$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft File: kz9w25gXuEj4wIYagksQEX3FGSw.mft (raw, json) Hash identifier: uWq3pQBoGsZL4R6l7DzyOYCNzm6KN+CuS4VDL+traXI= Subject key identifier: 73:F1:B6:B8:D5:2B:06:76:A0:CB:B4:1A:B7:32:CE:B4:E7:CD:EE:08 Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Certificate serial: 040A Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft Manifest number: 03FA Signing time: Tue 04 Nov 2025 04:37:45 +0000 Manifest this update: Tue 04 Nov 2025 04:37:44 +0000 Manifest next update: Thu 06 Nov 2025 04:37:44 +0000 Files and hashes: 1: kz9w25gXuEj4wIYagksQEX3FGSw.crl (hash: IiApmBlgYE/sUDtMhANwDJ99ddmW0bF/YPP4WkJmyvE=) 2: B104EE44D53311EE8BE4F36C775412E6.roa (hash: RqxwUBj2Bc+OGaTDdk4x7to8RcdRWFqstSwOVMh1no8=) 3: 1E005EBCD53811EEA636DE73775412E6.roa (hash: NZukzj3sWyjYLO9ToCsVsgQAC/kq2Oo6mzyBtHQWmD8=) 4: 8ED6BADCD53311EEB2A2C36C775412E6.roa (hash: 4/E5JqKYHi82tnNDpVDrDiMaVaUcTpYsZcy/yA05uhA=) 5: 0DEEF6F0D53311EEB556F46B775412E6.roa (hash: P5ibcWLG9H1Kur9SCsMbIiX3jBWNN4xNF46xx72YQHI=) 6: A5A2959EDD3D11EEBAF174B7775412E6.roa (hash: ODN6UQwLRLuCmMW2LaPD2vWq9D+bquTGny4/1fInMQE=) 7: E5662DD4A17A11EEAB16F955D25BE465.roa (hash: nQB8uEKFdXSZvidfMMlhgfBX43bi5bFfOgAaXmAWfUM=) 8: 64C2AA52D53411EEB69B076E775412E6.roa (hash: ApnKXgX4qtwCc4Ec2u4PHGuX3hUujQ6rhZ5C7rafC04=) 9: 6DD19D16D53311EE8136926C775412E6.roa (hash: v2hwM/LETMN1QLgipB8E8B+3kZLiPan/2yTGEjfAszc=) 10: 4FFFB85ED53311EE9E536E6C775412E6.roa (hash: D+tEjQwBXIivLTAaXT7TthK1xPvy3VJOqpaVsbM3hVk=) 11: 3F0DCC84D53811EE9F160874775412E6.roa (hash: ZQcO3DmU3Brb6BRvD6IVWLlf8rwN0CI8i4MNTEzPGK0=) 12: BCD1ADAAD53511EEA3B22470775412E6.roa (hash: d12Kr2qwAhbDBscwoutPKxlu3aElunyjg9Yu2LBeVsw=) 13: E4B0AF5CDD3B11EE8C72BDB4775412E6.roa (hash: 0arozNRt9JTjzBkDd/i9r9NcNES2kthw5/x77T8UhJo=) 14: DF52896AD53711EE84074A73775412E6.roa (hash: uIa+9vsGlaMu/Injc/vzOUtcnqp2BVTquSWUrb4Yn00=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 06 Nov 2025 00:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1034 (0x40a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F364321AAR, serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Validity Not Before: Nov 4 04:37:44 2025 GMT Not After : Nov 6 04:37:44 2025 GMT Subject: CN=69098319-1b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1d:e2:93:db:bc:5f:fb:f0:ee:87:c2:2c:55: de:77:6d:80:23:4f:71:01:7a:f8:f6:53:54:5c:86: 5d:c3:41:08:1e:40:b4:37:81:1a:74:7b:8b:9b:83: 4e:23:a1:1c:29:bd:06:38:a1:8c:c8:dc:5e:ae:c1: de:c9:f2:79:40:58:61:95:80:71:41:a2:72:c4:cc: d9:39:cb:d9:d9:1a:68:70:c2:48:d0:06:57:cf:26: b1:bd:3f:2b:57:db:55:47:e6:8e:68:b1:70:19:13: 63:08:41:95:44:97:9a:4d:e0:1c:c6:a5:6f:58:15: 7a:99:54:8d:3d:c3:09:61:e5:3b:7f:16:7a:71:7b: 58:00:7a:20:5c:b9:3e:b0:09:5c:db:b7:9e:7e:13: ae:89:15:aa:31:03:d4:39:c2:59:c6:7c:07:7f:42: dc:f1:12:e4:f7:bd:0e:20:02:33:47:fb:ab:cb:35: 