$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft File: PVXHhOoXkS8OlgolxsqSDhACMAo.mft (raw, json) Hash identifier: /4zX8r5+kSk/3YeKgJ3TLH4LuRLWBdGQ3ffMb96cLEA= Subject key identifier: 9E:67:F8:2D:4E:9B:F9:E1:CC:B0:9C:2A:08:59:50:0F:77:B9:A0:7B Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A Certificate issuer: /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A Certificate serial: 06AB Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft Manifest number: 0696 Signing time: Wed 17 Sep 2025 02:06:27 +0000 Manifest this update: Wed 17 Sep 2025 02:06:26 +0000 Manifest next update: Fri 19 Sep 2025 02:06:26 +0000 Files and hashes: 1: PVXHhOoXkS8OlgolxsqSDhACMAo.crl (hash: ATgC0EH9vVAL9wg42r6cJ2RdzDbFi4Y4AEpqP8XwGW4=) 2: 4F98057C463A11EC8FC05E15D8A014CE.roa (hash: xBs6Vj/OeiFnzOXPhSwdSucFxUDsg3Mh5ATS3BYbuQQ=) 3: A081D0764BB711EC90B9B946D8A014CE.roa (hash: gyJOxBOesIDsoX+F0wCqdrw9sX0TpvZI+h6iVzCHXus=) 4: 8665119A463911EC88B22A14D8A014CE.roa (hash: 9v5B2xaH3Bc4zwDA3exaH6jQCediAk11PcOAPXe7o5k=) 5: D6EDC7E0517E11EEB8E0E4124AD9E6FC.roa (hash: FEIMhfmeS/WDUY9eK4oDCHAUgtEzM8qgwjxj7XmdiaM=) 6: 5A777F624BB811EC988AD647D8A014CE.roa (hash: 1YHFKzIw60VPhLGMqgaM8DC3X+uEENoWlpBODyIvx+8=) 7: 88C7F19A463A11EC8A6DCA15D8A014CE.roa (hash: anrHJdrDwUVVxzqA0H5Lv7h5BhwjhCFTP0rDmIVAs5g=) 8: 2D81E60CD70411EFA4774B68762E951A.roa (hash: WMzMow+21CqdCgojBhlWOGoOTPRBXGbF6iL94Q4Dv5A=) 9: D955A76630FE11ECB753D321D8A014CE.roa (hash: xjCeaYd+LKJvUwcXfMZMX504OiVLskv9I2sBgX5AZDo=) 10: 44276DB4463911EC8EA8D613D8A014CE.roa (hash: 4eP0uQUhgh8UojN9cwAJrEyBjLKtzCe+6TB80lYgykw=) 11: 29A1C4C4463B11ECBE2BB116D8A014CE.roa (hash: O5Px9+yMxD3h4TaIj58cVZ2T/wrbePoVvt5KjLdgZMg=) 12: C25BF862463911EC9C659114D8A014CE.roa (hash: TAmKKzQBDoLwr1xj5R0Z1MOOtgdIjMvjgf/j1EH6WSQ=) 13: 05AE8E624BB811ECB8B77047D8A014CE.roa (hash: IqZdrn6PDd5tCiFmENh9gtBL/vqPbtxvIIhISM2npRA=) 14: 5B28A01A463811ECB5776C12D8A014CE.roa (hash: sw9X0bgyaC8iP6hm/pS3038w/pYcaM83WRGaPy6yt0M=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 19 Sep 2025 02:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1707 (0x6ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A Validity Not Before: Sep 17 02:06:26 2025 GMT Not After : Sep 19 02:06:26 2025 GMT Subject: CN=68ca17a3-3924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:12:ad:1e:82:eb:ad:d1:f5:59:92:3c:90:bd: 94:7f:a7:7e:1d:89:37:fa:b7:56:b6:2f:0f:05:93: 6b:89:20:9f:b2:07:c4:da:a7:19:d9:12:83:d6:47: cf:ec:5a:8a:b0:e9:8d:fc:27:da:4c:5d:0e:fe:21: 6d:1d:5b:da:ad:c6:88:19:fc:e2:ea:47:01:0e:1e: 65:84:7e:b7:d9:71:3b:53:a0:17:65:b4:64:81:1a: 96:74:ef:53:1f:8f:90:81:c5:2e:59:73:5e:e1:8a: 84:56:fc:8a:b1:ba:bd:25:00:b7:e8:68:0a:35:4a: 