$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft File: YKDl0axmyK47fJ5qjvW8BLi7uI4.mft (raw, json) Hash identifier: eAIQexi2cuEEDEWqUsxV9aXtChB5KCNGK/cBo4B7Tag= Subject key identifier: 16:FF:55:C1:91:A7:D6:A3:ED:70:A4:D9:8A:4B:37:F0:BA:8B:FB:AD Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E Certificate serial: 0717 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft Manifest number: 0678 Signing time: Mon 15 Sep 2025 02:37:00 +0000 Manifest this update: Mon 15 Sep 2025 02:36:59 +0000 Manifest next update: Wed 17 Sep 2025 02:36:59 +0000 Files and hashes: 1: YKDl0axmyK47fJ5qjvW8BLi7uI4.crl (hash: kMG5TXA6g7Zk5Ix44rOW8Nq8ZaXLbQm6PXuNhyWOmgU=) 2: 488D3EB060B211EF87A97782762E951A.roa (hash: MVYbN3+gCL8uNH5R81Zu9Ge2lQxWhVsfh/rM4ZRyn/w=) 3: BC9C52986C5811F099231397DAE4EC9C.roa (hash: HouG8yLobXovUgqovzMNrrKkzd8yvO2tiqmIiHxJg5I=) 4: 9D00E53A042411F0AE942178762E951A.roa (hash: 3lO4ySirvSBJZhZS0yYuZYZ1ZoMcdgb1UxXC64iMMus=) 5: 702BAEE858AA11F0AE7EFB8BDAE4EC9C.roa (hash: HZftb7SkoPVv8c3p79wmuz6GJ/7AyE9u3ys6HyH6VV8=) 6: 293DA02E0E9411EFB4C6A635017001B1.roa (hash: 3+KIiU4tfg4VsfxzRAEbpE5pkr5DnXevqMRkIzk01FM=) 7: EADFEADE7C0C11F080ED29EDDAE4EC9C.roa (hash: tWfWBE75OoL+WzrS8icGHg9C/DfLO31zKO7wKYgG5TU=) 8: 6C7ACBF26E0A11EFAC0C4258762E951A.roa (hash: 4grD6nGcP4ytHOjXft0LrvgGLuVL2rG269xNQf6k+eI=) 9: 372AC08C8CB511EF9888555B762E951A.roa (hash: etRxaBFYkDrFKylBsUD/HBMJSKuCjzex1c6EZ66GzPQ=) 10: 3D55B2F0C43211EF8166C3BD762E951A.roa (hash: Af+fAJ8B4YCQU1OF1pDiIpmVk8a59qwsOLlr9TGYlBo=) 11: 8CE95C44659611F0BC0DBF85DAE4EC9C.roa (hash: o1jzPlAl/4cwBPSPVuQC+Ns+6Vf9WBT0byC5yceG9JI=) 12: 94B69FC84F1B11EFBF7CDAAE762E951A.roa (hash: KbxuO2uDPTezjLzyouQUc4XGgC1J865f/dnmoPHmv0Q=) 13: 0C083320B24F11EF80B52F71762E951A.roa (hash: swBYnhkImW9LhM0qswhHNCFqzYvKajWSuD7zcbFshH8=) 14: 373D29E4095511F096A41CBE762E951A.roa (hash: myBILke2RQ0OYPU057gGO3OXC3ByHG2noie9RgjT7qM=) 15: 467A6B4248DF11EFA203A954762E951A.roa (hash: j6LGYpvEwxNC35muXut5alaxgRUMQT87ILx6kToC8Qs=) 16: E2FD811CBC6511EF9197B567762E951A.roa (hash: EXiNgxy7d0tjLX1SpsLd379Zi3cAwKIMh7UFB0zyfF0=) 17: 666FD3D82EEA11EFBC63294B762E951A.roa (hash: MTXkIou//Guz3KRl/9YKtpj6n9ZVBkXEGaijhN0evTk=) 18: 646F613C003311F0A1A285B3762E951A.roa (hash: bJ1ILmkYuUC3NN3I2YJ1a0bc80c543GbkB4NCNMhrPc=) 19: A8566A94136C11EF9A119E33017001B1.roa (hash: 8n6hGcHTkYJois2LH442hMoRDS4eG3DkPDkUW4heEZ8=) 20: BC5D3D90032D11F09ED36D5F762E951A.roa (hash: fZkSIZKqHjYLVMmlSF8FT38HnKjU0BqJ7lEBUixZVJ0=) 21: 509B5B80154B11EFAAF66569017001B1.roa (hash: XKlm75kmISAu8xaI2z4uwQrQDSSx5mypluivOS+f5kk=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 17 Sep 2025 00:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1815 (0x717) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E Validity Not Before: Sep 15 02:36:59 2025 GMT Not After : Sep 17 02:36:59 2025 GMT Subject: CN=68c77bcb-8fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f6:2d:23:de:53:85:89:ff:c0:e0:97:cf:3a: d8:fd:f5:f2:0f:04:fd:2c:17:98:5d:4b:60:c0:4f: 