$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft File: _fS_ABOx8arKOVUbpibKJGg9rmY.mft (raw, json) Hash identifier: RuLqNiBvH5GedbHaDK/eEz51XZReIrQ4VLkhTfidHQc= Subject key identifier: 36:A5:4F:68:BB:D1:33:3F:A1:39:4B:07:A5:02:51:51:83:BF:6D:65 Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66 Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66 Certificate serial: 0270 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft Manifest number: 024D Signing time: Sun 27 Jul 2025 04:23:17 +0000 Manifest this update: Sun 27 Jul 2025 04:23:17 +0000 Manifest next update: Tue 29 Jul 2025 04:23:17 +0000 Files and hashes: 1: _fS_ABOx8arKOVUbpibKJGg9rmY.crl (hash: pm0udGmhDxadPn+kkVTzMT/SoHO15dghdnUiz4nV+HY=) 2: F105F828C4CE11EE939D5160775412E6.roa (hash: OVT2chMQ0Nq/o8KrWCxuVSBa6IdJd925oWRD0nztHjI=) 3: 6F89EC1EC4CE11EEB915BB5F775412E6.roa (hash: 0xzDQTGktY5SNT/oNqNDkR69eV9keuHEiaiK1qaTKh4=) 4: B1F8097EC4D211EE86535866775412E6.roa (hash: 59lN/fUbuBzBsApqG3IvBcdXKT4GXqevkBfORr82FQA=) 5: 8BA49FD0C4D211EE9EC4EB65775412E6.roa (hash: L8cuHjbSNz6+bJ/gQju0YrhFVS2tYAIiSMeuYmThWuI=) 6: DD77B4AAC4D211EEBEB69266775412E6.roa (hash: OydxnI/hxoPiyhR17/Tng3O2ILM83hRZhWDiNRN/dU4=) 7: 95C2E55CC4CE11EEB298E25F775412E6.roa (hash: 34ivVx7kCxvEM20aUk37oRsDslYZlA+xl4ns6+aB5gY=) 8: 93B700F2C4F311EE8E31E298775412E6.roa (hash: jxWkgZfYWgXiUGFUDEKR/McM7BfyCoS5P8Hm5K309v0=) 9: E93581BEC4CD11EEBD97B25E775412E6.roa (hash: 55Va12oDO8S1u6Db0FeTKlFuk9K47Rv37Hrdea7bPcE=) 10: 3DF8B8D4C4D211EEB1EC7C65775412E6.roa (hash: 9LziG0V2OwJ9n1u0dLn4KBFXmSSOMd2hKZ8b5zKpu9c=) 11: 4101D022C4CF11EEB2F10961775412E6.roa (hash: dLi4goldq2t98cgYBuvk9Jpn/HGg3ZCmLTC1jEDXh+8=) 12: FAD1EE98C4D311EEB8EF5B68775412E6.roa (hash: xrzrQk6N9A7y+gGJ1sq9ZLmMErelK63jEZa0HOn6EEE=) 13: 06EC9B8EC4CE11EE9CCFD65E775412E6.roa (hash: yxTa4SshiNJ7DHcSq54/OxpqqW1oYG+0q8Vz/U0eUK4=) 14: 4C0E8C0EC4C911EE87647756775412E6.roa (hash: 3hEwrhsuSNEta/SbVkYuC8E8cEE9Br3Bj2hXmqXW6Og=) 15: C1BC264CC4CD11EE89C2885E775412E6.roa (hash: /4XiUCjd/sd1xIFdMVmhioY/RKg6IR+Ajo98X8uy0lo=) 16: 48E43AECC4D311EE8C1B3F67775412E6.roa (hash: u/n56Tta7OlwGuEqOpX71XLsZT2jKpBxkP39WXUlLLc=) 17: 1A50080EC4D411EE9683B268775412E6.roa (hash: caLtTbJU+Ufv7BiWj1H9Gw+w4cpOtHWxcr1WeZuKjJ8=) 18: 81B67878C4C711EEA9FDDB53775412E6.roa (hash: vTf8z95jt6AfKb+uGSv38KFOEqTok2j1GUU2yZdAI08=) 19: 52716D10C4C811EEA1131155775412E6.roa (hash: xQRXL5xCOGFaycHwp48gngmbdbohfcnsUJoty1rMzbc=) 20: 2A6C3F60C4CE11EEA3D4FA5E775412E6.roa (hash: C+KA4N0o/N/27ljFsz4ZdSUMg3iOEQO8xBx9RPaXKNI=) 21: 4F31EC96C4CE11EEA565525F775412E6.roa (hash: HcZFH7qDjDPGPIsCX8qhmZSQf24/4pPHFAyHS4PESuo=) 22: B3F2595EC4D311EE97A2CE67775412E6.roa (hash: ECdHU4AArULpOT1NztEszqbSD1WJnxMYYXF31fUvbrM=) 23: 68864AB4C4F311EE8BF25B98775412E6.roa (hash: 5ft3N//XILTGHx4xJyf0ZxLMMcxslek8pxu0nWzZdwE=) 24: 648C3F8CC4CF11EEB00B3061775412E6.roa (hash: FDVWcr2ZaAbCYXZ2KHJUxLsk/2sFqJr/Vx9+VGbIRJ4=) 25: 2283DBBEC4D311EEB2E6EA66775412E6.roa (hash: vDOXm9PXQ5Zd7c1zyElcj6kt2FJGk5QRFQWZ4OnkvEI=) 26: 870416B8C4C811EE906C4D55775412E6.roa (hash: Vbe2KHg+Or1EjP08Hg3ouXICYgnv4yFEfEZ5ZITCte4=) 27: D4A143FEC4D311EE8C6C1968775412E6.roa (hash: AgQ0WKMr6LdRsNIoXgyHASIpWGf5jCQAlVVsb6zmYZ8=) 28: 5DCB92C6C4D211EE8BD1A065775412E6.roa (hash: PsrWGlKMnmYkcFOTAbq8GoiP2U6q8o3llEg2ATal3EM=) 29: CCB4D870C59311EE927FFFA7775412E6.roa (hash: 9rD0WduujgyOlEWZ+vDkwaNAJhs7jTIfIlCfix8PC/0=) 30: 9073DE6CC4D311EEB0B9C867775412E6.roa (hash: elhNbqke+6Kl2ZATVb9O1DeKyGk/Aq6WgPyX415dPg0=) 31: 96B86BD6C4CD11EEA3C61A5E775412E6.roa (hash: 1/4BsRl0z2euLNjIiSiAv+wgrdGXz1NzXtlGPkiO18s=) 32: 684B797CC4D311EE816F8467775412E6.roa (hash: zrGP4qbV7TkM2QLEaYGOzJRGNrjbHqUR2QRTvJ966ic=) 33: BFE793D2C4CE11EE81D70760775412E6.roa (hash: YKo9lE8pH+B0lF4SQUvGTWgHthQjPN6oP/oPK/YNf8s=) 34: 1D9BA0C2C4CF11EE9D26CF60775412E6.roa (hash: 0X/6wOprzARBLwyRT7sbR4YEUnDHgpq1rvlRKwpi56E=) 35: FF49F7B4C4D211EEB6F1A266775412E6.roa (hash: qvVux5l6rnVThhETsGLH9EXoxv6/IKPh5G9ATtSGJFg=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 29 Jul 2025 00:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 624 (0x270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3655D2CAF, serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66 Validity Not Before: Jul 27 04:23:17 2025 GMT Not After : Jul 29 04:23:17 2025 GMT Subject: CN=6885a9b5-832a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8d:4b:6f:77:19:f9:37:c3:d5:2b:c0:e1:70: b7:bd:a9:9c:7b:44:05:75:91:cf:03:66:50:1c:dd: ff:d4:94:94:47:d9:9c:96:96:6c:62:56:d5:15:ee: 0e:ca:69:9b:b5:d1:73:61:f5:fa:35:24:e1:e5:55: 87:6c:69:bb:b9:5c:fc:75:9a:08:9f:53:6f:3d:7a: c8:a2:5c:05:d9:56:9d:1e:15:53:78:33:9b:f0:e5: 18:db:85:4e:f4:c9:34:88:f8:fa:6b:a0:41:13:ec: 57:5b:e8:10:3c:c3:74:2a:bb:a5:81:45:44:c9:8e: 97:54:1d:c5:20:88:17:04:d7:3f:e7:96:9b:ad:60: f9:fb:61:fa:d0:ad:f4:6c:62:46:99:61:8d:ad:b2: d4:6e:7f:ce:7a:a6:c9:13:92:0a:94:04:ce:08:07: fa:ef:45:e7:eb:e1:ee:f5:60:a3:f7:71:f4:83:92: ed:1c:5c:0c:43:1d:d7:2a:df:f8:6c:a4:1f:0c:61: fc:d6:ea:03:93:6e:19:31:37:b6:29:8c:85:0d:99: 46:8c:8d:5d:39:69:5c:bc:1a:39:23:a8:39:7b:27: f8:e7:e2:57:1e:c0:bb:a5:ee:09:cd:61:46:3f:23: 26:6e:e2:e6:b8:e2:b2:60:46:9f:a5:0c:b6:63:fa: 17:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A5:4F:68:BB:D1:33:3F:A1:39:4B:07:A5:02:51:51:83:BF:6D:65 X509v3 Authority Key Identifier: keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:8c:4d:4e:50:a4:5e:88:1d:9d:74:60:ca:ea:98:0b:2a:40: ae:71:da:37:b4:8c:9b:e8:e4:41:10:b4:1a:f1:b1:ea:b9:c6: 43:e7:b1:42:a3:56:98:cd:88:82:1e:a1:23:3d:e0:d5:2b:46: d9:b7:4d:bb:d5:70:0c:1c:a4:ac:01:4c:33:00:4f:94:bd:f5: 93:5a:0d:e7:fa:9b:33:a1:50:b1:6b:f4:55:24:8e:56:74:31: 0b:2d:cc:02:04:0c:b1:38:7b:76:c3:ff:34:f1:73:49:65:41: 50:99:c5:6e:48:fb:90:9c:c5:3c:ca:67:34:a0:f5:1e:03:b9: 7c:e0:f3:75:a9:b4:ee:57:35:27:ce:a4:dd:8e:aa:fe:48:e7: 8e:0b:e4:aa:fd:24:2a:8a:a8:bb:bf:7f:8d:f8:e8:cd:80:36: b6:8d:4e:8c:7d:01:b1:58:a7:e6:f7:ab:33:58:bd:23:00:eb: 79:43:6a:a9:78:7d:39:28:03:1b:7a:10:af:e3:91:03:3b:e1: 3e:ce:6e:a7:30:b3:7f:c6:4f:0b:f8:0b:fc:42:ed:17:ca:c6: 57:2f:3a:ce:28:30:cd:a3:0b:cc:de:d7:61:9c:18:81:bc:39: 03:36:c6:70:52:0c:70:17:0b:a2:e2:25:28:cf:fa:4f:cf:3e: 35:10:cd:bf -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NTVEMkNBRjExMC8GA1UEBRMoRkRGNEJGMDAxM0IxRjFBQUNBMzk1NTFCQTYyNkNB MjQ2ODNEQUU2NjAeFw0yNTA3MjcwNDIzMTdaFw0yNTA3MjkwNDIzMTdaMBgxFjAU BgNVBAMTDTY4ODVhOWI1LTgzMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDEjUtvdxn5N8PVK8DhcLe9qZx7RAV1kc8DZlAc3f/UlJRH2ZyWlmxiVtUV 7g7KaZu10XNh9fo1JOHlVYdsabu5XPx1mgifU289esiiXAXZVp0eFVN4M5vw5Rjb hU70yTSI+PproEET7Fdb6BA8w3Qqu6WBRUTJjpdUHcUgiBcE1z/nlputYPn7YfrQ rfRsYkaZYY2tstRuf856pskTkgqUBM4IB/rvRefr4e71YKP3cfSDku0cXAxDHdcq 3/hspB8MYfzW6gOTbhkxN7YpjIUNmUaMjV05aVy8GjkjqDl7J/jn4lcewLul7gnN YUY/IyZu4ua44rJgRp+lDLZj+hdVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUNqVP aLvRMz+hOUsHpQJRUYO/bWUwHwYDVR0jBBgwFoAU/fS/ABOx8arKOVUbpibKJGg9 rmYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjU1RDJDLzFENjRDMkZDQzRDMzExRUU5QzQxOTk0Qzc3NTQxMkU2L19mU19B Qk94OGFyS09WVWJwaWJLSkdnOXJtWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL19mU19BQk94OGFyS09WVWJwaWJLSkdnOXJtWS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NTVEMkMvMUQ2NEMyRkNDNEMzMTFFRTlDNDE5OTRDNzc1 NDEyRTYvX2ZTX0FCT3g4YXJLT1ZVYnBpYktKR2c5cm1ZLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDEjE1OUKReiB2ddGDK6pgLKkCucdo3 tIyb6ORBELQa8bHqucZD57FCo1aYzYiCHqEjPeDVK0bZt0271XAMHKSsAUwzAE+U vfWTWg3n+pszoVCxa/RVJI5WdDELLcwCBAyxOHt2w/808XNJZUFQmcVuSPuQnMU8 ymc0oPUeA7l84PN1qbTuVzUnzqTdjqr+SOeOC+Sq/SQqiqi7v3+N+OjNgDa2jU6M fQGxWKfm96szWL0jAOt5Q2qpeH05KAMbehCv45EDO+E+zm6nMLN/xk8L+Av8Qu0X ysZXLzrOKDDNowvM3tdhnBiBvDkDNsZwUgxwFwui4iUoz/pPzz41EM2/ -----END CERTIFICATE-----Generated at Sun Jul 27 07:19:36 2025 by rpki-client