$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft File: ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft (raw, json) Hash identifier: yZ2YWCdoLU+oyNbhLVmYNrFwpUEhghv2k0c/WXJRy+A= Subject key identifier: 09:55:97:C0:E8:A4:32:0B:C4:22:7C:CC:6F:ED:C2:49:B5:67:19:03 Authority key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2 Certificate issuer: /CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2 Certificate serial: 02BC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft Manifest number: 02A9 Signing time: Sat 23 Aug 2025 04:08:45 +0000 Manifest this update: Sat 23 Aug 2025 04:08:44 +0000 Manifest next update: Mon 25 Aug 2025 04:08:44 +0000 Files and hashes: 1: ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl (hash: t4VAWo9Scf5DDxMiIr5tjz2ctBA6ccfOdl+30lNubVQ=) 2: 4EA7D32E53E611EF9B5BE56C762E951A.roa (hash: NtlpVvP6+zWzB8RFTth6ghNvN5nR/THSHfhDD9x2bP8=) 3: C1A1DD34BE5E11EE99164ABD775412E6.roa (hash: wvW9kZ5/AUNQWgKaGpjvpIVPHuqxftH9YadONSy7YnM=) 4: 757D2A34887711EE836A404E4AD9E6FC.roa (hash: +ZI3X/alavjG8hd5TUGXudmlVMdSEsoVpfbaqPGHQKA=) 5: A1BBDFB45BDA11EFA2803F75762E951A.roa (hash: B+/DOrNgATDNRMYx/JLMgJNXWHAPifjl6iw4sXJYoDA=) 6: D2F9CEC4BE4B11EE8D656598775412E6.roa (hash: Cxpb4VpHsS5nAkYLG5LF8Ro6WmVM8kJPPNxJ4wnGbyc=) 7: 75479C3CBE5711EEA57807B1775412E6.roa (hash: KJ78VQh/EaM4VrWU0qtdFJzJqdOESws+8hhBj0+/JkQ=) 8: 8804A9420EF611EF90E9CB4F017001B1.roa (hash: Ah/gC+WFiWi7Jlp6m9g/RNWVwD4e/UvuFekwBmptqnY=) 9: A8121FD29CFC11EF91E12A85762E951A.roa (hash: 40tq9RUAvjkX3eq2QoBMj2ZOuP4wwcDT4oeJUrXPD54=) 10: EC1D132E0D2A11EFB8F87A2D017001B1.roa (hash: Ly9LZH0Fh6E4ZtDar/abB8C31gGCVwPrBo7kMnb8boM=) 11: 0EF37AD45BDA11EF9E5BF670762E951A.roa (hash: 51koAiGBT4Qlz96Il2OYaGj869PU6MSFeqlPyjHqg1Q=) 12: 518CAA929CFC11EF95640782762E951A.roa (hash: OyktAYCtLdWaRz8aqABUtVcVPRFArgA2QV1t66oDcS8=) 13: 23292B7612C311EFB9087350017001B1.roa (hash: ljEIXCzMDkNC6MsSv3Wx80qJCOfaflJx6GdHSwJRefU=) 14: F3558888612511F098D6E98EDAE4EC9C.roa (hash: JDtyMwOOrKTy2qsgEw1FCl42QKzix0RW6dRZVcnlssk=) 15: D265FEDE0BCA11EF917FA0F3007001B1.roa (hash: JnlsXUtJ6yRPF3xH5RBfKSof1yPWn25dJe2aCkd3Tug=) 16: 68E2FFBA615611F0A2488AD5DAE4EC9C.roa (hash: w3HgJ6iasE0Baeop5RBkwj/+ubVBgHbMYQzGZBLJCBU=) 17: 7F5635A2887511EEBFD443484AD9E6FC.roa (hash: ocQwdIyiszloWpRuczWxhp841V/qq4mP8+w57e47R8w=) 18: 3B419B887CAB11EFB49DDE4D762E951A.roa (hash: IQzn2Mmxf3299kc5c2KxlM3LEdiHGEsho1HI4seozUE=) 19: 88C005FAE86F11EEA0289955775412E6.roa (hash: 2xUGL17bO3ah/ni1p+4Y+DjG347crU5mRkFs3eTev0U=) 20: 566CE01C0BD011EF922BB41F017001B1.roa (hash: NJoaiPoqCsvM8uTcCsGcl3CIrYSjToxekiedssQBL9U=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 25 Aug 2025 00:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 700 (0x2bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36E4B69AF, serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2 Validity Not Before: Aug 23 04:08:44 2025 GMT Not After : Aug 25 04:08:44 2025 GMT Subject: CN=68a93ecd-a5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:ea:f0:5f:b7:9e:fd:ad:1b:e1:82:74:95: 1e:b9:8a:39:3d:b5:f8:c2:f0:6c:dc:43:4a:85:bd: 39:08:40:1c:61:5d:e0:0a:d0:b9:77:db:b1:0d:64: ed:cb:20:05:d0:47:84:c2:22:c9:e5:8f:7d:65:76: b0:5d:64:ac:d8:45:c6:5e:61:8a:71:92:4f:2a:e9: 