$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft File: l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json) Hash identifier: TsqEGIwHGxHzgHj9wi9xgYKZ4K4LMf/oRk+YzVDomAs= Subject key identifier: 9F:9A:F6:40:E0:91:4B:D7:91:3D:92:39:F2:2B:CA:D0:C8:A1:72:E2 Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39 Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139 Certificate serial: 072F Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft Manifest number: 06C1 Signing time: Mon 21 Jul 2025 02:15:30 +0000 Manifest this update: Mon 21 Jul 2025 02:15:29 +0000 Manifest next update: Wed 23 Jul 2025 02:15:29 +0000 Files and hashes: 1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: IqTl0XA60HzIhnP9cUyazRlzTdgVL95+997OkpNADPI=) 2: DBA98D145B2211F0A20E2EA0DAE4EC9C.roa (hash: baX/jyqbDDRWJ52IpaUoPLaTxEVM5KXNaJC/ks++xuQ=) 3: D08D8404E20911EFB7BBBB72762E951A.roa (hash: mxpQNEEt8eO1xH/mH0CzmPJl+5Qf8WdLQzu0l8F+kl0=) 4: CBA3C1846B7011EFAF3FE084762E951A.roa (hash: pFDrtn8wEhtxFNlu2wmcpGpG41xK4cr84A6LU6JiqYg=) 5: CEA072D8776A11EEA49F007D4AD9E6FC.roa (hash: oG1ErKkSbYpP5X6eq2VOONQIy8u5lFGEO9d6IZTGw04=) 6: 1DA0B1A4502C11F08AB1C8C2DAE4EC9C.roa (hash: O39HvXcGM8vCDm9DfWvAXNTa9fV5PX5xkVsjsSq21p8=) 7: 88CC23B4E20911EFAA4FEA71762E951A.roa (hash: qKFGTwFhsiiCCXBqchw56kIQ8Z0gTmXSHl71yzG85Xg=) 8: 44B107BE0BBA11F0B7AF8852762E951A.roa (hash: 2lsgDetOxz2tEA/haKTe5N+JmsqBvMbXnhGs3La4Rys=) 9: 8F66F9F2625011F093EF34AEDAE4EC9C.roa (hash: azeXExxPadQBtZQAbA3QmCVU3GUpPn3GgN81W/kzNws=) 10: C36E5120609611F0AB6F15F2DAE4EC9C.roa (hash: Fk+IfFMpvi36aQyLQYlmv26xnAUJjv0obfvmLZs4rLU=) 11: 985B73F86B7011EFBCFBD082762E951A.roa (hash: rvpp6Kns5e/Pwe/rzVTNBx4KVxZUF1C0Dh+LLpfr9DM=) 12: 06EA9146625111F082ED08AFDAE4EC9C.roa (hash: DlQwSvTDJt//sym2C2UVKdfDULxPx2s6Ok+gJg27kxk=) 13: B03C5936136B11EF9CB7442D017001B1.roa (hash: 8cn480ct0RO7vc/yrd/vQq31HhnmkbbbxOW5UAR4BoE=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 23 Jul 2025 00:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1839 (0x72f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139 Validity Not Before: Jul 21 02:15:29 2025 GMT Not After : Jul 23 02:15:29 2025 GMT Subject: CN=687da2c2-b177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7e:fe:35:d9:ea:f6:56:b7:44:74:1a:dd:6c: f2:9c:28:35:ca:34:b0:8e:f9:f2:24:b8:d4:63:15: 55:32:86:85:c4:48:0b:09:9e:21:e2:4e:00:e2:00: 19:15:8c:7b:6f:01:0d:38:8b:f9:ad:a3:ec:66:72: c4:92:42:5e:0b:24:33:74:ae:7e:27:7c:93:5f:11: d1:b4:7b:3e:7d:68:65:4f:4f:af:91:70:6b:33:13: b7:cd:cd:35:72:4f:3f:ed:d2:f1:3c:fc:a9:d6:4b: d8:4c:d9:3f:db:a0:cb:55:8e:b4:be:36:ef:0d:49: 3a:2d:47:eb:34:b0:79:3b:9d:e1:a7:02:4d:5b:89: 