$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft File: HdFv1ov_fKsauRxV2mH8DN_0F0M.mft (raw, json) Hash identifier: r2zzTvLvGVfBfKJjwzY38Gj7M4d1Zbou3l6ahFj7jB4= Subject key identifier: 97:95:0C:43:5C:E0:43:4F:3E:A6:69:A0:78:5B:14:41:D7:3E:0A:50 Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43 Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743 Certificate serial: 0765 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft Manifest number: 0716 Signing time: Wed 29 Apr 2026 02:24:11 +0000 Manifest this update: Wed 29 Apr 2026 02:24:10 +0000 Manifest next update: Fri 01 May 2026 02:24:10 +0000 Files and hashes: 1: HdFv1ov_fKsauRxV2mH8DN_0F0M.crl (hash: cDlkngvdvmWUOqEYRfOfI63Ejfyh/YoAMuUCgfRJqug=) 2: 10E2A890A01911F08A266CD6DAE4EC9C.roa (hash: uKu9ra8g3enObejQKUm/wjJcdExGU8pfNmFnYSCVAb4=) 3: C048D206A01811F0997A41D6DAE4EC9C.roa (hash: jhoKyB34pvQ8xNX0wPMbhbFsPkWoO13xc3OlqRsvcuI=) 4: 87292E6AA01A11F0B32F60DFDAE4EC9C.roa (hash: 4nhIZUohQE/GQcQXC4C3luqxwBzt+U4vIAe9MdQWT3w=) 5: 2AC075F0A01211F0B72F98A6DAE4EC9C.roa (hash: DK9ydq1ArB3m61vuEV0TSdIjbjRvzTpBgOxKOB1u+wk=) 6: 77AA62BAA01511F0949C90BEDAE4EC9C.roa (hash: 6sOD9vGb7J0UzCC20Wr5l2Kfav4Tkbio/BxVpX+Krt0=) 7: 8CEA5014A01411F0BFEF7AB9DAE4EC9C.roa (hash: ZmcJKQbrWBpIwE/ww8rZLi/ZhcQN8hLklhkP+Cw6Oig=) 8: E64C3C80A01411F0B09CCEB9DAE4EC9C.roa (hash: P67lgxodJONkr5xhx0/ZwVViknbWq1lQZGMlbP6XgkY=) 9: 69351E4CA01411F0BCA38EB5DAE4EC9C.roa (hash: qo4MdTAgB+4LLeVyw25K2zTCPmiwmmx5+hWl/ARollk=) 10: 46A7485EA01A11F08EC941DFDAE4EC9C.roa (hash: 7n38aPRG6DfSsFKjw2v4HaAQ/mbzm69U8oIgVsOvwZ8=) 11: 18112B68A01A11F09DD253DDDAE4EC9C.roa (hash: iHeBmMWWg3WS1fulXf5vlgJuM8lCwPKmaQN2zjvQXXM=) 12: 9E2163FAA01811F09E3578D2DAE4EC9C.roa (hash: eDRADB256Y80jHNt3k4fhbDC5ZHAHMd6Ca6OrAqbwIg=) 13: 0B6A72E4A01411F0AD73C0B4DAE4EC9C.roa (hash: Y4CZp0DWrQMWNjkjyjpL08rU6hNDzV3WDuwJ4b5/tIE=) 14: 3F380060A01311F0919EC6AFDAE4EC9C.roa (hash: ML1Fpn+T9RKdP9udPwEg1TO7ruJ5fEp150SBZcWBHGg=) 15: 7D736F44A01911F09753BADADAE4EC9C.roa (hash: LoMK2CKg1w2sxKBIOF7rjm0R24WlzIzFWpE/7DH5x8E=) 16: 33EB252EA01411F08F17EEB4DAE4EC9C.roa (hash: nzlwWU3jybg0Z5LtyVm9+qYiW7rcBwW9fpuAtDJVz3c=) 17: 508EE634A01911F087E8F1D6DAE4EC9C.roa (hash: 4FyWxdVz9ZB89dnEYa1UQaV9BgwPCDZcCQ64zRWzhRY=) 18: EA82641AA01311F09744A3B4DAE4EC9C.roa (hash: PvyVycDl600xSYGgD1LSND0w48iaigMGKSIG0uMiAw4=) 19: 9D32F69A977E11F097D5EA99DAE4EC9C.roa (hash: 8T6MXp4d7k4QlXY2d72nQUcRick423J+7EbbPvV9VsA=) 20: F19DC41AA01811F09F5B62D6DAE4EC9C.roa (hash: TZ8+f6VOZFccWd8TuXEcbvL38bAwB9OZXRVHDIZr0No=) 21: 