$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft File: x4zcO11LE2dctIrTtjvgHsWoB_g.mft (raw, json) Hash identifier: Gz9chSgOY44eUJHNI0AMV9mOA3E+IASEuRJowTUeNCA= Subject key identifier: B3:B5:0A:FC:EC:BF:33:9A:1C:85:89:7B:64:2C:B0:5F:E0:64:4E:86 Authority key identifier: C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8 Certificate issuer: /CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8 Certificate serial: 0450 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft Manifest number: 0441 Signing time: Wed 23 Jul 2025 03:18:57 +0000 Manifest this update: Wed 23 Jul 2025 03:18:56 +0000 Manifest next update: Fri 25 Jul 2025 03:18:56 +0000 Files and hashes: 1: x4zcO11LE2dctIrTtjvgHsWoB_g.crl (hash: UADW+0WZlFv+742w4xhwTP9ymt/6ikdYQyxT+U/8lI8=) 2: 45E09460492011EDA58FEACFF1222468.roa (hash: W7ubFeQV8onhDcwxeg30ugXXalNtBd+ZG/y/BamgqXk=) 3: 99986272498611F0BE1E23EEDAE4EC9C.roa (hash: Z4gQzojiEKX5fZtqwTgoYBRKXPibvfeQJQnSktukfUM=) 4: 61F3ED46A71011EFA4F58993762E951A.roa (hash: S/a4NOGDMCYqavfy2n6nHPuJWnA8uLXKDGrhZokqBOA=) 5: 88A5B71428C311F0BEF0A0B4DAE4EC9C.roa (hash: ePq4EbCDmWiOxXuBQCEii4Bej/F9RXahE4beV/zVjQ0=) 6: 24769B8AC01B11EE87488562775412E6.roa (hash: Juiav7EMo7UB6/g3W5W1dR2kpf5FMViakz+hnSTb9pI=) 7: CE07EBFC434F11EE9E338E5E4AD9E6FC.roa (hash: lLKF/LQUCJrjFGeoKrxD3GvZk7yNLfxsdpj4p8cAFcg=) 8: BA5646848B9311EFB18C87BF762E951A.roa (hash: JPWhpnri236k1i+Gn96J/0YOtSYJC79c9FGJpIaebkg=) 9: 76506164C45911EFBD701FB3762E951A.roa (hash: 99UKUf4fnRe0MO3HcCv5JDIcqSTWLiXWxRxR3pGatmc=) 10: 73CC053C4EB611F0AE15C1C8DAE4EC9C.roa (hash: SQV1YsdD1Ajwa0W56ES+0u6UJCxHEKEeYvpdGKFa0ZE=) 11: C4CEB8AC398711EF843D2E9D762E951A.roa (hash: h7S0JCwsO3r6rweJjX0edCYo6Cy5Pss43I07DZlAHq8=) 12: 08DB71BC53EA11EF98E06585762E951A.roa (hash: 9y2Xf3yrmOHpN9GrNuG3T4PeZPIw6BfSrZ7oAs2gMlE=) 13: A278A9AC60E211EF938734A9762E951A.roa (hash: z1Jlw/yZ++yZq2QaqkGqkTifs65T2BP5GQxHjafo/Nk=) 14: 8390093077E011EF94B4F59C762E951A.roa (hash: /gwS+GQo/DPLk6XCYBj5Tt7o/4lhGYntAWZgy7TgGi0=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 25 Jul 2025 00:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36FE19EAF, serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8 Validity Not Before: Jul 23 03:18:56 2025 GMT Not After : Jul 25 03:18:56 2025 GMT Subject: CN=688054a1-fc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:d2:26:4f:86:5d:f4:e2:97:44:3a:8b:f3: ff:49:79:0c:c7:5e:1a:08:f1:3f:b6:a7:cb:f9:93: 5a:10:0f:d0:a3:77:f9:83:97:5c:2f:89:8b:8a:5c: fc:1c:d3:a4:58:4b:4f:28:fd:33:e5:b4:84:33:5e: be:11:22:df:3c:53:f0:b6:4d:09:5b:a4:a7:a7:6a: ea:24:6d:55:41:9a:38:74:d8:06:8f:a4:c3:82:60: 58:e8:d8:01:d9:42:e7:26:57:8c:a4:65:6b:93:f1: 68:df:0a:20:63:ea:d1:7b:64:2e:65:b1:8b:7a:d4: 50:c9:da:6b:d2:11:11:25:7d:e0:f5:c5:7e:ac:81: 94:f8:94:46:83:4b:27:1b:2a:31:41:0a:dd:e6:3a: b9:ce:a3:1a:a3:dc:f5:87:42:e6:84:2e:56:24:d8: ef:bd:2f:2f:2e:03:55:d5:e5:c5:19:76:68:3c:30: 9c:84:36:54:83:59:6b:51:1b:d2:23:db:b1:fc:35: 40:ec:95:6e:bd:89:b8:00:71:ee:46:00:b9:9f:ce: 45:26:dd:80:e0:14:64:a8:9c:5a:89:22:1b:27:90: d3:11:57:fd:97:a9:01:c4:a9:cf:8d:27:dc:48:e6: 75:8e:cf:6b:9c:89:65:7c:9d:2c:11:d7:13:b3:4f: c0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B5:0A:FC:EC:BF:33:9A:1C:85:89:7B:64:2C:B0:5F:E0:64:4E:86 X509v3 Authority Key Identifier: keyid:C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:72:c1:fb:68:cc:c7:f2:a4:26:9e:85:cb:39:42:79:4d:3e: c9:94:e8:dd:ff:fa:8e:e2:9b:37:4a:67:8c:b7:7e:ae:db:cf: 9f:03:e2:3e:d2:e5:74:45:6f:22:b7:a1:c4:ce:d1:c2:0b:72: 7d:86:73:1a:8f:ba:8d:1f:62:d7:e2:a0:cc:8d:20:21:82:ba: 6d:3e:8f:57:55:c6:de:fd:c4:2c:07:db:e7:77:e2:cb:06:3f: 67:5d:27:9a:a2:56:05:cd:23:e1:81:fc:dd:49:55:cd:d1:a4: 84:4f:e0:b3:0e:bb:94:44:92:d1:0b:4f:48:67:4b:96:1c:88: 34:f8:67:10:ef:14:9a:a6:cc:2a:88:66:03:a3:18:40:15:31: b6:d9:ac:f3:3b:5e:06:e3:13:3b:f3:8d:af:de:92:91:dd:6d: 71:38:6b:5f:37:84:fd:c4:e3:e8:d3:e1:b0:58:16:d5:6c:0b: 3c:10:4d:c7:48:53:7d:3f:8e:47:b3:eb:19:21:86:dd:5b:ab: 30:7b:d1:a7:7f:65:ef:55:53:ac:53:a0:41:89:ee:e6:77:ec: 93:07:a7:d4:26:9c:a7:b4:19:bd:04:ad:70:2f:e2:a8:54:ba: 42:bc:90:70:8c:2f:da:09:40:73:d1:dd:64:d6:2e:d5:0c:ba: 1c:ca:0f:48 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RkUxOUVBRjExMC8GA1UEBRMoQzc4Q0RDM0I1RDRCMTM2NzVDQjQ4QUQzQjYzQkUw MUVDNUE4MDdGODAeFw0yNTA3MjMwMzE4NTZaFw0yNTA3MjUwMzE4NTZaMBgxFjAU BgNVBAMTDTY4ODA1NGExLWZjOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC6wtImT4Zd9OKXRDqL8/9JeQzHXhoI8T+2p8v5k1oQD9Cjd/mDl1wviYuK XPwc06RYS08o/TPltIQzXr4RIt88U/C2TQlbpKenauokbVVBmjh02AaPpMOCYFjo 2AHZQucmV4ykZWuT8WjfCiBj6tF7ZC5lsYt61FDJ2mvSERElfeD1xX6sgZT4lEaD SycbKjFBCt3mOrnOoxqj3PWHQuaELlYk2O+9Ly8uA1XV5cUZdmg8MJyENlSDWWtR G9Ij27H8NUDslW69ibgAce5GALmfzkUm3YDgFGSonFqJIhsnkNMRV/2XqQHEqc+N J9xI5nWOz2uciWV8nSwR1xOzT8CvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUs7UK /Oy/M5ochYl7ZCywX+BkToYwHwYDVR0jBBgwFoAUx4zcO11LE2dctIrTtjvgHsWo B/gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkZFMTlFL0FCN0U3OEJFNDhERjExRURBNzYxQjI5Q0YxMjIyNDY4L3g0emNP MTFMRTJkY3RJclR0anZnSHNXb0JfZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3g0emNPMTFMRTJkY3RJclR0anZnSHNXb0JfZy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RkUxOUUvQUI3RTc4QkU0OERGMTFFREE3NjFCMjlDRjEy MjI0NjgveDR6Y08xMUxFMmRjdElyVHRqdmdIc1dvQl9nLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIcsH7aMzH8qQmnoXLOUJ5TT7JlOjd //qO4ps3SmeMt36u28+fA+I+0uV0RW8it6HEztHCC3J9hnMaj7qNH2LX4qDMjSAh grptPo9XVcbe/cQsB9vnd+LLBj9nXSeaolYFzSPhgfzdSVXN0aSET+CzDruURJLR C09IZ0uWHIg0+GcQ7xSapswqiGYDoxhAFTG22azzO14G4xM7842v3pKR3W1xOGtf N4T9xOPo0+GwWBbVbAs8EE3HSFN9P45Hs+sZIYbdW6swe9Gnf2XvVVOsU6BBie7m d+yTB6fUJpyntBm9BK1wL+KoVLpCvJBwjC/aCUBz0d1k1i7VDLocyg9I -----END CERTIFICATE-----Generated at Wed Jul 23 07:55:40 2025 by rpki-client