$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft File: x4zcO11LE2dctIrTtjvgHsWoB_g.mft (raw, json) Hash identifier: ARb5Ie9Jkaw0Hot2RLhtRuWoT+RkqBtcll6X7PwcuqU= Subject key identifier: 13:48:7F:73:19:13:98:9C:0B:10:A3:F2:41:B9:AB:9E:33:14:23:CD Authority key identifier: C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8 Certificate issuer: /CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8 Certificate serial: 046F Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft Manifest number: 0460 Signing time: Sat 23 Aug 2025 03:13:20 +0000 Manifest this update: Sat 23 Aug 2025 03:13:19 +0000 Manifest next update: Mon 25 Aug 2025 03:13:19 +0000 Files and hashes: 1: x4zcO11LE2dctIrTtjvgHsWoB_g.crl (hash: bQV6Zx6qeEAH4fy1BiJEcOabBTC74+BPtQK+0LwAbe4=) 2: 45E09460492011EDA58FEACFF1222468.roa (hash: W7ubFeQV8onhDcwxeg30ugXXalNtBd+ZG/y/BamgqXk=) 3: 99986272498611F0BE1E23EEDAE4EC9C.roa (hash: Z4gQzojiEKX5fZtqwTgoYBRKXPibvfeQJQnSktukfUM=) 4: 61F3ED46A71011EFA4F58993762E951A.roa (hash: S/a4NOGDMCYqavfy2n6nHPuJWnA8uLXKDGrhZokqBOA=) 5: 88A5B71428C311F0BEF0A0B4DAE4EC9C.roa (hash: ePq4EbCDmWiOxXuBQCEii4Bej/F9RXahE4beV/zVjQ0=) 6: 24769B8AC01B11EE87488562775412E6.roa (hash: Juiav7EMo7UB6/g3W5W1dR2kpf5FMViakz+hnSTb9pI=) 7: CE07EBFC434F11EE9E338E5E4AD9E6FC.roa (hash: lLKF/LQUCJrjFGeoKrxD3GvZk7yNLfxsdpj4p8cAFcg=) 8: BA5646848B9311EFB18C87BF762E951A.roa (hash: JPWhpnri236k1i+Gn96J/0YOtSYJC79c9FGJpIaebkg=) 9: 76506164C45911EFBD701FB3762E951A.roa (hash: 99UKUf4fnRe0MO3HcCv5JDIcqSTWLiXWxRxR3pGatmc=) 10: 73CC053C4EB611F0AE15C1C8DAE4EC9C.roa (hash: SQV1YsdD1Ajwa0W56ES+0u6UJCxHEKEeYvpdGKFa0ZE=) 11: C4CEB8AC398711EF843D2E9D762E951A.roa (hash: h7S0JCwsO3r6rweJjX0edCYo6Cy5Pss43I07DZlAHq8=) 12: 08DB71BC53EA11EF98E06585762E951A.roa (hash: 9y2Xf3yrmOHpN9GrNuG3T4PeZPIw6BfSrZ7oAs2gMlE=) 13: A278A9AC60E211EF938734A9762E951A.roa (hash: z1Jlw/yZ++yZq2QaqkGqkTifs65T2BP5GQxHjafo/Nk=) 14: 8390093077E011EF94B4F59C762E951A.roa (hash: /gwS+GQo/DPLk6XCYBj5Tt7o/4lhGYntAWZgy7TgGi0=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 25 Aug 2025 00:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1135 (0x46f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36FE19EAF, serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8 Validity Not Before: Aug 23 03:13:19 2025 GMT Not After : Aug 25 03:13:19 2025 GMT Subject: CN=68a931d0-a5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f9:3d:c1:c9:dd:1b:cc:7f:97:f8:85:38:6a: 6a:69:3e:5c:69:1f:2f:76:f7:a4:f3:00:b6:eb:cf: 7b:91:30:af:aa:6f:66:ae:f9:68:81:fc:47:64:56: df:88:05:4c:22:b8:9b:e9:57:9a:77:16:aa:b2:38: e5:17:fb:c5:e9:2e:99:4f:2c:03:39:63:28:9f:6b: 0a:7d:38:6a:9e:c5:27:56:15:63:42:77:84:26:4b: 6c:ec:0c:3f:2c:5e:a2:20:ea:06:df:8c:bd:16:5f: 84:be:72:cb:17:7e:61:45:fc:82:06:42:b6:34:68: 34:bd:c5:8b:6a:6c:59:4d:be:4e:f6:21:d3:06:9e: 7c:09:9f:76:30:88:50:ff:78:09:d3:6e:2e:4c:b4: e9:2a:20:1f:53:d4:17:16:6b:c0:2d:7c:de:32:8c: fd:b2:64:9d:a3:2e:b0:08:7c:92:22:92:af:36:e3: 0f:a3:b6:a4:56:ef:9f:05:27:fd:0a:ac:3b:f8:d8: c4:ef:cf:df:e7:e5:ce:58:ab:4e:a4:e0:53:72:f4: 10:ff:16:92:c0:bd:31:9d:7d:25:f9:ef:4e:30:7a: 15:29:24:e1:45:49:72:94:0a:b1:b0:f8:ff:9f:69: ef:77:b2:01:66:2a:13:2c:d3:a9:63:f0:d3:1e:2b: de:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:48:7F:73:19:13:98:9C:0B:10:A3:F2:41:B9:AB:9E:33:14:23:CD X509v3 Authority Key Identifier: keyid:C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:e1:32:f2:e5:f2:c7:d2:7c:1f:a2:92:54:4a:02:79:79:5e: 71:b5:76:90:96:ee:a8:e6:51:d2:01:2a:2c:65:a9:0d:fa:c6: d6:77:9b:d6:67:9b:d8:4a:61:0a:f0:8e:e4:9c:34:4e:97:e4: 3f:b2:c2:64:1f:72:a9:c5:90:8e:9e:7f:ee:3c:15:29:77:f5: f0:c7:ca:d2:78:19:cb:57:54:a4:e9:bc:d8:bd:c9:84:7e:35: fc:05:4e:e0:f0:15:ad:c3:e4:ed:7c:06:1f:e7:75:d2:df:75: e3:56:3a:65:fd:0a:ac:d1:d1:4e:44:e9:a4:4b:d0:5e:41:7c: 02:f9:38:00:3e:1a:11:9c:65:e8:a8:bf:67:d8:cc:1f:44:f4: d5:99:08:34:b6:18:bf:79:c2:3b:fd:32:0b:90:97:b7:02:38: a1:54:3d:f4:33:56:ee:02:11:45:3c:86:38:a7:37:a3:d7:49: b7:5b:ee:26:83:a3:1e:fd:3e:8d:0b:1b:87:2e:ab:7e:17:49: f5:63:13:94:8e:98:7f:cf:86:cb:ea:f2:98:b2:ed:8b:57:b9: 4d:c2:4a:92:7d:7a:02:3e:81:84:a3:ed:91:11:11:bc:98:7d: f7:9d:5d:03:bb:8f:36:09:1b:13:ca:65:b8:26:7e:f3:3d:2a: 2c:d3:ea:23 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBG8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RkUxOUVBRjExMC8GA1UEBRMoQzc4Q0RDM0I1RDRCMTM2NzVDQjQ4QUQzQjYzQkUw MUVDNUE4MDdGODAeFw0yNTA4MjMwMzEzMTlaFw0yNTA4MjUwMzEzMTlaMBgxFjAU BgNVBAMTDTY4YTkzMWQwLWE1YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDI+T3Byd0bzH+X+IU4amppPlxpHy9296TzALbrz3uRMK+qb2au+WiB/Edk Vt+IBUwiuJvpV5p3FqqyOOUX+8XpLplPLAM5Yyifawp9OGqexSdWFWNCd4QmS2zs DD8sXqIg6gbfjL0WX4S+cssXfmFF/IIGQrY0aDS9xYtqbFlNvk72IdMGnnwJn3Yw iFD/eAnTbi5MtOkqIB9T1BcWa8AtfN4yjP2yZJ2jLrAIfJIikq824w+jtqRW758F J/0KrDv42MTvz9/n5c5Yq06k4FNy9BD/FpLAvTGdfSX5704wehUpJOFFSXKUCrGw +P+fae93sgFmKhMs06lj8NMeK96XAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUE0h/ cxkTmJwLEKPyQbmrnjMUI80wHwYDVR0jBBgwFoAUx4zcO11LE2dctIrTtjvgHsWo B/gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkZFMTlFL0FCN0U3OEJFNDhERjExRURBNzYxQjI5Q0YxMjIyNDY4L3g0emNP MTFMRTJkY3RJclR0anZnSHNXb0JfZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3g0emNPMTFMRTJkY3RJclR0anZnSHNXb0JfZy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RkUxOUUvQUI3RTc4QkU0OERGMTFFREE3NjFCMjlDRjEy MjI0NjgveDR6Y08xMUxFMmRjdElyVHRqdmdIc1dvQl9nLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ4TLy5fLH0nwfopJUSgJ5eV5xtXaQ lu6o5lHSASosZakN+sbWd5vWZ5vYSmEK8I7knDROl+Q/ssJkH3KpxZCOnn/uPBUp d/Xwx8rSeBnLV1Sk6bzYvcmEfjX8BU7g8BWtw+TtfAYf53XS33XjVjpl/Qqs0dFO ROmkS9BeQXwC+TgAPhoRnGXoqL9n2MwfRPTVmQg0thi/ecI7/TILkJe3AjihVD30 M1buAhFFPIY4pzej10m3W+4mg6Me/T6NCxuHLqt+F0n1YxOUjph/z4bL6vKYsu2L V7lNwkqSfXoCPoGEo+2RERG8mH33nV0Du482CRsTymW4Jn7zPSos0+oj -----END CERTIFICATE-----Generated at Sat Aug 23 13:30:16 2025 by rpki-client