$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft File: pfCiu4t57dbTfAd63-oIJRTAQg8.mft (raw, json) Hash identifier: bj/EijxQSLozap58nVzQI4ksPeeL2gAIdu3aLGbof44= Subject key identifier: A1:4E:59:EE:23:E9:02:51:5F:F5:7F:18:FC:20:11:14:8B:68:A1:81 Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F Certificate issuer: /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Certificate serial: 0229 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft Manifest number: 0219 Signing time: Sat 23 Aug 2025 04:25:04 +0000 Manifest this update: Sat 23 Aug 2025 04:25:03 +0000 Manifest next update: Mon 25 Aug 2025 04:25:03 +0000 Files and hashes: 1: pfCiu4t57dbTfAd63-oIJRTAQg8.crl (hash: vEDgLTXlKKPwOrwY3TPPi6kwgWEJAb1lVy7uE3CmAK4=) 2: 245B6D34FBED11EE8128962C017001B1.roa (hash: TrN9lcQpNeQiZwKFjsOsULheFfvRBy2GwIMFcOXP5rY=) 3: 60986EC6F10E11EEA398F1C8775412E6.roa (hash: UeXyeJMDi2GVx9uEPU+PiWuthmCddMz69n4V0SdxUZY=) 4: 4A3BF0B6E9F711EFB363B759762E951A.roa (hash: qnWjHMa6krZFafky4BYIbSFj8GVyr5kF/yN3x6ht2sE=) 5: 8C5EBF98B18D11EF93764599762E951A.roa (hash: LMCVfxRKPtEUcD+l4fHRZWVAaU9InzZT+jXi3ynNqyQ=) 6: 624DB26AFC1411EEA32C1066017001B1.roa (hash: SAKc0hgZ+mEboWzvP3K7DMfU8rpiR8UT+kWecca89NE=) 7: 767E76B2405F11F0B14520EADAE4EC9C.roa (hash: Psp54N8Zwbl9ziN2Vbyl63/0vnVM4zrW11s0ypx3pl8=) 8: 9BF619A8FCDC11EE8DA40146017001B1.roa (hash: po7czQ/bhDV7w3+Oz4IVCSJosx6dgGFsaZotpFYiUzU=) 9: 0C6B2666405B11F09F43C8CCDAE4EC9C.roa (hash: /9Ds38E/Nlm7VcSD/FOkPtqxtWfZMJuAf/6Y8lnD5JQ=) 10: ACB83E6242B211EFAFCCE28B762E951A.roa (hash: K3ivQ3+n4zlKylliwe/zTuRovNdpcW712O8vioTYjFg=) 11: A1B5AEEC442811EFA24AB347762E951A.roa (hash: WU/tv+bio89mYf5sL7OB/fhjHoVOLu5YlrkO6ttjHNQ=) 12: 7AFAA29E1F6111EFB0C39B397DDC24C2.roa (hash: e2WypnmRsaISjVRYfT/t99mLnGdtDrlVSL5Ti5URVMc=) 13: 6644E6CC4FE811EFBAAC404B762E951A.roa (hash: 48MYw/CHm3JnjY68hLvq+27NMpxBkJcznllBwP1oCwg=) 14: F6FBFB8E745D11F0BF6D9BD0DAE4EC9C.roa (hash: /YM80rpuDV3whpYSjJG05E1etVVfPSD6PQbBs+HcexM=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 25 Aug 2025 00:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Validity Not Before: Aug 23 04:25:03 2025 GMT Not After : Aug 25 04:25:03 2025 GMT Subject: CN=68a942a0-8759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:61:c5:f3:3b:8b:da:21:29:b8:c1:dc:cb:41: 12:34:34:fb:cd:d6:dd:27:0d:2a:fb:b1:f4:7d:1f: 58:08:b2:32:84:d5:a8:89:66:e3:a7:c9:61:06:92: 7f:25:17:73:9e:6a:67:a8:b4:a1:df:e4:e6:cf:e7: 5c:71:87:59:41:bc:43:16:e0:59:15:b9:d0:24:79: f8:d4:4d:d9:d5:aa:de:d1:f7:9f:02:99:37:9c:c1: 00:75:e6:19:49:a7:72:a9:81:a8:72:af:a2:22:c6: 17:22:c6:e7:39:ec:79:e7:d2:26:0e:ae:d8:af:0f: c2:c9:a5:05:25:24:4e:9c:22:ca:c1:23:cb:7f:4f: 5d:62:f0:6f:f6:22:4e:64:99:b6:c5:ec:92:c4:4d: 13:44:7e:61:93:3f:88:e3:28:c0:56:4b:1b:7d:a2: 15:39:2c:5b:33:8e:3f:3d:28:c0:11:a1:16:b2:c1: 