$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft File: HdFv1ov_fKsauRxV2mH8DN_0F0M.mft (raw, json) Hash identifier: UAK0hpBSJ4SRPeMBbMUCh8ISqRLe07ZfGv6XiI2lCEo= Subject key identifier: 4B:08:B6:63:FB:14:32:62:01:98:A8:05:35:9A:CD:81:A8:46:3D:C1 Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43 Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743 Certificate serial: 075B Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft Manifest number: 070C Signing time: Mon 20 Apr 2026 02:24:00 +0000 Manifest this update: Mon 20 Apr 2026 02:23:59 +0000 Manifest next update: Wed 22 Apr 2026 02:23:59 +0000 Files and hashes: 1: HdFv1ov_fKsauRxV2mH8DN_0F0M.crl (hash: 1nETNfhrnbk82HKll/KNrBmWdbOoYX6Fvf4xokcgnEA=) 2: 10E2A890A01911F08A266CD6DAE4EC9C.roa (hash: uKu9ra8g3enObejQKUm/wjJcdExGU8pfNmFnYSCVAb4=) 3: C048D206A01811F0997A41D6DAE4EC9C.roa (hash: jhoKyB34pvQ8xNX0wPMbhbFsPkWoO13xc3OlqRsvcuI=) 4: 87292E6AA01A11F0B32F60DFDAE4EC9C.roa (hash: 4nhIZUohQE/GQcQXC4C3luqxwBzt+U4vIAe9MdQWT3w=) 5: 2AC075F0A01211F0B72F98A6DAE4EC9C.roa (hash: DK9ydq1ArB3m61vuEV0TSdIjbjRvzTpBgOxKOB1u+wk=) 6: 77AA62BAA01511F0949C90BEDAE4EC9C.roa (hash: 6sOD9vGb7J0UzCC20Wr5l2Kfav4Tkbio/BxVpX+Krt0=) 7: 8CEA5014A01411F0BFEF7AB9DAE4EC9C.roa (hash: ZmcJKQbrWBpIwE/ww8rZLi/ZhcQN8hLklhkP+Cw6Oig=) 8: E64C3C80A01411F0B09CCEB9DAE4EC9C.roa (hash: P67lgxodJONkr5xhx0/ZwVViknbWq1lQZGMlbP6XgkY=) 9: 69351E4CA01411F0BCA38EB5DAE4EC9C.roa (hash: qo4MdTAgB+4LLeVyw25K2zTCPmiwmmx5+hWl/ARollk=) 10: 46A7485EA01A11F08EC941DFDAE4EC9C.roa (hash: 7n38aPRG6DfSsFKjw2v4HaAQ/mbzm69U8oIgVsOvwZ8=) 11: 18112B68A01A11F09DD253DDDAE4EC9C.roa (hash: iHeBmMWWg3WS1fulXf5vlgJuM8lCwPKmaQN2zjvQXXM=) 12: 9E2163FAA01811F09E3578D2DAE4EC9C.roa (hash: eDRADB256Y80jHNt3k4fhbDC5ZHAHMd6Ca6OrAqbwIg=) 13: 0B6A72E4A01411F0AD73C0B4DAE4EC9C.roa (hash: Y4CZp0DWrQMWNjkjyjpL08rU6hNDzV3WDuwJ4b5/tIE=) 14: 3F380060A01311F0919EC6AFDAE4EC9C.roa (hash: ML1Fpn+T9RKdP9udPwEg1TO7ruJ5fEp150SBZcWBHGg=) 15: 7D736F44A01911F09753BADADAE4EC9C.roa (hash: LoMK2CKg1w2sxKBIOF7rjm0R24WlzIzFWpE/7DH5x8E=) 16: 33EB252EA01411F08F17EEB4DAE4EC9C.roa (hash: nzlwWU3jybg0Z5LtyVm9+qYiW7rcBwW9fpuAtDJVz3c=) 17: 508EE634A01911F087E8F1D6DAE4EC9C.roa (hash: 4FyWxdVz9ZB89dnEYa1UQaV9BgwPCDZcCQ64zRWzhRY=) 18: EA82641AA01311F09744A3B4DAE4EC9C.roa (hash: PvyVycDl600xSYGgD1LSND0w48iaigMGKSIG0uMiAw4=) 19: 9D32F69A977E11F097D5EA99DAE4EC9C.roa (hash: 8T6MXp4d7k4QlXY2d72nQUcRick423J+7EbbPvV9VsA=) 20: F19DC41AA01811F09F5B62D6DAE4EC9C.roa (hash: TZ8+f6VOZFccWd8TuXEcbvL38bAwB9OZXRVHDIZr0No=) 21: 