4C032782A01511F0999B65BEDAE4EC9C.roa (hash: ANPrThqCPCkYsx7dRQ398hItHVf+UOOUIIoPdsOJOUo=) 22: A34959B8A01911F0A89ED4DADAE4EC9C.roa (hash: E3HAjnixDN1XWV/LOWT5w5sQJ03lSjiuDVqAWFJfBmI=) 23: C642CE7CA01411F0B494AFB9DAE4EC9C.roa (hash: aqI2o4BrWljOyaNlrUsbDBgDucPGaFRS97cYN1ybOns=) 24: 94B2F070A01511F0B59AAFBEDAE4EC9C.roa (hash: kwH5u3K/Hl+qIz66y3+qwY9El0PaIlycS18OnhiM728=) 25: 2F962140A01911F081B8AED6DAE4EC9C.roa (hash: ujK0C2V+Qi9u6MTQjYHs+CJbsfw5+IZrPSzJeVNBBYs=) 26: 04AB017A977D11F0A97D3391DAE4EC9C.roa (hash: nkdk6GBaqBguv0UXSrzYeA5QBtv1EdIeuvUWxhgAHHY=) 27: 93B9577EA01311F0B7824FB0DAE4EC9C.roa (hash: mkR2GLOQGEWqlqYNGWBX32sAXhIvbJfjR8LQZ8jggh0=) 28: C2CC2352A01311F0BA2D6BB2DAE4EC9C.roa (hash: 8dkPZG1bVKa6ng9BDONfAwpgPvxPAcZCz/nmcH4/hSQ=) 29: FD658BE4A01211F0BF85CAABDAE4EC9C.roa (hash: Jjrt4iFN9aQQeExy1Q5uaDTAkOEyoLMTHJMPctSRjM0=) 30: 6DA4387EA01311F08B3FF2AFDAE4EC9C.roa (hash: SoreU7BbeZI0MVABkoxSNUmBXY1Qer83v7w3hSgZbOk=) 31: CC94B1F0A01911F0A21BE7DADAE4EC9C.roa (hash: eol3C2aK1kCFY/RXjcfLIKnAxFpxEJhGrZQgt5Mo8mo=) 32: 28E4B6B2A01511F0BAD17CBCDAE4EC9C.roa (hash: O+8YfGKgcic5dSt9d0Vx7+HftSOAGPejOIugvkS/Q/Y=) 33: 072D5AC4A01511F09A0839BADAE4EC9C.roa (hash: yix9tcBAo74wcqdhwzt3WKH7uoqvm4BIlGZZkDl24+U=) 34: BE045106A01211F094A319ABDAE4EC9C.roa (hash: iFrlWdC+BKPWivrrH+4J7SzVi5ek4QeDzjIdOx16K2s=) 35: EE2BF774A01911F0B0CB31DBDAE4EC9C.roa (hash: HrO9DcmxgUKYwJpAAbnzvgRqkHtqT2odz+DewxsVQ7g=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 01 May 2026 00:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1893 (0x765) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743 Validity Not Before: Apr 29 02:24:10 2026 GMT Not After : May 1 02:24:10 2026 GMT Subject: CN=69f16bcb-2e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:01:97:53:b7:4c:85:00:24:26:8c:a4:7e: c8:7d:a6:3e:d5:10:4b:19:cc:03:51:15:30:91:d2: 9d:a8:6e:b0:c1:6c:b2:10:ca:7e:e6:48:f7:31:b8: d6:ba:a8:f5:6b:b2:12:ab:63:76:49:63:63:3f:76: b6:be:7b:62:a9:aa:8b:b0:85:af:7f:1d:fa:6b:dc: 6a:cd:a0:e8:53:60:40:d9:94:31:0a:3e:cd:90:08: fd:9a:ff:12:a1:0c:69:a1:4b:c6:12:94:1a:bd:9f: 63:60:ff:9c:72:b9:b9:eb:98:e3:30:44:78:d0:ce: 00:1b:8d:81:27:f4:20:80:ee:e3:c6:b6:fa:ab:ad: 32:99:10:f5:03:01:4c:5b:3d:79:0c:10:e8:c4:33: 54:5c:3c:6b:36:92:2d:7b:d2:e1:77:01:75:f7:16: 87:68:2e:e6:3d:d0:53:0c:51:81:f6:c3:e7:53:b3: 8d:c8:7b:51:54:7d:79:1d:b0:73:f6:18:7e:39:84: ad:33:55:0c:96:5f:bc:0d:ce:3b:3e:53:e9:de:1c: 74:66:aa:df:74:2c:2b:44:7f:b5:af:2b:b6:91:c8: de:14:d9:cc:3f:63:0e:a1:04:b7:8a:cb:d4:77:d8: 12:55:44:b0:cb:f3:b6:3f:f4:46:b5:52:ac:ee:1a: 