$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft File: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft (raw, json) Hash identifier: 5THvDNbIgXb/nUXDlX2naYvc9S38YlEl0tB3vRhJUmc= Subject key identifier: 55:81:21:5B:38:66:0D:D3:9F:91:A9:E0:8F:AD:94:CD:1A:88:24:7A Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49 Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149 Certificate serial: 045B Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft Manifest number: 043D Signing time: Mon 21 Jul 2025 03:20:38 +0000 Manifest this update: Mon 21 Jul 2025 03:20:37 +0000 Manifest next update: Wed 23 Jul 2025 03:20:37 +0000 Files and hashes: 1: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl (hash: F5KmTlQiV6P2qsW39mzPerNqq1gy2AYVEh4+uxOlqc4=) 2: CAB5EB42374D11EE8810A0744AD9E6FC.roa (hash: Rd+cT1WHVj6VPW10DhoJe1VPjes86osECuBqlAPA/jk=) 3: 20D8603A3C6311EEBD05616B4AD9E6FC.roa (hash: yn1GI8XUJDZhc/a1VL4Ew8aXczcEtSuNRFvBTlTvah0=) 4: 662EC19C3C6311EEA2CE226C4AD9E6FC.roa (hash: qJZA5eX+xbJzCe6D7i9PnOvJU1CqeC3CU+zF75cZcts=) 5: F67E4B16374D11EEB5DE38754AD9E6FC.roa (hash: hU4jFk//Gd5275KQZyF78ZmsmvKAmuy74Zm19XPUqO4=) 6: 14B6AF743B4011EEADF20A804AD9E6FC.roa (hash: K4yraD6px2otzCCbUQWt+Yh6khumJagXOv/4f3vipmU=) 7: 53D289E63CCE11EE935F8A394AD9E6FC.roa (hash: 4HBFVVMsDOfA/xrur5pE2xRwqQtzwcjvpCJfYPdn3co=) 8: 5F94B5287E1F11EEB18DE56B4AD9E6FC.roa (hash: NnfOKQOywlCm8MbXuo5ryxtlJJnqWeXUY/Zc4KGtk9o=) 9: 03541FA67E1F11EE99591D6B4AD9E6FC.roa (hash: tMNuryIys8bdcGqr2btn+01OsiqNMJcIT+oXA5sB548=) 10: 4ED14CDCA6DA11EDAEF82299F1222468.roa (hash: iXehJ8WLWU6cHBFHQ5qsEfloV58oVEhPLmmW3fV/BY4=) 11: 4788CE9A3C6311EE9733C66B4AD9E6FC.roa (hash: 0sVxWZVOpyK0cudH1BB1HUmOSWE0Bj2HjfkgAIa158s=) 12: 158513F4518011EE8BDBCE164AD9E6FC.roa (hash: sbl6JhnjaIL3BTU2+lQRNeSnxalVE/sMDYPWi7BO8vg=) 13: 85435BE23C6311EE9E2BB76C4AD9E6FC.roa (hash: ZIlXxtD8wXr16Udjo8wBxB2atTHwjE6MF56MpocHqts=) 14: 4433C912374E11EEBD8F3D764AD9E6FC.roa (hash: lHtBjObTBwNyVhJrHEQ/zHzgJmnlb42wMC73m5Dh7UE=) 15: A775C5D83C6311EEA094166D4AD9E6FC.roa (hash: L972nqC78lcXrhC+mjzOc5OXmYgCBGyLNtGIrSD8tWw=) 16: 20EEA9507E1F11EEAD686A6B4AD9E6FC.roa (hash: +kuN9/TLBGpI4GFRii8gvKOE9Vh3yGtX4DQwHRmVzSA=) 17: 88A2141457EF11F0A48D2AC4DAE4EC9C.roa (hash: jwxUZ7nPgwu7fA4ugBBwspQYrmkSwfz/KGPZiiShxok=) 18: 04540B763C6311EE82DB186B4AD9E6FC.roa (hash: 8pLsZ3suwRhldyF5vniTCRO+W8oJo+1mBH+nN66FQ8k=) 19: 329D5926A54311EEA7A66B2ED25BE465.roa (hash: 1pPOf7iWBENGk84AGGgfnWlGuOjuG2CHIm2+lZTlGVY=) 20: 9369A48A374D11EEBBBCC3734AD9E6FC.roa (hash: LriikUtiyzWDzN+qJjLYRklCy7tVdfyDgc1icmMt3FY=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 23 Jul 2025 00:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1115 (0x45b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149 Validity Not Before: Jul 21 03:20:37 2025 GMT Not After : Jul 23 03:20:37 2025 GMT Subject: CN=687db205-0f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:12:32:3e:4d:9a:32:be:13:2e:e9:b4:5b:bc: 47:ec:af:6e:1b:f3:54:e7:a6:b9:83:98:e7:8a:a3: 15:a5:46:4b:c4:98:68:ec:2e:f6:1f:01:c5:a6:b9: 1d:27:10:5e:37:63:50:a7:51:ce:85:d2:31:8d:1c: 9a:25:46:81:ce:77:0c:e0:6c:5c:bd:af:53:3a:bc: eb:6b:39:84:5e:8b:f6:7d:92:c9:2b:3e:e0:ba:98: 