$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.mft File: PSwDT4UfNxWyukycleUoXa8u6SM.mft (raw, json) Hash identifier: q/aokMVnA6TwEmFe2+ZuYs1iqHjiEfOD4pZzWrdS/Ys= Subject key identifier: 4A:F2:D1:D7:B1:44:84:30:FA:8B:F7:35:C6:33:58:86:FC:80:79:5C Authority key identifier: 3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23 Certificate issuer: /CN=F36DA3E9AF/serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923 Certificate serial: 05DD Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.mft Manifest number: 05CE Signing time: Mon 20 Oct 2025 02:36:19 +0000 Manifest this update: Mon 20 Oct 2025 02:36:18 +0000 Manifest next update: Wed 22 Oct 2025 02:36:18 +0000 Files and hashes: 1: PSwDT4UfNxWyukycleUoXa8u6SM.crl (hash: CxKDTGY7I/LMNdKQ1sbskpdIVJbX5rMs55dBEj1tJrs=) 2: E6EDEE70E5D611EFA1BBFE7F762E951A.roa (hash: 42J2YspQ3a6JXeHFpjRGKEsqBOGL3TDxqQkGS9php88=) 3: 0532E480DC7311EE9B26756F775412E6.roa (hash: FWpbgzq5PRvS4iSaEz/I2bzcNh5s/Hvz/Y6dVmAtogo=) 4: 084F90C4E5D611EF84AC297B762E951A.roa (hash: DaYG5IraEvwWyXIavbksw5PJX3qGabDzBgWW9HfrjbY=) 5: 9FD9D4E6F35F11EE859BC06E775412E6.roa (hash: gidMA0u1Y1bDAE9ftxroc/rnJoOkFIpXZHib92UbY7g=) 6: 9E7281D859C011ECABCF78735A40D577.roa (hash: PHUzMzWwgkx4aCuhkBW0Ix5d5z4qJ7ikOgJpiyvwmYc=) 7: A894FB1C3C8211EF95985EBB762E951A.roa (hash: Mmlz+vBHblp6/MTYK5P6MHZIQ1tn5UYnx6KVbuNc9uE=) 8: 89F940C23C8311EFB8D07445762E951A.roa (hash: AdMh/WAb6kfvbKIfiPhlOqARAQo/7ZcS1S5kfzm8Lug=) 9: 3D9CC9BAA41F11F08FC68FF1DAE4EC9C.roa (hash: Lvc6oF+N0W4NT7yNVgV113qEtHq9etKoivO/5PjgtCE=) 10: 1CD7BB0E57E911F0A6BADE9CDAE4EC9C.roa (hash: Sj7TZUSFcSFR6KPg+Yr4aXPk5+fIKq2uGveYUra7Jr0=) 11: A74E8468AA5A11EE911F24C4775412E6.roa (hash: IxZYXXcepGDgsjaWwJ6ychZek0ca5ertsJZ4n6COMN4=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.mft rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 22 Oct 2025 00:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1501 (0x5dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36DA3E9AF, serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923 Validity Not Before: Oct 20 02:36:18 2025 GMT Not After : Oct 22 02:36:18 2025 GMT Subject: CN=68f5a023-06d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:df:5d:7c:f1:02:6b:4f:cd:1e:80:7d:f5: 75:64:f7:ce:cf:43:43:f3:29:37:b3:ce:c1:cd:bf: e6:d0:80:1a:20:1e:60:b7:7d:a0:66:5f:c1:2a:67: 29:b6:18:4a:26:17:84:58:bb:76:1d:36:cf:83:50: af:36:ba:dd:d3:71:7c:b4:8d:f3:c4:7a:33:3b:21: be:bb:d3:b1:69:51:0b:37:9f:43:38:35:9d:a1:62: 67:60:6c:7f:ca:67:b0:74:ae:35:05:39:ec:4d:95: a0:c2:fc:0e:02:c2:9f:dd:bb:03:e2:64:c6:ec:3c: 83:43:74:9d:a0:53:97:d7:49:26:12:a7:b5:14:a8: c0:4c:fd:5d:3f:c6:cb:4f:ac:75:19:c4:9c:7b:71: 16:ad:75:e2:85:ef:2c:74:38:fe:62:e2:0a:3e:25: 96:a5:ef:27:f4:c9:67:d4:1d:8e:83:35:c9:5c:80: aa:17:23:77:1f:02:9e:17:90:7b:d1:3d:19:d8:c3: 