$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft File: ycEp-8PIJzpGKVWpUo4KrC8umCw.mft (raw, json) Hash identifier: mWhIyLDKvENerBVxND+ADw2rlZICmp8OWe3ifQbuLjQ= Subject key identifier: 32:D1:6E:6E:E9:A6:4C:6A:67:35:C4:65:E9:C0:46:83:E5:D6:C0:84 Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C Certificate issuer: /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C Certificate serial: 0185 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft Manifest number: 0177 Signing time: Wed 17 Sep 2025 04:37:21 +0000 Manifest this update: Wed 17 Sep 2025 04:37:20 +0000 Manifest next update: Fri 19 Sep 2025 04:37:20 +0000 Files and hashes: 1: ycEp-8PIJzpGKVWpUo4KrC8umCw.crl (hash: FdEN8WKDPRP6oh7mNY+m2xrTtnIG1T0Kj4AEiK7rykc=) 2: 04AE355E412711F0A7E4287CDAE4EC9C.roa (hash: ENLeza9xray0l264BMW02TQidzUw/ZtvZxWMod5FZ6s=) 3: C37DC01C412711F08A72D080DAE4EC9C.roa (hash: qs6TE4JP060hv/0pYpvsSx8iQ0sA281FwGL4dlEI/3w=) 4: C562E1227FE511EFA4266193762E951A.roa (hash: MeKHI1JwEO0dNY503adBbALC+TfZ50BQKRjHS6uYj7k=) 5: E1E725E27FE511EF94A66F93762E951A.roa (hash: kXVFpXwBX0moo6oFgHbW2bzPwFLvjsGItQkg+knk97g=) 6: 36D17E507FE511EF8E9D278F762E951A.roa (hash: isW05Vri1NVUUzw8M3SoRzzmQ8K529eo9pAlq8XeeUQ=) 7: 11E302C07FE611EF881E5295762E951A.roa (hash: 145rdnt1Cxjywczq9gDypBeUgWkI++ibIUuOEMfQqyk=) 8: 7A8C97107FE511EFB8E44791762E951A.roa (hash: AH8DtFHeq8MnXy0oZ85/RX+mX+FZ7sL97pcuKDpfLIU=) 9: FA5E14007FE511EFBDA17893762E951A.roa (hash: HOWJLbvAbWrETIKjPES8sLpxeGRDhtV+tpL6Pi7P71U=) 10: 1A60E94A7FE511EFBEBA208F762E951A.roa (hash: A/mV4GlRLg3sT0E/c0AS8I1cypmKjG6MSwcDjeLas4Y=) 11: 517885647FE511EF83F2F690762E951A.roa (hash: NesjbwqdXYim8sduEYg7XmsPKVahYOQE+QARTRAVXQc=) 12: 455EACFA7FE411EF9A858F8A762E951A.roa (hash: FAEa1S962bIhXo4SwmCRjWz4N6IRQhTzTWTA+es1RJY=) 13: A97B972E7FE511EF83081793762E951A.roa (hash: mN6sdorObjWRjdE+T1AUWFBe0BDnfK2FWZtt0dewwa0=) 14: 93EF9424412711F09F2CC980DAE4EC9C.roa (hash: oONnRnrDfB0ZG1UHPPGQ0dp5NPJf1dST08ulaRQGOC0=) 15: 5C73A576412711F08AAAB37EDAE4EC9C.roa (hash: jjxXl0x/+co3gFlsdpdDQTKqw1d56AFQuCJMO0O5h0U=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 19 Sep 2025 04:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36337E5AF, serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C Validity Not Before: Sep 17 04:37:20 2025 GMT Not After : Sep 19 04:37:20 2025 GMT Subject: CN=68ca3b01-b90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:13:27:59:c2:23:8a:c2:f4:a5:74:c0:ce:12: 27:dc:d8:cb:6e:14:29:82:cf:84:70:6d:a5:06:74: 5a:87:c3:b9:88:8e:b0:f8:95:f0:aa:d4:cd:47:f9: 5e:1c:58:a0:37:01:e9:77:ad:d6:ba:d6:00:bc:cb: 37:10:a6:dc:d2:68:6c:ff:b0:84:b3:b0:8a:22:0b: ee:2e:96:74:c1:4a:dc:52:f5:b8:d7:e8:51:64:8a: cb:e2:ca:40:71:dd:6a:5f:00:b8:c2:12:81:0e:70: 50:2d:88:c8:a1:0b:72:92:37:78:bd:18:10:f2:c2: 17:2f:94:72:40:f9:87:1e:ea:7d:40:32:29:3c:21: 99:89:72:48:b7:43:08:cf:90:cc:bc:36:a9:de:ff: