$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft File: HdFv1ov_fKsauRxV2mH8DN_0F0M.mft (raw, json) Hash identifier: z3zvg/+DATB0LPuoO2gZc+aXhyKnrFr7idJYm0UiElE= Subject key identifier: 7C:42:77:44:E2:FA:74:F5:1E:2D:11:B3:E6:7D:8C:73:C9:3D:E8:E5 Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43 Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743 Certificate serial: 0764 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft Manifest number: 0715 Signing time: Tue 28 Apr 2026 02:31:54 +0000 Manifest this update: Tue 28 Apr 2026 02:31:53 +0000 Manifest next update: Thu 30 Apr 2026 02:31:53 +0000 Files and hashes: 1: HdFv1ov_fKsauRxV2mH8DN_0F0M.crl (hash: QnFQEzh17aiU5VTSbuyXeRMi9GAzwakAESaxULc5Q/M=) 2: 10E2A890A01911F08A266CD6DAE4EC9C.roa (hash: uKu9ra8g3enObejQKUm/wjJcdExGU8pfNmFnYSCVAb4=) 3: C048D206A01811F0997A41D6DAE4EC9C.roa (hash: jhoKyB34pvQ8xNX0wPMbhbFsPkWoO13xc3OlqRsvcuI=) 4: 87292E6AA01A11F0B32F60DFDAE4EC9C.roa (hash: 4nhIZUohQE/GQcQXC4C3luqxwBzt+U4vIAe9MdQWT3w=) 5: 2AC075F0A01211F0B72F98A6DAE4EC9C.roa (hash: DK9ydq1ArB3m61vuEV0TSdIjbjRvzTpBgOxKOB1u+wk=) 6: 77AA62BAA01511F0949C90BEDAE4EC9C.roa (hash: 6sOD9vGb7J0UzCC20Wr5l2Kfav4Tkbio/BxVpX+Krt0=) 7: 8CEA5014A01411F0BFEF7AB9DAE4EC9C.roa (hash: ZmcJKQbrWBpIwE/ww8rZLi/ZhcQN8hLklhkP+Cw6Oig=) 8: E64C3C80A01411F0B09CCEB9DAE4EC9C.roa (hash: P67lgxodJONkr5xhx0/ZwVViknbWq1lQZGMlbP6XgkY=) 9: 69351E4CA01411F0BCA38EB5DAE4EC9C.roa (hash: qo4MdTAgB+4LLeVyw25K2zTCPmiwmmx5+hWl/ARollk=) 10: 46A7485EA01A11F08EC941DFDAE4EC9C.roa (hash: 7n38aPRG6DfSsFKjw2v4HaAQ/mbzm69U8oIgVsOvwZ8=) 11: 18112B68A01A11F09DD253DDDAE4EC9C.roa (hash: iHeBmMWWg3WS1fulXf5vlgJuM8lCwPKmaQN2zjvQXXM=) 12: 9E2163FAA01811F09E3578D2DAE4EC9C.roa (hash: eDRADB256Y80jHNt3k4fhbDC5ZHAHMd6Ca6OrAqbwIg=) 13: 0B6A72E4A01411F0AD73C0B4DAE4EC9C.roa (hash: Y4CZp0DWrQMWNjkjyjpL08rU6hNDzV3WDuwJ4b5/tIE=) 14: 3F380060A01311F0919EC6AFDAE4EC9C.roa (hash: ML1Fpn+T9RKdP9udPwEg1TO7ruJ5fEp150SBZcWBHGg=) 15: 7D736F44A01911F09753BADADAE4EC9C.roa (hash: LoMK2CKg1w2sxKBIOF7rjm0R24WlzIzFWpE/7DH5x8E=) 16: 33EB252EA01411F08F17EEB4DAE4EC9C.roa (hash: nzlwWU3jybg0Z5LtyVm9+qYiW7rcBwW9fpuAtDJVz3c=) 17: 508EE634A01911F087E8F1D6DAE4EC9C.roa (hash: 4FyWxdVz9ZB89dnEYa1UQaV9BgwPCDZcCQ64zRWzhRY=) 18: EA82641AA01311F09744A3B4DAE4EC9C.roa (hash: PvyVycDl600xSYGgD1LSND0w48iaigMGKSIG0uMiAw4=) 19: 9D32F69A977E11F097D5EA99DAE4EC9C.roa (hash: 8T6MXp4d7k4QlXY2d72nQUcRick423J+7EbbPvV9VsA=) 20: F19DC41AA01811F09F5B62D6DAE4EC9C.roa (hash: TZ8+f6VOZFccWd8TuXEcbvL38bAwB9OZXRVHDIZr0No=) 21: 