$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft File: hv7S7RnCBnpIIiG2RdYMRaTVap0.mft (raw, json) Hash identifier: D1Efjfrcl+6lKSFurtvQYrnrCi5E7r2KieFkz3rLykc= Subject key identifier: 9D:F7:39:91:28:01:F0:57:6F:18:31:1A:38:AE:31:14:C7:3D:BC:5E Authority key identifier: 86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D Certificate issuer: /CN=F36472E5AF/serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D Certificate serial: 0E85 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft Manifest number: 0E73 Signing time: Sun 27 Jul 2025 00:56:41 +0000 Manifest this update: Sun 27 Jul 2025 00:56:41 +0000 Manifest next update: Tue 29 Jul 2025 00:56:41 +0000 Files and hashes: 1: hv7S7RnCBnpIIiG2RdYMRaTVap0.crl (hash: qK0G9VdDsqbZx71glKnS1XTzKr5k/Zh8OWOAO/jP4/w=) 2: 2B358C9ACA5411E9AB56C482F8AEA228.roa (hash: 542MHTZAg9mxUFxY3zCZ7p5fwSnjIWtxUnE6kTXmKMs=) 3: 75BB83CECAEE11E9B8750B77F8AEA228.roa (hash: LHVz9xioiQqgDCsiihzIIq+BrjcIvxLKI5LrrXrO3Io=) 4: A584C0ACCAEE11E98C9F3777F8AEA228.roa (hash: COm4IJeTkrJL34O4UJLzMLGNyExGXZ/i492sB/CX0wc=) 5: A9E94F06CAED11E980367876F8AEA228.roa (hash: VrJL3SQd6C3FUUbw0uhJehHrmjG9Xx4v9iS8CcKGSXY=) 6: CEB8F1B0CAED11E988A78B76F8AEA228.roa (hash: jDtuwq3j8HQc76mLF36nBIH2uMggEhhIl6ncNoeaoaY=) 7: 8611EC46CAED11E989D36576F8AEA228.roa (hash: FshGOOOuJbA/9loXNipyvDMsi9pllSp+7FKxuJNVYeU=) 8: 5DC47678CAED11E9859E2C76F8AEA228.roa (hash: +mStn8j1lsfaOcAkA+IpFnx3VVw/ZA+elfj24TZJJoA=) 9: 58D4146ECA5411E9AACFFC82F8AEA228.roa (hash: llqq6mhR2LiQ9Zf86+DgrcW9HILB2CWU6cLF3bhjP9A=) 10: 2EFA614ECAEE11E98511EC76F8AEA228.roa (hash: 2zLMI8rOWrZ63E40k/ceZtOXzw9Rmk5l8voPk4gGNgk=) 11: 655F290413AE11F09DCA6CAC762E951A.roa (hash: MtTA05if95p/mNtRLM4nlSrYgGLQ7Pky8WnDGWJT8Mc=) 12: 393244FCCAED11E9B99FF875F8AEA228.roa (hash: 4xNbES12DfxpVPkV3v2uKcMGkgu9iGiVU5CNykYBjGs=) 13: 8B76B110CD5B11E982F62408F8AEA228.roa (hash: /cWu2nL6HSrRP3knTHp+eSDgxNpMwgwnD7k3nWXKasE=) 14: 0475EE6856D811E5B0E8AA60F8AEA228.roa (hash: rnfvCe8zm7FPtXxrLAwPlwPmid5ucEEvHSHMH0qNarY=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 29 Jul 2025 00:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3717 (0xe85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36472E5AF, serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D Validity Not Before: Jul 27 00:56:41 2025 GMT Not After : Jul 29 00:56:41 2025 GMT Subject: CN=68857949-4511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f5:ad:27:71:af:56:66:50:a1:1d:7e:2a:cb: a5:49:3d:8c:6a:ad:19:10:1c:2f:6b:28:c1:a8:97: 9f:2a:27:47:f3:2a:2c:52:dc:66:bc:69:d4:5e:e2: ec:44:bb:a9:e2:61:84:19:a4:90:aa:08:14:6e:60: 09:bd:08:b9:16:16:ae:30:74:4a:fd:d1:78:a6:50: 3f:2a:82:d9:d0:82:df:86:47:30:4a:7c:c7:10:9f: f5:09:43:1d:f3:31:b6:1c:aa:64:13:07:19:50:a0: 77:af:8c:23:1b:71:5c:7a:8d:9a:d1:93:d9:b8:96: 59:51:65:aa:3d:fb:fd:61:59:35:42:ea:9f:9e:ea: 24:61:95:d6:05:64:d0:3c:bc:6b:3b:55:22:5e:49: 9c:07:9e:71:15:6d:68:ec:21:19:07:6a:70:0d:14: 