8a:c4:40:32:71:ec:7a:7c:39:21:a0:8f:29:63:17: da:89:09:7f:fd:cc:2e:6a:5d:15:f2:ba:b1:3f:10: 03:05:53:a5:ff:a6:c7:28:24:98:56:f6:13:13:6e: d8:12:a9:fe:20:24:7e:12:0b:49:56:b9:6a:ec:41: c8:b8:d6:4d:fd:05:4c:4f:4c:bf:8b:d6:25:e3:0b: 7f:f5:5b:31:84:44:39:54:30:13:0a:03:8d:ce:11: 9d:9f:ad:e8:32:3b:a6:02:eb:be:aa:85:a6:99:8b: de:c3:ba:f5:3a:af:4e:45:d0:13:ab:ce:89:99:82: 47:21:4f:e0:39:9d:d2:1d:5c:52:74:87:84:04:7f: 74:88:5b:84:82:71:0a:58:d8:c4:ed:e2:a9:12:f4: e1:74:e9:8c:2f:64:8b:e9:14:f1:b4:1a:18:d5:5e: af:31:ab:86:b8:5b:3b:90:51:74:3a:4f:0c:ea:ba: e7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:55:97:C0:E8:A4:32:0B:C4:22:7C:CC:6F:ED:C2:49:B5:67:19:03 X509v3 Authority Key Identifier: keyid:CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:2b:16:28:18:00:7f:12:73:12:0e:31:36:48:5e:66:09:2b: 6d:fb:6d:9a:7a:62:ec:dc:bc:80:31:40:9d:af:64:3f:be:99: d4:48:93:84:13:db:47:80:59:c5:1d:7f:87:1f:0f:32:71:ad: 3b:f9:79:af:87:08:a6:4c:06:5b:09:3d:9a:2c:bf:0c:31:a8: f8:c6:a0:08:03:99:04:f9:eb:ab:50:ae:11:8a:dc:76:b9:57: 1b:ec:f5:b9:0e:13:4a:bf:70:ad:fb:2c:07:20:59:3c:7a:9f: 19:49:22:06:16:76:8f:f5:df:f0:fa:08:79:43:65:c5:91:3c: 62:31:d1:13:26:ee:d5:0d:71:a6:b2:7e:7d:45:bb:43:9d:d9: 62:91:8c:2a:55:d5:a5:d4:3e:9c:97:44:cb:71:57:58:04:13: d6:71:92:cb:8a:76:40:9c:00:79:5a:8a:67:65:03:a9:d1:a5: d0:a9:68:5c:ac:a7:40:a8:3f:f1:6a:7b:f2:ce:2b:b0:1a:97: 70:28:dd:7a:24:66:9f:5a:94:8b:11:81:c2:0e:f8:2b:15:7a: 51:24:6c:73:06:22:a6:ea:09:b6:79:e5:e8:bb:f8:90:a0:72: ba:6b:ca:57:b9:20:01:dd:28:29:a5:e0:01:69:2f:d7:4c:bc: 69:27:ab:db -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICArwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RTRCNjlBRjExMC8GA1UEBRMoQ0E2NjQyRUE5QUZDQzczQUEyNEFBNDA0NzU0NEIx N0MyNjAzQ0JEMjAeFw0yNTA4MjMwNDA4NDRaFw0yNTA4MjUwNDA4NDRaMBgxFjAU BgNVBAMTDTY4YTkzZWNkLWE1ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCukOrwX7ee/a0b4YJ0lR65ijk9tfjC8GzcQ0qFvTkIQBxhXeAK0Ll327EN ZO3LIAXQR4TCIsnlj31ldrBdZKzYRcZeYYpxkk8q6YrEQDJx7Hp8OSGgjyljF9qJ CX/9zC5qXRXyurE/EAMFU6X/pscoJJhW9hMTbtgSqf4gJH4SC0lWuWrsQci41k39 BUxPTL+L1iXjC3/1WzGERDlUMBMKA43OEZ2fregyO6YC676qhaaZi97DuvU6r05F 0BOrzomZgkchT+A5ndIdXFJ0h4QEf3SIW4SCcQpY2MTt4qkS9OF06YwvZIvpFPG0 GhjVXq8xq4a4WzuQUXQ6Twzquud5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUCVWX wOikMgvEInzMb+3CSbVnGQMwHwYDVR0jBBgwFoAUymZC6pr8xzqiSqQEdUSxfCYD y9IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkU0QjY5L0RFMTQ3NzBFODg3MzExRUU4OUI4MTE0MzRBRDlFNkZDL3ltWkM2 cHI4eHpxaVNxUUVkVVN4ZkNZRHk5SS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3ltWkM2cHI4eHpxaVNxUUVkVVN4ZkNZRHk5SS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RTRCNjkvREUxNDc3MEU4ODczMTFFRTg5QjgxMTQzNEFE OUU2RkMveW1aQzZwcjh4enFpU3FRRWRVU3hmQ1lEeTlJLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAlKxYoGAB/EnMSDjE2SF5mCStt+22a emLs3LyAMUCdr2Q/vpnUSJOEE9tHgFnFHX+HHw8yca07+XmvhwimTAZbCT2aLL8M Maj4xqAIA5kE+eurUK4Ritx2uVcb7PW5DhNKv3Ct+ywHIFk8ep8ZSSIGFnaP9d/w +gh5Q2XFkTxiMdETJu7VDXGmsn59RbtDndlikYwqVdWl1D6cl0TLcVdYBBPWcZLL inZAnAB5WopnZQOp0aXQqWhcrKdAqD/xanvyziuwGpdwKN16JGafWpSLEYHCDvgr FXpRJGxzBiKm6gm2eeXou/iQoHK6a8pXuSAB3SgppeABaS/XTLxpJ6vb -----END CERTIFICATE-----Generated at Sat Aug 23 12:38:55 2025 by rpki-client