$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft File: qO-WBRTjNkRNPN43sktm3DnUPRs.mft (raw, json) Hash identifier: KbEcgKsB+YwyJRxScdw1qreXyi5GdFHP3JKInQ5MTUA= Subject key identifier: C5:19:EF:11:36:1C:0D:7C:5B:A4:98:A5:7D:71:75:05:58:19:F4:D6 Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Certificate serial: 0344 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft Manifest number: 032E Signing time: Tue 16 Sep 2025 03:40:16 +0000 Manifest this update: Tue 16 Sep 2025 03:40:15 +0000 Manifest next update: Thu 18 Sep 2025 03:40:15 +0000 Files and hashes: 1: qO-WBRTjNkRNPN43sktm3DnUPRs.crl (hash: RaUiNBagR+7Vx9qJ+SHlI0ULWzb8RY/f9MMBrfQ1hGs=) 2: C64BDF325B8611EE8F5917154AD9E6FC.roa (hash: lOfMw6yYmupoBGzZG06JxE7nkGYN0SjR1YBL+6yU110=) 3: 221DE36C5B7F11EEBAA0307C4AD9E6FC.roa (hash: akgSyzvUhBZdD/Jo/1snS9zDQnQhIY/z4b5eUssk1L4=) 4: 3FC126045B7F11EE91B3797C4AD9E6FC.roa (hash: B4Jxb4zuiNxx8ARYO+8FuXUu5CFHZJCjPVqFobOB2EU=) 5: F592AE225B7E11EEAAD8A37B4AD9E6FC.roa (hash: H2+/hMWhZrQQ/v+xp+P99me7GUvAhaEZLEIOvuDJ8+o=) 6: 9389DEB25B7E11EE85FB5A794AD9E6FC.roa (hash: saW9gDDU1fU/ss5E5QByOp+7T1wbc1vVgpJ7XS+gk+s=) 7: 39E85D245B7F11EE90195D7C4AD9E6FC.roa (hash: eHbXQ/7kild+PjHeBFmSGxlAnlG3pi2uyC9o63m5Mio=) 8: 44122BBE5B7E11EEA5C359784AD9E6FC.roa (hash: dlLpBI0Us25zgjOKkdJouRreKgFknaWvSBpHKXaHN4Q=) 9: 0DDE14645B8711EEBE2DF3154AD9E6FC.roa (hash: OVYm5oOpe8XlJOHUYg0R0oIytfPmlhVRgGeohPVoeGg=) 10: E29E1C625B7D11EEAFF513774AD9E6FC.roa (hash: cL6yXVTdN5LFRK/8lI56JvUwQ8huIMxP3ArtUJsfAsg=) 11: 0DB547A45B7E11EE95F5E0774AD9E6FC.roa (hash: sgLUjm9KT8NBSGsfPuF7zb59LXdnTNhjWZlBuJluY4o=) 12: 82BE0D345B8711EE8AF170174AD9E6FC.roa (hash: du0kSdCk2tSzKNVUZIxuV5z/5Bcr0/T6HJ/NasAIv4s=) 13: 673167545B7E11EE98EEBD784AD9E6FC.roa (hash: adqbPWSj3qJmhRpUh3DUEWmWfDKPs4YfwC9ZlFS5ias=) 14: A97AA9E05B7E11EEAD5E8F794AD9E6FC.roa (hash: 3NkJ+hNEcmyOZzaQCsy/+Ozh2yGmiiWLNtnnqsmfG2I=) 15: C07457B08A3711F0A002C2E7DAE4EC9C.roa (hash: Pe7GZmcC+gV4uLFF5b8V8YgWqeJmXfjZci1uqWUJRZA=) 16: BBA7D8A05B8711EEA5880E184AD9E6FC.roa (hash: NwbjXk0kj8eY+sbmyk9mA7z7P4Od2Lqrhnl5SE+949A=) 17: 7D84FCC85B7E11EE930F05794AD9E6FC.roa (hash: LbVSQZqmCHBXF80jfRgZ632p1CiqtMRJRyKOIJ1fwIY=) 18: 5A3685F85B7D11EEB4B9A0754AD9E6FC.roa (hash: hua4m2v20w0RdcluLq3SvMVi3aYeRg47OfgA9wTRs3E=) 19: D6AA10E05B7E11EE9B32467A4AD9E6FC.roa (hash: RAafA0ML5VlgZ60Y1uxp4EowWyBnwvs0LOD/pOddd5E=) 20: 9FF8CF2E5B8711EE9F40A5174AD9E6FC.roa (hash: lG9MW9PGMEKdmiEYPlQxLtvMK2I/+bgWEhfhck5fvqA=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 18 Sep 2025 03:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 