$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft File: 3zdkgNzweht60WTeZKPqIV8kdUE.mft (raw, json) Hash identifier: YeD+zbrvrDTXPiHGJlcKY8UKQRAVa1AzzgKtGfAL8dg= Subject key identifier: A9:6C:EC:59:82:B6:68:1F:B5:30:CB:F4:73:AF:7F:43:12:91:D1:35 Authority key identifier: DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41 Certificate issuer: /CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541 Certificate serial: 0691 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft Manifest number: 067B Signing time: Thu 31 Jul 2025 02:15:40 +0000 Manifest this update: Thu 31 Jul 2025 02:15:39 +0000 Manifest next update: Sat 02 Aug 2025 02:15:39 +0000 Files and hashes: 1: 3zdkgNzweht60WTeZKPqIV8kdUE.crl (hash: USd+ZaK5FOvj4C7Zz5X2p80G+2IezXzCTg6xLT5wi+M=) 2: A3EC97C49EAA11EB9431AE42F8AEA228.roa (hash: ITdou6CBdoyIdGztCF0641fr0nfnRn3rDhTSbOWklSg=) 3: BD35823837EA11ED900673C9F1222468.roa (hash: K3b0R/z4frBDGrfF/mCTN3o21drYDHR1MM4314IVJ6A=) 4: 0982C456E24C11ECBCE3B3CEF1222468.roa (hash: rkWlw7/JbGs5TriVgLgAZr85y9glD0YVL8m1Iff/Uxs=) 5: A355EDC8A0DB11EB87F2FC7DF8AEA228.roa (hash: P3+HhN3YnB8DQjtTMhjEMHdHESBMFxFQZlU9EI7263k=) 6: 98E14F269EA711EBBE0A593EF8AEA228.roa (hash: FZ26ySvv3oron31W1iao0hhqAh46EM14zvc7xYlbQnc=) 7: 6E9310449EAA11EBB4E64442F8AEA228.roa (hash: Hv+jSs3D/YdVMnFhqJVvMuYCEdqqrHrk+9Aqx/UNgKo=) 8: C7ECC700714111ED8827C5E0F1222468.roa (hash: W6gLMNJRZ7K5rBGmlnWlV3y7BTYUlYaagswgafcBbHM=) 9: B0A72E82BFAD11ECBB31F3D65A40D577.roa (hash: vPmLIix5cxvVmhxpbkYB4/qDa0zKQvjG6CoH3d5Eq74=) 10: EC17DAD29EA911EBA0639941F8AEA228.roa (hash: tmy+9p0VWiMmZWA0QRZ2fgoauFE3Y6jS2hlQpUun5VU=) 11: 806F60A68EA811EEB351189F7D84E21B.roa (hash: NJlx9u+oJuJrEXnYDPQ5xdPQwiaXnmhnYC8axpDUM3s=) 12: 1B0C20009EAA11EB9740C941F8AEA228.roa (hash: 3XWadNjbvuaIh9S98dtVe+4vXm4B+aC8LiE6ycenb00=) 13: 09618552624A11EC8BFCB8A85A40D577.roa (hash: FIOUTy5cy2KzouDMbv2WtQevYzQleIp785GheY40Njk=) 14: 3FC1A89C791111EC8AF442855A40D577.roa (hash: KTULHI880xtCGIU0AMDedXoG0QU7sh0kYIcf5dcFCks=) 15: 884C0C72D2BD11ED8DC9AFA4F1222468.roa (hash: 2tRYYZYXesgnA4Rq+EJeXLYkWIBNCFi1xtzvwofm52c=) 16: 8BDFF64E9EAA11EB9E498842F8AEA228.roa (hash: zV3obduva5V+wbQ0DLEaMrifvrDZUFDKELgGrlIfqWQ=) 17: 