$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft File: kz9w25gXuEj4wIYagksQEX3FGSw.mft (raw, json) Hash identifier: /2NS6D5giFR/RcD4ub+wQEQgtuSyTYrdxEPb5nVoOIo= Subject key identifier: A9:15:FB:86:DA:25:68:18:4D:DD:36:70:32:02:22:A9:68:C4:F8:F3 Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Certificate serial: 03A9 Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft Manifest number: 0399 Signing time: Thu 31 Jul 2025 03:38:56 +0000 Manifest this update: Thu 31 Jul 2025 03:38:55 +0000 Manifest next update: Sat 02 Aug 2025 03:38:55 +0000 Files and hashes: 1: kz9w25gXuEj4wIYagksQEX3FGSw.crl (hash: WdtvUJLg0AqFLSDrFW0imsNi0GG1QBBWdhuC2i3zBrQ=) 2: B104EE44D53311EE8BE4F36C775412E6.roa (hash: RqxwUBj2Bc+OGaTDdk4x7to8RcdRWFqstSwOVMh1no8=) 3: 1E005EBCD53811EEA636DE73775412E6.roa (hash: NZukzj3sWyjYLO9ToCsVsgQAC/kq2Oo6mzyBtHQWmD8=) 4: 8ED6BADCD53311EEB2A2C36C775412E6.roa (hash: 4/E5JqKYHi82tnNDpVDrDiMaVaUcTpYsZcy/yA05uhA=) 5: 0DEEF6F0D53311EEB556F46B775412E6.roa (hash: P5ibcWLG9H1Kur9SCsMbIiX3jBWNN4xNF46xx72YQHI=) 6: A5A2959EDD3D11EEBAF174B7775412E6.roa (hash: ODN6UQwLRLuCmMW2LaPD2vWq9D+bquTGny4/1fInMQE=) 7: E5662DD4A17A11EEAB16F955D25BE465.roa (hash: nQB8uEKFdXSZvidfMMlhgfBX43bi5bFfOgAaXmAWfUM=) 8: 64C2AA52D53411EEB69B076E775412E6.roa (hash: ApnKXgX4qtwCc4Ec2u4PHGuX3hUujQ6rhZ5C7rafC04=) 9: 6DD19D16D53311EE8136926C775412E6.roa (hash: v2hwM/LETMN1QLgipB8E8B+3kZLiPan/2yTGEjfAszc=) 10: 4FFFB85ED53311EE9E536E6C775412E6.roa (hash: D+tEjQwBXIivLTAaXT7TthK1xPvy3VJOqpaVsbM3hVk=) 11: 3F0DCC84D53811EE9F160874775412E6.roa (hash: ZQcO3DmU3Brb6BRvD6IVWLlf8rwN0CI8i4MNTEzPGK0=) 12: BCD1ADAAD53511EEA3B22470775412E6.roa (hash: d12Kr2qwAhbDBscwoutPKxlu3aElunyjg9Yu2LBeVsw=) 13: E4B0AF5CDD3B11EE8C72BDB4775412E6.roa (hash: 0arozNRt9JTjzBkDd/i9r9NcNES2kthw5/x77T8UhJo=) 14: DF52896AD53711EE84074A73775412E6.roa (hash: uIa+9vsGlaMu/Injc/vzOUtcnqp2BVTquSWUrb4Yn00=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 02 Aug 2025 00:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 937 (0x3a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F364321AAR, serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Validity Not Before: Jul 31 03:38:55 2025 GMT Not After : Aug 2 03:38:55 2025 GMT Subject: CN=688ae550-a7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d7:55:8a:f8:0e:6e:0a:3d:8f:88:be:4a:a0: 0a:5d:64:8c:01:2c:35:7f:9f:57:8a:60:9c:30:cb: f6:c2:2d:9f:5c:ea:e4:47:33:43:71:b2:55:32:f4: 0c:0a:b5:ed:bd:58:fc:30:b9:87:60:f3:3c:0c:13: 82:9c:ca:41:a8:8c:c5:10:93:4e:ff:08:de:c4:4c: 48:69:c2:49:df:2f:26:49:a2:35:ce:ca:2b:51:ea: 0e:ff:6c:e2:15:01:6b:3a:90:ad:9a:78:7d:a7:ce: 8c:7b:44:4e:40:d5:06:8d:30:61:51:11:63:38:19: 17:10:d1:c4:bf:fa:ba:51:5b:d9:12:7e:04:0f:3e: 70:bf:76:17:50:b7:48:8f:f3:15:0b:bf:69:98:e5: 0e:68:0a:3f:4e:c9:ba:f6:ab:7f:e2:f7:e3:ad:e1: 9e:a1:7c:01:7f:ea:ec:8d:5c:15:af:5b:f3:c7:b0: 