5c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:95:0C:43:5C:E0:43:4F:3E:A6:69:A0:78:5B:14:41:D7:3E:0A:50 X509v3 Authority Key Identifier: keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:da:04:d9:f3:98:52:68:c8:14:4c:4f:c2:6a:48:fd:dc:b6: 94:31:22:2c:dd:7b:a3:1b:9c:72:77:5a:a7:43:22:51:9f:82: d7:ce:4c:d5:66:99:f9:4a:c6:5c:1e:19:fd:91:90:35:6d:cb: 55:d0:a0:cf:9f:10:c3:b1:85:a5:0d:fb:4a:89:b1:21:6a:80: 0c:18:2c:a0:65:e1:33:d0:20:ce:fc:14:ac:af:43:39:18:10: 90:05:e0:e2:38:d2:01:4f:21:b6:91:e8:8d:19:a2:81:f3:e0: eb:b2:02:4c:bf:62:d7:12:c6:47:68:55:56:98:82:5b:4f:1c: 14:eb:94:d8:83:11:fc:37:ac:0a:1a:c5:4d:15:ec:6e:b0:7b: be:1a:de:32:22:3b:f9:a9:8e:b8:46:43:59:1a:ae:af:c9:27: b8:81:17:67:d1:df:fc:fa:e6:90:db:a4:a0:eb:ea:48:84:80: 36:1d:38:52:83:9f:00:44:20:00:ce:2e:36:6f:56:0c:27:c8: 32:1f:af:15:3c:3a:cf:f2:02:5f:d8:8d:28:e0:07:5e:34:10: 85:f1:ec:ee:e1:f3:d9:64:b5:cb:4f:ed:28:58:74:80:0d:02: 64:f3:f3:f1:9b:f4:d5:52:59:d9:f8:f5:ca:08:89:4a:f0:3c: f3:c1:c2:92 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICB2UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MjFDMDZBRjExMC8GA1UEBRMoMUREMTZGRDY4QkZGN0NBQjFBQjkxQzU1REE2MUZD MENERkY0MTc0MzAeFw0yNjA0MjkwMjI0MTBaFw0yNjA1MDEwMjI0MTBaMBgxFjAU BgNVBAMTDTY5ZjE2YmNiLTJlMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDJTQGXU7dMhQAkJoykfsh9pj7VEEsZzANRFTCR0p2obrDBbLIQyn7mSPcx uNa6qPVrshKrY3ZJY2M/dra+e2Kpqouwha9/Hfpr3GrNoOhTYEDZlDEKPs2QCP2a /xKhDGmhS8YSlBq9n2Ng/5xyubnrmOMwRHjQzgAbjYEn9CCA7uPGtvqrrTKZEPUD AUxbPXkMEOjEM1RcPGs2ki170uF3AXX3FodoLuY90FMMUYH2w+dTs43Ie1FUfXkd sHP2GH45hK0zVQyWX7wNzjs+U+neHHRmqt90LCtEf7WvK7aRyN4U2cw/Yw6hBLeK y9R32BJVRLDL87Y/9Ea1UqzuGly5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUl5UM Q1zgQ08+pmmgeFsUQdc+ClAwHwYDVR0jBBgwFoAUHdFv1ov/fKsauRxV2mH8DN/0 F0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4QTAxNENFL0hkRnYx b3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0hkRnYxb3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MjFDMDYvNThDOUI3OEMyMDU5MTFFQzk5MUI2ODc3RDhB MDE0Q0UvSGRGdjFvdl9mS3NhdVJ4VjJtSDhETl8wRjBNLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBN2gTZ85hSaMgUTE/Cakj93LaUMSIs 3XujG5xyd1qnQyJRn4LXzkzVZpn5SsZcHhn9kZA1bctV0KDPnxDDsYWlDftKibEh aoAMGCygZeEz0CDO/BSsr0M5GBCQBeDiONIBTyG2keiNGaKB8+DrsgJMv2LXEsZH aFVWmIJbTxwU65TYgxH8N6wKGsVNFexusHu+Gt4yIjv5qY64RkNZGq6vySe4gRdn 0d/8+uaQ26Sg6+pIhIA2HThSg58ARCAAzi42b1YMJ8gyH68VPDrP8gJf2I0o4Ade NBCF8ezu4fPZZLXLT+0oWHSADQJk8/Pxm/TVUlnZ+PXKCIlK8DzzwcKS -----END CERTIFICATE-----Generated at Wed Apr 29 16:03:10 2026 by rpki-client