$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft File: aMXkutXc1WSiVidTyay2Mr0ky1A.mft (raw, json) Hash identifier: BrfPellVW5K1TLEAy89wOmLNzhbfgQRNjhw8Y+Wdd8A= Subject key identifier: 52:45:A1:61:88:45:DE:45:50:3C:22:3D:3C:C1:1D:4B:10:A1:A8:89 Authority key identifier: 68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50 Certificate issuer: /CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50 Certificate serial: 08E2 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft Manifest number: 08D1 Signing time: Sat 23 Aug 2025 01:40:02 +0000 Manifest this update: Sat 23 Aug 2025 01:40:01 +0000 Manifest next update: Mon 25 Aug 2025 01:40:01 +0000 Files and hashes: 1: aMXkutXc1WSiVidTyay2Mr0ky1A.crl (hash: OufO2bgue4cNZvcXB6IkiJn1rLvzsw9r2ztT1o+iEHA=) 2: 67CF4D4AC47A11EBAC1DCB2EF8AEA228.roa (hash: itFkoyhCFbkxoKe/6GZZJKhOYtJVGG20wDDeoMWtUpQ=) 3: 51DD5CFA362311EC86345D40D8A014CE.roa (hash: ZOjl1c6p5MEg7MhRsQboW+KWuk6lGFrNRsr8eT5zSuA=) 4: 2E3A1228F14211EB95363E26D8A014CE.roa (hash: vD5KpjCW2oLjrazeJW7vuUKZt8XTsZHweUUc6bDl3m8=) 5: 0668CDBA8ECF11EA92325F27F8AEA228.roa (hash: obmP99ZP4gHqQi9QCtzWh7Wc0rtLRTLbw4IjE5aS9HE=) 6: 7F90265C003411EC9AEFCB7BD8A014CE.roa (hash: Us9bdbPalZ+yx1ibe5L/RTGvBCGXXo3x0b9dZX+Z/FM=) 7: 2A0AF02ED8D711EB93E56C7BF8AEA228.roa (hash: ZQ6oLNCOYoaY+3u19bx5mMnPdr11GM9m4rQK5cGUyGQ=) 8: 5E0FF05A1C8811EC996FCB76D8A014CE.roa (hash: Vk5ASQFgQjjsZEjyJ+X43+pLR30VafAKoJRgMFTM8vk=) 9: 59AB9F46ACB311EA94FB7A5CF8AEA228.roa (hash: M7zBdV0WcI6PFd9tLd94yJGWhV8lnlP02DcFXSG5pCM=) 10: 77F17762ACB511EAB011A45EF8AEA228.roa (hash: 1/STozfAIpnz6GETEBd4lb3u077CE2WkxWA/E9NUlaI=) 11: 83CC39468F0011EA98508558F8AEA228.roa (hash: L5ieRjYiG1OFGX8hr9WtcOwJsazJ2sf4i+jmqBumzYY=) 12: 4D5B7DFA9A9911EAB460C75DF8AEA228.roa (hash: 08HHiOipKJGcq74gZtGxaBA7hKxLZk9ttDnVaGPnEtA=) 13: DA956AF2E91F11EB8EE78B08D8A014CE.roa (hash: yi/kGe9K7bgzzNjuJJ9WkvYPrz9NLiez9H+X0/yDZ1o=) 14: 4F75903E8F9B11EAB3F92A79F8AEA228.roa (hash: 4DXiHxGSCbsyOMNhnwXSRwIzqtdpPeRGAU+Vq8d2Sbo=) 15: BC497164BFC211EB9C90B47DF8AEA228.roa (hash: vShLouUDMlMysq5av2KQKsWgiT2JaBcuHkhVOPxBIWk=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 25 Aug 2025 00:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2274 (0x8e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36DE46FAF, serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50 Validity Not Before: Aug 23 01:40:01 2025 GMT Not After : Aug 25 01:40:01 2025 GMT Subject: CN=68a91bf2-0955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3b:37:9e:d4:85:50:f5:b5:31:53:c1:61:37: 69:dc:75:e9:d2:ad:cb:e5:a0:91:d6:95:fa:78:f8: 73:17:48:20:d1:6c:ff:3f:07:d9:06:d7:b2:21:f8: e5:e6:19:c6:82:60:03:fd:34:8a:0a:3c:d5:a6:f7: 7e:a5:1f:ec:21:18:eb:81:b1:d3:37:10:93:dc:72: d0:f7:85:78:a6:20:ba:3d:63:73:ab:21:31:21:df: c8:91:1a:c2:b0:04:47:7b:56:19:e5:39:04:1b:50: 61:e5:18:0b:7c:87:59:8a:61:a2:b6:47:08:2a:3c: 5f:92:f2:10:08:6e:b7:32:cb:f2:ed:0a:de:6b:8d: c1:94:70:38:14:d1:49:73:66:0f:95:08:8f:c0:47: 