2f:af:28:82:a5:81:ae:a6:7e:0b:21:0e:99:80:30: e6:9d:6a:b2:6e:ea:ae:47:0d:31:d9:7a:ba:07:e1: 7a:7b:74:1a:d5:4c:4e:83:41:0c:17:92:18:1d:e8: 8b:3a:09:87:14:f0:38:5c:ce:ee:90:5d:fb:03:f9: 4f:cb:ef:06:03:e0:a1:69:2c:11:5f:3e:8a:c6:74: fe:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:15:FB:86:DA:25:68:18:4D:DD:36:70:32:02:22:A9:68:C4:F8:F3 X509v3 Authority Key Identifier: keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:2e:c5:b4:cb:b4:19:47:87:a2:f4:30:aa:15:77:b5:64:2b: fb:e6:e3:62:89:c9:d0:f5:ea:9b:4a:a0:50:82:db:b8:8e:32: 3c:27:e7:f8:25:ab:9b:10:42:4a:76:26:3f:60:90:4c:d3:6a: b0:9d:9d:0a:e6:de:14:66:0c:f5:73:cc:d7:2c:8e:64:f7:f6: 77:a1:9f:a0:3d:81:a0:c0:96:6c:bb:e8:6c:9a:ca:27:06:64: b3:24:a6:38:6e:1f:9d:2f:f6:50:2c:e5:bf:81:a2:ef:b4:21: 9d:12:5b:5d:7f:57:0c:14:63:d5:aa:01:78:54:94:43:62:4a: 04:9e:ba:6d:3f:bc:2e:be:62:bb:67:8e:24:91:98:6e:5e:38: ad:07:14:f6:db:e4:ab:91:21:f3:1b:5d:65:45:f9:50:8e:16: 68:56:7b:4b:43:d1:73:e0:84:b2:9a:c1:45:fc:5b:46:0b:44: 02:ce:93:aa:27:d3:33:b0:1e:1c:8a:4b:39:87:29:7c:a7:4d: 93:63:0a:6d:d4:52:f4:4f:c8:e0:3c:d7:c9:79:61:74:f7:82: f6:46:38:20:38:e9:f3:a0:20:23:57:f1:2d:24:e6:d7:d0:0c: b0:d1:7c:08:8f:c4:71:eb:a1:d0:62:8a:b0:a4:41:b9:66:cd: e6:6e:33:0e -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICA6kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDMyMUFBUjExMC8GA1UEBRMoOTMzRjcwREI5ODE3Qjg0OEY4QzA4NjFBODI0QjEw MTE3REM1MTkyQzAeFw0yNTA3MzEwMzM4NTVaFw0yNTA4MDIwMzM4NTVaMBgxFjAU BgNVBAMTDTY4OGFlNTUwLWE3ZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDd11WK+A5uCj2PiL5KoApdZIwBLDV/n1eKYJwwy/bCLZ9c6uRHM0NxslUy 9AwKte29WPwwuYdg8zwME4KcykGojMUQk07/CN7ETEhpwknfLyZJojXOyitR6g7/ bOIVAWs6kK2aeH2nzox7RE5A1QaNMGFREWM4GRcQ0cS/+rpRW9kSfgQPPnC/dhdQ t0iP8xULv2mY5Q5oCj9Oybr2q3/i9+Ot4Z6hfAF/6uyNXBWvW/PHsC+vKIKlga6m fgshDpmAMOadarJu6q5HDTHZeroH4Xp7dBrVTE6DQQwXkhgd6Is6CYcU8Dhczu6Q XfsD+U/L7wYD4KFpLBFfPorGdP47AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUqRX7 htolaBhN3TZwMgIiqWjE+PMwHwYDVR0jBBgwFoAUkz9w25gXuEj4wIYagksQEX3F GSwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQzMjFBLzQ5M0U0NjJFQkNEQTExRURBMUZCMEZCMEYxMjIyNDY4L2t6OXcy NWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu L2t6OXcyNWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl cG9zaXRvcnkvRjM2NDMyMUEvNDkzRTQ2MkVCQ0RBMTFFREExRkIwRkIwRjEyMjI0 Njgva3o5dzI1Z1h1RWo0d0lZYWdrc1FFWDNGR1N3Lm1mdDA1BggrBgEFBQcwDYYp aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4LsW0y7QZR4ei9DCqFXe1ZCv75uNiicnQ 9eqbSqBQgtu4jjI8J+f4JaubEEJKdiY/YJBM02qwnZ0K5t4UZgz1c8zXLI5k9/Z3 oZ+gPYGgwJZsu+hsmsonBmSzJKY4bh+dL/ZQLOW/gaLvtCGdEltdf1cMFGPVqgF4 VJRDYkoEnrptP7wuvmK7Z44kkZhuXjitBxT22+SrkSHzG11lRflQjhZoVntLQ9Fz 4ISymsFF/FtGC0QCzpOqJ9MzsB4ciks5hyl8p02TYwpt1FL0T8jgPNfJeWF094L2 RjggOOnzoCAjV/EtJObX0Ayw0XwIj8Rx66HQYoqwpEG5Zs3mbjMO -----END CERTIFICATE-----Generated at Thu Jul 31 13:45:27 2025 by rpki-client