21:15:21:16:9b:9e:f1:b2:8b:33:88:17:40:5b:60: 70:f5:c6:e4:4e:24:97:29:98:db:1c:0d:85:1d:6d: 69:5d:93:27:7c:0a:38:30:b4:bf:38:ed:79:00:e6: 89:1a:0b:a9:fc:2d:5c:79:03:68:e3:91:d4:14:55: 94:01:45:e9:c1:a4:c5:dd:24:f7:91:9b:c5:c4:4b: a3:69:e0:84:ad:d3:58:96:ae:83:9e:6d:05:9c:1f: dd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F7:39:91:28:01:F0:57:6F:18:31:1A:38:AE:31:14:C7:3D:BC:5E X509v3 Authority Key Identifier: keyid:86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:9f:6d:c1:77:c6:9f:1c:30:c8:73:2e:87:9e:61:5b:b8:7a: 0b:8d:71:b6:8d:68:64:53:a0:82:db:61:9d:e1:33:ff:3b:47: 3c:07:eb:98:d5:2e:e9:04:f7:5c:f4:39:a4:32:9c:4a:3b:e8: fb:a6:6d:8b:55:b9:18:78:e0:9e:dd:9d:1a:89:5f:a3:13:d5: 35:3c:88:29:1c:2e:00:d4:8b:63:27:aa:ef:f2:fe:76:07:26: 61:2c:9e:af:3b:1c:3e:08:28:47:fa:27:18:6d:91:0d:01:16: c8:3b:03:45:33:08:84:95:db:a6:78:3a:91:79:2d:e2:77:29: bc:a2:f5:fc:29:47:ac:39:38:e9:d8:97:bb:38:fc:a7:6f:3d: e4:a4:b4:0f:34:3c:b6:2b:f6:c1:0f:83:4a:ab:14:8b:fc:e5: 1e:a2:6c:2a:d3:57:fa:97:e6:79:67:dd:a2:15:69:20:d3:cd: 4a:7a:3e:64:f7:cb:20:b2:30:01:9c:34:eb:57:da:8a:9d:28: ec:a8:ff:cd:97:1f:f5:d8:23:50:44:83:bb:a8:61:cc:14:68: 05:97:19:74:56:d0:72:c4:45:65:ce:6b:2a:56:7c:06:63:80: 93:e2:30:de:29:d2:5b:1d:d3:12:e4:2f:e4:7f:9c:94:e5:d4: 12:1c:45:d2 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDoUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDcyRTVBRjExMC8GA1UEBRMoODZGRUQyRUQxOUMyMDY3QTQ4MjIyMUI2NDVENjBD NDVBNEQ1NkE5RDAeFw0yNTA3MjcwMDU2NDFaFw0yNTA3MjkwMDU2NDFaMBgxFjAU BgNVBAMTDTY4ODU3OTQ5LTQ1MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCv9a0nca9WZlChHX4qy6VJPYxqrRkQHC9rKMGol58qJ0fzKixS3Ga8adRe 4uxEu6niYYQZpJCqCBRuYAm9CLkWFq4wdEr90XimUD8qgtnQgt+GRzBKfMcQn/UJ Qx3zMbYcqmQTBxlQoHevjCMbcVx6jZrRk9m4lllRZao9+/1hWTVC6p+e6iRhldYF ZNA8vGs7VSJeSZwHnnEVbWjsIRkHanANFCEVIRabnvGyizOIF0BbYHD1xuROJJcp mNscDYUdbWldkyd8CjgwtL847XkA5okaC6n8LVx5A2jjkdQUVZQBRenBpMXdJPeR m8XES6Np4ISt01iWroOebQWcH911AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUnfc5 kSgB8FdvGDEaOK4xFMc9vF4wHwYDVR0jBBgwFoAUhv7S7RnCBnpIIiG2RdYMRaTV ap0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQ3MkU1LzhEQjY1NDdBNTZENzExRTU4NTM1NkQ2MEY4QUVBMjI4L2h2N1M3 Um5DQm5wSUlpRzJSZFlNUmFUVmFwMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2h2N1M3Um5DQm5wSUlpRzJSZFlNUmFUVmFwMC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NDcyRTUvOERCNjU0N0E1NkQ3MTFFNTg1MzU2RDYwRjhB RUEyMjgvaHY3UzdSbkNCbnBJSWlHMlJkWU1SYVRWYXAwLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBWn23Bd8afHDDIcy6HnmFbuHoLjXG2 jWhkU6CC22Gd4TP/O0c8B+uY1S7pBPdc9DmkMpxKO+j7pm2LVbkYeOCe3Z0aiV+j E9U1PIgpHC4A1ItjJ6rv8v52ByZhLJ6vOxw+CChH+icYbZENARbIOwNFMwiEldum eDqReS3idym8ovX8KUesOTjp2Je7OPynbz3kpLQPNDy2K/bBD4NKqxSL/OUeomwq 01f6l+Z5Z92iFWkg081Kej5k98sgsjABnDTrV9qKnSjsqP/Nlx/12CNQRIO7qGHM FGgFlxl0VtByxEVlzmsqVnwGY4CT4jDeKdJbHdMS5C/kf5yU5dQSHEXS -----END CERTIFICATE-----Generated at Sun Jul 27 07:57:55 2025 by rpki-client