$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft File: kz9w25gXuEj4wIYagksQEX3FGSw.mft (raw, json) Hash identifier: ss/JDWDQDllng/66grJ5e+ouDGiLG4Y5Tgk7K050bPA= Subject key identifier: B4:5F:4D:AB:94:A0:98:B4:CD:68:5E:26:F3:1B:60:2F:8B:D5:BA:37 Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Certificate serial: 03D8 Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft Manifest number: 03C8 Signing time: Tue 16 Sep 2025 03:19:54 +0000 Manifest this update: Tue 16 Sep 2025 03:19:53 +0000 Manifest next update: Thu 18 Sep 2025 03:19:53 +0000 Files and hashes: 1: kz9w25gXuEj4wIYagksQEX3FGSw.crl (hash: itjslvCpJQ8NANL1hLmUTmmortxoBo1V6+yjKR1BkfA=) 2: B104EE44D53311EE8BE4F36C775412E6.roa (hash: RqxwUBj2Bc+OGaTDdk4x7to8RcdRWFqstSwOVMh1no8=) 3: 1E005EBCD53811EEA636DE73775412E6.roa (hash: NZukzj3sWyjYLO9ToCsVsgQAC/kq2Oo6mzyBtHQWmD8=) 4: 8ED6BADCD53311EEB2A2C36C775412E6.roa (hash: 4/E5JqKYHi82tnNDpVDrDiMaVaUcTpYsZcy/yA05uhA=) 5: 0DEEF6F0D53311EEB556F46B775412E6.roa (hash: P5ibcWLG9H1Kur9SCsMbIiX3jBWNN4xNF46xx72YQHI=) 6: A5A2959EDD3D11EEBAF174B7775412E6.roa (hash: ODN6UQwLRLuCmMW2LaPD2vWq9D+bquTGny4/1fInMQE=) 7: E5662DD4A17A11EEAB16F955D25BE465.roa (hash: nQB8uEKFdXSZvidfMMlhgfBX43bi5bFfOgAaXmAWfUM=) 8: 64C2AA52D53411EEB69B076E775412E6.roa (hash: ApnKXgX4qtwCc4Ec2u4PHGuX3hUujQ6rhZ5C7rafC04=) 9: 6DD19D16D53311EE8136926C775412E6.roa (hash: v2hwM/LETMN1QLgipB8E8B+3kZLiPan/2yTGEjfAszc=) 10: 4FFFB85ED53311EE9E536E6C775412E6.roa (hash: D+tEjQwBXIivLTAaXT7TthK1xPvy3VJOqpaVsbM3hVk=) 11: 3F0DCC84D53811EE9F160874775412E6.roa (hash: ZQcO3DmU3Brb6BRvD6IVWLlf8rwN0CI8i4MNTEzPGK0=) 12: BCD1ADAAD53511EEA3B22470775412E6.roa (hash: d12Kr2qwAhbDBscwoutPKxlu3aElunyjg9Yu2LBeVsw=) 13: E4B0AF5CDD3B11EE8C72BDB4775412E6.roa (hash: 0arozNRt9JTjzBkDd/i9r9NcNES2kthw5/x77T8UhJo=) 14: DF52896AD53711EE84074A73775412E6.roa (hash: uIa+9vsGlaMu/Injc/vzOUtcnqp2BVTquSWUrb4Yn00=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 18 Sep 2025 00:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F364321AAR, serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Validity Not Before: Sep 16 03:19:53 2025 GMT Not After : Sep 18 03:19:53 2025 GMT Subject: CN=68c8d759-3d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:87:8f:8f:5a:5c:96:b8:09:20:51:a4:e0:69: e9:1a:5b:8b:32:96:24:bb:72:28:fd:d7:fa:04:37: 60:d4:aa:c8:0e:09:82:94:76:4c:ba:1f:5f:46:f9: ea:2d:93:1a:88:f6:12:0d:fb:e6:0b:21:f1:58:ba: 32:ba:aa:e4:fb:68:90:cb:ab:53:5f:65:71:48:4e: f0:10:8b:4c:e4:37:c5:ca:12:69:f0:8e:8d:b2:a0: 4b:79:b4:f1:70:28:3e:5b:6d:59:6f:b2:e1:78:82: 82:5c:50:92:6b:bb:1c:3e:5b:73:34:07:60:6e:2a: 1f:3d:33:f8:a5:cc:7a:ef:e0:f5:8a:23:ff:98:1d: 58:6a:da:4c:fe:3c:24:78:6d:cc:88:d9:34:e6:ec: 57:ec:14:b7:e4:22:d6:88:92:b6:ad:16:a7:18:3c: 63:65:2c:98:0f:c0:9f:19:3e:ee:60:43:3e:63:ee: 