4C032782A01511F0999B65BEDAE4EC9C.roa (hash: ANPrThqCPCkYsx7dRQ398hItHVf+UOOUIIoPdsOJOUo=) 22: A34959B8A01911F0A89ED4DADAE4EC9C.roa (hash: E3HAjnixDN1XWV/LOWT5w5sQJ03lSjiuDVqAWFJfBmI=) 23: C642CE7CA01411F0B494AFB9DAE4EC9C.roa (hash: aqI2o4BrWljOyaNlrUsbDBgDucPGaFRS97cYN1ybOns=) 24: 94B2F070A01511F0B59AAFBEDAE4EC9C.roa (hash: kwH5u3K/Hl+qIz66y3+qwY9El0PaIlycS18OnhiM728=) 25: 2F962140A01911F081B8AED6DAE4EC9C.roa (hash: ujK0C2V+Qi9u6MTQjYHs+CJbsfw5+IZrPSzJeVNBBYs=) 26: 04AB017A977D11F0A97D3391DAE4EC9C.roa (hash: nkdk6GBaqBguv0UXSrzYeA5QBtv1EdIeuvUWxhgAHHY=) 27: 93B9577EA01311F0B7824FB0DAE4EC9C.roa (hash: mkR2GLOQGEWqlqYNGWBX32sAXhIvbJfjR8LQZ8jggh0=) 28: C2CC2352A01311F0BA2D6BB2DAE4EC9C.roa (hash: 8dkPZG1bVKa6ng9BDONfAwpgPvxPAcZCz/nmcH4/hSQ=) 29: FD658BE4A01211F0BF85CAABDAE4EC9C.roa (hash: Jjrt4iFN9aQQeExy1Q5uaDTAkOEyoLMTHJMPctSRjM0=) 30: 6DA4387EA01311F08B3FF2AFDAE4EC9C.roa (hash: SoreU7BbeZI0MVABkoxSNUmBXY1Qer83v7w3hSgZbOk=) 31: CC94B1F0A01911F0A21BE7DADAE4EC9C.roa (hash: eol3C2aK1kCFY/RXjcfLIKnAxFpxEJhGrZQgt5Mo8mo=) 32: 28E4B6B2A01511F0BAD17CBCDAE4EC9C.roa (hash: O+8YfGKgcic5dSt9d0Vx7+HftSOAGPejOIugvkS/Q/Y=) 33: 072D5AC4A01511F09A0839BADAE4EC9C.roa (hash: yix9tcBAo74wcqdhwzt3WKH7uoqvm4BIlGZZkDl24+U=) 34: BE045106A01211F094A319ABDAE4EC9C.roa (hash: iFrlWdC+BKPWivrrH+4J7SzVi5ek4QeDzjIdOx16K2s=) 35: EE2BF774A01911F0B0CB31DBDAE4EC9C.roa (hash: HrO9DcmxgUKYwJpAAbnzvgRqkHtqT2odz+DewxsVQ7g=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 30 Apr 2026 02:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1892 (0x764) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743 Validity Not Before: Apr 28 02:31:53 2026 GMT Not After : Apr 30 02:31:53 2026 GMT Subject: CN=69f01c1a-eb61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ed:9a:74:42:28:37:56:e6:3d:0f:cb:b0:a7: 9c:a8:ea:ef:8d:f9:3f:9c:01:27:f4:1b:7f:4f:25: d5:1e:21:46:9c:fb:5f:de:21:e0:f3:91:bd:4b:08: 29:47:07:05:dc:bf:31:99:9a:1d:32:ca:1d:e4:67: e2:ee:c1:38:f2:1a:86:ae:6e:b2:b6:1b:c9:3f:8f: 80:ba:09:d0:d3:0a:fe:5c:0c:d0:5c:49:8f:db:44: d3:33:18:b1:29:54:4c:6b:44:1d:9e:1d:03:6a:b9: 86:79:a0:ec:55:26:a4:eb:99:71:25:67:c9:d1:ca: b8:56:56:66:97:3e:2f:4a:bb:b8:47:48:60:99:16: 4b:f4:66:69:78:f4:b2:cb:44:ce:2d:44:3e:ce:c8: d7:47:7b:72:10:85:df:65:cb:6d:26:cc:74:ff:33: 6f:fc:d8:52:5d:b2:cd:65:cf:08:09:5f:ef:f9:53: 1a:83:6b:f8:56:62:d6:bc:68:bb:57:6c:c6:59:7c: 46:ab:2b:6a:d3:f3:cf:f9:83:71:9a:77:10:3c:be: 65:91:48:9d:6e:7a:67:bd:2a:ef:f6:2d:6b:cf:74: 74:c5:1b:78:e2:11:d4:b3:84:fe:eb:11:6a:04:51: 87:31:35:67:25:6e:b4:d6:29:a4:13:86:b6:73:89: 74:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:42:77:44:E2:FA:74:F5:1E:2D:11:B3:E6:7D:8C:73:C9:3D:E8:E5 X509v3 Authority Key Identifier: keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:38:57:42:65:f1:ad:26:10:13:7c:54:d7:ae:ba:77:2d:74: 1b:2b:53:8a:f1:55:15:2c:2a:bb:d7:66:74:72:3c:64:ef:26: d1:53:0d:8a:23:c0:48:83:c8:54:b1:b3:54:53:b4:03:69:fb: cf:d6:6d:d0:5a:cb:e0:ec:e8:bb:f5:18:ba:53:c5:90:4f:c6: 2b:b8:b0:dd:8b:27:cc:0e:5c:96:d4:f0:55:b4:66:17:3d:66: 9c:d9:9f:a3:0b:9b:da:89:82:73:24:04:4e:eb:94:3b:69:12: 18:28:00:fb:d9:cf:7d:85:7a:d8:4b:f9:e1:00:52:47:c9:51: 36:58:66:34:1f:08:22:13:43:fd:63:9e:e1:69:9e:d6:30:4c: 58:fe:79:4a:63:e1:6d:b3:c9:34:7d:56:50:24:8d:fb:57:65: a5:d8:90:2b:6e:43:7a:2c:b2:15:42:e8:55:e0:e6:f1:a1:3a: 19:a9:a7:a9:bb:95:82:85:ae:91:b5:2e:7e:6e:1e:65:48:d1: 67:f3:84:b4:1b:7d:13:2c:da:53:d6:79:bf:cf:05:6d:29:27: 57:0c:9e:c4:0d:77:d5:ad:fb:5a:91:a8:1d:b6:e9:42:bb:62: 8e:7c:40:01:ed:3f:c6:27:88:1d:dd:55:ff:09:a3:fd:52:50: 9e:45:16:2b -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICB2QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MjFDMDZBRjExMC8GA1UEBRMoMUREMTZGRDY4QkZGN0NBQjFBQjkxQzU1REE2MUZD MENERkY0MTc0MzAeFw0yNjA0MjgwMjMxNTNaFw0yNjA0MzAwMjMxNTNaMBgxFjAU BgNVBAMTDTY5ZjAxYzFhLWViNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC97Zp0Qig3VuY9D8uwp5yo6u+N+T+cASf0G39PJdUeIUac+1/eIeDzkb1L CClHBwXcvzGZmh0yyh3kZ+LuwTjyGoaubrK2G8k/j4C6CdDTCv5cDNBcSY/bRNMz GLEpVExrRB2eHQNquYZ5oOxVJqTrmXElZ8nRyrhWVmaXPi9Ku7hHSGCZFkv0Zml4 9LLLRM4tRD7OyNdHe3IQhd9ly20mzHT/M2/82FJdss1lzwgJX+/5UxqDa/hWYta8 aLtXbMZZfEarK2rT88/5g3GadxA8vmWRSJ1ueme9Ku/2LWvPdHTFG3jiEdSzhP7r EWoEUYcxNWclbrTWKaQThrZziXQlAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUfEJ3 ROL6dPUeLRGz5n2Mc8k96OUwHwYDVR0jBBgwFoAUHdFv1ov/fKsauRxV2mH8DN/0 F0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4QTAxNENFL0hkRnYx b3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0hkRnYxb3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MjFDMDYvNThDOUI3OEMyMDU5MTFFQzk5MUI2ODc3RDhB MDE0Q0UvSGRGdjFvdl9mS3NhdVJ4VjJtSDhETl8wRjBNLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCqOFdCZfGtJhATfFTXrrp3LXQbK1OK 8VUVLCq712Z0cjxk7ybRUw2KI8BIg8hUsbNUU7QDafvP1m3QWsvg7Oi79Ri6U8WQ T8YruLDdiyfMDlyW1PBVtGYXPWac2Z+jC5vaiYJzJARO65Q7aRIYKAD72c99hXrY S/nhAFJHyVE2WGY0HwgiE0P9Y57haZ7WMExY/nlKY+Fts8k0fVZQJI37V2Wl2JAr bkN6LLIVQuhV4ObxoToZqaepu5WCha6RtS5+bh5lSNFn84S0G30TLNpT1nm/zwVt KSdXDJ7EDXfVrftakagdtulCu2KOfEAB7T/GJ4gd3VX/CaP9UlCeRRYr -----END CERTIFICATE-----Generated at Tue Apr 28 13:09:12 2026 by rpki-client