32F7F2FC9EAA11EB97EBF441F8AEA228.roa (hash: TOFg8z8/QllUB8rjCBN0BMuQMzI8dKWFP0PwxmRO42c=) 18: 50E626B29EAA11EB86172E42F8AEA228.roa (hash: mLDh441cHpoJvemUeR9tMVJFEiDMnH7uLyDeQGJi6ek=) 19: 365C8E5857FA11ECA60EBEB35A40D577.roa (hash: wOGfAQ9Pv53mToR0ZnCKbUzeq4qbARxxk+1x7WlPnk8=) 20: 3D415C420CC911EDBA4FEBC8F1222468.roa (hash: h2cyYPdvqsKecbOgrvnDc2rdhf3n2mu1oU/CKpdb2TY=) 21: BB6D0B4EA15111EDB90237D8F1222468.roa (hash: RXFTH7COLNat1EWyJGa03bPPYwNChNlTVBL4I7XF06A=) 22: 3BA89F7EC74511EFB913F8BC762E951A.roa (hash: r31DEOOcMxqWuyYxSuL7E+LyMqbWwnDCqF5E4HURob4=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 02 Aug 2025 00:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1681 (0x691) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F362B8A8AF, serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541 Validity Not Before: Jul 31 02:15:39 2025 GMT Not After : Aug 2 02:15:39 2025 GMT Subject: CN=688ad1cc-cfeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:1b:12:9c:b4:38:80:e1:ff:33:51:f0:72: 45:44:29:ae:33:e1:46:ac:c6:88:b6:43:20:34:7d: 56:17:7c:25:5a:89:c4:15:de:5f:f2:3e:32:b3:af: 64:79:2f:ec:6d:46:5e:76:bf:de:9e:9d:69:e7:c2: e4:2f:d6:7e:d5:68:72:02:70:41:f6:c3:44:41:ce: 99:2d:51:a5:c6:72:54:37:8f:46:08:b5:a5:f3:4e: 4c:fd:37:d6:9a:ab:65:cf:f0:8e:c0:95:ea:e8:9e: 8e:e5:4e:bc:e3:ab:7c:c0:ef:fb:34:f8:0d:8e:6a: bd:31:f0:fe:cc:c5:3e:2d:ac:64:99:10:24:78:2f: 69:74:9c:d1:1a:d5:9e:63:7a:be:65:a0:30:81:3e: 90:bf:2e:d8:38:b3:3a:52:6a:b0:45:66:a5:6f:d3: bb:20:6d:f7:96:ba:94:e5:3d:1b:ab:fc:32:5b:02: f0:9a:e8:af:ea:a2:d8:7c:51:9e:99:87:4c:4f:b1: bf:76:89:43:b5:50:c3:48:cc:9e:8b:cc:1f:50:40: 3f:5b:f7:26:d3:c4:a9:11:ce:6a:07:4a:b0:d0:c4: e8:d1:ca:e0:bd:aa:30:ed:26:e2:ff:6c:46:71:cb: fe:d8:09:94:21:3a:8e:47:89:54:f8:2c:6c:96:8f: 8e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6C:EC:59:82:B6:68:1F:B5:30:CB:F4:73:AF:7F:43:12:91:D1:35 X509v3 Authority Key Identifier: keyid:DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:c6:dc:7e:80:2f:c8:14:1f:10:98:07:c1:a3:2d:a9:9d:d2: d9:39:c5:5c:74:89:d8:2c:8d:4d:ae:51:07:85:76:f0:9b:c5: 8d:f6:3a:99:3d:3f:dd:04:8d:31:eb:e2:a3:09:6e:93:4a:d9: 47:32:c1:28:c6:06:57:d0:e7:55:c7:9f:13:29:30:58:08:62: 