$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft File: qO-WBRTjNkRNPN43sktm3DnUPRs.mft (raw, json) Hash identifier: 3BYNvEW6hKciKD3el/PqZ6KhwZO8c6YJ1tQyo6eyOy4= Subject key identifier: F1:3B:DD:19:2E:BF:36:3F:7E:ED:A3:FC:9B:0D:54:79:5A:9C:07:50 Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Certificate serial: 030B Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft Manifest number: 02F7 Signing time: Sun 27 Jul 2025 03:58:37 +0000 Manifest this update: Sun 27 Jul 2025 03:58:37 +0000 Manifest next update: Tue 29 Jul 2025 03:58:37 +0000 Files and hashes: 1: qO-WBRTjNkRNPN43sktm3DnUPRs.crl (hash: B0Mto71yF14qxVMHW/rZxPo3tvRloIo7752OlebcxVI=) 2: C64BDF325B8611EE8F5917154AD9E6FC.roa (hash: lOfMw6yYmupoBGzZG06JxE7nkGYN0SjR1YBL+6yU110=) 3: 221DE36C5B7F11EEBAA0307C4AD9E6FC.roa (hash: akgSyzvUhBZdD/Jo/1snS9zDQnQhIY/z4b5eUssk1L4=) 4: 3FC126045B7F11EE91B3797C4AD9E6FC.roa (hash: B4Jxb4zuiNxx8ARYO+8FuXUu5CFHZJCjPVqFobOB2EU=) 5: F592AE225B7E11EEAAD8A37B4AD9E6FC.roa (hash: H2+/hMWhZrQQ/v+xp+P99me7GUvAhaEZLEIOvuDJ8+o=) 6: 9389DEB25B7E11EE85FB5A794AD9E6FC.roa (hash: saW9gDDU1fU/ss5E5QByOp+7T1wbc1vVgpJ7XS+gk+s=) 7: 39E85D245B7F11EE90195D7C4AD9E6FC.roa (hash: eHbXQ/7kild+PjHeBFmSGxlAnlG3pi2uyC9o63m5Mio=) 8: 44122BBE5B7E11EEA5C359784AD9E6FC.roa (hash: dlLpBI0Us25zgjOKkdJouRreKgFknaWvSBpHKXaHN4Q=) 9: 0DDE14645B8711EEBE2DF3154AD9E6FC.roa (hash: OVYm5oOpe8XlJOHUYg0R0oIytfPmlhVRgGeohPVoeGg=) 10: E29E1C625B7D11EEAFF513774AD9E6FC.roa (hash: cL6yXVTdN5LFRK/8lI56JvUwQ8huIMxP3ArtUJsfAsg=) 11: 0DB547A45B7E11EE95F5E0774AD9E6FC.roa (hash: sgLUjm9KT8NBSGsfPuF7zb59LXdnTNhjWZlBuJluY4o=) 12: 82BE0D345B8711EE8AF170174AD9E6FC.roa (hash: du0kSdCk2tSzKNVUZIxuV5z/5Bcr0/T6HJ/NasAIv4s=) 13: 673167545B7E11EE98EEBD784AD9E6FC.roa (hash: adqbPWSj3qJmhRpUh3DUEWmWfDKPs4YfwC9ZlFS5ias=) 14: A97AA9E05B7E11EEAD5E8F794AD9E6FC.roa (hash: 3NkJ+hNEcmyOZzaQCsy/+Ozh2yGmiiWLNtnnqsmfG2I=) 15: EFB2EA005B8611EEB1C27E154AD9E6FC.roa (hash: ArKkYMPjrZ4ijgIQyF9Kcy4ua9ozHX8IBDIWFIk7DdU=) 16: BBA7D8A05B8711EEA5880E184AD9E6FC.roa (hash: NwbjXk0kj8eY+sbmyk9mA7z7P4Od2Lqrhnl5SE+949A=) 17: 7D84FCC85B7E11EE930F05794AD9E6FC.roa (hash: LbVSQZqmCHBXF80jfRgZ632p1CiqtMRJRyKOIJ1fwIY=) 18: 5A3685F85B7D11EEB4B9A0754AD9E6FC.roa (hash: hua4m2v20w0RdcluLq3SvMVi3aYeRg47OfgA9wTRs3E=) 19: D6AA10E05B7E11EE9B32467A4AD9E6FC.roa (hash: RAafA0ML5VlgZ60Y1uxp4EowWyBnwvs0LOD/pOddd5E=) 20: 9FF8CF2E5B8711EE9F40A5174AD9E6FC.roa (hash: lG9MW9PGMEKdmiEYPlQxLtvMK2I/+bgWEhfhck5fvqA=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 29 Jul 2025 00:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 779 (0x30b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3668CFEAF, serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Validity Not Before: Jul 27 03:58:37 2025 GMT Not After : Jul 29 03:58:37 2025 GMT Subject: CN=6885a3ed-757b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2b:62:90:c6:44:05:39:02:ac:ec:f6:60:01: b2:4c:94:71:d9:58:f7:3d:2a:37:00:f2:8a:71:a7: 3e:bb:2c:a4:34:da:8d:58:4f:0e:de:ab:cd:bb:ba: f0:2b:73:8f:e0:da:bc:21:c5:b6:2f:d3:d5:86:aa: 0d:4c:39:e1:2e:ab:0a:4c:5b:cf:2e:c5:f6:5f:ae: 5c:c2:7a:70:4c:76:46:52:0b:1d:74:8e:f5:99:a1: 