$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft File: _fS_ABOx8arKOVUbpibKJGg9rmY.mft (raw, json) Hash identifier: xxN7a+omCcEOINyo0fzI6vITVhVf6KKBzz9ns9B6pOs= Subject key identifier: 61:86:4A:D9:3D:7F:6B:77:63:ED:93:1B:77:5D:7E:F3:3C:3A:1D:A7 Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66 Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66 Certificate serial: 02A4 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft Manifest number: 0281 Signing time: Wed 17 Sep 2025 04:03:31 +0000 Manifest this update: Wed 17 Sep 2025 04:03:30 +0000 Manifest next update: Fri 19 Sep 2025 04:03:30 +0000 Files and hashes: 1: _fS_ABOx8arKOVUbpibKJGg9rmY.crl (hash: zioIsuFd1Y702HNuKUe0vL7h/8qtfcxPcpeNWZLfu0U=) 2: F105F828C4CE11EE939D5160775412E6.roa (hash: OVT2chMQ0Nq/o8KrWCxuVSBa6IdJd925oWRD0nztHjI=) 3: 6F89EC1EC4CE11EEB915BB5F775412E6.roa (hash: 0xzDQTGktY5SNT/oNqNDkR69eV9keuHEiaiK1qaTKh4=) 4: B1F8097EC4D211EE86535866775412E6.roa (hash: 59lN/fUbuBzBsApqG3IvBcdXKT4GXqevkBfORr82FQA=) 5: 8BA49FD0C4D211EE9EC4EB65775412E6.roa (hash: L8cuHjbSNz6+bJ/gQju0YrhFVS2tYAIiSMeuYmThWuI=) 6: DD77B4AAC4D211EEBEB69266775412E6.roa (hash: OydxnI/hxoPiyhR17/Tng3O2ILM83hRZhWDiNRN/dU4=) 7: 95C2E55CC4CE11EEB298E25F775412E6.roa (hash: 34ivVx7kCxvEM20aUk37oRsDslYZlA+xl4ns6+aB5gY=) 8: 93B700F2C4F311EE8E31E298775412E6.roa (hash: jxWkgZfYWgXiUGFUDEKR/McM7BfyCoS5P8Hm5K309v0=) 9: E93581BEC4CD11EEBD97B25E775412E6.roa (hash: 55Va12oDO8S1u6Db0FeTKlFuk9K47Rv37Hrdea7bPcE=) 10: 3DF8B8D4C4D211EEB1EC7C65775412E6.roa (hash: 9LziG0V2OwJ9n1u0dLn4KBFXmSSOMd2hKZ8b5zKpu9c=) 11: 4101D022C4CF11EEB2F10961775412E6.roa (hash: dLi4goldq2t98cgYBuvk9Jpn/HGg3ZCmLTC1jEDXh+8=) 12: FAD1EE98C4D311EEB8EF5B68775412E6.roa (hash: xrzrQk6N9A7y+gGJ1sq9ZLmMErelK63jEZa0HOn6EEE=) 13: 06EC9B8EC4CE11EE9CCFD65E775412E6.roa (hash: yxTa4SshiNJ7DHcSq54/OxpqqW1oYG+0q8Vz/U0eUK4=) 14: 4C0E8C0EC4C911EE87647756775412E6.roa (hash: 3hEwrhsuSNEta/SbVkYuC8E8cEE9Br3Bj2hXmqXW6Og=) 15: C1BC264CC4CD11EE89C2885E775412E6.roa (hash: /4XiUCjd/sd1xIFdMVmhioY/RKg6IR+Ajo98X8uy0lo=) 16: 48E43AECC4D311EE8C1B3F67775412E6.roa (hash: u/n56Tta7OlwGuEqOpX71XLsZT2jKpBxkP39WXUlLLc=) 17: 1A50080EC4D411EE9683B268775412E6.roa (hash: caLtTbJU+Ufv7BiWj1H9Gw+w4cpOtHWxcr1WeZuKjJ8=) 18: 81B67878C4C711EEA9FDDB53775412E6.roa (hash: vTf8z95jt6AfKb+uGSv38KFOEqTok2j1GUU2yZdAI08=) 19: 52716D10C4C811EEA1131155775412E6.roa (hash: xQRXL5xCOGFaycHwp48gngmbdbohfcnsUJoty1rMzbc=) 20: 2A6C3F60C4CE11EEA3D4FA5E775412E6.roa (hash: C+KA4N0o/N/27ljFsz4ZdSUMg3iOEQO8xBx9RPaXKNI=) 21: 4F31EC96C4CE11EEA565525F775412E6.roa (hash: