 Manifest this update: Mon 20 Oct 2025 04:19:27 +0000 Manifest next update: Wed 22 Oct 2025 04:19:27 +0000 Files and hashes: 1: -4Xgjl27Bclbe9Dafl_m_OOYJv8.crl (hash: +X4SCoSNuJgowgm+/lD6Stfv1wBpQTDR8Rewtefv/K4=) 2: 53E9AF201C4A11EF92B1620D7DDC24C2.roa (hash: KdhlIJ+hQm0D2JssqauHu+bI+aH2TH0/RDTYBo7Rfl4=) 3: 6BD3D72C1C4B11EFA0DF5FE57CDC24C2.roa (hash: kVAT6LvKNfd1TJNrUHJDtuhrBoJ6grfJU6Qzk3woG9A=) 4: 3C9F14321C4911EFAAC969317DDC24C2.roa (hash: /gSe9pWPhZ5Kr8gRd+6yNTm4qcpvwit2QsIwfbhWGVc=) 5: EBFBD6E61C4811EF8DA9FC307DDC24C2.roa (hash: Uo9oJGDvBKqk9WcNSro/GD2IK8co4yKnO+0R+FSe34k=) 6: 08C544981C4811EFBA18A22B7DDC24C2.roa (hash: tqhwIQRYgFOkg1i0m9P867NgozM8wyM/qc2l8ldhExg=) 7: 312C885E1C4A11EF9DE586157DDC24C2.roa (hash: GjHEWzUkDA6tsW5/6kpvZ3CU5zKEBXoesmUsNT+Jflo=) 8: 7E241A021C4811EF8F9DAE2C7DDC24C2.roa (hash: hxre5xYuTBxkwQmVRlBLeiMXMr0AnCvaVpMmejl5uhQ=) 9: FE708AD21C4911EF81BE34EA7CDC24C2.roa (hash: ZiopXrdqLTsU+61ziIshjn2/qWu+FsJbH9OdegqZ2vo=) 10: BF6D84E41C4811EF92649B307DDC24C2.roa (hash: Jbh8WY5UNAzz+osRgcagPYaVf8dyK5RVLpOyRMHMYas=) 11: 8604AD081C4911EF8DFB87357DDC24C2.roa (hash: MNoPychVF0mh+syf/DFmicmi7Wi0XntNJ0aJdW/gDe4=) 12: 440AE6387FC211EFACAB56B8762E951A.roa (hash: Rbkyo5rELKFe+Cn1UL0BmEWDgHbqtqW4Mc1h5Ma1xWM=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 22 Oct 2025 00:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36C2BF2AF, serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF Validity Not Before: Oct 20 04:19:27 2025 GMT Not After : Oct 22 04:19:27 2025 GMT Subject: CN=68f5b84f-1650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:34:c7:41:0a:58:d2:6c:ec:7c:e4:00:b3:04: a0:12:2c:e9:6a:16:b1:3e:76:b6:fb:5e:e3:96:7e: fd:de:48:5f:0f:c4:17:38:67:40:2a:35:56:0c:8e: 31:78:79:8b:7c:f6:64:c6:59:7d:30:66:0b:6f:5a: da:db:ff:ad:a3:1a:1f:7b:55:bf:dd:1c:43:17:97: de:0b:30:d2:57:3f:4a:0d:1c:26:8a:9a:c3:54:64: c8:3b:fb:66:34:73:5e:36:41:b3:2d:c1:8f:b0:bd: 09:af:aa:0c:75:01:75:80:74:f1:dd:78:78:95:4e: c7:90:8f:be:e3:31:3d:33:ae:a0:50:6a:a5:18:08: ab:23:b5:18:b7:d7:d8:74:ea:a9:78:56:41:47:bc: 35:bc:ba:66:04:d0:0f:ce:dc:0f:43:de:51:63:26: 47:93:6c:cd:47:b2:5c:4b:89:43:bc:05:40:f9:e4: b3:2c:e5:fd:2d:df:df:18:ec:87:d5:a2:a4:d1:b2: 59:dd:bc:72:2a:46:ed:68:d2:f1:dd:b2:54:39:63: 36:61:22:62:2f:63:2f:48:5f:a1:66:7e:28:0e:4e: 7d:70:69:0a:fe:3a:34:1e:ae:37:2f:ec:5e:df:2f: f9:af:72:70:37:37:18:aa:47:63:92:cf:61:84:ab: 0d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:90:B6:83:44:8D:C4:11:5A:CA:C2:C4:49:56:F7:D4:3A:96:EE:5D X509v3 Authority Key