$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft File: HdFv1ov_fKsauRxV2mH8DN_0F0M.mft (raw, json) Hash identifier: Bn1FMaT3lQb+xGSQdLQJS62FPW9EgJH+iUnbd6myH7g= Subject key identifier: CB:41:84:9B:45:6D:01:43:16:E8:6B:C7:F4:A4:F0:79:7D:F3:08:99 Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43 Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743 Certificate serial: 0761 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft Manifest number: 0712 Signing time: Sat 25 Apr 2026 02:25:46 +0000 Manifest this update: Sat 25 Apr 2026 02:25:45 +0000 Manifest next update: Mon 27 Apr 2026 02:25:45 +0000 Files and hashes: 1: HdFv1ov_fKsauRxV2mH8DN_0F0M.crl (hash: ojQwjFQheIA3Gllj2qoWaOPIpy1k84oRjE+I9iOfN4o=) 2: 10E2A890A01911F08A266CD6DAE4EC9C.roa (hash: uKu9ra8g3enObejQKUm/wjJcdExGU8pfNmFnYSCVAb4=) 3: C048D206A01811F0997A41D6DAE4EC9C.roa (hash: jhoKyB34pvQ8xNX0wPMbhbFsPkWoO13xc3OlqRsvcuI=) 4: 87292E6AA01A11F0B32F60DFDAE4EC9C.roa (hash: 4nhIZUohQE/GQcQXC4C3luqxwBzt+U4vIAe9MdQWT3w=) 5: 2AC075F0A01211F0B72F98A6DAE4EC9C.roa (hash: DK9ydq1ArB3m61vuEV0TSdIjbjRvzTpBgOxKOB1u+wk=) 6: 77AA62BAA01511F0949C90BEDAE4EC9C.roa (hash: 6sOD9vGb7J0UzCC20Wr5l2Kfav4Tkbio/BxVpX+Krt0=) 7: 8CEA5014A01411F0BFEF7AB9DAE4EC9C.roa (hash: ZmcJKQbrWBpIwE/ww8rZLi/ZhcQN8hLklhkP+Cw6Oig=) 8: E64C3C80A01411F0B09CCEB9DAE4EC9C.roa (hash: P67lgxodJONkr5xhx0/ZwVViknbWq1lQZGMlbP6XgkY=) 9: 69351E4CA01411F0BCA38EB5DAE4EC9C.roa (hash: qo4MdTAgB+4LLeVyw25K2zTCPmiwmmx5+hWl/ARollk=) 10: 46A7485EA01A11F08EC941DFDAE4EC9C.roa (hash: 7n38aPRG6DfSsFKjw2v4HaAQ/mbzm69U8oIgVsOvwZ8=) 11: 18112B68A01A11F09DD253DDDAE4EC9C.roa (hash: iHeBmMWWg3WS1fulXf5vlgJuM8lCwPKmaQN2zjvQXXM=) 12: 9E2163FAA01811F09E3578D2DAE4EC9C.roa (hash: eDRADB256Y80jHNt3k4fhbDC5ZHAHMd6Ca6OrAqbwIg=) 13: 0B6A72E4A01411F0AD73C0B4DAE4EC9C.roa (hash: Y4CZp0DWrQMWNjkjyjpL08rU6hNDzV3WDuwJ4b5/tIE=) 14: 3F380060A01311F0919EC6AFDAE4EC9C.roa (hash: ML1Fpn+T9RKdP9udPwEg1TO7ruJ5fEp150SBZcWBHGg=) 15: 7D736F44A01911F09753BADADAE4EC9C.roa (hash: LoMK2CKg1w2sxKBIOF7rjm0R24WlzIzFWpE/7DH5x8E=) 16: 33EB252EA01411F08F17EEB4DAE4EC9C.roa (hash: nzlwWU3jybg0Z5LtyVm9+qYiW7rcBwW9fpuAtDJVz3c=) 17: 508EE634A01911F087E8F1D6DAE4EC9C.roa (hash: 4FyWxdVz9ZB89dnEYa1UQaV9BgwPCDZcCQ64zRWzhRY=) 18: EA82641AA01311F09744A3B4DAE4EC9C.roa (hash: PvyVycDl600xSYGgD1LSND0w48iaigMGKSIG0uMiAw4=) 19: 9D32F69A977E11F097D5EA99DAE4EC9C.roa (hash: 8T6MXp4d7k4QlXY2d72nQUcRick423J+7EbbPvV9VsA=) 20: F19DC41AA01811F09F5B62D6DAE4EC9C.roa (hash: TZ8+f6VOZFccWd8TuXEcbvL38bAwB9OZXRVHDIZr0No=) 21: 