3a:49:0a:13:55:cf:3c:32:e4:7f:f9:93:7b:31:60: 50:a1:55:ed:2e:d8:90:e0:e7:3e:c1:c7:72:e6:bf: 0e:ff:6b:bc:28:41:ad:b3:cf:43:7d:57:c7:f8:78: 19:13:5f:f3:52:0e:c5:9d:ed:47:4e:48:96:42:c8: 4b:09:2e:9d:6a:c7:31:27:bc:a0:aa:6d:2c:90:45: 7e:09:71:46:a3:38:65:4f:37:1c:b6:55:40:da:1d: a9:9b:ea:a2:a0:e4:54:f6:db:2d:57:13:85:27:b2: 0f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:45:A1:61:88:45:DE:45:50:3C:22:3D:3C:C1:1D:4B:10:A1:A8:89 X509v3 Authority Key Identifier: keyid:68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9e:fb:d1:f3:27:51:3f:c8:02:c9:3c:85:64:9b:5e:67:a4: 66:62:cb:2f:88:09:51:d1:66:a5:ae:c3:55:c4:db:3d:52:23: 93:5a:3b:70:bc:d1:98:a2:2d:0e:eb:49:62:98:d7:0c:f2:39: 29:92:bf:bd:39:11:04:42:45:59:22:68:d3:aa:87:8d:61:b2: 7a:4c:68:e1:74:89:e7:06:25:77:48:cf:3a:ad:a0:8b:2e:15: 72:3c:71:d6:e8:5c:ff:d5:e1:b9:c8:95:5d:fc:d7:76:c8:d2: 31:35:1d:89:2b:6b:2a:df:0a:c9:69:de:af:51:2a:df:bd:b7: c3:18:4f:a3:a1:9d:83:37:42:ab:35:ff:64:88:2e:07:84:9c: 6c:60:94:05:7f:4a:ca:24:86:25:35:6f:e6:c1:cc:ae:f3:c8: 7e:fd:8d:d7:f9:1e:da:51:3d:fa:8a:a8:77:37:f0:b9:b4:1a: cd:d6:02:67:4c:a0:54:79:66:d1:83:d8:ce:a4:e5:dd:e6:d0: fd:61:2b:14:e0:95:43:50:82:a5:0d:1a:8f:b1:c1:45:e5:42: cc:d5:67:a7:c6:93:98:45:cd:27:33:3d:7f:89:05:12:6f:63: c6:f9:f7:03:e1:6e:69:fd:5c:60:a7:7c:82:cc:8d:ca:15:98: c4:f7:87:5d -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCOIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 REU0NkZBRjExMC8GA1UEBRMoNjhDNUU0QkFENURDRDU2NEEyNTYyNzUzQzlBQ0I2 MzJCRDI0Q0I1MDAeFw0yNTA4MjMwMTQwMDFaFw0yNTA4MjUwMTQwMDFaMBgxFjAU BgNVBAMTDTY4YTkxYmYyLTA5NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDdOzee1IVQ9bUxU8FhN2ncdenSrcvloJHWlfp4+HMXSCDRbP8/B9kG17Ih +OXmGcaCYAP9NIoKPNWm936lH+whGOuBsdM3EJPcctD3hXimILo9Y3OrITEh38iR GsKwBEd7VhnlOQQbUGHlGAt8h1mKYaK2RwgqPF+S8hAIbrcyy/LtCt5rjcGUcDgU 0UlzZg+VCI/ARzpJChNVzzwy5H/5k3sxYFChVe0u2JDg5z7Bx3Lmvw7/a7woQa2z z0N9V8f4eBkTX/NSDsWd7UdOSJZCyEsJLp1qxzEnvKCqbSyQRX4JcUajOGVPNxy2 VUDaHamb6qKg5FT22y1XE4Unsg9xAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUUkWh YYhF3kVQPCI9PMEdSxChqIkwHwYDVR0jBBgwFoAUaMXkutXc1WSiVidTyay2Mr0k y1AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkRFNDZGL0VCNDkzNENDRDVGRTExRTk5NTI4MTkzQkY4QUVBMjI4L2FNWGt1 dFhjMVdTaVZpZFR5YXkyTXIwa3kxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2FNWGt1dFhjMVdTaVZpZFR5YXkyTXIwa3kxQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2REU0NkYvRUI0OTM0Q0NENUZFMTFFOTk1MjgxOTNCRjhB RUEyMjgvYU1Ya3V0WGMxV1NpVmlkVHlheTJNcjBreTFBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfnvvR8ydRP8gCyTyFZJteZ6RmYssv iAlR0WalrsNVxNs9UiOTWjtwvNGYoi0O60limNcM8jkpkr+9OREEQkVZImjTqoeN YbJ6TGjhdInnBiV3SM86raCLLhVyPHHW6Fz/1eG5yJVd/Nd2yNIxNR2JK2sq3wrJ ad6vUSrfvbfDGE+joZ2DN0KrNf9kiC4HhJxsYJQFf0rKJIYlNW/mwcyu88h+/Y3X +R7aUT36iqh3N/C5tBrN1gJnTKBUeWbRg9jOpOXd5tD9YSsU4JVDUIKlDRqPscFF 5ULM1WenxpOYRc0nMz1/iQUSb2PG+fcD4W5p/Vxgp3yCzI3KFZjE94dd -----END CERTIFICATE-----Generated at Sat Aug 23 14:25:12 2025 by rpki-client