HcZFH7qDjDPGPIsCX8qhmZSQf24/4pPHFAyHS4PESuo=) 22: B3F2595EC4D311EE97A2CE67775412E6.roa (hash: ECdHU4AArULpOT1NztEszqbSD1WJnxMYYXF31fUvbrM=) 23: 68864AB4C4F311EE8BF25B98775412E6.roa (hash: 5ft3N//XILTGHx4xJyf0ZxLMMcxslek8pxu0nWzZdwE=) 24: 648C3F8CC4CF11EEB00B3061775412E6.roa (hash: FDVWcr2ZaAbCYXZ2KHJUxLsk/2sFqJr/Vx9+VGbIRJ4=) 25: 2283DBBEC4D311EEB2E6EA66775412E6.roa (hash: vDOXm9PXQ5Zd7c1zyElcj6kt2FJGk5QRFQWZ4OnkvEI=) 26: 870416B8C4C811EE906C4D55775412E6.roa (hash: Vbe2KHg+Or1EjP08Hg3ouXICYgnv4yFEfEZ5ZITCte4=) 27: D4A143FEC4D311EE8C6C1968775412E6.roa (hash: AgQ0WKMr6LdRsNIoXgyHASIpWGf5jCQAlVVsb6zmYZ8=) 28: 5DCB92C6C4D211EE8BD1A065775412E6.roa (hash: PsrWGlKMnmYkcFOTAbq8GoiP2U6q8o3llEg2ATal3EM=) 29: CCB4D870C59311EE927FFFA7775412E6.roa (hash: 9rD0WduujgyOlEWZ+vDkwaNAJhs7jTIfIlCfix8PC/0=) 30: 9073DE6CC4D311EEB0B9C867775412E6.roa (hash: elhNbqke+6Kl2ZATVb9O1DeKyGk/Aq6WgPyX415dPg0=) 31: 96B86BD6C4CD11EEA3C61A5E775412E6.roa (hash: 1/4BsRl0z2euLNjIiSiAv+wgrdGXz1NzXtlGPkiO18s=) 32: 684B797CC4D311EE816F8467775412E6.roa (hash: zrGP4qbV7TkM2QLEaYGOzJRGNrjbHqUR2QRTvJ966ic=) 33: BFE793D2C4CE11EE81D70760775412E6.roa (hash: YKo9lE8pH+B0lF4SQUvGTWgHthQjPN6oP/oPK/YNf8s=) 34: 1D9BA0C2C4CF11EE9D26CF60775412E6.roa (hash: 0X/6wOprzARBLwyRT7sbR4YEUnDHgpq1rvlRKwpi56E=) 35: FF49F7B4C4D211EEB6F1A266775412E6.roa (hash: qvVux5l6rnVThhETsGLH9EXoxv6/IKPh5G9ATtSGJFg=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 19 Sep 2025 04:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 676 (0x2a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3655D2CAF, serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66 Validity Not Before: Sep 17 04:03:30 2025 GMT Not After : Sep 19 04:03:30 2025 GMT Subject: CN=68ca3312-2ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c4:08:3a:e5:90:bc:6b:32:47:4c:b1:a6:e5: 45:de:f8:dd:96:6d:d7:cc:18:9a:0d:02:0c:b4:f4: c7:b0:eb:0c:9b:92:15:5f:7f:59:12:f2:c6:7c:de: 15:b3:d9:b1:85:3d:8b:09:5f:99:9a:2f:0e:e9:cc: 66:1c:18:fe:04:1b:58:80:20:51:e3:1f:93:1f:2d: 94:9b:ac:b5:75:5d:d9:70:c2:5c:05:ba:a1:ee:dd: 71:bc:1f:01:f5:1c:e4:a6:79:aa:05:67:6a:8b:7c: 67:22:49:a0:e8:68:54:c0:8b:4f:45:68:9a:0d:39: 39:40:ef:2c:7e:2d:04:5d:a5:82:96:cd:01:7f:bd: 82:33:11:df:0b:e8:2c:be:70:50:9f:b9:01:64:7f: 18:c0:52:d7:4f:06:c1:14:47:fe:f2:17:19:c6:42: f7:cb:c8:e6:3b:b3:34:44:98:38:91:35:cc:cb:ee: ec:34:22:92:3b:0b:0a:c4:1c:77:81:ab:86:b1:07: d7:c0:d0:07:d2:70:28:8d:b0:f5:7b:ed:b8:f4:95: 26:f1:82:a6:67:01:d5:2f:7f:36:2c:01:db:b6:53: 28:b5:d8:5c:e9:dd:59:1e:bd:33:5d:fa:a0:17:42: fc:c9:29:5b:ac:89:76:a1:c0:aa:7d:c8:f9:5f:df: 50:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:86:4A:D9:3D:7F:6B:77:63:ED:93:1B:77:5D:7E:F3:3C:3A:1D:A7 X509v3 Authority Key Identifier: keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:00:17:75:ba:f0:1d:a0:b5:fe:3f:ca:ed:24:96:9b:6c:94: 65:d9:29:89:94:f2:58:28:b4:70:c2:29:c5:b6:4d:62:37:30: f2:aa:61:c3:23:c0:62:1f:ee:ce:8c:8d:ff:54:16:e8:62:96: e4:41:91:0b:cd:60:c1:64:ac:03:35:d6:1d:ec:53:07:c9:d8: d7:15:01:7b:d8:e2:c6:2d:95:11:ea:bd:e3:97:13:37:b7:8b: 77:24:52:a9:b9:3f:6d:2c:86:d1:93:d6:56:28:34:c4:9e:5c: d1:fa:a7:ff:67:9a:ef:70:6b:9d:77:45:2f:97:af:01:69:6d: 60:db:f5:cf:1d:5e:f7:03:58:04:58:6d:be:fd:39:09:d3:3f: 58:73:4a:3c:df:87:74:40:e0:0f:fe:f7:4d:d9:bc:3f:a5:44: 24:3f:08:df:8e:e9:98:d3:eb:07:aa:b8:f0:95:76:da:10:80: ea:d8:49:3e:31:a5:32:c9:3a:36:d2:3e:28:9f:80:b4:95:87: 29:a5:77:13:40:9f:c9:d0:dc:b7:14:a8:46:b7:71:d0:30:41: 28:05:71:81:0a:34:3f:4f:01:33:04:24:fa:f8:f9:04:3a:5d: e0:9d:04:cc:72:ba:64:77:7d:f4:85:d2:20:b9:57:05:a1:83: a3:30:3b:0a -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NTVEMkNBRjExMC8GA1UEBRMoRkRGNEJGMDAxM0IxRjFBQUNBMzk1NTFCQTYyNkNB MjQ2ODNEQUU2NjAeFw0yNTA5MTcwNDAzMzBaFw0yNTA5MTkwNDAzMzBaMBgxFjAU BgNVBAMTDTY4Y2EzMzEyLTJlYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCexAg65ZC8azJHTLGm5UXe+N2WbdfMGJoNAgy09Mew6wybkhVff1kS8sZ8 3hWz2bGFPYsJX5maLw7pzGYcGP4EG1iAIFHjH5MfLZSbrLV1XdlwwlwFuqHu3XG8 HwH1HOSmeaoFZ2qLfGciSaDoaFTAi09FaJoNOTlA7yx+LQRdpYKWzQF/vYIzEd8L 6Cy+cFCfuQFkfxjAUtdPBsEUR/7yFxnGQvfLyOY7szREmDiRNczL7uw0IpI7CwrE HHeBq4axB9fA0AfScCiNsPV77bj0lSbxgqZnAdUvfzYsAdu2Uyi12Fzp3VkevTNd +qAXQvzJKVusiXahwKp9yPlf31DFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUYYZK 2T1/a3dj7ZMbd11+8zw6HacwHwYDVR0jBBgwFoAU/fS/ABOx8arKOVUbpibKJGg9 rmYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjU1RDJDLzFENjRDMkZDQzRDMzExRUU5QzQxOTk0Qzc3NTQxMkU2L19mU19B Qk94OGFyS09WVWJwaWJLSkdnOXJtWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL19mU19BQk94OGFyS09WVWJwaWJLSkdnOXJtWS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NTVEMkMvMUQ2NEMyRkNDNEMzMTFFRTlDNDE5OTRDNzc1 NDEyRTYvX2ZTX0FCT3g4YXJLT1ZVYnBpYktKR2c5cm1ZLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDIABd1uvAdoLX+P8rtJJabbJRl2SmJ lPJYKLRwwinFtk1iNzDyqmHDI8BiH+7OjI3/VBboYpbkQZELzWDBZKwDNdYd7FMH ydjXFQF72OLGLZUR6r3jlxM3t4t3JFKpuT9tLIbRk9ZWKDTEnlzR+qf/Z5rvcGud d0Uvl68BaW1g2/XPHV73A1gEWG2+/TkJ0z9Yc0o834d0QOAP/vdN2bw/pUQkPwjf jumY0+sHqrjwlXbaEIDq2Ek+MaUyyTo20j4on4C0lYcppXcTQJ/J0Ny3FKhGt3HQ MEEoBXGBCjQ/TwEzBCT6+PkEOl3gnQTMcrpkd330hdIguVcFoYOjMDsK -----END CERTIFICATE-----Generated at Thu Sep 18 01:07:56 2025 by rpki-client