4b:f3:07:be:0b:59:f2:8c:a9:27:5d:7d:7d:61:9b: 35:96:ff:b8:a2:5b:9f:e1:ee:23:f2:37:40:0f:df: ed:d3:6b:05:de:74:ed:11:04:90:dc:dc:94:95:0e: 68:6b:95:9c:cd:3a:48:26:b9:26:30:f1:08:d9:aa: ff:12:9e:cb:a3:af:0a:df:4a:13:4c:d2:50:33:ef: 09:0b:3f:be:e1:28:55:03:c2:d4:41:a3:e8:dc:bd: 73:43:32:eb:4a:63:25:f9:d7:df:2b:f6:80:ab:90: 2f:99:68:60:54:8c:bb:60:e1:5f:3c:22:2e:61:6f: 6d:81:6b:cb:12:a4:41:7c:dc:54:66:0d:fd:2d:9c: 20:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:67:F8:2D:4E:9B:F9:E1:CC:B0:9C:2A:08:59:50:0F:77:B9:A0:7B X509v3 Authority Key Identifier: keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:7a:d1:81:5b:cb:15:21:60:51:64:26:c9:a9:7c:57:73:f1: c4:2a:c6:89:f6:bf:bf:1c:1f:48:be:c3:f4:73:6a:06:9b:81: 01:44:a6:f9:00:24:ca:6d:01:2d:cb:a6:aa:32:0a:d9:77:ec: 97:fa:ec:86:d3:72:fd:b6:52:20:28:ea:77:13:7a:bd:d0:7b: 4a:75:b9:2e:6b:e6:74:6c:77:0b:c7:3d:db:16:3b:1c:ba:62: b7:b9:1b:1e:27:ae:1a:43:a1:a9:bd:b1:cb:b6:6a:86:cf:db: f8:35:bd:71:50:f0:e8:5d:bd:b9:61:2f:ef:ef:7c:2a:ae:4e: 8f:25:4e:cd:4a:c5:4f:63:41:6b:f6:f9:06:f6:a1:e1:1a:cc: 3b:b7:f1:63:72:fc:b0:fb:72:6e:f9:85:64:e5:cb:e2:d9:81: 26:ae:da:95:91:f8:dd:b3:a8:93:43:13:5b:18:c5:71:1b:a1: 76:61:a8:11:b0:70:4a:0e:fd:06:c8:d2:31:2e:e8:af:c5:d7: f7:7d:f2:70:21:85:5e:d3:1c:ce:1d:1c:f8:77:c6:a5:f6:2a: 96:13:44:a4:96:30:35:a2:69:0d:43:06:b7:aa:f2:58:26:a3: 4b:3f:53:e2:79:e8:3b:e6:5b:9f:9a:26:af:2b:04:2f:b8:1b: 30:08:09:ff -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBqswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky MEUxMDAyMzAwQTAeFw0yNTA5MTcwMjA2MjZaFw0yNTA5MTkwMjA2MjZaMBgxFjAU BgNVBAMTDTY4Y2ExN2EzLTM5MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDQEq0eguut0fVZkjyQvZR/p34diTf6t1a2Lw8Fk2uJIJ+yB8TapxnZEoPW R8/sWoqw6Y38J9pMXQ7+IW0dW9qtxogZ/OLqRwEOHmWEfrfZcTtToBdltGSBGpZ0 71Mfj5CBxS5Zc17hioRW/Iqxur0lALfoaAo1SkvzB74LWfKMqSddfX1hmzWW/7ii W5/h7iPyN0AP3+3TawXedO0RBJDc3JSVDmhrlZzNOkgmuSYw8QjZqv8Snsujrwrf ShNM0lAz7wkLP77hKFUDwtRBo+jcvXNDMutKYyX5198r9oCrkC+ZaGBUjLtg4V88 Ii5hb22Ba8sSpEF83FRmDf0tnCCFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUnmf4 LU6b+eHMsJwqCFlQD3e5oHswHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NDcxMkYvRTlDNEJBQTJBMEU4MTFFQjg4OTU4RDEwRjhB RUEyMjgvUFZYSGhPb1hrUzhPbGdvbHhzcVNEaEFDTUFvLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwetGBW8sVIWBRZCbJqXxXc/HEKsaJ 9r+/HB9IvsP0c2oGm4EBRKb5ACTKbQEty6aqMgrZd+yX+uyG03L9tlIgKOp3E3q9 0HtKdbkua+Z0bHcLxz3bFjscumK3uRseJ64aQ6GpvbHLtmqGz9v4Nb1xUPDoXb25 YS/v73wqrk6PJU7NSsVPY0Fr9vkG9qHhGsw7t/Fjcvyw+3Ju+YVk5cvi2YEmrtqV kfjds6iTQxNbGMVxG6F2YagRsHBKDv0GyNIxLuivxdf3ffJwIYVe0xzOHRz4d8al 9iqWE0SkljA1omkNQwa3qvJYJqNLP1Pieeg75lufmiavKwQvuBswCAn/ -----END CERTIFICATE-----Generated at Wed Sep 17 23:41:03 2025 by rpki-client