1f:36:0b:0f:a7:09:81:7e:16:0f:47:29:c7:19:96: 4f:cd:f8:86:19:15:e3:15:68:62:34:0d:53:28:c3: 4b:1e:29:aa:72:14:6a:63:5a:c4:4d:b7:ae:2b:45: c6:fb:3f:38:92:63:c2:ef:f0:ce:74:d3:ef:f5:6c: 20:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F2:D1:D7:B1:44:84:30:FA:8B:F7:35:C6:33:58:86:FC:80:79:5C X509v3 Authority Key Identifier: keyid:3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ee:34:20:d5:d2:e7:ef:b5:36:78:d2:81:4a:8e:3d:c4:64: 53:c3:84:91:2e:49:80:be:75:9e:1b:cd:2c:9a:70:d2:ac:70: f3:26:10:42:56:5c:4f:7f:65:73:ff:43:c9:0b:3a:06:06:68: d2:1f:bf:f6:7c:ec:c1:52:36:e6:9c:ea:fa:84:a2:8e:8d:ca: 54:cb:1a:d7:c3:61:be:f0:ce:8d:a2:70:14:67:44:0b:e1:ef: 56:cd:08:60:9b:11:14:b9:44:28:91:7f:49:76:82:cf:1a:f6: cf:73:71:31:de:01:9c:5f:5d:6c:23:a4:ba:63:9e:d6:2d:fd: 2e:91:44:62:12:7f:c2:21:86:a4:6d:3e:c0:35:f0:30:c4:76: 4e:7a:ec:63:22:ad:9b:56:de:58:73:70:e7:94:92:98:89:74: 56:f7:06:a1:cc:48:a8:3d:60:42:ab:bf:2d:13:64:a4:8d:d3: 07:b2:f7:a6:c2:d7:67:32:2e:1d:59:12:5c:b7:b7:ad:a0:cc: e7:88:0d:3d:1f:f6:4c:ce:da:18:c5:15:eb:b1:97:f2:d7:79: 1e:2d:c7:d9:38:41:74:d8:66:0b:34:45:04:05:9f:73:b1:6e: b2:9c:66:5c:cd:17:7c:c2:c3:04:b7:40:24:72:c0:48:ad:23: d8:b4:92:0d -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBd0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 REEzRTlBRjExMC8GA1UEBRMoM0QyQzAzNEY4NTFGMzcxNUIyQkE0QzlDOTVFNTI4 NURBRjJFRTkyMzAeFw0yNTEwMjAwMjM2MThaFw0yNTEwMjIwMjM2MThaMBgxFjAU BgNVBAMTDTY4ZjVhMDIzLTA2ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC+0d9dfPECa0/NHoB99XVk987PQ0PzKTezzsHNv+bQgBogHmC3faBmX8Eq Zym2GEomF4RYu3YdNs+DUK82ut3TcXy0jfPEejM7Ib6707FpUQs3n0M4NZ2hYmdg bH/KZ7B0rjUFOexNlaDC/A4Cwp/duwPiZMbsPINDdJ2gU5fXSSYSp7UUqMBM/V0/ xstPrHUZxJx7cRatdeKF7yx0OP5i4go+JZal7yf0yWfUHY6DNclcgKoXI3cfAp4X kHvRPRnYwx82Cw+nCYF+Fg9HKccZlk/N+IYZFeMVaGI0DVMow0seKapyFGpjWsRN t64rRcb7PziSY8Lv8M500+/1bCDNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUSvLR 17FEhDD6i/c1xjNYhvyAeVwwHwYDVR0jBBgwFoAUPSwDT4UfNxWyukycleUoXa8u 6SMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkRBM0U5LzNDQkNCOTcyNTlDMDExRUM5QjQzNjQ3MjVBNDBENTc3L1BTd0RU NFVmTnhXeXVreWNsZVVvWGE4dTZTTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1BTd0RUNFVmTnhXeXVreWNsZVVvWGE4dTZTTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2REEzRTkvM0NCQ0I5NzI1OUMwMTFFQzlCNDM2NDcyNUE0 MEQ1NzcvUFN3RFQ0VWZOeFd5dWt5Y2xlVW9YYTh1NlNNLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBf7jQg1dLn77U2eNKBSo49xGRTw4SR LkmAvnWeG80smnDSrHDzJhBCVlxPf2Vz/0PJCzoGBmjSH7/2fOzBUjbmnOr6hKKO jcpUyxrXw2G+8M6NonAUZ0QL4e9WzQhgmxEUuUQokX9JdoLPGvbPc3Ex3gGcX11s I6S6Y57WLf0ukURiEn/CIYakbT7ANfAwxHZOeuxjIq2bVt5Yc3DnlJKYiXRW9wah zEioPWBCq78tE2SkjdMHsvemwtdnMi4dWRJct7etoMzniA09H/ZMztoYxRXrsZfy 13keLcfZOEF02GYLNEUEBZ9zsW6ynGZczRd8wsMEt0AkcsBIrSPYtJIN -----END CERTIFICATE-----Generated at Mon Oct 20 21:39:55 2025 by rpki-client