$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft File: ycEp-8PIJzpGKVWpUo4KrC8umCw.mft (raw, json) Hash identifier: x7QpfRcKLNBkB3Oj7N7QOOIn0o9sAuKQ7UuQ25VNAUE= Subject key identifier: B3:D1:33:EF:BB:A0:3D:2C:4F:B3:90:F3:FB:A3:18:21:6B:B2:B8:62 Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C Certificate issuer: /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C Certificate serial: 0155 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft Manifest number: 0147 Signing time: Thu 31 Jul 2025 05:04:41 +0000 Manifest this update: Thu 31 Jul 2025 05:04:40 +0000 Manifest next update: Sat 02 Aug 2025 05:04:40 +0000 Files and hashes: 1: ycEp-8PIJzpGKVWpUo4KrC8umCw.crl (hash: xpERK+S9eUehoALc6TMcImp+5OyU1UaQTWuwYBEbCDQ=) 2: 04AE355E412711F0A7E4287CDAE4EC9C.roa (hash: ENLeza9xray0l264BMW02TQidzUw/ZtvZxWMod5FZ6s=) 3: C37DC01C412711F08A72D080DAE4EC9C.roa (hash: qs6TE4JP060hv/0pYpvsSx8iQ0sA281FwGL4dlEI/3w=) 4: C562E1227FE511EFA4266193762E951A.roa (hash: MeKHI1JwEO0dNY503adBbALC+TfZ50BQKRjHS6uYj7k=) 5: E1E725E27FE511EF94A66F93762E951A.roa (hash: kXVFpXwBX0moo6oFgHbW2bzPwFLvjsGItQkg+knk97g=) 6: 36D17E507FE511EF8E9D278F762E951A.roa (hash: isW05Vri1NVUUzw8M3SoRzzmQ8K529eo9pAlq8XeeUQ=) 7: 11E302C07FE611EF881E5295762E951A.roa (hash: 145rdnt1Cxjywczq9gDypBeUgWkI++ibIUuOEMfQqyk=) 8: 7A8C97107FE511EFB8E44791762E951A.roa (hash: AH8DtFHeq8MnXy0oZ85/RX+mX+FZ7sL97pcuKDpfLIU=) 9: FA5E14007FE511EFBDA17893762E951A.roa (hash: HOWJLbvAbWrETIKjPES8sLpxeGRDhtV+tpL6Pi7P71U=) 10: 1A60E94A7FE511EFBEBA208F762E951A.roa (hash: A/mV4GlRLg3sT0E/c0AS8I1cypmKjG6MSwcDjeLas4Y=) 11: 517885647FE511EF83F2F690762E951A.roa (hash: NesjbwqdXYim8sduEYg7XmsPKVahYOQE+QARTRAVXQc=) 12: 455EACFA7FE411EF9A858F8A762E951A.roa (hash: FAEa1S962bIhXo4SwmCRjWz4N6IRQhTzTWTA+es1RJY=) 13: A97B972E7FE511EF83081793762E951A.roa (hash: mN6sdorObjWRjdE+T1AUWFBe0BDnfK2FWZtt0dewwa0=) 14: 93EF9424412711F09F2CC980DAE4EC9C.roa (hash: oONnRnrDfB0ZG1UHPPGQ0dp5NPJf1dST08ulaRQGOC0=) 15: 5C73A576412711F08AAAB37EDAE4EC9C.roa (hash: jjxXl0x/+co3gFlsdpdDQTKqw1d56AFQuCJMO0O5h0U=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 02 Aug 2025 00:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36337E5AF, serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C Validity Not Before: Jul 31 05:04:40 2025 GMT Not After : Aug 2 05:04:40 2025 GMT Subject: CN=688af969-9427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c4:33:e7:74:86:d7:1b:87:ae:91:75:0b:60: 50:cc:84:c9:21:0b:74:d7:4b:31:f9:1f:e9:33:50: f9:43:f2:47:95:e8:0f:22:38:72:a3:c2:13:d6:e1: a9:9e:15:dd:57:31:df:a5:6a:bf:89:99:67:a4:ad: da:83:74:7c:14:91:46:64:f0:4b:73:01:66:81:83: b9:a8:45:e7:ec:ef:f6:e5:42:1c:b9:f2:5d:34:52: 8c:a6:f1:e7:0c:d3:02:9b:03:3f:5a:5e:30:c9:e6: 42:b5:1b:25:58:7f:b3:9a:74:70:dc:eb:ef:cc:9d: 44:f7:4b:01:a7:84:76:aa:1c:af:64:e5:64:e8:af: 3f:59:85:a9:7e:b5:63:44:14:73:00:1a:8b:e4:fa: 