$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft File: nxc4PrZn5Ue6AM-3-RT0KExYScw.mft (raw, json) Hash identifier: XwDx6qPjUFeGo31V8BsUecYHtZpuukYL0q8KYuwGENw= Subject key identifier: 2A:5C:6D:53:47:66:84:FA:6E:3F:DE:A6:F8:84:5B:C8:F4:5B:EB:C5 Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC Certificate issuer: /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC Certificate serial: 0EB4 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft Manifest number: 0EA8 Signing time: Fri 19 Sep 2025 00:55:46 +0000 Manifest this update: Fri 19 Sep 2025 00:55:45 +0000 Manifest next update: Sun 21 Sep 2025 00:55:45 +0000 Files and hashes: 1: nxc4PrZn5Ue6AM-3-RT0KExYScw.crl (hash: JPUFRY0vye4LctmAczRudXUqgMSltWMQZnA42nbQwXg=) 2: 0F970AA45DDA11EEA9B9B7884AD9E6FC.roa (hash: FMUt2MM7DebKkBEnbyLy3J47YqdDugPo2mNzNBuOTcI=) 3: 1214F7F4585D11E59D5C7317F8AEA228.roa (hash: 0FpgqvuIfv2t7pEzVo665VBSLTVkVC883PZi8zGnUOQ=) 4: 4252D1905DDE11EEA38F26174AD9E6FC.roa (hash: YEcxnJNljEbbPt+jZqFFjrHFGQrlfrLBxbAphuQ3lR4=) 5: AA2ED722D22511EDA73BE0D2F1222468.roa (hash: Bz6y/9VDXHlj+h8pTwHUCwEbbK4O3DXKaYbf9T3u4Kk=) 6: F8A03EA22DD711ED9D0F7E83F1222468.roa (hash: A3D2coJfMGVfkM4t+C0wadunWeeP5Netmzy2NPiOcNE=) 7: B52245B0585C11E5AF923917F8AEA228.roa (hash: w98JhuMKbeVGaXUfnIIH2kCqGJut86/4raJT2iIszDU=) 8: DAD32A825DD911EE908D0E884AD9E6FC.roa (hash: jYCM5n5GYzsPy5dOD3c0IJ0ltyMzwLsK1AtouHVwLZ0=) 9: 67208BD45DDE11EEA367B1174AD9E6FC.roa (hash: dUOADrTH86yUTFdknQpwKyYi7Ckfi6ZQrgp/0K1+5iw=) 10: 3EB8BE4ED22611EDAF3CB0D4F1222468.roa (hash: 8rUeH5+hrD/1gu9Yu/+gBbmACyJtB7cXUwPkrzQinJI=) 11: 4C3C8DC6585C11E58ADCBB15F8AEA228.roa (hash: ztbK9LFQQYS+tWoyZX54zNQ+XC25dMZgasKrqJ1v5pE=) 12: 08DDC9D85DDE11EE97117A164AD9E6FC.roa (hash: YTPBR2O7UMDxBF3Dv5l5lllDC58HOmSCof2QHjhKZws=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 21 Sep 2025 00:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3764 (0xeb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC Validity Not Before: Sep 19 00:55:45 2025 GMT Not After : Sep 21 00:55:45 2025 GMT Subject: CN=68ccaa11-f82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:cc:a5:19:22:83:b4:d0:3f:5e:fd:47:ae: a1:b1:4b:ca:1f:d6:25:78:0a:c6:f8:b6:b3:ec:b4: eb:30:37:39:53:e0:9f:ff:c2:71:4d:26:99:42:8e: 21:3f:c7:d4:61:be:44:78:7a:83:71:d7:52:f2:a2: 01:ba:80:f5:18:36:c6:f3:d0:c2:a1:19:12:56:8f: 5f:c7:ce:25:76:7f:4e:55:c6:18:62:e6:ee:1c:70: f3:31:27:0a:de:4e:2a:90:1f:a8:e2:56:c7:85:ae: df:b8:12:4a:b9:66:d0:d5:ad:01:24:73:fb:d5:26: 65:d3:f0:8a:10:73:03:a8:2a:e9:8b:f1:50:d9:5c: f4:60:42:79:c8:72:e3:4e:da:4a:90:e9:d4:ca:1d: 9e:a9:ed:42:82:fa:f1:4f:e4:68:4d:b1:a7:0b:26: 18:ff:ad:97:3b:e8:a6:16:38:af:4a:09:d6:fd:59: aa:b8:44:a4:4c:89:59:3d:a7:c8:5a:84:26:59:c0: 9c:0b:3c:05:e1:fd:31:87:60:35:db:d2:47:eb:5e: 