$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft File: T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft (raw, json) Hash identifier: s+6VjMKaikRFGQPro3t80i3zg1JlaAI/rzu5PEyu6mk= Subject key identifier: 3D:41:A1:5A:78:B9:33:F0:BC:59:F3:0F:53:7D:17:C4:CD:AD:D2:7F Authority key identifier: 4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79 Certificate issuer: /CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179 Certificate serial: 087A Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft Manifest number: 086E Signing time: Mon 20 Oct 2025 01:42:48 +0000 Manifest this update: Mon 20 Oct 2025 01:42:48 +0000 Manifest next update: Wed 22 Oct 2025 01:42:48 +0000 Files and hashes: 1: T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl (hash: nbWYYc1M0i005n4w3MEA4bHnswtt9sKzAGCEK3LQpio=) 2: D2CA8558427911EAA3FED044F8AEA228.roa (hash: wurkYmqla/v4WBGYx1KQBTG96SHI4XZxvbfOZjy6dDc=) 3: FDA49C78427911EABA58F344F8AEA228.roa (hash: eNItvTIs3jbqReG8otIUPR5mjUnULKzx6gvlJCH+hbE=) 4: 41B6AD86469C11EA81469227F8AEA228.roa (hash: GFpsTEOd32IACxfCYv+4g0rk0Bgklgcuemi0F5TjBIo=) 5: C856574C41AB11EA9C27F52BF8AEA228.roa (hash: bz5TA1squK7Ifl9jqtLCRwvkOyW8Qa1kaJWgUXUsT5Y=) 6: 57CE8E244FFF11EF959DB964762E951A.roa (hash: fyxQpuVFjDxsdPdxESeE+9woq7cT+VNLSx/q/+d4MIo=) 7: 3281CE182B7211EEAF2893194AD9E6FC.roa (hash: fkff7v1iK+AxXqvd4C6nSAa4nFagy3GTQ4X7UfCbswc=) 8: D3167F64BBA311EA84581016F8AEA228.roa (hash: olteyMOY4v7fnBH8LXpkJqIEF+laR8HIc07JsyM+o9Y=) 9: 482F6A4C583F11EDA5C92AB4F1222468.roa (hash: 1bNHg5hR2N1EwB0UNF89B2hLunHKeyd9Nx1pg6+rORw=) 10: 7576B97E4FFF11EF84A6EB64762E951A.roa (hash: 33ok2yqrTl57C64Sr4/sUY8EF0IDi0i5pKehUOrq0+s=) 11: 168D8CF6BBA411EA82D06016F8AEA228.roa (hash: GX7T680/ieOsGwBZtEWumw47ki7Ge95lGqYGrmNJnos=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 22 Oct 2025 00:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2170 (0x87a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36F6E4AAF, serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179 Validity Not Before: Oct 20 01:42:48 2025 GMT Not After : Oct 22 01:42:48 2025 GMT Subject: CN=68f59398-9a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1c:b3:88:6b:b7:33:41:a2:06:0e:b1:f5:79: 01:6f:13:ad:38:5b:38:49:9c:95:65:50:d1:bd:c3: 10:58:ae:4b:e0:7b:18:f2:0a:67:1c:3e:47:3e:54: 2a:83:d6:23:08:f5:0c:d7:ca:d1:f5:23:3e:7c:e2: 25:53:75:87:2f:49:03:6d:d8:7b:6f:a2:48:da:74: 9a:f8:b8:eb:6d:20:52:8a:73:64:3c:23:95:d7:93: e7:b3:75:5e:e6:50:e2:bf:bc:12:43:34:82:42:80: 3f:dd:ad:47:29:99:ed:62:fa:ee:be:d4:12:c2:dc: 43:35:68:4e:38:50:61:00:0b:19:9c:68:6f:e9:1c: 90:89:32:c6:ca:0d:5d:b4:96:34:3a:ac:be:d8:b8: fd:4d:d0:4d:76:4f:48:16:c9:16:6a:a0:9b:19:d0: 71:96:8b:59:f7:e0:65:9a:29:4c:da:09:74:cc:b1: be:d7:1e:b1:57:31:4e:36:b7:8a:b1:f0:f3:8f:15: ba:7a:5e:22:1c:a4:d3:7c:0b:a8:33:8c:89:db:2b: 