$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft File: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft (raw, json) Hash identifier: 8LclHZf3dvzVwvg4ZoEEhVVo4t2Vra5xYHJ61Nyov64= Subject key identifier: C5:B1:79:05:D8:F7:DC:B8:91:5D:6C:75:7B:77:6E:B1:E8:04:6A:B0 Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49 Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149 Certificate serial: 04B5 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft Manifest number: 0497 Signing time: Sun 19 Oct 2025 03:05:42 +0000 Manifest this update: Sun 19 Oct 2025 03:05:41 +0000 Manifest next update: Tue 21 Oct 2025 03:05:41 +0000 Files and hashes: 1: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl (hash: t+c63vUVgZvLiZzRF8MurultLWyeNzApgDhCjLlzg1w=) 2: CAB5EB42374D11EE8810A0744AD9E6FC.roa (hash: Rd+cT1WHVj6VPW10DhoJe1VPjes86osECuBqlAPA/jk=) 3: 20D8603A3C6311EEBD05616B4AD9E6FC.roa (hash: yn1GI8XUJDZhc/a1VL4Ew8aXczcEtSuNRFvBTlTvah0=) 4: 662EC19C3C6311EEA2CE226C4AD9E6FC.roa (hash: qJZA5eX+xbJzCe6D7i9PnOvJU1CqeC3CU+zF75cZcts=) 5: F67E4B16374D11EEB5DE38754AD9E6FC.roa (hash: hU4jFk//Gd5275KQZyF78ZmsmvKAmuy74Zm19XPUqO4=) 6: 14B6AF743B4011EEADF20A804AD9E6FC.roa (hash: K4yraD6px2otzCCbUQWt+Yh6khumJagXOv/4f3vipmU=) 7: 53D289E63CCE11EE935F8A394AD9E6FC.roa (hash: 4HBFVVMsDOfA/xrur5pE2xRwqQtzwcjvpCJfYPdn3co=) 8: 5F94B5287E1F11EEB18DE56B4AD9E6FC.roa (hash: NnfOKQOywlCm8MbXuo5ryxtlJJnqWeXUY/Zc4KGtk9o=) 9: 03541FA67E1F11EE99591D6B4AD9E6FC.roa (hash: tMNuryIys8bdcGqr2btn+01OsiqNMJcIT+oXA5sB548=) 10: 4ED14CDCA6DA11EDAEF82299F1222468.roa (hash: iXehJ8WLWU6cHBFHQ5qsEfloV58oVEhPLmmW3fV/BY4=) 11: 4788CE9A3C6311EE9733C66B4AD9E6FC.roa (hash: 0sVxWZVOpyK0cudH1BB1HUmOSWE0Bj2HjfkgAIa158s=) 12: 158513F4518011EE8BDBCE164AD9E6FC.roa (hash: sbl6JhnjaIL3BTU2+lQRNeSnxalVE/sMDYPWi7BO8vg=) 13: 85435BE23C6311EE9E2BB76C4AD9E6FC.roa (hash: ZIlXxtD8wXr16Udjo8wBxB2atTHwjE6MF56MpocHqts=) 14: 4433C912374E11EEBD8F3D764AD9E6FC.roa (hash: lHtBjObTBwNyVhJrHEQ/zHzgJmnlb42wMC73m5Dh7UE=) 15: A775C5D83C6311EEA094166D4AD9E6FC.roa (hash: L972nqC78lcXrhC+mjzOc5OXmYgCBGyLNtGIrSD8tWw=) 16: 20EEA9507E1F11EEAD686A6B4AD9E6FC.roa (hash: +kuN9/TLBGpI4GFRii8gvKOE9Vh3yGtX4DQwHRmVzSA=) 17: 88A2141457EF11F0A48D2AC4DAE4EC9C.roa (hash: jwxUZ7nPgwu7fA4ugBBwspQYrmkSwfz/KGPZiiShxok=) 18: 04540B763C6311EE82DB186B4AD9E6FC.roa (hash: 8pLsZ3suwRhldyF5vniTCRO+W8oJo+1mBH+nN66FQ8k=) 19: 329D5926A54311EEA7A66B2ED25BE465.roa (hash: 1pPOf7iWBENGk84AGGgfnWlGuOjuG2CHIm2+lZTlGVY=) 20: 9369A48A374D11EEBBBCC3734AD9E6FC.roa (hash: LriikUtiyzWDzN+qJjLYRklCy7tVdfyDgc1icmMt3FY=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 21 Oct 2025 00:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1205 (0x4b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149 Validity Not Before: Oct 19 03:05:41 2025 GMT Not After : Oct 21 03:05:41 2025 GMT Subject: CN=68f45586-f006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:45:fd:55:01:66:c3:c6:f3:18:94:ae:f0:4b: 23:96:67:59:22:5b:8a:36:28:5c:30:d0:a0:01:10: 2a:c2:76:a8:f6:8a:ff:3f:4a:6f:44:63:9d:57:ed: 8b:93:5b:a5:ce:3d:e8:4d:69:19:25:2c:a0:a2:01: ca:23:07:44:32:74:03:5f:f6:75:6a:18:91:7c:2c: a6:44:9a:c2:f3:f8:b5:5f:e4:cb:1c:eb:45:b2:ce: b7:4a:cf:fa:dd:de:96:42:38:c0:d8:ca:59:c7:3e: 6a:7d:79:13:ad:ee:25:0b:85:f5:ac:0c:6b:ad:73: b0:78:c9:15:5a:88:11:c2:4b:80:14:f3:8d:14:3d: 06:b8:13:3b:32:7c:a9:1b:1d:4a:44:f1:74:f3:56: 04:d7:06:cc:42:e1:54:58:c6:b1:28:e9:45:e5:98: 55:ae:12:cf:2c:7c:13:ff:36:3d:6e:b6:98:38:c7: ca:2e:ea:cd:62:c3:11:25:ec:df:88:39:7c:43:d4: de:50:4d:a4:84:60:f0:c3:cb:09:81:f6:58:0a:59: 66:2b:d6:ef:13:f9:04:8f:ab:3e:38:f3:c5:d3:f5: 41:2a:0b:9d:00:4e:b4:a7:49:34:37:29:22:c2:f2: fa:3a:0d:1f:66:08:99:4b:d7:15:43:6e:33:28:02: 0f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B1:79:05:D8:F7:DC:B8:91:5D:6C:75:7B:77:6E:B1:E8:04:6A:B0 X509v3 Authority Key Identifier: keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:a8:4a:71:26:ec:3d:c6:4e:8a:30:67:d7:28:c5:49:6f:64: 5d:f8:a4:dd:79:61:c6:77:4a:70:21:4e:00:1f:a8:62:aa:e0: 8d:ad:30:c5:98:b4:b0:c7:5e:a7:1a:64:c3:36:d7:af:53:8d: b3:13:bd:5c:15:b0:34:3a:32:11:4e:f2:91:8d:06:c5:85:68: bc:5d:bb:4f:9d:9a:19:05:64:4f:1f:74:97:2f:66:de:13:cd: 5d:73:b2:e4:57:76:20:fa:ea:7c:ca:22:a4:17:a6:fa:2b:6f: 6a:d7:5b:58:97:a9:97:c9:cf:5d:77:5d:96:bf:60:17:dd:04: b1:aa:8b:3b:09:b1:76:6d:9c:eb:d5:bb:3e:72:67:b3:8a:5f: c0:a1:3c:8f:82:58:01:75:ec:38:de:06:9a:65:b0:ec:47:f2: c5:27:50:b0:79:f5:ff:c6:74:7f:ad:be:af:82:4f:c1:f2:4e: b8:41:f8:47:d8:1a:e8:06:5a:24:3d:98:cf:ae:f8:b5:06:af: 76:4a:b4:16:80:f2:73:70:86:8e:b7:ea:e6:6b:9e:c9:81:fd: b0:44:a7:50:a4:65:75:10:e1:3d:2e:d5:9d:19:7f:d5:ec:de: 74:51:44:c3:65:b9:98:48:99:10:c1:32:4c:67:7e:f4:cc:62: 16:ad:ca:76 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 REI0OTJBRjExMC8GA1UEBRMoRjQzRTA2NjhFRjcyQkQ4N0ZBNTM2OEJFMkI2ODE1 QzBCQ0I0MDE0OTAeFw0yNTEwMTkwMzA1NDFaFw0yNTEwMjEwMzA1NDFaMBgxFjAU BgNVBAMTDTY4ZjQ1NTg2LWYwMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDRRf1VAWbDxvMYlK7wSyOWZ1kiW4o2KFww0KABECrCdqj2iv8/Sm9EY51X 7YuTW6XOPehNaRklLKCiAcojB0QydANf9nVqGJF8LKZEmsLz+LVf5Msc60WyzrdK z/rd3pZCOMDYylnHPmp9eROt7iULhfWsDGutc7B4yRVaiBHCS4AU840UPQa4Ezsy fKkbHUpE8XTzVgTXBsxC4VRYxrEo6UXlmFWuEs8sfBP/Nj1utpg4x8ou6s1iwxEl 7N+IOXxD1N5QTaSEYPDDywmB9lgKWWYr1u8T+QSPqz4488XT9UEqC50ATrSnSTQ3 KSLC8vo6DR9mCJlL1xVDbjMoAg+NAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUxbF5 Bdj33LiRXWx1e3dusegEarAwHwYDVR0jBBgwFoAU9D4GaO9yvYf6U2i+K2gVwLy0 AUkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkRCNDkyLzEwREE5OTc2NEEwMzExRUQ4RjU5RDg5RUYxMjIyNDY4LzlENEdh Tzl5dllmNlUyaS1LMmdWd0x5MEFVay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLzlENEdhTzl5dllmNlUyaS1LMmdWd0x5MEFVay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2REI0OTIvMTBEQTk5NzY0QTAzMTFFRDhGNTlEODlFRjEy MjI0NjgvOUQ0R2FPOXl2WWY2VTJpLUsyZ1Z3THkwQVVrLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDHqEpxJuw9xk6KMGfXKMVJb2Rd+KTd eWHGd0pwIU4AH6hiquCNrTDFmLSwx16nGmTDNtevU42zE71cFbA0OjIRTvKRjQbF hWi8XbtPnZoZBWRPH3SXL2beE81dc7LkV3Yg+up8yiKkF6b6K29q11tYl6mXyc9d d12Wv2AX3QSxqos7CbF2bZzr1bs+cmezil/AoTyPglgBdew43gaaZbDsR/LFJ1Cw efX/xnR/rb6vgk/B8k64QfhH2BroBlokPZjPrvi1Bq92SrQWgPJzcIaOt+rma57J gf2wRKdQpGV1EOE9LtWdGX/V7N50UUTDZbmYSJkQwTJMZ370zGIWrcp2 -----END CERTIFICATE-----Generated at Mon Oct 20 00:15:34 2025 by rpki-client