4C032782A01511F0999B65BEDAE4EC9C.roa (hash: ANPrThqCPCkYsx7dRQ398hItHVf+UOOUIIoPdsOJOUo=) 22: A34959B8A01911F0A89ED4DADAE4EC9C.roa (hash: E3HAjnixDN1XWV/LOWT5w5sQJ03lSjiuDVqAWFJfBmI=) 23: C642CE7CA01411F0B494AFB9DAE4EC9C.roa (hash: aqI2o4BrWljOyaNlrUsbDBgDucPGaFRS97cYN1ybOns=) 24: 94B2F070A01511F0B59AAFBEDAE4EC9C.roa (hash: kwH5u3K/Hl+qIz66y3+qwY9El0PaIlycS18OnhiM728=) 25: 2F962140A01911F081B8AED6DAE4EC9C.roa (hash: ujK0C2V+Qi9u6MTQjYHs+CJbsfw5+IZrPSzJeVNBBYs=) 26: 04AB017A977D11F0A97D3391DAE4EC9C.roa (hash: nkdk6GBaqBguv0UXSrzYeA5QBtv1EdIeuvUWxhgAHHY=) 27: 93B9577EA01311F0B7824FB0DAE4EC9C.roa (hash: mkR2GLOQGEWqlqYNGWBX32sAXhIvbJfjR8LQZ8jggh0=) 28: C2CC2352A01311F0BA2D6BB2DAE4EC9C.roa (hash: 8dkPZG1bVKa6ng9BDONfAwpgPvxPAcZCz/nmcH4/hSQ=) 29: FD658BE4A01211F0BF85CAABDAE4EC9C.roa (hash: Jjrt4iFN9aQQeExy1Q5uaDTAkOEyoLMTHJMPctSRjM0=) 30: 6DA4387EA01311F08B3FF2AFDAE4EC9C.roa (hash: SoreU7BbeZI0MVABkoxSNUmBXY1Qer83v7w3hSgZbOk=) 31: CC94B1F0A01911F0A21BE7DADAE4EC9C.roa (hash: eol3C2aK1kCFY/RXjcfLIKnAxFpxEJhGrZQgt5Mo8mo=) 32: 28E4B6B2A01511F0BAD17CBCDAE4EC9C.roa (hash: O+8YfGKgcic5dSt9d0Vx7+HftSOAGPejOIugvkS/Q/Y=) 33: 072D5AC4A01511F09A0839BADAE4EC9C.roa (hash: yix9tcBAo74wcqdhwzt3WKH7uoqvm4BIlGZZkDl24+U=) 34: BE045106A01211F094A319ABDAE4EC9C.roa (hash: iFrlWdC+BKPWivrrH+4J7SzVi5ek4QeDzjIdOx16K2s=) 35: EE2BF774A01911F0B0CB31DBDAE4EC9C.roa (hash: HrO9DcmxgUKYwJpAAbnzvgRqkHtqT2odz+DewxsVQ7g=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 27 Apr 2026 00:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1889 (0x761) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743 Validity Not Before: Apr 25 02:25:45 2026 GMT Not After : Apr 27 02:25:45 2026 GMT Subject: CN=69ec262a-968f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9e:19:fd:74:e3:52:df:6a:2c:c3:c0:d8:20: b1:79:a4:7c:68:ee:17:76:20:9e:16:be:42:e6:10: a8:a3:c7:68:de:64:b4:cb:31:a8:e8:88:2e:47:bb: 39:ef:fd:46:e5:bb:4b:e8:5f:06:74:80:08:f9:aa: 4e:5a:06:5a:fa:f5:5c:a2:02:9f:ec:70:21:5d:e8: 60:0f:d5:2d:f0:7c:26:3c:7f:29:0a:c1:89:c9:35: 70:d5:08:27:95:f2:7b:0a:4a:18:4d:7d:73:be:ec: 55:b0:43:4c:b0:1c:a6:0d:06:4a:f8:4e:c8:cd:7a: 92:a4:0a:b3:8c:c8:9e:35:e9:89:d5:61:e6:03:66: b5:06:f8:32:03:12:c7:87:53:26:f0:5d:96:bf:9b: a1:7b:9b:56:40:74:30:9f:09:6a:86:4b:82:b3:38: 4f:e1:fb:57:81:a7:e6:37:59:23:d4:19:9e:f5:25: 82:3a:1c:5f:15:70:f1:a4:62:be:4f:7c:a9:64:3f: 2a:d4:ee:b9:87:07:5f:25:42:7d:a7:19:37:61:64: ea:2d:27:a5:f0:07:91:34:4b:38:c4:7c:c7:2a:0d: 67:05:a9:be:6f:10:0c:71:30:50:21:8f:48:c5:ee: 43:9a:2f:4f:4a:01:5f:28:0c:b7:e7:1b:5c:84:5c: 38:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:41:84:9B:45:6D:01:43:16:E8:6B:C7:F4:A4:F0:79:7D:F3:08:99 X509v3 Authority Key Identifier: keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:18:87:94:80:6c:f9:9a:01:63:04:32:fe:71:d2:52:ed:0b: 40:a9:ba:16:bc:65:5a:1a:fa:1d:69:9e:8b:a5:db:1c:df:6a: 0d:f0:e8:54:38:9f:a2:aa:bd:31:92:65:49:bd:39:0f:ef:85: 0d:17:ad:4d:4b:0f:15:7e:64:86:96:01:dc:0a:f7:26:5c:90: 13:9b:21:99:e4:38:f2:be:d3:73:97:71:b3:09:75:89:16:0d: 25:46:17:c1:e5:34:27:d9:8a:bc:24:a7:7a:79:e2:1d:0d:c6: 2f:03:d6:df:6f:83:88:d0:9e:25:5a:49:eb:c3:e9:e0:ec:5d: f8:9d:b3:33:63:fb:3c:61:b4:a5:48:c6:2a:ca:1b:d5:a5:60: 1e:b6:83:51:38:f4:43:4d:51:fc:95:46:51:aa:e1:ce:2f:55: a1:a1:72:a5:52:35:d3:97:33:1d:09:62:a2:3e:13:2c:3c:da: b4:40:ef:bb:a5:ec:7d:57:b4:40:80:8a:8f:3c:2d:3d:06:1f: e3:82:19:d3:c8:d9:c6:ec:33:cf:ac:cf:19:78:0c:af:f2:06: 4d:1a:e2:1e:20:cc:e8:42:fa:86:39:26:be:1c:c8:ce:79:73: 1c:a0:30:a2:30:3e:51:8c:26:c0:4b:7d:47:aa:79:4e:01:3f: 2b:56:18:e3 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICB2EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MjFDMDZBRjExMC8GA1UEBRMoMUREMTZGRDY4QkZGN0NBQjFBQjkxQzU1REE2MUZD MENERkY0MTc0MzAeFw0yNjA0MjUwMjI1NDVaFw0yNjA0MjcwMjI1NDVaMBgxFjAU BgNVBAMTDTY5ZWMyNjJhLTk2OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC/nhn9dONS32osw8DYILF5pHxo7hd2IJ4WvkLmEKijx2jeZLTLMajoiC5H uznv/Ublu0voXwZ0gAj5qk5aBlr69VyiAp/scCFd6GAP1S3wfCY8fykKwYnJNXDV CCeV8nsKShhNfXO+7FWwQ0ywHKYNBkr4TsjNepKkCrOMyJ416YnVYeYDZrUG+DID EseHUybwXZa/m6F7m1ZAdDCfCWqGS4KzOE/h+1eBp+Y3WSPUGZ71JYI6HF8VcPGk Yr5PfKlkPyrU7rmHB18lQn2nGTdhZOotJ6XwB5E0SzjEfMcqDWcFqb5vEAxxMFAh j0jF7kOaL09KAV8oDLfnG1yEXDh1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUy0GE m0VtAUMW6GvH9KTweX3zCJkwHwYDVR0jBBgwFoAUHdFv1ov/fKsauRxV2mH8DN/0 F0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4QTAxNENFL0hkRnYx b3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0hkRnYxb3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MjFDMDYvNThDOUI3OEMyMDU5MTFFQzk5MUI2ODc3RDhB MDE0Q0UvSGRGdjFvdl9mS3NhdVJ4VjJtSDhETl8wRjBNLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC4GIeUgGz5mgFjBDL+cdJS7QtAqboW vGVaGvodaZ6Lpdsc32oN8OhUOJ+iqr0xkmVJvTkP74UNF61NSw8VfmSGlgHcCvcm XJATmyGZ5DjyvtNzl3GzCXWJFg0lRhfB5TQn2Yq8JKd6eeIdDcYvA9bfb4OI0J4l Wknrw+ng7F34nbMzY/s8YbSlSMYqyhvVpWAetoNROPRDTVH8lUZRquHOL1WhoXKl UjXTlzMdCWKiPhMsPNq0QO+7pex9V7RAgIqPPC09Bh/jghnTyNnG7DPPrM8ZeAyv 8gZNGuIeIMzoQvqGOSa+HMjOeXMcoDCiMD5RjCbAS31HqnlOAT8rVhjj -----END CERTIFICATE-----Generated at Sat Apr 25 11:14:51 2026 by rpki-client