6f:4a:14:4e:8e:b8:5a:8d:75:e6:34:98:80:80:54: 18:24:86:50:3e:f6:ff:c3:66:82:39:d6:1a:a7:3c: b5:03:e2:ef:19:cf:2c:1f:61:66:c6:9d:1c:e8:82: 28:a5:e9:b9:58:43:9d:01:9f:89:7b:6d:66:9a:68: 24:06:a2:85:21:5a:78:22:13:6c:89:c9:78:d0:7b: cf:23:c4:89:a5:75:69:a1:92:9d:5c:8e:63:3f:b8: 8c:14:42:ce:49:df:04:cd:04:2b:da:c0:73:84:6b: c2:64:ef:09:db:f0:2a:5a:25:5f:12:d4:f4:69:84: f2:ba:bd:8a:22:41:58:61:09:c3:56:6d:bb:ca:f9: 4c:41:78:a0:c7:33:20:c2:85:ae:dc:e7:96:df:8f: 1e:e8:fb:60:21:e9:93:88:18:5e:3c:58:80:63:41: 76:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3B:DD:19:2E:BF:36:3F:7E:ED:A3:FC:9B:0D:54:79:5A:9C:07:50 X509v3 Authority Key Identifier: keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:bf:f1:7b:c6:e5:0d:97:24:e3:4f:00:49:23:02:7c:5a:44: 7d:41:2d:1b:4c:22:7c:d1:5e:b7:19:f4:9c:ab:9b:9f:c9:2f: 8b:e8:23:c3:3a:2d:f6:81:83:19:26:1f:f0:c1:5d:20:08:34: 68:78:e1:4c:23:2b:98:d4:2a:7e:fa:32:e0:e3:db:f9:c7:f2: cf:85:69:95:07:98:68:d0:b6:19:4a:19:2c:1c:d2:9b:d4:d3: 6d:aa:b6:70:93:f1:e1:e7:8f:3c:76:e3:c7:d3:54:34:d2:af: 7a:2a:99:c9:9f:84:c4:fe:8a:95:8d:3a:48:a6:3a:17:14:38: 56:c9:d8:a1:03:aa:9d:0d:64:24:17:4c:79:96:8b:d2:09:9d: fa:62:67:c5:b6:2b:04:4a:ca:d4:3a:7d:e6:56:9f:2f:b2:0a: 9d:f7:8d:b6:86:5f:13:a5:82:07:30:43:5b:24:1e:c6:9f:07: dc:16:2f:94:1d:65:a6:0d:00:e4:3a:b3:a9:aa:67:8a:0f:33: 8f:55:04:89:56:cd:a9:5e:e3:ac:a1:24:cd:a5:23:51:47:44: 00:50:15:14:a4:91:9a:a6:61:63:d8:f8:42:5e:b2:36:ca:07: 25:60:e9:22:02:44:7c:e2:ae:2a:0f:00:41:88:95:f4:fd:36: 4e:a7:a7:4c -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAwswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NjhDRkVBRjExMC8GA1UEBRMoQThFRjk2MDUxNEUzMzY0NDREM0NERTM3QjI0QjY2 REMzOUQ0M0QxQjAeFw0yNTA3MjcwMzU4MzdaFw0yNTA3MjkwMzU4MzdaMBgxFjAU BgNVBAMTDTY4ODVhM2VkLTc1N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC7K2KQxkQFOQKs7PZgAbJMlHHZWPc9KjcA8opxpz67LKQ02o1YTw7eq827 uvArc4/g2rwhxbYv09WGqg1MOeEuqwpMW88uxfZfrlzCenBMdkZSCx10jvWZoW9K FE6OuFqNdeY0mICAVBgkhlA+9v/DZoI51hqnPLUD4u8ZzywfYWbGnRzogiil6blY Q50Bn4l7bWaaaCQGooUhWngiE2yJyXjQe88jxImldWmhkp1cjmM/uIwUQs5J3wTN BCvawHOEa8Jk7wnb8CpaJV8S1PRphPK6vYoiQVhhCcNWbbvK+UxBeKDHMyDCha7c 55bfjx7o+2Ah6ZOIGF48WIBjQXYXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU8Tvd GS6/Nj9+7aP8mw1UeVqcB1AwHwYDVR0jBBgwFoAUqO+WBRTjNkRNPN43sktm3DnU PRswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjY4Q0ZFLzk1RUZENzRDMzc1NzExRUVCQjE0MzIxODRBRDlFNkZDL3FPLVdC UlRqTmtSTlBONDNza3RtM0RuVVBScy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3FPLVdCUlRqTmtSTlBONDNza3RtM0RuVVBScy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NjhDRkUvOTVFRkQ3NEMzNzU3MTFFRUJCMTQzMjE4NEFE OUU2RkMvcU8tV0JSVGpOa1JOUE40M3NrdG0zRG5VUFJzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCYv/F7xuUNlyTjTwBJIwJ8WkR9QS0b TCJ80V63GfScq5ufyS+L6CPDOi32gYMZJh/wwV0gCDRoeOFMIyuY1Cp++jLg49v5 x/LPhWmVB5ho0LYZShksHNKb1NNtqrZwk/Hh5488duPH01Q00q96KpnJn4TE/oqV jTpIpjoXFDhWydihA6qdDWQkF0x5lovSCZ36YmfFtisESsrUOn3mVp8vsgqd9422 hl8TpYIHMENbJB7GnwfcFi+UHWWmDQDkOrOpqmeKDzOPVQSJVs2pXuOsoSTNpSNR R0QAUBUUpJGapmFj2PhCXrI2ygclYOkiAkR84q4qDwBBiJX0/TZOp6dM -----END CERTIFICATE-----Generated at Sun Jul 27 10:39:47 2025 by rpki-client