41:24:e5:a7:e1:68:a9:ad:42:9f:83:af:2f:2c:f4:32:b3:93: f2:ec:85:32:8b:dc:87:6e:8c:4e:e2:1f:10:7a:7e:6f:fd:e8: 9a:ea:96:1a:c5:62:5f:67:d3:16:1c:7b:01:04:8d:9d:38:5a: 1a:42:48:d9:74:9c:54:f6:b9:44:f0:71:5a:ab:27:1f:c4:b6: 2b:c2:a9:ce:6b:8d:50:bb:47:48:81:4e:c0:5a:60:22:29:bc: e0:19:61:ee:9a:e8:7f:f2:1b:5a:06:59:38:02:18:45:fe:55: 6b:d8:bb:44:15:f9:9f:d2:0e:bc:4d:45:46:52:23:7f:ce:a6: 0b:a2:81:8f:07:c6:b2:41:b9:9a:3e:48:e8:9a:6a:a0:38:77: e2:52:ff:a3:d8:ab:be:4a:59:24:cb:b9:38:ad:bc:d0:3f:df: db:48:26:6c:c4:d9:87:65:9b:1b:0f:30:b4:77:f4:de:03:b2: 72:40:95:91 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBpEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MkI4QThBRjExMC8GA1UEBRMoREYzNzY0ODBEQ0YwN0ExQjdBRDE2NERFNjRBM0VB MjE1RjI0NzU0MTAeFw0yNTA3MzEwMjE1MzlaFw0yNTA4MDIwMjE1MzlaMBgxFjAU BgNVBAMTDTY4OGFkMWNjLWNmZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDJYBsSnLQ4gOH/M1HwckVEKa4z4Uasxoi2QyA0fVYXfCVaicQV3l/yPjKz r2R5L+xtRl52v96enWnnwuQv1n7VaHICcEH2w0RBzpktUaXGclQ3j0YItaXzTkz9 N9aaq2XP8I7Alerono7lTrzjq3zA7/s0+A2Oar0x8P7MxT4trGSZECR4L2l0nNEa 1Z5jer5loDCBPpC/Ltg4szpSarBFZqVv07sgbfeWupTlPRur/DJbAvCa6K/qoth8 UZ6Zh0xPsb92iUO1UMNIzJ6LzB9QQD9b9ybTxKkRzmoHSrDQxOjRyuC9qjDtJuL/ bEZxy/7YCZQhOo5HiVT4LGyWj457AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUqWzs WYK2aB+1MMv0c69/QxKR0TUwHwYDVR0jBBgwFoAU3zdkgNzweht60WTeZKPqIV8k dUEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjJCOEE4L0I1Qzk0RTRDOUMyNTExRUJBRDc4RkY1M0Y4QUVBMjI4LzN6ZGtn Tnp3ZWh0NjBXVGVaS1BxSVY4a2RVRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLzN6ZGtnTnp3ZWh0NjBXVGVaS1BxSVY4a2RVRS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MkI4QTgvQjVDOTRFNEM5QzI1MTFFQkFENzhGRjUzRjhB RUEyMjgvM3pka2dOendlaHQ2MFdUZVpLUHFJVjhrZFVFLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDBxtx+gC/IFB8QmAfBoy2pndLZOcVc dInYLI1NrlEHhXbwm8WN9jqZPT/dBI0x6+KjCW6TStlHMsEoxgZX0OdVx58TKTBY CGJBJOWn4WiprUKfg68vLPQys5Py7IUyi9yHboxO4h8Qen5v/eia6pYaxWJfZ9MW HHsBBI2dOFoaQkjZdJxU9rlE8HFaqycfxLYrwqnOa41Qu0dIgU7AWmAiKbzgGWHu muh/8htaBlk4AhhF/lVr2LtEFfmf0g68TUVGUiN/zqYLooGPB8ayQbmaPkjommqg OHfiUv+j2Ku+Slkky7k4rbzQP9/bSCZsxNmHZZsbDzC0d/TeA7JyQJWR -----END CERTIFICATE-----Generated at Thu Jul 31 11:13:16 2025 by rpki-client