45:55:c1:c9:94:c7:04:39:2d:8d:04:38:c7:ae:7d: de:db:6a:be:9a:aa:e5:a1:1c:af:99:66:48:43:f3: 98:54:59:96:53:1d:ad:ac:a3:9b:59:e7:7d:48:c3: 4a:11:ae:12:57:cf:32:16:b2:f1:53:d8:00:3c:6f: ca:ee:f5:8c:e5:c0:11:05:3a:54:3d:9a:55:54:ff: 04:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5F:4D:AB:94:A0:98:B4:CD:68:5E:26:F3:1B:60:2F:8B:D5:BA:37 X509v3 Authority Key Identifier: keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:ca:79:06:97:a8:4b:ba:44:63:75:42:f5:58:39:29:44:a2: f4:38:ae:ed:91:a2:f6:16:ce:d0:87:e0:cf:c6:c4:69:a1:f2: 2b:cf:72:84:95:3f:af:74:70:ac:3b:ee:e3:2f:c2:b4:ef:56: 10:6e:69:08:3e:ab:5f:f0:fb:97:7f:b7:fa:bf:11:ae:70:d2: f7:dc:8a:50:d9:7a:23:35:9b:d9:38:ce:6e:18:d1:10:f7:f6: d5:45:95:e6:71:47:32:64:be:f7:36:5d:0b:2f:be:33:36:64: c2:14:61:3c:a5:df:f9:db:bb:13:da:25:2c:4e:4e:dd:38:32: 5c:91:0c:41:03:36:4a:b2:1e:06:cb:28:fe:53:6c:16:72:c2: cc:ee:9f:f6:09:70:15:6f:45:88:85:00:1f:fe:92:07:a0:95: d2:92:3d:f8:db:27:78:40:a5:80:f8:fa:d2:60:71:97:19:98: 76:fc:d1:62:d9:84:13:32:fd:b7:de:c0:e8:c8:43:3f:84:78: 83:09:97:d1:89:01:0d:37:46:7a:90:a4:8d:85:68:12:a7:d2: f4:b7:79:d1:e5:5f:01:83:eb:8d:6c:80:c4:3d:bb:40:83:22: e1:c5:80:b0:79:26:38:77:f3:2e:2e:64:52:7a:59:18:c3:25: 83:d2:72:48 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDMyMUFBUjExMC8GA1UEBRMoOTMzRjcwREI5ODE3Qjg0OEY4QzA4NjFBODI0QjEw MTE3REM1MTkyQzAeFw0yNTA5MTYwMzE5NTNaFw0yNTA5MTgwMzE5NTNaMBgxFjAU BgNVBAMTDTY4YzhkNzU5LTNkMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCuh4+PWlyWuAkgUaTgaekaW4syliS7cij91/oEN2DUqsgOCYKUdky6H19G +eotkxqI9hIN++YLIfFYujK6quT7aJDLq1NfZXFITvAQi0zkN8XKEmnwjo2yoEt5 tPFwKD5bbVlvsuF4goJcUJJruxw+W3M0B2BuKh89M/ilzHrv4PWKI/+YHVhq2kz+ PCR4bcyI2TTm7FfsFLfkItaIkratFqcYPGNlLJgPwJ8ZPu5gQz5j7kVVwcmUxwQ5 LY0EOMeufd7bar6aquWhHK+ZZkhD85hUWZZTHa2so5tZ531Iw0oRrhJXzzIWsvFT 2AA8b8ru9YzlwBEFOlQ9mlVU/wTNAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUtF9N q5SgmLTNaF4m8xtgL4vVujcwHwYDVR0jBBgwFoAUkz9w25gXuEj4wIYagksQEX3F GSwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQzMjFBLzQ5M0U0NjJFQkNEQTExRURBMUZCMEZCMEYxMjIyNDY4L2t6OXcy NWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu L2t6OXcyNWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl cG9zaXRvcnkvRjM2NDMyMUEvNDkzRTQ2MkVCQ0RBMTFFREExRkIwRkIwRjEyMjI0 Njgva3o5dzI1Z1h1RWo0d0lZYWdrc1FFWDNGR1N3Lm1mdDA1BggrBgEFBQcwDYYp aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5ynkGl6hLukRjdUL1WDkpRKL0OK7tkaL2 Fs7Qh+DPxsRpofIrz3KElT+vdHCsO+7jL8K071YQbmkIPqtf8PuXf7f6vxGucNL3 3IpQ2XojNZvZOM5uGNEQ9/bVRZXmcUcyZL73Nl0LL74zNmTCFGE8pd/527sT2iUs Tk7dODJckQxBAzZKsh4Gyyj+U2wWcsLM7p/2CXAVb0WIhQAf/pIHoJXSkj342yd4 QKWA+PrSYHGXGZh2/NFi2YQTMv233sDoyEM/hHiDCZfRiQENN0Z6kKSNhWgSp9L0 t3nR5V8Bg+uNbIDEPbtAgyLhxYCweSY4d/MuLmRSelkYwyWD0nJI -----END CERTIFICATE-----Generated at Tue Sep 16 17:50:26 2025 by rpki-client