4C032782A01511F0999B65BEDAE4EC9C.roa (hash: ANPrThqCPCkYsx7dRQ398hItHVf+UOOUIIoPdsOJOUo=) 22: A34959B8A01911F0A89ED4DADAE4EC9C.roa (hash: E3HAjnixDN1XWV/LOWT5w5sQJ03lSjiuDVqAWFJfBmI=) 23: C642CE7CA01411F0B494AFB9DAE4EC9C.roa (hash: aqI2o4BrWljOyaNlrUsbDBgDucPGaFRS97cYN1ybOns=) 24: 94B2F070A01511F0B59AAFBEDAE4EC9C.roa (hash: kwH5u3K/Hl+qIz66y3+qwY9El0PaIlycS18OnhiM728=) 25: 2F962140A01911F081B8AED6DAE4EC9C.roa (hash: ujK0C2V+Qi9u6MTQjYHs+CJbsfw5+IZrPSzJeVNBBYs=) 26: 04AB017A977D11F0A97D3391DAE4EC9C.roa (hash: nkdk6GBaqBguv0UXSrzYeA5QBtv1EdIeuvUWxhgAHHY=) 27: 93B9577EA01311F0B7824FB0DAE4EC9C.roa (hash: mkR2GLOQGEWqlqYNGWBX32sAXhIvbJfjR8LQZ8jggh0=) 28: C2CC2352A01311F0BA2D6BB2DAE4EC9C.roa (hash: 8dkPZG1bVKa6ng9BDONfAwpgPvxPAcZCz/nmcH4/hSQ=) 29: FD658BE4A01211F0BF85CAABDAE4EC9C.roa (hash: Jjrt4iFN9aQQeExy1Q5uaDTAkOEyoLMTHJMPctSRjM0=) 30: 6DA4387EA01311F08B3FF2AFDAE4EC9C.roa (hash: SoreU7BbeZI0MVABkoxSNUmBXY1Qer83v7w3hSgZbOk=) 31: CC94B1F0A01911F0A21BE7DADAE4EC9C.roa (hash: eol3C2aK1kCFY/RXjcfLIKnAxFpxEJhGrZQgt5Mo8mo=) 32: 28E4B6B2A01511F0BAD17CBCDAE4EC9C.roa (hash: O+8YfGKgcic5dSt9d0Vx7+HftSOAGPejOIugvkS/Q/Y=) 33: 072D5AC4A01511F09A0839BADAE4EC9C.roa (hash: yix9tcBAo74wcqdhwzt3WKH7uoqvm4BIlGZZkDl24+U=) 34: BE045106A01211F094A319ABDAE4EC9C.roa (hash: iFrlWdC+BKPWivrrH+4J7SzVi5ek4QeDzjIdOx16K2s=) 35: EE2BF774A01911F0B0CB31DBDAE4EC9C.roa (hash: HrO9DcmxgUKYwJpAAbnzvgRqkHtqT2odz+DewxsVQ7g=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 22 Apr 2026 00:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1883 (0x75b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743 Validity Not Before: Apr 20 02:23:59 2026 GMT Not After : Apr 22 02:23:59 2026 GMT Subject: CN=69e58e40-9d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:54:c3:f9:1f:66:77:69:f2:fb:e9:f1:19:cf: f8:61:5f:5b:a8:72:e9:f9:28:da:6b:af:36:ac:1d: c2:07:24:d8:67:86:c5:de:53:a4:93:a5:aa:61:8f: 86:a2:dd:0e:90:a6:2e:41:b0:79:8f:09:ea:b5:01: 16:e0:87:5a:b5:f0:75:88:01:40:5b:7b:14:8e:f8: ea:50:fd:1d:2b:f8:23:93:84:85:ba:f8:75:64:e5: cd:b8:bd:19:27:a3:a4:be:5e:71:23:e3:95:4d:23: c0:3c:9e:3f:78:cc:b6:e3:32:9c:11:0c:63:b6:a6: 12:4c:ae:a0:ec:be:8a:9e:83:23:65:35:55:34:9a: 53:41:67:44:37:12:99:be:77:a7:e3:a4:a4:cd:13: ec:20:e2:48:f9:f4:f0:16:80:1e:f4:44:01:f5:f2: 39:de:46:d8:d4:4f:98:b9:ed:50:9b:f3:ae:af:e3: d3:d5:e2:76:7e:ed:6a:5d:54:c1:11:de:ef:de:f2: 4f:fe:8d:89:2d:c3:ea:bb:80:05:7e:02:6b:f3:64: c4:a0:31:7c:55:f8:27:d1:a0:d6:f4:20:d2:a5:91: 72:e8:38:cc:8e:11:38:b7:64:1b:ee:00:a3:90:21: 20:6e:a0:77:ee:5a:19:af:ad:ab:3d:2c:8d:c0:f2: 25:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:08:B6:63:FB:14:32:62:01:98:A8:05:35:9A:CD:81:A8:46:3D:C1 X509v3 Authority Key Identifier: keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:ae:10:85:78:b7:10:f9:32:c0:f4:e6:c2:3c:d9:07:84:88: 6f:b6:5a:81:f1:5b:9e:c2:de:00:14:47:6a:c5:a2:83:eb:fb: 48:52:52:bd:f0:32:52:a1:a2:aa:cc:e4:fb:ba:9a:32:1a:c7: 9a:be:a9:f6:f5:e7:5f:e1:88:da:7f:1f:7a:ab:f9:06:a3:20: e5:29:25:6c:f2:19:7a:9e:0a:d3:1c:06:2f:3a:a5:d9:1b:9a: 4f:c4:b9:df:0b:e3:ee:8b:c3:15:cd:4d:7b:7a:88:34:79:4f: b1:b9:61:83:92:37:be:cb:43:20:96:26:d5:77:53:37:6b:8f: 8d:3d:ba:e1:a7:f2:d3:30:83:f9:d3:0d:70:19:1b:8a:81:c8: 72:5d:f5:70:25:ce:1d:6f:63:53:27:80:6a:ff:67:8b:9c:4b: b3:92:8e:e8:3f:5c:f6:eb:cc:48:d0:66:ee:2b:a9:14:f0:7f: 9c:63:ee:80:8c:8b:e5:49:b8:bd:58:7d:0e:84:07:01:37:ee: 76:9e:de:e8:99:9e:d8:1b:5b:2f:e2:6d:0e:f4:75:ee:25:c5: c5:e3:26:ae:78:29:fc:e1:c0:37:07:47:de:7d:39:13:b5:e8: c6:06:af:c3:33:25:8e:6d:57:33:ae:b0:0f:86:62:e4:57:5f: 03:88:41:88 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICB1swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MjFDMDZBRjExMC8GA1UEBRMoMUREMTZGRDY4QkZGN0NBQjFBQjkxQzU1REE2MUZD MENERkY0MTc0MzAeFw0yNjA0MjAwMjIzNTlaFw0yNjA0MjIwMjIzNTlaMBgxFjAU BgNVBAMTDTY5ZTU4ZTQwLTlkMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDJVMP5H2Z3afL76fEZz/hhX1uocun5KNprrzasHcIHJNhnhsXeU6STpaph j4ai3Q6Qpi5BsHmPCeq1ARbgh1q18HWIAUBbexSO+OpQ/R0r+COThIW6+HVk5c24 vRkno6S+XnEj45VNI8A8nj94zLbjMpwRDGO2phJMrqDsvoqegyNlNVU0mlNBZ0Q3 Epm+d6fjpKTNE+wg4kj59PAWgB70RAH18jneRtjUT5i57VCb866v49PV4nZ+7Wpd VMER3u/e8k/+jYktw+q7gAV+AmvzZMSgMXxV+CfRoNb0INKlkXLoOMyOETi3ZBvu AKOQISBuoHfuWhmvras9LI3A8iWpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUSwi2 Y/sUMmIBmKgFNZrNgahGPcEwHwYDVR0jBBgwFoAUHdFv1ov/fKsauRxV2mH8DN/0 F0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4QTAxNENFL0hkRnYx b3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0hkRnYxb3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MjFDMDYvNThDOUI3OEMyMDU5MTFFQzk5MUI2ODc3RDhB MDE0Q0UvSGRGdjFvdl9mS3NhdVJ4VjJtSDhETl8wRjBNLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCirhCFeLcQ+TLA9ObCPNkHhIhvtlqB 8Vuewt4AFEdqxaKD6/tIUlK98DJSoaKqzOT7upoyGseavqn29edf4Yjafx96q/kG oyDlKSVs8hl6ngrTHAYvOqXZG5pPxLnfC+Pui8MVzU17eog0eU+xuWGDkje+y0Mg libVd1M3a4+NPbrhp/LTMIP50w1wGRuKgchyXfVwJc4db2NTJ4Bq/2eLnEuzko7o P1z268xI0GbuK6kU8H+cY+6AjIvlSbi9WH0OhAcBN+52nt7omZ7YG1sv4m0O9HXu JcXF4yaueCn84cA3B0fefTkTtejGBq/DMyWObVczrrAPhmLkV18DiEGI -----END CERTIFICATE-----Generated at Mon Apr 20 10:28:20 2026 by rpki-client