87:39:6c:da:03:36:b8:4a:7e:4f:1f:4d:a9:08:5f: 5a:3e:2d:f6:77:d7:01:5b:78:7b:5f:b2:f7:11:cd: 05:9d:61:68:16:a7:40:f3:34:b5:14:63:23:e2:a5: cd:10:3d:06:1f:0d:02:d2:eb:17:96:f6:6b:33:b5: 19:81:83:04:01:0b:f7:57:1c:8c:85:63:46:40:41: 2e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4E:59:EE:23:E9:02:51:5F:F5:7F:18:FC:20:11:14:8B:68:A1:81 X509v3 Authority Key Identifier: keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:44:9e:1a:47:38:89:49:2f:f3:fd:af:e9:3e:bf:9d:25:52: c7:db:7c:c6:cf:af:66:46:12:8a:e6:dd:a9:54:60:a9:f3:d6: ae:12:0f:82:c3:a6:7d:ef:05:4b:cb:1c:21:c1:0c:ed:05:cf: a9:93:b9:bd:ed:bb:8c:3a:72:57:7f:73:f8:72:93:ab:cc:7b: 88:98:c4:ac:ae:c3:8b:f1:b1:a1:dc:fa:6d:31:e4:ae:f7:cb: eb:a0:97:22:79:59:bd:bd:52:dd:b5:69:e0:ee:3c:af:51:7f: 75:7a:7e:77:5e:b1:17:42:66:0b:cc:5a:73:c2:a7:00:e0:1f: aa:c4:e7:ea:71:f6:94:0a:4c:10:0e:5f:92:a5:15:8e:e6:70: 8a:f4:1f:77:da:d8:65:c0:a1:b1:a7:64:0b:c2:2c:a1:bb:7c: fa:15:2b:cd:1e:06:29:18:d8:1b:d8:c0:2e:17:ad:0a:3b:7d: 5b:a2:71:a0:ab:c7:aa:ad:9a:c8:7b:f9:cf:ec:cd:0b:b7:5e: 0f:04:cc:cf:9d:84:67:79:0c:4c:51:12:dc:09:79:87:94:85: d3:bd:37:03:e6:0e:91:7d:8a:3a:fe:04:cd:83:f7:8e:14:f3: c6:40:68:b4:d8:d1:07:1a:4b:b7:2f:a4:a0:d0:20:ea:52:54: 2f:fe:3d:e4 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAikwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 Q0IxQkVBRjExMC8GA1UEBRMoQTVGMEEyQkI4Qjc5RURENkQzN0MwNzdBREZFQTA4 MjUxNEMwNDIwRjAeFw0yNTA4MjMwNDI1MDNaFw0yNTA4MjUwNDI1MDNaMBgxFjAU BgNVBAMTDTY4YTk0MmEwLTg3NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDbYcXzO4vaISm4wdzLQRI0NPvN1t0nDSr7sfR9H1gIsjKE1aiJZuOnyWEG kn8lF3OeameotKHf5ObP51xxh1lBvEMW4FkVudAkefjUTdnVqt7R958CmTecwQB1 5hlJp3Kpgahyr6Iixhcixuc57Hnn0iYOrtivD8LJpQUlJE6cIsrBI8t/T11i8G/2 Ik5kmbbF7JLETRNEfmGTP4jjKMBWSxt9ohU5LFszjj89KMARoRaywYc5bNoDNrhK fk8fTakIX1o+LfZ31wFbeHtfsvcRzQWdYWgWp0DzNLUUYyPipc0QPQYfDQLS6xeW 9msztRmBgwQBC/dXHIyFY0ZAQS5XAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUoU5Z 7iPpAlFf9X8Y/CARFItooYEwHwYDVR0jBBgwFoAUpfCiu4t57dbTfAd63+oIJRTA Qg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkNCMUJFL0YzMjI4RTg2RjBFRTExRUVBM0JFMEY1ODc3NTQxMkU2L3BmQ2l1 NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3BmQ2l1NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2Q0IxQkUvRjMyMjhFODZGMEVFMTFFRUEzQkUwRjU4Nzc1 NDEyRTYvcGZDaXU0dDU3ZGJUZkFkNjMtb0lKUlRBUWc4Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC9RJ4aRziJSS/z/a/pPr+dJVLH23zG z69mRhKK5t2pVGCp89auEg+Cw6Z97wVLyxwhwQztBc+pk7m97buMOnJXf3P4cpOr zHuImMSsrsOL8bGh3PptMeSu98vroJcieVm9vVLdtWng7jyvUX91en53XrEXQmYL zFpzwqcA4B+qxOfqcfaUCkwQDl+SpRWO5nCK9B932thlwKGxp2QLwiyhu3z6FSvN HgYpGNgb2MAuF60KO31bonGgq8eqrZrIe/nP7M0Lt14PBMzPnYRneQxMURLcCXmH lIXTvTcD5g6RfYo6/gTNg/eOFPPGQGi02NEHGku3L6Sg0CDqUlQv/j3k -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:10 2025 by rpki-client