c5:d0:fb:02:b2:5e:96:76:ce:c3:4e:c9:b1:11:ee: e8:17:86:19:db:a0:15:6d:b8:03:ed:d9:7c:8e:58: 5b:2c:34:f1:bc:44:15:92:63:4f:e6:a6:0b:ec:b4: 16:46:fd:4b:9d:df:d0:09:a9:76:ff:b6:52:8e:7c: 4b:52:6a:68:ea:eb:f4:ea:c7:61:67:9b:c1:d6:b7: 3f:d0:3e:eb:c0:6b:60:5a:a7:d1:35:36:2d:ad:8f: de:52:02:92:75:f1:78:aa:41:4d:62:72:8c:65:8e: 19:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D1:6E:6E:E9:A6:4C:6A:67:35:C4:65:E9:C0:46:83:E5:D6:C0:84 X509v3 Authority Key Identifier: keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:76:aa:e2:11:b1:e9:ca:68:17:7c:5f:a2:dd:15:c3:b4:93: 72:45:00:f1:5b:65:b6:a7:e9:1c:b6:24:db:98:76:50:ec:b9: 81:7d:c4:ae:13:f5:c0:8b:72:9d:e6:a2:97:e9:b9:36:39:f2: 61:84:52:5e:4a:7e:af:02:ff:90:8b:45:57:01:e0:e7:10:ff: 98:88:32:43:70:6c:67:2f:50:94:0a:ac:3e:a6:c9:72:44:0e: 8b:17:47:39:66:03:af:e2:1c:2d:96:b6:11:4b:8b:35:5e:cd: 62:f3:ef:ef:58:a8:23:0b:26:48:c1:6e:31:b4:07:a2:96:6c: 4c:07:48:cd:e0:21:d7:9c:71:6e:c5:c1:8a:6b:bf:fb:3c:5a: 2c:3c:3b:11:a0:b7:f9:25:84:78:dc:4f:66:e1:ba:8c:60:5d: f8:7a:18:2e:c8:86:5c:6b:04:46:fe:53:66:a5:5e:a6:09:88: 8f:13:55:fa:b4:33:05:f8:e1:d2:40:20:bc:a9:cf:dc:79:26: b2:88:5b:37:4b:64:36:23:98:ce:ee:37:e0:82:a9:ff:bc:eb: c6:de:f1:b4:73:eb:b7:99:fe:ae:79:c1:75:c8:49:69:6b:57: 4e:5a:fb:7c:c0:4d:8a:03:60:fe:6d:c5:24:fb:45:f0:32:a6: bd:fc:11:0f -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MzM3RTVBRjExMC8GA1UEBRMoQzlDMTI5RkJDM0M4MjczQTQ2Mjk1NUE5NTI4RTBB QUMyRjJFOTgyQzAeFw0yNTA5MTcwNDM3MjBaFw0yNTA5MTkwNDM3MjBaMBgxFjAU BgNVBAMTDTY4Y2EzYjAxLWI5MGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDhEydZwiOKwvSldMDOEifc2MtuFCmCz4RwbaUGdFqHw7mIjrD4lfCq1M1H +V4cWKA3Ael3rda61gC8yzcQptzSaGz/sISzsIoiC+4ulnTBStxS9bjX6FFkisvi ykBx3WpfALjCEoEOcFAtiMihC3KSN3i9GBDywhcvlHJA+Yce6n1AMik8IZmJcki3 QwjPkMy8Nqne/8XQ+wKyXpZ2zsNOybER7ugXhhnboBVtuAPt2XyOWFssNPG8RBWS Y0/mpgvstBZG/Uud39AJqXb/tlKOfEtSamjq6/Tqx2Fnm8HWtz/QPuvAa2Bap9E1 Ni2tj95SApJ18XiqQU1icoxljhm9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUMtFu bummTGpnNcRl6cBGg+XWwIQwHwYDVR0jBBgwFoAUycEp+8PIJzpGKVWpUo4KrC8u mCwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjMzN0U1Lzk3OUJBNjQwN0ZFMzExRUY4MzQ3NTU4Njc2MkU5NTFBL3ljRXAt OFBJSnpwR0tWV3BVbzRLckM4dW1Ddy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3ljRXAtOFBJSnpwR0tWV3BVbzRLckM4dW1Ddy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MzM3RTUvOTc5QkE2NDA3RkUzMTFFRjgzNDc1NTg2NzYy RTk1MUEveWNFcC04UElKenBHS1ZXcFVvNEtyQzh1bUN3Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjdqriEbHpymgXfF+i3RXDtJNyRQDx W2W2p+kctiTbmHZQ7LmBfcSuE/XAi3Kd5qKX6bk2OfJhhFJeSn6vAv+Qi0VXAeDn EP+YiDJDcGxnL1CUCqw+pslyRA6LF0c5ZgOv4hwtlrYRS4s1Xs1i8+/vWKgjCyZI wW4xtAeilmxMB0jN4CHXnHFuxcGKa7/7PFosPDsRoLf5JYR43E9m4bqMYF34ehgu yIZcawRG/lNmpV6mCYiPE1X6tDMF+OHSQCC8qc/ceSayiFs3S2Q2I5jO7jfggqn/ vOvG3vG0c+u3mf6uecF1yElpa1dOWvt8wE2KA2D+bcUk+0XwMqa9/BEP -----END CERTIFICATE-----Generated at Wed Sep 17 23:34:14 2025 by rpki-client