$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft File: I_gUu0fVw67dUQPzb124opvj1x0.mft (raw, json) Hash identifier: asRpJmVk8TZNDBztzBFFqm8LqU+Md/MUASsneIbDhnk= Subject key identifier: C5:30:A4:30:57:1D:FF:0B:4F:EF:EF:F9:06:1C:63:37:AC:61:DA:C4 Authority key identifier: 23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D Certificate issuer: /CN=F36D9B5BAF/serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D Certificate serial: 0F3C Authority info access: rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft Manifest number: 0F25 Signing time: Mon 20 Oct 2025 00:51:16 +0000 Manifest this update: Mon 20 Oct 2025 00:51:15 +0000 Manifest next update: Wed 22 Oct 2025 00:51:15 +0000 Files and hashes: 1: I_gUu0fVw67dUQPzb124opvj1x0.crl (hash: NR52hZ5Oo+m7r8mLwPhMaA0I98oR506orCiSW+l1zTw=) 2: 86606974028F11E98C883E0FF8AEA228.roa (hash: IsZ6cJV4+0zN9ms5jaDsieqPGhductkQxgMv7qyHTNI=) 3: 9BC8C8C001EA11EDB08796BAF1222468.roa (hash: i8+aHPPl6uhvn/Jq2NkUn53HTH09DtjcbJOz9MgQ1co=) 4: 48577586FE1C11E8BD980782F8AEA228.roa (hash: H3dWHGNGyzufXdXyAcUTICFJNlUoK78HWc23kkq1F/s=) 5: 5F34A6C2DE7D11EBBAC31B64F8AEA228.roa (hash: MWk8EFTOF3/10HYUuFgbnJ/fqlc/s+3SXXavsJ4h6cE=) 6: 3D3E31C6498E11EFBB02DB76762E951A.roa (hash: u0Z0y5U3GM/VfkEEbg/zEJIp4QkqBJm1umtwXpHXzsE=) 7: 132EAD18DE7D11EB86A3C563F8AEA228.roa (hash: iZGBXlM3XPYurzi9+dHJxzDxI/7/keWoCIvY/ASFKFI=) 8: B7C01426FED211E89B120309F8AEA228.roa (hash: Cu6wxRaLD5ODNZaYGqU1rGwfd0FTt/GsL/H9WnzG7Vs=) 9: 36E8B606FE1D11E88DCDCE82F8AEA228.roa (hash: SvO8wCmqFCCs7pvZRw0lkVxnGHmag+waEJa8/soA19E=) 10: 9C9A7614DE7C11EBB1191063F8AEA228.roa (hash: syinLKpAl//f2BEe6KYX31IZj04lDHjk0Tp/mellwQo=) 11: 5BA2465E037F11EDB5F8F0C0F1222468.roa (hash: TV0mQqI15fCBzn5VfeVjormHM3HjavPeVewlRIBDw4I=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 22 Oct 2025 00:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3900 (0xf3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36D9B5BAF, serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D Validity Not Before: Oct 20 00:51:15 2025 GMT Not After : Oct 22 00:51:15 2025 GMT Subject: CN=68f58784-96a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1d:41:c9:01:33:31:9c:59:ec:8e:13:42:b7: a8:a0:d8:74:35:95:0e:ca:02:c4:e1:f6:6a:ae:89: 77:47:10:38:4e:1a:d1:52:97:8f:e6:b0:23:3f:02: 7b:57:17:8d:90:0e:9f:f1:98:b3:0b:65:58:88:10: d8:09:7f:e7:cb:63:cd:e9:ac:3a:af:fc:db:9d:c8: a3:83:c6:99:ca:06:d4:f7:f0:88:6b:2f:40:47:cd: 85:03:a8:d2:7d:bc:6d:7e:1f:4a:c7:41:05:d1:84: 3d:2a:3a:70:3b:c0:e5:c5:63:c9:47:74:29:28:1b: bc:9b:e8:63:55:10:c7:bf:be:90:d4:44:bc:3c:42: 59:47:e9:30:3a:90:c5:45:a2:93:bb:72:b1:f3:bf: ad:93:21:39:88:e5:d8:69:e3:70:bb:ed:39:2a:55: b8:74:69:ad:e3:63:25:d4:b8:19:0f:25:00:89:ed: 76:fa:61:15:ec:4f:db:4c:b6:82:d7:a5:69:8e:5d: 81:fc:62:91:23:27:52:43:ac:70:e2:12:7c:3c:e8: 