5a:15:ec:af:52:dc:b7:2d:c7:1f:4f:64:0e:2e:6b: 8f:5b:ce:d3:d0:62:5f:e0:e9:de:08:69:67:56:0a: ee:07:40:03:40:ab:c0:09:13:66:f4:09:f5:53:8f: de:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5C:6D:53:47:66:84:FA:6E:3F:DE:A6:F8:84:5B:C8:F4:5B:EB:C5 X509v3 Authority Key Identifier: keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:2d:19:b8:f7:2e:08:fc:35:97:e1:87:0e:7a:6d:68:5b:d4: 85:7f:7c:a2:5a:07:46:ca:ee:3d:7c:b4:3e:a0:a7:20:62:26: 13:3a:cf:12:3f:db:6d:72:e0:24:30:b9:44:70:b2:0e:d9:e6: 00:c1:7a:4e:29:3d:fa:ba:12:aa:bb:9f:df:3a:83:b2:cd:c2: f6:cc:31:82:80:7a:7d:44:1c:b7:8b:27:98:fe:90:a5:41:9c: 69:2a:a3:c2:cb:e6:dd:e5:cb:d1:af:54:99:77:60:77:54:ee: f6:48:1c:00:80:b7:92:d9:8e:d8:e1:a0:8c:bb:57:46:c1:2f: 02:96:46:0a:32:e0:6d:41:9b:b2:5e:6e:c6:ea:14:33:94:97: e5:d5:fb:4c:28:d4:84:1c:32:9c:7b:0c:31:4c:74:3d:7d:7a: c2:fc:b6:90:20:d4:e2:4a:2c:6a:46:5b:65:be:cb:ed:20:69: 65:a7:45:64:09:4f:93:d1:fb:e5:60:93:a5:2c:76:c1:2f:4c: 6b:26:92:31:5c:98:3e:0d:83:a6:62:41:8c:70:29:76:e2:9d: e6:ec:f0:76:3e:19:13:03:9b:39:c1:3c:a6:3b:75:54:44:ed: b8:59:44:3c:34:19:44:a5:f8:a0:f3:83:f7:ad:c9:71:89:1e: 33:ed:cd:0f -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDrQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NTQ5QjFBRjExMC8GA1UEBRMoOUYxNzM4M0VCNjY3RTU0N0JBMDBDRkI3RjkxNEY0 Mjg0QzU4NDlDQzAeFw0yNTA5MTkwMDU1NDVaFw0yNTA5MjEwMDU1NDVaMBgxFjAU BgNVBAMTDTY4Y2NhYTExLWY4MmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDDwsylGSKDtNA/Xv1HrqGxS8of1iV4Csb4trPstOswNzlT4J//wnFNJplC jiE/x9RhvkR4eoNx11LyogG6gPUYNsbz0MKhGRJWj1/HziV2f05Vxhhi5u4ccPMx JwreTiqQH6jiVseFrt+4Ekq5ZtDVrQEkc/vVJmXT8IoQcwOoKumL8VDZXPRgQnnI cuNO2kqQ6dTKHZ6p7UKC+vFP5GhNsacLJhj/rZc76KYWOK9KCdb9Waq4RKRMiVk9 p8hahCZZwJwLPAXh/TGHYDXb0kfrXloV7K9S3Lctxx9PZA4ua49bztPQYl/g6d4I aWdWCu4HQANAq8AJE2b0CfVTj97lAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKlxt U0dmhPpuP96m+IRbyPRb68UwHwYDVR0jBBgwFoAUnxc4PrZn5Ue6AM+3+RT0KExY ScwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjU0OUIxL0RGNzg4Qzk4NTYxMzExRTVCMUEwRTM2MEY4QUVBMjI4L254YzRQ clpuNVVlNkFNLTMtUlQwS0V4WVNjdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL254YzRQclpuNVVlNkFNLTMtUlQwS0V4WVNjdy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NTQ5QjEvREY3ODhDOTg1NjEzMTFFNUIxQTBFMzYwRjhB RUEyMjgvbnhjNFByWm41VWU2QU0tMy1SVDBLRXhZU2N3Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBALRm49y4I/DWX4YcOem1oW9SFf3yi WgdGyu49fLQ+oKcgYiYTOs8SP9ttcuAkMLlEcLIO2eYAwXpOKT36uhKqu5/fOoOy zcL2zDGCgHp9RBy3iyeY/pClQZxpKqPCy+bd5cvRr1SZd2B3VO72SBwAgLeS2Y7Y 4aCMu1dGwS8ClkYKMuBtQZuyXm7G6hQzlJfl1ftMKNSEHDKcewwxTHQ9fXrC/LaQ INTiSixqRltlvsvtIGllp0VkCU+T0fvlYJOlLHbBL0xrJpIxXJg+DYOmYkGMcCl2 4p3m7PB2PhkTA5s5wTymO3VURO24WUQ8NBlEpfig84P3rclxiR4z7c0P -----END CERTIFICATE-----Generated at Fri Sep 19 13:37:04 2025 by rpki-client