Identifier: keyid:FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:7e:35:40:b6:ae:e8:91:c3:f3:be:f6:40:20:9a:27:b7:9d: 3c:82:5e:ca:26:c2:12:db:71:e0:6a:50:6d:de:9e:60:96:19: 8e:80:c0:49:00:06:85:da:e0:6d:cd:54:1e:69:b9:b8:40:12: ca:85:ed:c7:bc:05:de:76:2b:5d:85:76:09:4d:a1:8b:9d:5b: 78:e1:9b:6a:06:37:e5:1b:16:66:74:f1:4b:8f:1e:dd:68:74: 22:65:e3:ef:35:4f:0b:85:06:c6:94:b4:ec:6b:bb:77:fe:66: 1e:11:69:81:51:27:48:e3:48:36:fc:df:96:1e:e2:01:e0:5e: 4e:b3:87:62:d7:19:d5:59:82:dc:38:17:fd:46:ea:09:61:39: 37:91:e8:7b:79:75:88:c2:d2:21:08:c8:a6:f0:01:09:38:7b: 5d:07:e1:44:7d:eb:31:8e:3a:a3:b0:3e:38:3e:8c:fb:63:cf: 4e:68:9f:b7:54:c1:f9:6b:07:21:a2:70:0b:a8:52:4c:d0:f1: f5:dc:18:23:dd:17:39:ce:16:b2:1d:7f:5b:c3:85:89:2d:5c: 58:51:52:88:84:d5:be:14:41:88:9c:40:6d:15:58:67:0e:8a: bd:7d:44:d6:93:a6:f0:2d:bf:92:fe:6c:1d:03:bc:39:c8:af: a9:76:60:0d -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAicwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QzJCRjJBRjExMC8GA1UEBRMoRkI4NUUwOEU1REJCMDVDOTVCN0JEMERBN0U1RkU2 RkNFMzk4MjZGRjAeFw0yNTEwMjAwNDE5MjdaFw0yNTEwMjIwNDE5MjdaMBgxFjAU BgNVBAMTDTY4ZjViODRmLTE2NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQClNMdBCljSbOx85ACzBKASLOlqFrE+drb7XuOWfv3eSF8PxBc4Z0AqNVYM jjF4eYt89mTGWX0wZgtvWtrb/62jGh97Vb/dHEMXl94LMNJXP0oNHCaKmsNUZMg7 +2Y0c142QbMtwY+wvQmvqgx1AXWAdPHdeHiVTseQj77jMT0zrqBQaqUYCKsjtRi3 19h06ql4VkFHvDW8umYE0A/O3A9D3lFjJkeTbM1HslxLiUO8BUD55LMs5f0t398Y 7IfVoqTRslndvHIqRu1o0vHdslQ5YzZhImIvYy9IX6FmfigOTn1waQr+OjQerjcv 7F7fL/mvcnA3NxiqR2OSz2GEqw05AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUP5C2 g0SNxBFaysLESVb31DqW7l0wHwYDVR0jBBgwFoAU+4Xgjl27Bclbe9Dafl/m/OOY Jv8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkMyQkYyL0RBQkFCODdFMTlFQzExRUZCQ0JGNUUyQzAxNzAwMUIxLy00WGdq bDI3QmNsYmU5RGFmbF9tX09PWUp2OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLy00WGdqbDI3QmNsYmU5RGFmbF9tX09PWUp2OC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QzJCRjIvREFCQUI4N0UxOUVDMTFFRkJDQkY1RTJDMDE3 MDAxQjEvLTRYZ2psMjdCY2xiZTlEYWZsX21fT09ZSnY4Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwfjVAtq7okcPzvvZAIJont508gl7K JsIS23HgalBt3p5glhmOgMBJAAaF2uBtzVQeabm4QBLKhe3HvAXeditdhXYJTaGL nVt44ZtqBjflGxZmdPFLjx7daHQiZePvNU8LhQbGlLTsa7t3/mYeEWmBUSdI40g2 /N+WHuIB4F5Os4di1xnVWYLcOBf9RuoJYTk3keh7eXWIwtIhCMim8AEJOHtdB+FE fesxjjqjsD44Poz7Y89OaJ+3VMH5awchonALqFJM0PH13Bgj3Rc5zhayHX9bw4WJ LVxYUVKIhNW+FEGInEBtFVhnDoq9fUTWk6bwLb+S/mwdA7w5yK+pdmAN -----END CERTIFICATE-----Generated at Mon Oct 20 07:23:40 2025 by rpki-client