36:88:9c:cd:01:f0:37:fb:04:2b:c7:e0:d2:f5:58: 1d:c6:fe:ff:73:84:d2:95:7d:48:02:ac:25:7e:05: 00:d5:29:13:38:4e:b9:9d:71:69:6d:43:9d:07:7a: 30:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:41:A1:5A:78:B9:33:F0:BC:59:F3:0F:53:7D:17:C4:CD:AD:D2:7F X509v3 Authority Key Identifier: keyid:4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:36:08:49:39:8a:76:0b:9a:81:7d:9b:ba:b0:45:d1:ac:7f: d2:f1:77:51:11:a8:da:76:64:45:69:fb:9a:69:9e:ae:d7:8c: 9a:62:33:b2:76:f8:62:fd:bf:5a:f4:0e:fd:4b:d1:25:ab:26: 61:c4:24:fb:bd:55:a2:e4:28:cd:7d:8d:35:95:02:d3:3e:9d: 72:2d:82:89:fe:33:a5:3d:1a:1c:e4:bc:5f:14:03:02:b4:ba: 6b:ba:e6:05:c0:f8:a0:9f:30:9a:35:93:be:f2:13:1e:99:f8: dd:65:78:ef:c3:c4:8f:2b:2d:7c:91:ad:27:76:a7:15:9e:37: a4:3b:42:08:71:8d:18:a1:82:31:b1:b0:4c:ca:57:22:1d:63: c4:63:22:5e:94:a5:b5:f1:0d:cd:ed:72:b4:56:a2:2a:96:ac: 18:91:21:7a:00:13:16:fd:7b:4b:3b:c4:d7:ec:ff:38:91:cd: 5a:4b:dc:8d:b6:6e:4c:a7:be:5b:6b:88:71:98:84:d5:39:4c: 29:2a:5c:e4:80:c7:da:97:ab:50:3c:a7:b9:40:51:02:6d:aa: 12:d9:e5:25:97:7c:31:e0:86:d8:48:13:18:14:7b:44:76:18: ba:85:92:c7:2e:2b:e2:4e:cb:4a:a1:65:40:e2:46:1c:cb:71: b5:43:fe:28 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCHowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RjZFNEFBRjExMC8GA1UEBRMoNEZFRTEyOUQwOUFCODUwREEwMzlFN0Y1QkIyNEI2 Njk5QTBGODE3OTAeFw0yNTEwMjAwMTQyNDhaFw0yNTEwMjIwMTQyNDhaMBgxFjAU BgNVBAMTDTY4ZjU5Mzk4LTlhNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDEHLOIa7czQaIGDrH1eQFvE604WzhJnJVlUNG9wxBYrkvgexjyCmccPkc+ VCqD1iMI9QzXytH1Iz584iVTdYcvSQNt2HtvokjadJr4uOttIFKKc2Q8I5XXk+ez dV7mUOK/vBJDNIJCgD/drUcpme1i+u6+1BLC3EM1aE44UGEACxmcaG/pHJCJMsbK DV20ljQ6rL7YuP1N0E12T0gWyRZqoJsZ0HGWi1n34GWaKUzaCXTMsb7XHrFXMU42 t4qx8POPFbp6XiIcpNN8C6gzjInbKzaInM0B8Df7BCvH4NL1WB3G/v9zhNKVfUgC rCV+BQDVKRM4TrmdcWltQ50HejBFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUPUGh Wni5M/C8WfMPU30XxM2t0n8wHwYDVR0jBBgwFoAUT+4SnQmrhQ2gOef1uyS2aZoP gXkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkY2RTRBLzlENTk0RjcyNDFBNjExRUE4ODg2M0UyOEY4QUVBMjI4L1QtNFNu UW1yaFEyZ09lZjF1eVMyYVpvUGdYay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1QtNFNuUW1yaFEyZ09lZjF1eVMyYVpvUGdYay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RjZFNEEvOUQ1OTRGNzI0MUE2MTFFQTg4ODYzRTI4RjhB RUEyMjgvVC00U25RbXJoUTJnT2VmMXV5UzJhWm9QZ1hrLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhNghJOYp2C5qBfZu6sEXRrH/S8XdR EajadmRFafuaaZ6u14yaYjOydvhi/b9a9A79S9ElqyZhxCT7vVWi5CjNfY01lQLT Pp1yLYKJ/jOlPRoc5LxfFAMCtLpruuYFwPignzCaNZO+8hMemfjdZXjvw8SPKy18 ka0ndqcVnjekO0IIcY0YoYIxsbBMylciHWPEYyJelKW18Q3N7XK0VqIqlqwYkSF6 ABMW/XtLO8TX7P84kc1aS9yNtm5Mp75ba4hxmITVOUwpKlzkgMfal6tQPKe5QFEC baoS2eUll3wx4IbYSBMYFHtEdhi6hZLHLiviTstKoWVA4kYcy3G1Q/4o -----END CERTIFICATE-----Generated at Mon Oct 20 10:31:28 2025 by rpki-client