$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft File: pfCiu4t57dbTfAd63-oIJRTAQg8.mft (raw, json) Hash identifier: Ba4RopNi24vr3AawE1orgyfDLJfdDksrsmUNXcRC+lI= Subject key identifier: BB:9E:A5:6B:A0:DA:F1:45:EF:34:B2:2B:02:0C:6C:5E:06:BC:2C:D8 Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F Certificate issuer: /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Certificate serial: 0267 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft Manifest number: 0255 Signing time: Mon 20 Oct 2025 10:18:35 +0000 Manifest this update: Mon 20 Oct 2025 10:18:34 +0000 Manifest next update: Wed 22 Oct 2025 10:18:34 +0000 Files and hashes: 1: pfCiu4t57dbTfAd63-oIJRTAQg8.crl (hash: PAeKYJ3YYbSlNJ2pfQcIsDuFOiX4K+aVACcNw02Eeos=) 2: 245B6D34FBED11EE8128962C017001B1.roa (hash: TrN9lcQpNeQiZwKFjsOsULheFfvRBy2GwIMFcOXP5rY=) 3: 60986EC6F10E11EEA398F1C8775412E6.roa (hash: UeXyeJMDi2GVx9uEPU+PiWuthmCddMz69n4V0SdxUZY=) 4: 13B429E4A82B11F08C7A96A4DAE4EC9C.roa (hash: KYrcNRS9qGwFheXL1jyE5bvgElaJoQSziRbqOSDolOc=) 5: 4A3BF0B6E9F711EFB363B759762E951A.roa (hash: qnWjHMa6krZFafky4BYIbSFj8GVyr5kF/yN3x6ht2sE=) 6: 8C5EBF98B18D11EF93764599762E951A.roa (hash: LMCVfxRKPtEUcD+l4fHRZWVAaU9InzZT+jXi3ynNqyQ=) 7: 624DB26AFC1411EEA32C1066017001B1.roa (hash: SAKc0hgZ+mEboWzvP3K7DMfU8rpiR8UT+kWecca89NE=) 8: 767E76B2405F11F0B14520EADAE4EC9C.roa (hash: Psp54N8Zwbl9ziN2Vbyl63/0vnVM4zrW11s0ypx3pl8=) 9: 9BF619A8FCDC11EE8DA40146017001B1.roa (hash: po7czQ/bhDV7w3+Oz4IVCSJosx6dgGFsaZotpFYiUzU=) 10: 0C6B2666405B11F09F43C8CCDAE4EC9C.roa (hash: /9Ds38E/Nlm7VcSD/FOkPtqxtWfZMJuAf/6Y8lnD5JQ=) 11: ACB83E6242B211EFAFCCE28B762E951A.roa (hash: K3ivQ3+n4zlKylliwe/zTuRovNdpcW712O8vioTYjFg=) 12: A1B5AEEC442811EFA24AB347762E951A.roa (hash: WU/tv+bio89mYf5sL7OB/fhjHoVOLu5YlrkO6ttjHNQ=) 13: 7AFAA29E1F6111EFB0C39B397DDC24C2.roa (hash: e2WypnmRsaISjVRYfT/t99mLnGdtDrlVSL5Ti5URVMc=) 14: 1F57366AAD9E11F0834ED8B4DAE4EC9C.roa (hash: Zr7KgVk21J1guGSwDPBmYm/QDl0oDd0+ZlvGGCwRB7s=) 15: 6644E6CC4FE811EFBAAC404B762E951A.roa (hash: 48MYw/CHm3JnjY68hLvq+27NMpxBkJcznllBwP1oCwg=) 16: F6FBFB8E745D11F0BF6D9BD0DAE4EC9C.roa (hash: /YM80rpuDV3whpYSjJG05E1etVVfPSD6PQbBs+HcexM=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 22 Oct 2025 00:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Validity Not Before: Oct 20 10:18:34 2025 GMT Not After : Oct 22 10:18:34 2025 GMT Subject: CN=68f60c7b-d52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:36:e0:af:a1:34:79:2a:99:e6:46:3e:f5:1b: 5b:cf:c7:d9:e3:28:33:11:8e:92:64:e2:9c:cc:f7: 97:00:28:5c:9d:9e:88:75:7a:31:6f:11:bb:29:d2: 79:5a:be:b6:85:9f:69:95:23:37:20:a4:4b:df:13: 54:cc:1e:bb:ab:be:06:f9:b1:e7:c2:e7:32:b8:8e: b4:33:19:d5:29:6e:7f:31:2c:c8:d7:79:e7:e1:74: 9d:75:ae:c9:e9:0a:09:02:7f:3d:05:f4:fc:55:5c: 8e:ec:99:37:83:e8:85:45:f6:38:f6:73:18:bd:3f: c2:b3:37:14:e0:6b:53:b5:55:3f:cb:ff:f0:d2:cd: 86:eb:8a:34:d4:26:b0:0c:11:0d:11:a9:33:54:f1: a7:10:3a:95:ba:0f:ca:9e:cd:79:47:ea:5b:82:83: 82:ee:d6:0a:56:3d:61:97:fd:38:15:1d:ac:b9:00: 37:11:d2:b7:9b:25:7d:5e:c5:9d:15:d4:26:10:65: 87:32:45:08:2a:2e:5e:b6:24:6a:a0:53:4b:90:50: d6:1d:c8:a3:0c:e4:e0:02:a8:6e:1d:27:67:b3:7a: aa:36:76:d6:95:94:d8:79:b2:26:68:55:3e:98:33: 63:37:ba:be:ec:f7:f1:41:73:5d:58:3b:a0:bd:dc: af:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9E:A5:6B:A0:DA:F1:45:EF:34:B2:2B:02:0C:6C:5E:06:BC:2C:D8 X509v3 Authority Key Identifier: keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:eb:b2:5d:bd:ac:e7:c6:b6:7d:6b:a1:b5:aa:fe:81:79:e5: 6a:b2:fc:da:a2:02:c1:15:90:2c:b9:23:63:51:f6:18:77:53: d9:bc:65:78:9f:e6:57:b3:15:ee:e9:ad:70:30:6d:8b:d7:de: 90:66:52:ee:1b:17:83:c7:c4:4c:1c:8c:aa:c6:36:0f:66:ab: f0:b7:7d:fd:5d:6e:82:3d:bd:92:6b:de:16:5d:7b:89:e3:39: 87:ba:d4:3e:12:a0:a8:9a:b4:cb:5f:3f:ff:09:d8:0c:d1:1f: 56:ea:0a:b3:29:d6:61:19:79:00:c4:7d:ac:f3:e3:06:81:d5: c2:59:d6:7f:c6:17:6f:f9:db:e4:4e:70:f1:3b:9a:80:77:a3: 6d:4c:1d:fe:97:8c:67:7c:fb:9e:8a:11:e1:7f:ac:39:03:10: d3:cd:4d:6f:30:f1:c2:fe:1d:b1:79:2f:01:18:65:6f:c2:4f: 02:75:ce:4a:57:9f:10:83:d4:97:4c:e5:c4:bf:a5:1d:34:77: 32:be:52:9f:14:4f:33:c6:96:0c:2a:e3:03:ee:a7:aa:e1:2e: b1:df:37:7b:7d:7f:96:77:a1:8a:e9:cd:77:64:b3:9f:25:76: 77:56:c5:8c:7f:b3:5d:f4:bc:2d:3e:f8:a0:ea:1c:73:49:98: cb:8f:b1:b9 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 Q0IxQkVBRjExMC8GA1UEBRMoQTVGMEEyQkI4Qjc5RURENkQzN0MwNzdBREZFQTA4 MjUxNEMwNDIwRjAeFw0yNTEwMjAxMDE4MzRaFw0yNTEwMjIxMDE4MzRaMBgxFjAU BgNVBAMTDTY4ZjYwYzdiLWQ1MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDgNuCvoTR5KpnmRj71G1vPx9njKDMRjpJk4pzM95cAKFydnoh1ejFvEbsp 0nlavraFn2mVIzcgpEvfE1TMHrurvgb5sefC5zK4jrQzGdUpbn8xLMjXeefhdJ11 rsnpCgkCfz0F9PxVXI7smTeD6IVF9jj2cxi9P8KzNxTga1O1VT/L//DSzYbrijTU JrAMEQ0RqTNU8acQOpW6D8qezXlH6luCg4Lu1gpWPWGX/TgVHay5ADcR0rebJX1e xZ0V1CYQZYcyRQgqLl62JGqgU0uQUNYdyKMM5OACqG4dJ2ezeqo2dtaVlNh5siZo VT6YM2M3ur7s9/FBc11YO6C93K+9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUu56l a6Da8UXvNLIrAgxsXga8LNgwHwYDVR0jBBgwFoAUpfCiu4t57dbTfAd63+oIJRTA Qg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkNCMUJFL0YzMjI4RTg2RjBFRTExRUVBM0JFMEY1ODc3NTQxMkU2L3BmQ2l1 NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3BmQ2l1NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2Q0IxQkUvRjMyMjhFODZGMEVFMTFFRUEzQkUwRjU4Nzc1 NDEyRTYvcGZDaXU0dDU3ZGJUZkFkNjMtb0lKUlRBUWc4Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCs67JdvaznxrZ9a6G1qv6BeeVqsvza ogLBFZAsuSNjUfYYd1PZvGV4n+ZXsxXu6a1wMG2L196QZlLuGxeDx8RMHIyqxjYP Zqvwt339XW6CPb2Sa94WXXuJ4zmHutQ+EqComrTLXz//CdgM0R9W6gqzKdZhGXkA xH2s8+MGgdXCWdZ/xhdv+dvkTnDxO5qAd6NtTB3+l4xnfPueihHhf6w5AxDTzU1v MPHC/h2xeS8BGGVvwk8Cdc5KV58Qg9SXTOXEv6UdNHcyvlKfFE8zxpYMKuMD7qeq 4S6x3zd7fX+Wd6GK6c13ZLOfJXZ3VsWMf7Nd9LwtPvig6hxzSZjLj7G5 -----END CERTIFICATE-----Generated at Mon Oct 20 14:00:16 2025 by rpki-client