60:9e:2c:d3:f7:66:e0:f6:f5:8c:86:a0:9f:a1:2c: 19:15:90:9b:f2:61:63:96:75:a5:96:e0:92:b7:0e: 7d:7b:00:cf:db:bc:9a:d8:00:8a:99:64:db:bd:ae: 6b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:30:A4:30:57:1D:FF:0B:4F:EF:EF:F9:06:1C:63:37:AC:61:DA:C4 X509v3 Authority Key Identifier: keyid:23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:7e:16:d7:f2:fb:d2:87:1e:dd:11:01:95:16:a3:9a:dd:51: df:7b:47:86:4c:9a:f8:9f:85:a1:bc:5b:ae:0a:67:21:52:46: 3c:b6:c6:45:25:26:98:1f:eb:47:5b:63:50:ba:f7:68:c5:08: 94:9d:a4:1f:6b:bf:06:4b:fa:60:68:c5:bc:8c:43:89:79:8c: a0:ea:b9:14:90:2f:10:d6:47:04:97:f0:12:1a:e5:d3:28:0d: 2f:47:f8:6e:59:e6:1e:18:a0:86:22:ae:66:92:93:f4:20:89: ea:a2:78:2d:71:c4:6e:04:76:ab:56:3d:7d:83:a1:4c:cf:65: 4f:5a:51:cd:cf:1a:7f:9b:e1:fc:07:2a:39:9f:f4:57:60:d0: cd:97:f6:da:27:c4:9d:04:b5:a9:3c:a0:56:a2:64:71:7e:52: 4a:e1:2f:b0:09:1e:fa:23:ae:ef:99:ed:83:a3:bc:30:9a:bf: fe:90:a4:19:6c:db:40:36:41:5b:2f:9f:f4:8c:a3:dd:c6:2d: bb:23:8d:81:bc:c6:e5:15:b3:f2:e6:1c:ec:04:c8:58:3a:24: 1b:f0:f7:67:b4:b3:2e:86:8e:48:26:43:3b:8a:39:84:18:f8: 74:cc:d0:b4:22:ae:a6:4d:4c:31:5a:7c:57:21:df:65:ae:1e: c6:5d:5f:b1 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDzwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RDlCNUJBRjExMC8GA1UEBRMoMjNGODE0QkI0N0Q1QzNBRURENTEwM0YzNkY1REI4 QTI5QkUzRDcxRDAeFw0yNTEwMjAwMDUxMTVaFw0yNTEwMjIwMDUxMTVaMBgxFjAU BgNVBAMTDTY4ZjU4Nzg0LTk2YTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC4HUHJATMxnFnsjhNCt6ig2HQ1lQ7KAsTh9mquiXdHEDhOGtFSl4/msCM/ AntXF42QDp/xmLMLZViIENgJf+fLY83prDqv/NudyKODxpnKBtT38IhrL0BHzYUD qNJ9vG1+H0rHQQXRhD0qOnA7wOXFY8lHdCkoG7yb6GNVEMe/vpDURLw8QllH6TA6 kMVFopO7crHzv62TITmI5dhp43C77TkqVbh0aa3jYyXUuBkPJQCJ7Xb6YRXsT9tM toLXpWmOXYH8YpEjJ1JDrHDiEnw86GCeLNP3ZuD29YyGoJ+hLBkVkJvyYWOWdaWW 4JK3Dn17AM/bvJrYAIqZZNu9rmuTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUxTCk MFcd/wtP7+/5BhxjN6xh2sQwHwYDVR0jBBgwFoAUI/gUu0fVw67dUQPzb124opvj 1x0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkQ5QjVCLzlFMUJEMzc4MTM1QTExRTVCNjhENDI4NkY4QUVBMjI4L0lfZ1V1 MGZWdzY3ZFVRUHpiMTI0b3B2ajF4MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0lfZ1V1MGZWdzY3ZFVRUHpiMTI0b3B2ajF4MC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RDlCNUIvOUUxQkQzNzgxMzVBMTFFNUI2OEQ0Mjg2RjhB RUEyMjgvSV9nVXUwZlZ3NjdkVVFQemIxMjRvcHZqMXgwLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxfhbX8vvShx7dEQGVFqOa3VHfe0eG TJr4n4WhvFuuCmchUkY8tsZFJSaYH+tHW2NQuvdoxQiUnaQfa78GS/pgaMW8jEOJ eYyg6rkUkC8Q1kcEl/ASGuXTKA0vR/huWeYeGKCGIq5mkpP0IInqongtccRuBHar Vj19g6FMz2VPWlHNzxp/m+H8Byo5n/RXYNDNl/baJ8SdBLWpPKBWomRxflJK4S+w CR76I67vme2Do7wwmr/+kKQZbNtANkFbL5/0jKPdxi27I42BvMblFbPy5hzsBMhY OiQb8PdntLMuho5IJkM7ijmEGPh0zNC0Iq6mTUwxWnxXId9lrh7GXV+x -----END CERTIFICATE-----Generated at Mon Oct 20 23:11:38 2025 by rpki-client