$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft File: pfCiu4t57dbTfAd63-oIJRTAQg8.mft (raw, json) Hash identifier: CwopUS2kE6tYmTz3Ys4mK6+smCwhlkRYXgQRAKRL1gM= Subject key identifier: BC:39:60:54:B8:B0:0F:F0:0A:4F:34:4C:C8:0F:AF:42:39:38:7E:1A Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F Certificate issuer: /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Certificate serial: 030A Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft Manifest number: 02F7 Signing time: Thu 26 Mar 2026 04:53:01 +0000 Manifest this update: Thu 26 Mar 2026 04:53:00 +0000 Manifest next update: Sat 28 Mar 2026 04:53:00 +0000 Files and hashes: 1: pfCiu4t57dbTfAd63-oIJRTAQg8.crl (hash: d3s5dltiBQK7avbvq9FmX8iRjJZ7pawhj95PX+qcq0U=) 2: 245B6D34FBED11EE8128962C017001B1.roa (hash: TrN9lcQpNeQiZwKFjsOsULheFfvRBy2GwIMFcOXP5rY=) 3: 60986EC6F10E11EEA398F1C8775412E6.roa (hash: UeXyeJMDi2GVx9uEPU+PiWuthmCddMz69n4V0SdxUZY=) 4: 13B429E4A82B11F08C7A96A4DAE4EC9C.roa (hash: KYrcNRS9qGwFheXL1jyE5bvgElaJoQSziRbqOSDolOc=) 5: 4A3BF0B6E9F711EFB363B759762E951A.roa (hash: qnWjHMa6krZFafky4BYIbSFj8GVyr5kF/yN3x6ht2sE=) 6: 8C5EBF98B18D11EF93764599762E951A.roa (hash: LMCVfxRKPtEUcD+l4fHRZWVAaU9InzZT+jXi3ynNqyQ=) 7: 624DB26AFC1411EEA32C1066017001B1.roa (hash: SAKc0hgZ+mEboWzvP3K7DMfU8rpiR8UT+kWecca89NE=) 8: 767E76B2405F11F0B14520EADAE4EC9C.roa (hash: Psp54N8Zwbl9ziN2Vbyl63/0vnVM4zrW11s0ypx3pl8=) 9: 9BF619A8FCDC11EE8DA40146017001B1.roa (hash: po7czQ/bhDV7w3+Oz4IVCSJosx6dgGFsaZotpFYiUzU=) 10: 46D951EEBB1511F0A9D258C2DAE4EC9C.roa (hash: 3T0iCVJnMl4lV9aDTA0q3pEQKQ32TVj85JAiwnswBVc=) 11: 0C6B2666405B11F09F43C8CCDAE4EC9C.roa (hash: /9Ds38E/Nlm7VcSD/FOkPtqxtWfZMJuAf/6Y8lnD5JQ=) 12: ACB83E6242B211EFAFCCE28B762E951A.roa (hash: K3ivQ3+n4zlKylliwe/zTuRovNdpcW712O8vioTYjFg=) 13: A1B5AEEC442811EFA24AB347762E951A.roa (hash: WU/tv+bio89mYf5sL7OB/fhjHoVOLu5YlrkO6ttjHNQ=) 14: 7AFAA29E1F6111EFB0C39B397DDC24C2.roa (hash: e2WypnmRsaISjVRYfT/t99mLnGdtDrlVSL5Ti5URVMc=) 15: 1F57366AAD9E11F0834ED8B4DAE4EC9C.roa (hash: Zr7KgVk21J1guGSwDPBmYm/QDl0oDd0+ZlvGGCwRB7s=) 16: 6644E6CC4FE811EFBAAC404B762E951A.roa (hash: 48MYw/CHm3JnjY68hLvq+27NMpxBkJcznllBwP1oCwg=) 17: F6FBFB8E745D11F0BF6D9BD0DAE4EC9C.roa (hash: /YM80rpuDV3whpYSjJG05E1etVVfPSD6PQbBs+HcexM=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 28 Mar 2026 00:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 778 (0x30a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Validity Not Before: Mar 26 04:53:00 2026 GMT Not After : Mar 28 04:53:00 2026 GMT Subject: CN=69c4bbad-f951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1c:fe:73:b4:ec:8b:af:8c:fb:2f:42:d6:be: 38:1a:2d:a4:a8:79:50:d6:4f:c8:bd:28:ea:cb:7c: 54:b2:16:21:a2:be:40:2d:57:ef:c7:b3:dc:aa:e9: d2:d5:71:cb:90:50:95:5a:0d:3f:71:01:f5:b5:4d: a8:8e:af:77:6f:8b:9b:70:ac:25:e3:5f:65:dc:e1: e9:2c:5b:08:2b:de:fc:f0:ef:d4:df:38:1c:1c:05: e5:ef:45:92:8d:cb:fc:57:5b:d9:75:46:97:df:86: 39:4c:95:89:12:66:40:12:eb:17:8d:67:8f:2f:80: e8:72:b4:4d:af:70:a9:6e:38:57:28:a5:40:83:72: d6:b1:eb:91:14:25:c0:4e:57:22:04:d2:45:4a:16: 77:e8:52:1c:53:62:c2:d7:af:66:1d:4e:6e:84:ac: 20:3f:a8:e8:33:cd:54:fc:58:2d:b0:55:39:84:0e: 52:ee:cd:f4:0a:09:ee:a4:be:5c:06:f1:b0:13:0f: 34:ea:08:d5:bb:05:e9:1e:66:74:66:d9:9e:6e:e7: 95:83:96:e9:ba:f8:6a:71:98:3d:0e:9f:6b:de:d1: 46:78:29:8f:c2:9c:e3:3f:0c:3f:c0:d3:6f:69:0f: b2:4c:c8:84:e7:5f:1d:4b:3c:b8:b7:2b:98:80:13: 60:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:39:60:54:B8:B0:0F:F0:0A:4F:34:4C:C8:0F:AF:42:39:38:7E:1A X509v3 Authority Key Identifier: keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:52:3c:3c:a4:4d:99:f2:d8:c6:ea:01:e0:f5:4e:ba:5c:99: ab:4a:a8:7e:1f:76:7b:15:2e:c7:3d:c4:c8:93:2a:6c:8c:eb: c4:45:96:7c:75:3f:1f:23:e3:56:be:27:b5:67:7f:13:0b:37: d0:ce:9f:c0:e5:d8:6b:85:ca:a1:99:7b:dd:3e:fe:bd:35:57: aa:c8:e0:88:ec:04:ba:e5:cc:1b:6a:96:68:58:71:32:12:d5: 7a:3a:e2:2b:68:d2:52:cb:17:98:a5:5c:1a:3d:25:6d:48:e7: 28:59:f1:49:06:3d:61:14:8e:27:e4:e0:ca:ad:d7:b6:24:bd: f1:4a:b7:55:b0:40:38:7a:2e:2d:34:f1:01:d5:bb:6a:8e:b5: d1:33:52:2d:9b:99:f5:a8:33:b0:e9:15:0f:c4:85:be:de:a3: 2c:64:72:ff:36:a1:61:0f:b3:5b:d1:a0:de:09:90:ce:c5:c9: aa:a5:24:19:2d:7e:d4:e9:c0:d4:85:4d:31:72:b9:ee:75:0f: e7:8c:5a:00:6b:e5:9f:9a:1a:9e:e3:dc:4a:a7:9c:78:6e:80: 8c:1a:88:4f:7c:83:02:3d:4b:a5:a4:24:f6:40:e3:26:cf:c2: ce:8a:4e:1a:8f:aa:4e:94:57:e4:08:d9:f3:fc:12:61:6c:fe: eb:c6:92:13 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAwowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 Q0IxQkVBRjExMC8GA1UEBRMoQTVGMEEyQkI4Qjc5RURENkQzN0MwNzdBREZFQTA4 MjUxNEMwNDIwRjAeFw0yNjAzMjYwNDUzMDBaFw0yNjAzMjgwNDUzMDBaMBgxFjAU BgNVBAMTDTY5YzRiYmFkLWY5NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCiHP5ztOyLr4z7L0LWvjgaLaSoeVDWT8i9KOrLfFSyFiGivkAtV+/Hs9yq 6dLVccuQUJVaDT9xAfW1TaiOr3dvi5twrCXjX2Xc4eksWwgr3vzw79TfOBwcBeXv RZKNy/xXW9l1RpffhjlMlYkSZkAS6xeNZ48vgOhytE2vcKluOFcopUCDctax65EU JcBOVyIE0kVKFnfoUhxTYsLXr2YdTm6ErCA/qOgzzVT8WC2wVTmEDlLuzfQKCe6k vlwG8bATDzTqCNW7BekeZnRm2Z5u55WDlum6+GpxmD0On2ve0UZ4KY/CnOM/DD/A 029pD7JMyITnXx1LPLi3K5iAE2AhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUvDlg VLiwD/AKTzRMyA+vQjk4fhowHwYDVR0jBBgwFoAUpfCiu4t57dbTfAd63+oIJRTA Qg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkNCMUJFL0YzMjI4RTg2RjBFRTExRUVBM0JFMEY1ODc3NTQxMkU2L3BmQ2l1 NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3BmQ2l1NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2Q0IxQkUvRjMyMjhFODZGMEVFMTFFRUEzQkUwRjU4Nzc1 NDEyRTYvcGZDaXU0dDU3ZGJUZkFkNjMtb0lKUlRBUWc4Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAuUjw8pE2Z8tjG6gHg9U66XJmrSqh+ H3Z7FS7HPcTIkypsjOvERZZ8dT8fI+NWvie1Z38TCzfQzp/A5dhrhcqhmXvdPv69 NVeqyOCI7AS65cwbapZoWHEyEtV6OuIraNJSyxeYpVwaPSVtSOcoWfFJBj1hFI4n 5ODKrde2JL3xSrdVsEA4ei4tNPEB1btqjrXRM1Itm5n1qDOw6RUPxIW+3qMsZHL/ NqFhD7Nb0aDeCZDOxcmqpSQZLX7U6cDUhU0xcrnudQ/njFoAa+Wfmhqe49xKp5x4 boCMGohPfIMCPUulpCT2QOMmz8LOik4aj6pOlFfkCNnz/BJhbP7rxpIT -----END CERTIFICATE-----Generated at Thu Mar 26 10:49:28 2026 by rpki-client