$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft File: PVXHhOoXkS8OlgolxsqSDhACMAo.mft (raw, json) Hash identifier: y3sStBYO4jyxbYWHJHqJkOfYq/RJXaW3H5wpEy5TWvM= Subject key identifier: CF:A5:AE:B0:B8:F9:D8:14:E6:F9:66:52:F7:52:88:AD:86:70:A1:8D Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A Certificate issuer: /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A Certificate serial: 067B Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft Manifest number: 0666 Signing time: Thu 31 Jul 2025 02:16:21 +0000 Manifest this update: Thu 31 Jul 2025 02:16:21 +0000 Manifest next update: Sat 02 Aug 2025 02:16:21 +0000 Files and hashes: 1: PVXHhOoXkS8OlgolxsqSDhACMAo.crl (hash: GsH2w/33vO7drqfG1xnAy9dHMlifEsiICImY9+eY1Lk=) 2: 4F98057C463A11EC8FC05E15D8A014CE.roa (hash: xBs6Vj/OeiFnzOXPhSwdSucFxUDsg3Mh5ATS3BYbuQQ=) 3: A081D0764BB711EC90B9B946D8A014CE.roa (hash: gyJOxBOesIDsoX+F0wCqdrw9sX0TpvZI+h6iVzCHXus=) 4: 8665119A463911EC88B22A14D8A014CE.roa (hash: 9v5B2xaH3Bc4zwDA3exaH6jQCediAk11PcOAPXe7o5k=) 5: D6EDC7E0517E11EEB8E0E4124AD9E6FC.roa (hash: FEIMhfmeS/WDUY9eK4oDCHAUgtEzM8qgwjxj7XmdiaM=) 6: 5A777F624BB811EC988AD647D8A014CE.roa (hash: 1YHFKzIw60VPhLGMqgaM8DC3X+uEENoWlpBODyIvx+8=) 7: 88C7F19A463A11EC8A6DCA15D8A014CE.roa (hash: anrHJdrDwUVVxzqA0H5Lv7h5BhwjhCFTP0rDmIVAs5g=) 8: 2D81E60CD70411EFA4774B68762E951A.roa (hash: WMzMow+21CqdCgojBhlWOGoOTPRBXGbF6iL94Q4Dv5A=) 9: D955A76630FE11ECB753D321D8A014CE.roa (hash: xjCeaYd+LKJvUwcXfMZMX504OiVLskv9I2sBgX5AZDo=) 10: 44276DB4463911EC8EA8D613D8A014CE.roa (hash: 4eP0uQUhgh8UojN9cwAJrEyBjLKtzCe+6TB80lYgykw=) 11: 29A1C4C4463B11ECBE2BB116D8A014CE.roa (hash: O5Px9+yMxD3h4TaIj58cVZ2T/wrbePoVvt5KjLdgZMg=) 12: C25BF862463911EC9C659114D8A014CE.roa (hash: TAmKKzQBDoLwr1xj5R0Z1MOOtgdIjMvjgf/j1EH6WSQ=) 13: 05AE8E624BB811ECB8B77047D8A014CE.roa (hash: IqZdrn6PDd5tCiFmENh9gtBL/vqPbtxvIIhISM2npRA=) 14: 5B28A01A463811ECB5776C12D8A014CE.roa (hash: sw9X0bgyaC8iP6hm/pS3038w/pYcaM83WRGaPy6yt0M=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 02 Aug 2025 00:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1659 (0x67b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A Validity Not Before: Jul 31 02:16:21 2025 GMT Not After : Aug 2 02:16:21 2025 GMT Subject: CN=688ad1f5-9a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a9:49:77:a4:5c:78:d0:56:68:5f:45:ee:08: 19:0a:ac:b7:ed:a6:ab:39:20:42:79:4e:40:14:01: 59:5e:79:09:92:0b:62:90:c2:08:5b:0a:ba:c3:87: f6:b4:5d:e0:82:e6:cc:4d:d5:e0:a3:2b:6f:3c:74: f3:d9:c7:9d:46:d6:84:ae:aa:6e:61:20:8e:6f:64: bc:18:b9:39:58:19:1c:e3:9c:0c:44:31:d7:3c:bb: 0e:19:97:cf:0f:67:27:13:cb:68:fc:5c:fd:b0:72: d8:9e:50:dd:27:f1:43:aa:78:c4:a5:f9:28:e1:2a: ea:32:6a:79:af:eb:04:ee:2f:e7:97:9d:c9:63:05: 12:21:77:66:49:21:b7:38:c2:65:78:c2:13:32:99: 10:63:bb:64:aa:af:7e:3f:24:d1:67:b4:5c:57:96: a6:ab:8f:ec:59:e4:c8:be:75:ed:ae:10:14:dd:72: fb:db:3a:30:c4:10:50:36:fa:ad:be:18:dc:8c:fb: 57:70:95:d5:c7:78:dc:a1:b6:d6:c5:31:80:da:5e: 61:87:46:47:39:b5:80:5f:cf:d6:f8:27:34:5f:33: 71:ed:b8:5b:44:d0:51:1e:3b:8b:ab:0f:c3:57:01: df:a8:e9:4c:5a:cc:0a:0b:47:02:3b:a8:03:9f:87: 61:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A5:AE:B0:B8:F9:D8:14:E6:F9:66:52:F7:52:88:AD:86:70:A1:8D X509v3 Authority Key Identifier: keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:be:24:da:38:4a:ba:e9:cc:eb:7a:00:68:bd:23:ec:4c:f7: e0:8b:54:d7:2e:d5:9c:a4:10:12:2d:8a:0d:5e:33:19:41:f4: a6:f9:92:b1:2a:ef:9c:69:4c:b3:a0:37:47:29:51:06:c8:5b: 26:ca:49:89:fc:48:f8:70:58:a1:f1:9c:b1:6c:c0:37:d1:86: 10:7b:1f:4b:62:62:28:cc:fd:e4:09:c7:12:a7:1d:ac:65:e9: 88:30:2c:d0:05:d0:c9:7e:40:92:99:c5:dd:fd:a4:d4:57:21: f9:63:49:54:d5:ab:98:71:42:1b:ad:2c:76:3a:cf:02:94:cb: 99:be:9f:81:d1:64:09:70:5f:a8:e4:54:61:1f:76:0b:7a:3c: 91:19:72:d4:c7:d1:fd:11:7a:22:c3:68:b3:d4:c5:51:df:25: bc:4f:d5:13:18:66:2b:93:8c:5a:83:15:f8:14:b2:39:d6:06: 70:af:d4:a0:86:ec:7e:8f:fb:73:b7:f5:23:99:f4:9d:54:e1: 3b:0f:26:bd:03:3e:7b:ea:37:6c:b4:77:85:b0:82:3d:e4:a7: ab:8e:f2:a0:2b:70:61:19:5b:35:f7:15:06:b4:e6:cc:eb:60: 9d:c4:36:96:0d:34:3b:0e:b9:3d:d7:93:73:c2:57:39:fa:7d: 6d:18:11:5d -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBnswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky MEUxMDAyMzAwQTAeFw0yNTA3MzEwMjE2MjFaFw0yNTA4MDIwMjE2MjFaMBgxFjAU BgNVBAMTDTY4OGFkMWY1LTlhMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCoqUl3pFx40FZoX0XuCBkKrLftpqs5IEJ5TkAUAVleeQmSC2KQwghbCrrD h/a0XeCC5sxN1eCjK288dPPZx51G1oSuqm5hII5vZLwYuTlYGRzjnAxEMdc8uw4Z l88PZycTy2j8XP2wctieUN0n8UOqeMSl+SjhKuoyanmv6wTuL+eXncljBRIhd2ZJ Ibc4wmV4whMymRBju2Sqr34/JNFntFxXlqarj+xZ5Mi+de2uEBTdcvvbOjDEEFA2 +q2+GNyM+1dwldXHeNyhttbFMYDaXmGHRkc5tYBfz9b4JzRfM3HtuFtE0FEeO4ur D8NXAd+o6UxazAoLRwI7qAOfh2F3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUz6Wu sLj52BTm+WZS91KIrYZwoY0wHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NDcxMkYvRTlDNEJBQTJBMEU4MTFFQjg4OTU4RDEwRjhB RUEyMjgvUFZYSGhPb1hrUzhPbGdvbHhzcVNEaEFDTUFvLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwviTaOEq66czregBovSPsTPfgi1TX LtWcpBASLYoNXjMZQfSm+ZKxKu+caUyzoDdHKVEGyFsmykmJ/Ej4cFih8ZyxbMA3 0YYQex9LYmIozP3kCccSpx2sZemIMCzQBdDJfkCSmcXd/aTUVyH5Y0lU1auYcUIb rSx2Os8ClMuZvp+B0WQJcF+o5FRhH3YLejyRGXLUx9H9EXoiw2iz1MVR3yW8T9UT GGYrk4xagxX4FLI51gZwr9Sghux+j/tzt/UjmfSdVOE7Dya9Az576jdstHeFsII9 5KerjvKgK3BhGVs19xUGtObM62CdxDaWDTQ7Drk915Nzwlc5+n1tGBFd -----END CERTIFICATE-----Generated at Thu Jul 31 11:21:34 2025 by rpki-client