4d:72:38:92:45:8f:65:f8:3c:b7:04:cf:ed:2b:56: c9:9d:91:9c:f3:4b:a4:c2:c1:f3:48:c5:23:d9:81: 70:80:ea:e3:35:03:99:34:55:bb:89:ca:62:9f:d6: d3:9a:6d:8a:38:4a:43:c7:ee:25:16:58:60:8e:09: 21:36:65:49:e5:97:45:45:e8:1d:a6:07:e9:2d:eb: b3:3f:72:d9:2e:2f:a6:07:60:cd:74:c7:11:66:62: b1:be:fd:c1:52:0c:ef:5e:dc:3b:30:dd:8c:c9:bd: 64:86:45:d9:f3:43:5c:b5:7f:27:ed:03:a4:ae:f5: 05:2e:f2:47:5a:5a:e1:b2:ca:c8:16:fd:71:b8:33: ca:fb:2c:f2:d4:c1:f2:f6:da:0f:bc:b7:d1:d2:98: 86:c1:ec:db:ad:a2:6e:eb:f0:d9:6a:d9:93:28:49: e5:ca:82:f3:43:65:1c:ba:63:95:8f:61:96:d5:dc: 96:7b:9e:15:92:db:fe:6e:e5:79:08:ae:ab:16:fa: db:49:40:d5:c6:da:39:e9:1f:a8:32:2d:0e:25:04: c4:61:70:fb:80:8f:23:67:da:cc:62:02:f6:38:16: 45:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FF:55:C1:91:A7:D6:A3:ED:70:A4:D9:8A:4B:37:F0:BA:8B:FB:AD X509v3 Authority Key Identifier: keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:99:28:3d:b7:88:d3:8c:a8:f1:41:53:b5:90:a3:b9:62:71: b0:46:44:f4:cb:d4:91:77:d6:7c:1f:69:ea:db:2f:75:c4:11: fa:2f:2e:e2:7d:73:4d:f6:1a:0d:f9:67:49:6b:ab:d3:b5:cf: a3:d1:96:fd:11:c3:e2:09:78:da:87:9d:28:50:e3:b3:f1:64: 18:df:e2:3f:24:bd:a7:43:7a:e8:e6:9c:df:ac:ee:09:e9:1a: e3:47:e3:8b:52:22:b0:e8:f9:b9:35:1b:8d:79:b6:ce:3e:06: ab:29:67:49:1f:2f:75:dd:b2:ca:a1:09:69:28:71:a2:4a:11: 35:35:e2:0a:bc:a0:e1:42:70:d6:e0:37:d0:7a:f9:91:86:29: 75:ac:67:19:d5:ad:4c:0c:f3:69:cc:27:d3:0a:3a:a4:32:92: 0b:a4:76:15:1f:19:26:af:0a:fe:42:cf:bc:d2:0c:64:b4:73: 15:7d:02:0b:c8:19:8b:a5:a3:ba:5e:a0:17:e1:fb:fa:aa:6e: 30:dd:e8:49:25:7e:7a:a8:d6:fe:d1:2a:7e:ef:7f:49:9f:b8: 24:02:fb:3c:33:58:f0:37:8e:a0:9b:7b:81:56:fd:a6:fd:cc: eb:68:79:84:11:ea:8a:2a:aa:cc:88:39:5e:0d:11:d7:ea:52: f7:2c:06:64 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD MDRCOEJCQjg4RTAeFw0yNTA5MTUwMjM2NTlaFw0yNTA5MTcwMjM2NTlaMBgxFjAU BgNVBAMTDTY4Yzc3YmNiLThmZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDz9i0j3lOFif/A4JfPOtj99fIPBP0sF5hdS2DAT01yOJJFj2X4PLcEz+0r VsmdkZzzS6TCwfNIxSPZgXCA6uM1A5k0VbuJymKf1tOabYo4SkPH7iUWWGCOCSE2 ZUnll0VF6B2mB+kt67M/ctkuL6YHYM10xxFmYrG+/cFSDO9e3Dsw3YzJvWSGRdnz Q1y1fyftA6Su9QUu8kdaWuGyysgW/XG4M8r7LPLUwfL22g+8t9HSmIbB7Nutom7r 8Nlq2ZMoSeXKgvNDZRy6Y5WPYZbV3JZ7nhWS2/5u5XkIrqsW+ttJQNXG2jnpH6gy LQ4lBMRhcPuAjyNn2sxiAvY4FkVHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUFv9V wZGn1qPtcKTZiks38LqL+60wHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7 uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MTQ2NTkvNjY1NkRFNzQ2REY4MTFFQ0JDQzIxMDc2NUE0 MEQ1NzcvWUtEbDBheG15SzQ3Zko1cWp2VzhCTGk3dUk0Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADmSg9t4jTjKjxQVO1kKO5YnGwRkT0 y9SRd9Z8H2nq2y91xBH6Ly7ifXNN9hoN+WdJa6vTtc+j0Zb9EcPiCXjah50oUOOz 8WQY3+I/JL2nQ3ro5pzfrO4J6RrjR+OLUiKw6Pm5NRuNebbOPgarKWdJHy913bLK oQlpKHGiShE1NeIKvKDhQnDW4DfQevmRhil1rGcZ1a1MDPNpzCfTCjqkMpILpHYV Hxkmrwr+Qs+80gxktHMVfQILyBmLpaO6XqAX4fv6qm4w3ehJJX56qNb+0Sp+739J n7gkAvs8M1jwN46gm3uBVv2m/czraHmEEeqKKqrMiDleDRHX6lL3LAZk -----END CERTIFICATE-----Generated at Mon Sep 15 07:41:24 2025 by rpki-client