36:41:6b:70:e4:67:99:88:4c:2e:f9:07:03:34:00: 50:94:4a:3a:16:e1:cf:85:fe:bb:b7:73:23:a8:20: 7c:72:eb:84:9e:ec:08:b1:24:e4:a2:cd:36:82:9a: f1:74:d5:83:e8:9c:9a:3b:64:cd:94:6c:af:ce:ea: 98:e9:17:5c:14:4b:f4:22:52:1b:66:17:86:ba:11: 54:4d:53:2c:01:00:66:db:c8:76:df:20:1a:4d:2c: d3:df:c1:d8:3d:d9:e7:48:65:1a:44:9b:8b:89:fb: 67:dd:3e:29:7e:43:ab:02:dd:42:e3:b1:ea:99:d0: 2f:2d:51:52:1e:b2:42:36:90:ed:17:38:d1:24:a3: 3a:07:70:e1:06:ff:7b:c8:36:01:64:a7:66:37:b0: 57:49:d4:51:3b:7e:ff:ce:c9:33:25:bd:21:7a:26: 8a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:81:21:5B:38:66:0D:D3:9F:91:A9:E0:8F:AD:94:CD:1A:88:24:7A X509v3 Authority Key Identifier: keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:34:25:85:c6:cf:1c:bb:50:5d:fd:d1:90:9b:5b:1a:3c:ee: ca:fc:77:b8:ba:d7:34:8f:66:fd:d7:69:21:ca:0f:47:0c:64: e2:f0:d4:6b:1b:9e:66:fa:e2:f5:75:3d:59:59:b9:51:f6:5c: bc:59:40:6d:f9:44:0d:25:a5:84:dd:21:3d:69:b8:5a:c2:c1: 72:1a:a4:45:5b:71:3f:b1:1c:96:70:1a:f4:8d:3d:8c:3d:51: 1c:93:59:95:42:4c:5b:10:2c:99:cd:ff:18:b7:27:dc:56:96: 3a:21:b9:f7:b1:bb:a4:77:e0:3c:fb:53:16:be:88:22:8e:6b: 51:dd:a2:c5:d5:cf:54:d4:d7:88:ff:79:52:8f:be:c7:d9:3f: a0:67:3a:7b:d1:7c:47:2c:16:15:ff:db:49:71:8b:e2:71:db: 3f:09:3f:df:a4:de:6a:4a:5d:07:80:e6:1c:d3:90:81:b7:58: 24:cc:a5:6f:7d:ef:f6:57:7d:8a:33:de:ac:72:85:ce:7c:e9: 68:9a:2e:0e:a8:83:d9:ce:21:3b:99:4e:2d:89:8a:cb:28:31: 67:02:ff:b3:9c:a5:92:29:3b:3b:1f:e3:72:43:b2:6f:08:9b: a8:6e:ba:63:fe:e8:05:70:b0:7c:ce:99:53:31:f9:e0:e4:61: 93:50:f7:43 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBFswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 REI0OTJBRjExMC8GA1UEBRMoRjQzRTA2NjhFRjcyQkQ4N0ZBNTM2OEJFMkI2ODE1 QzBCQ0I0MDE0OTAeFw0yNTA3MjEwMzIwMzdaFw0yNTA3MjMwMzIwMzdaMBgxFjAU BgNVBAMTDTY4N2RiMjA1LTBmN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC8EjI+TZoyvhMu6bRbvEfsr24b81TnprmDmOeKoxWlRkvEmGjsLvYfAcWm uR0nEF43Y1CnUc6F0jGNHJolRoHOdwzgbFy9r1M6vOtrOYRei/Z9kskrPuC6mDZB a3DkZ5mITC75BwM0AFCUSjoW4c+F/ru3cyOoIHxy64Se7AixJOSizTaCmvF01YPo nJo7ZM2UbK/O6pjpF1wUS/QiUhtmF4a6EVRNUywBAGbbyHbfIBpNLNPfwdg92edI ZRpEm4uJ+2fdPil+Q6sC3ULjseqZ0C8tUVIeskI2kO0XONEkozoHcOEG/3vINgFk p2Y3sFdJ1FE7fv/OyTMlvSF6JopXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUVYEh WzhmDdOfkangj62UzRqIJHowHwYDVR0jBBgwFoAU9D4GaO9yvYf6U2i+K2gVwLy0 AUkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkRCNDkyLzEwREE5OTc2NEEwMzExRUQ4RjU5RDg5RUYxMjIyNDY4LzlENEdh Tzl5dllmNlUyaS1LMmdWd0x5MEFVay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLzlENEdhTzl5dllmNlUyaS1LMmdWd0x5MEFVay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2REI0OTIvMTBEQTk5NzY0QTAzMTFFRDhGNTlEODlFRjEy MjI0NjgvOUQ0R2FPOXl2WWY2VTJpLUsyZ1Z3THkwQVVrLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDINCWFxs8cu1Bd/dGQm1saPO7K/He4 utc0j2b912khyg9HDGTi8NRrG55m+uL1dT1ZWblR9ly8WUBt+UQNJaWE3SE9abha wsFyGqRFW3E/sRyWcBr0jT2MPVEck1mVQkxbECyZzf8YtyfcVpY6Ibn3sbukd+A8 +1MWvogijmtR3aLF1c9U1NeI/3lSj77H2T+gZzp70XxHLBYV/9tJcYvicds/CT/f pN5qSl0HgOYc05CBt1gkzKVvfe/2V32KM96scoXOfOlomi4OqIPZziE7mU4tiYrL KDFnAv+znKWSKTs7H+NyQ7JvCJuobrpj/ugFcLB8zplTMfng5GGTUPdD -----END CERTIFICATE-----Generated at Mon Jul 21 08:27:29 2025 by rpki-client