4a:80:4c:be:66:72:2d:d2:6c:11:f3:66:6d:4f:8e: 0d:59:a8:d1:64:10:b1:67:04:9e:88:31:2f:8a:90: 35:7a:77:ed:6b:ae:b7:9b:5e:5b:d5:4e:38:db:b5: 21:6e:4e:fd:07:09:3c:27:cb:df:3f:d7:84:64:e6: 46:f9:f8:32:86:a1:59:a4:ae:35:ae:2e:8a:a0:11: 92:71:45:bb:a6:15:53:9a:97:b9:1d:69:53:8c:bc: 5c:14:5e:03:39:a7:63:3f:2d:0a:3e:c6:49:b8:c4: a0:88:76:aa:91:de:dc:31:0a:da:a4:78:8a:16:f1: bf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9A:F6:40:E0:91:4B:D7:91:3D:92:39:F2:2B:CA:D0:C8:A1:72:E2 X509v3 Authority Key Identifier: keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:d8:31:04:a7:5f:fc:5e:b6:aa:73:cd:9e:de:15:ff:77:5a: f4:ac:b9:ad:f8:8a:8b:04:87:ea:30:08:51:e4:e6:78:b1:c7: 47:a9:a0:3e:3a:5a:0c:64:cf:30:d9:11:70:c7:a3:13:ba:f2: 4b:07:4c:9c:84:d6:51:ee:44:88:fa:c2:fb:16:7f:a2:34:74: 7f:20:ed:42:68:c4:af:d5:52:dc:94:b1:b1:ca:61:ca:e3:2c: 65:0e:af:f9:89:77:47:b4:2d:a8:c3:70:5c:76:6d:4b:5f:8f: 64:26:21:dd:d3:eb:ae:99:38:6d:ec:cb:6b:08:04:f2:77:a3: 06:75:59:07:b4:57:2c:e5:d9:b8:59:80:12:23:66:5d:03:b4: 3f:27:12:5b:fd:11:aa:c5:dc:41:bd:fc:e8:20:3f:e2:ea:ad: cb:da:69:ce:3d:4d:ce:4b:92:04:c2:9c:e7:2f:fb:f3:3b:dc: 86:66:23:37:9c:92:a4:09:70:58:34:28:67:87:61:e2:63:a7: 86:61:f6:78:52:a7:bd:50:4d:e1:ad:49:db:7c:7a:a8:22:32: 84:d2:fb:fb:df:6d:5c:d1:5b:4e:bc:b9:05:a4:85:08:a2:c8: c2:6a:08:ec:32:08:db:90:c6:8a:3a:2e:e6:98:17:26:74:84: bb:da:94:91 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBy8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx QkE4MTJGQTEzOTAeFw0yNTA3MjEwMjE1MjlaFw0yNTA3MjMwMjE1MjlaMBgxFjAU BgNVBAMTDTY4N2RhMmMyLWIxNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCzfv412er2VrdEdBrdbPKcKDXKNLCO+fIkuNRjFVUyhoXESAsJniHiTgDi ABkVjHtvAQ04i/mto+xmcsSSQl4LJDN0rn4nfJNfEdG0ez59aGVPT6+RcGszE7fN zTVyTz/t0vE8/KnWS9hM2T/boMtVjrS+Nu8NSTotR+s0sHk7neGnAk1biUqATL5m ci3SbBHzZm1Pjg1ZqNFkELFnBJ6IMS+KkDV6d+1rrrebXlvVTjjbtSFuTv0HCTwn y98/14Rk5kb5+DKGoVmkrjWuLoqgEZJxRbumFVOal7kdaVOMvFwUXgM5p2M/LQo+ xkm4xKCIdqqR3twxCtqkeIoW8b9TAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUn5r2 QOCRS9eRPZI58ivK0MihcuIwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2N0RGQTQvMDhCOEQ4MjA5M0FDMTFFQkIxRDJBODMyRjhB RUEyMjgvbDhrT0pTRXRpSHo1NGQ1djNmVlJ1b0V2b1RrLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCi2DEEp1/8Xraqc82e3hX/d1r0rLmt +IqLBIfqMAhR5OZ4scdHqaA+OloMZM8w2RFwx6MTuvJLB0ychNZR7kSI+sL7Fn+i NHR/IO1CaMSv1VLclLGxymHK4yxlDq/5iXdHtC2ow3Bcdm1LX49kJiHd0+uumTht 7MtrCATyd6MGdVkHtFcs5dm4WYASI2ZdA7Q/JxJb/RGqxdxBvfzoID/i6q3L2mnO PU3OS5IEwpznL/vzO9yGZiM3nJKkCXBYNChnh2HiY6eGYfZ4Uqe9UE3hrUnbfHqo IjKE0vv7321c0VtOvLkFpIUIosjCagjsMgjbkMaKOi7mmBcmdIS72pSR -----END CERTIFICATE-----Generated at Mon Jul 21 23:25:46 2025 by rpki-client