1f:9a:8b:c7:94:1c:cf:f6:7e:7a:9c:b5:23:b0:5f: 39:02:fd:cd:ac:b3:89:e9:e6:0f:f6:7c:9c:50:75: 44:4e:2e:a5:68:1f:b7:0e:cc:b5:54:85:2e:7d:35: 90:8d:ba:d6:08:db:d3:f0:f5:4a:e2:85:00:76:78: c3:ca:22:b6:eb:51:4a:16:f7:59:18:b9:d3:4e:b5: d4:f2:d0:a4:05:fd:ee:db:dd:7c:87:07:45:49:de: 62:96:d6:57:b4:ab:19:f2:56:22:e6:0a:62:46:10: 2e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D1:33:EF:BB:A0:3D:2C:4F:B3:90:F3:FB:A3:18:21:6B:B2:B8:62 X509v3 Authority Key Identifier: keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:a7:aa:40:ed:be:30:04:11:55:5e:a0:a9:ca:3b:cf:33:e9: cf:a1:0d:69:b7:45:28:e4:6d:23:af:0b:b7:cb:6b:d7:4a:fd: 40:14:3c:88:7b:cd:78:07:fc:1d:19:80:b1:99:c6:9e:dd:8e: 21:59:1d:54:71:0f:26:af:0a:77:ce:8b:14:10:45:79:75:c7: 61:37:c8:e1:7e:4d:2c:2b:e8:3b:8c:df:4c:73:f2:14:32:ac: e1:d2:fd:a8:78:77:dc:4a:55:e5:69:cd:f5:08:f4:93:9d:8d: 27:da:6e:8b:ed:63:c1:3f:c4:8d:1b:be:96:c4:c2:cf:2d:15: 2e:2d:18:8c:8b:ca:63:49:9d:e0:71:45:e7:e5:7b:7e:99:33: 76:61:08:56:1b:d2:42:22:08:d6:ce:a2:93:e8:49:94:00:e0: a6:c6:33:5e:72:0f:f5:43:7e:55:16:8d:92:f5:c4:11:3f:f0: 0b:de:ef:c6:ef:d7:92:36:e4:72:87:57:46:1c:4a:3d:ae:0f: aa:80:aa:09:cb:70:fb:a7:0d:7a:55:c8:b9:7a:88:a8:90:07: 12:5a:d9:c8:d9:db:1f:92:e8:46:5b:cb:14:d7:ba:0d:2b:0d: 34:78:13:29:32:8a:ea:0b:b8:e0:44:e7:7f:bc:0f:5c:e5:28: 48:7b:3b:2e -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MzM3RTVBRjExMC8GA1UEBRMoQzlDMTI5RkJDM0M4MjczQTQ2Mjk1NUE5NTI4RTBB QUMyRjJFOTgyQzAeFw0yNTA3MzEwNTA0NDBaFw0yNTA4MDIwNTA0NDBaMBgxFjAU BgNVBAMTDTY4OGFmOTY5LTk0MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC5xDPndIbXG4eukXULYFDMhMkhC3TXSzH5H+kzUPlD8keV6A8iOHKjwhPW 4ameFd1XMd+lar+JmWekrdqDdHwUkUZk8EtzAWaBg7moRefs7/blQhy58l00Uoym 8ecM0wKbAz9aXjDJ5kK1GyVYf7OadHDc6+/MnUT3SwGnhHaqHK9k5WTorz9Zhal+ tWNEFHMAGovk+h+ai8eUHM/2fnqctSOwXzkC/c2ss4np5g/2fJxQdUROLqVoH7cO zLVUhS59NZCNutYI29Pw9UrihQB2eMPKIrbrUUoW91kYudNOtdTy0KQF/e7b3XyH B0VJ3mKW1le0qxnyViLmCmJGEC6tAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUs9Ez 77ugPSxPs5Dz+6MYIWuyuGIwHwYDVR0jBBgwFoAUycEp+8PIJzpGKVWpUo4KrC8u mCwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjMzN0U1Lzk3OUJBNjQwN0ZFMzExRUY4MzQ3NTU4Njc2MkU5NTFBL3ljRXAt OFBJSnpwR0tWV3BVbzRLckM4dW1Ddy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3ljRXAtOFBJSnpwR0tWV3BVbzRLckM4dW1Ddy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MzM3RTUvOTc5QkE2NDA3RkUzMTFFRjgzNDc1NTg2NzYy RTk1MUEveWNFcC04UElKenBHS1ZXcFVvNEtyQzh1bUN3Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCp6pA7b4wBBFVXqCpyjvPM+nPoQ1p t0Uo5G0jrwu3y2vXSv1AFDyIe814B/wdGYCxmcae3Y4hWR1UcQ8mrwp3zosUEEV5 dcdhN8jhfk0sK+g7jN9Mc/IUMqzh0v2oeHfcSlXlac31CPSTnY0n2m6L7WPBP8SN G76WxMLPLRUuLRiMi8pjSZ3gcUXn5Xt+mTN2YQhWG9JCIgjWzqKT6EmUAOCmxjNe cg/1Q35VFo2S9cQRP/AL3u/G79eSNuRyh1dGHEo9rg+qgKoJy3D7pw16Vci5eoio kAcSWtnI2dsfkuhGW8sU17oNKw00eBMpMorqC7jgROd/vA9c5ShIezsu -----END CERTIFICATE-----Generated at Thu Jul 31 11:22:21 2025 by rpki-client