09:34:58:83:13:dc:79:ee:52:a7:0d:fe:a7:64:0c: fd:a9:3f:e4:39:d1:43:4a:35:0f:16:31:0e:c3:06: 14:7a:39:a9:d5:d3:bd:85:94:a7:65:37:4a:70:1d: aa:8b:e1:dc:71:ef:6c:ab:84:f0:f9:77:53:2f:34: ba:50:9e:e8:37:39:0e:33:f7:d8:15:31:8e:a2:57: b7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F1:B6:B8:D5:2B:06:76:A0:CB:B4:1A:B7:32:CE:B4:E7:CD:EE:08 X509v3 Authority Key Identifier: keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:74:76:49:e4:c9:20:23:a4:03:f0:cb:88:75:91:5a:5b:97: 2d:5b:73:50:55:a3:47:89:9f:31:32:ac:37:64:2d:4b:e8:ee: 98:2d:a4:1e:a2:0d:37:1e:eb:08:5c:ee:71:d6:6e:28:a6:20: 6e:ed:86:9f:ae:30:1f:ac:60:2d:a9:e9:69:13:c7:0c:f0:ed: ac:fa:06:ab:5c:f4:aa:a2:a9:5b:6a:f9:b1:11:73:8a:43:d7: 45:05:12:01:53:8e:18:57:8c:40:29:ca:8e:b6:a4:b9:39:e5: a3:66:72:2c:94:07:01:b4:a4:fa:4d:df:6c:e0:fd:e6:be:75: 06:a1:df:2c:ed:2d:42:5a:c1:1c:cd:a4:b1:60:5b:2d:7b:7b: 10:eb:c7:33:e4:2a:8c:62:be:0d:1d:01:40:24:a2:82:57:f1: 99:39:80:a4:c2:8d:cc:20:29:a3:9a:d9:bd:71:62:39:b1:18: de:6f:18:e9:e9:ee:cb:12:93:5a:c1:37:93:ea:79:15:9b:37: 26:d5:41:a3:07:7f:13:5e:aa:2c:08:9a:6c:09:89:7d:0c:f6: 89:f4:72:fe:62:d6:d8:fa:71:36:0e:df:20:06:9b:1b:f1:19: de:2b:1e:88:f2:e9:a4:7e:f5:96:24:18:f7:5b:00:67:2a:f0: 27:f2:cd:1e -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICBAowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDMyMUFBUjExMC8GA1UEBRMoOTMzRjcwREI5ODE3Qjg0OEY4QzA4NjFBODI0QjEw MTE3REM1MTkyQzAeFw0yNTExMDQwNDM3NDRaFw0yNTExMDYwNDM3NDRaMBgxFjAU BgNVBAMTDTY5MDk4MzE5LTFiMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC+HeKT27xf+/Duh8IsVd53bYAjT3EBevj2U1Rchl3DQQgeQLQ3gRp0e4ub g04joRwpvQY4oYzI3F6uwd7J8nlAWGGVgHFBonLEzNk5y9nZGmhwwkjQBlfPJrG9 PytX21VH5o5osXAZE2MIQZVEl5pN4BzGpW9YFXqZVI09wwlh5Tt/Fnpxe1gAeiBc uT6wCVzbt55+E66JFaoxA9Q5wlnGfAd/QtzxEuT3vQ4gAjNH+6vLNQk0WIMT3Hnu UqcN/qdkDP2pP+Q50UNKNQ8WMQ7DBhR6OanV072FlKdlN0pwHaqL4dxx72yrhPD5 d1MvNLpQnug3OQ4z99gVMY6iV7fBAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUc/G2 uNUrBnagy7QatzLOtOfN7ggwHwYDVR0jBBgwFoAUkz9w25gXuEj4wIYagksQEX3F GSwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQzMjFBLzQ5M0U0NjJFQkNEQTExRURBMUZCMEZCMEYxMjIyNDY4L2t6OXcy NWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu L2t6OXcyNWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl cG9zaXRvcnkvRjM2NDMyMUEvNDkzRTQ2MkVCQ0RBMTFFREExRkIwRkIwRjEyMjI0 Njgva3o5dzI1Z1h1RWo0d0lZYWdrc1FFWDNGR1N3Lm1mdDA1BggrBgEFBQcwDYYp aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCdHZJ5MkgI6QD8MuIdZFaW5ctW3NQVaNH iZ8xMqw3ZC1L6O6YLaQeog03HusIXO5x1m4opiBu7YafrjAfrGAtqelpE8cM8O2s +garXPSqoqlbavmxEXOKQ9dFBRIBU44YV4xAKcqOtqS5OeWjZnIslAcBtKT6Td9s 4P3mvnUGod8s7S1CWsEczaSxYFste3sQ68cz5CqMYr4NHQFAJKKCV/GZOYCkwo3M ICmjmtm9cWI5sRjebxjp6e7LEpNawTeT6nkVmzcm1UGjB38TXqosCJpsCYl9DPaJ 9HL+YtbY+nE2Dt8gBpsb8RneKx6I8umkfvWWJBj3WwBnKvAn8s0e -----END CERTIFICATE-----Generated at Tue Nov 4 17:35:10 2025 by rpki-client