836 (0x344) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3668CFEAF, serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Validity Not Before: Sep 16 03:40:15 2025 GMT Not After : Sep 18 03:40:15 2025 GMT Subject: CN=68c8dc20-78fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:39:30:38:4f:89:08:99:48:81:c3:00:53:20: b0:be:18:45:e3:e6:a1:5c:52:56:e3:76:ec:f9:2b: f6:2e:54:0d:70:21:34:79:3b:05:a0:22:44:fb:50: a2:78:47:00:73:da:0e:71:1e:b3:96:c0:c2:57:e7: 79:de:96:8f:3e:30:f7:5f:01:bb:13:76:dc:f4:f1: 0f:4a:c1:e6:13:7e:4b:9e:16:dd:ca:62:83:f1:32: f1:83:36:88:df:ee:47:c4:d1:c4:37:7c:ec:20:67: 63:89:e5:95:37:cf:e4:0c:68:30:22:63:4f:ca:f4: 3c:28:7f:4e:0e:60:7d:56:83:71:57:3a:88:b3:2e: 74:9a:8f:1b:0e:09:32:c9:e4:5e:d6:5b:15:e1:14: f5:80:40:38:e0:73:bd:a3:b1:aa:c3:47:72:24:2a: 2c:40:40:b1:da:50:5f:65:9f:45:1c:8f:b2:96:e5: e0:96:b1:e1:cd:90:e0:ff:5e:b1:75:49:e2:93:fd: bb:a6:9a:28:5f:16:28:66:8f:3e:92:45:41:64:21: af:00:e9:12:8f:24:e8:b4:a0:a1:e7:d8:a8:5a:ab: f4:c6:a0:9a:12:53:85:51:49:90:67:a7:ce:74:27: e4:7f:04:6f:1e:74:8f:12:46:99:97:bc:b2:bc:41: 3c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:19:EF:11:36:1C:0D:7C:5B:A4:98:A5:7D:71:75:05:58:19:F4:D6 X509v3 Authority Key Identifier: keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:2e:63:3c:3f:26:cf:49:06:da:35:35:67:e4:e0:bd:07:33: de:96:b1:7c:8b:7b:a4:bf:68:98:cd:07:5e:23:ae:19:22:40: 70:b7:73:f7:6f:32:b8:35:6e:47:c5:24:ed:6c:b2:4c:8e:be: 20:be:ab:19:5c:20:1d:6b:9a:34:03:27:79:57:b6:e4:19:79: 61:52:f3:c6:59:74:2e:ec:6e:5b:05:75:6f:47:09:e5:6e:e8: d3:a2:34:cc:fe:48:36:43:a5:7a:0d:dc:e0:eb:c6:c0:80:1c: 58:74:14:04:00:71:a2:71:47:85:1f:41:c5:b7:98:6c:72:d8: bc:f0:6d:08:df:a5:6e:40:e3:fd:9c:26:c7:35:c7:5a:f9:17: 77:71:99:6d:2f:8b:f0:82:3c:32:d2:51:3b:d9:01:75:33:3d: 7e:73:51:16:6a:86:29:13:c9:f8:93:50:66:3d:c0:a5:85:72: 98:7b:e9:3b:d9:ca:c7:9e:09:67:13:37:8d:11:c8:69:af:97: 32:be:22:88:a3:8d:65:c6:36:00:64:fc:dd:7d:8a:db:a4:7c: c1:87:63:55:e5:61:24:f8:ce:ab:74:55:ea:3f:d6:49:7c:89: 94:d2:53:4d:a0:d6:eb:fb:33:0f:e3:8a:41:c6:f0:9f:45:49: a4:b9:22:78 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA0QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NjhDRkVBRjExMC8GA1UEBRMoQThFRjk2MDUxNEUzMzY0NDREM0NERTM3QjI0QjY2 REMzOUQ0M0QxQjAeFw0yNTA5MTYwMzQwMTVaFw0yNTA5MTgwMzQwMTVaMBgxFjAU BgNVBAMTDTY4YzhkYzIwLTc4ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDROTA4T4kImUiBwwBTILC+GEXj5qFcUlbjduz5K/YuVA1wITR5OwWgIkT7 UKJ4RwBz2g5xHrOWwMJX53nelo8+MPdfAbsTdtz08Q9KweYTfkueFt3KYoPxMvGD Nojf7kfE0cQ3fOwgZ2OJ5ZU3z+QMaDAiY0/K9Dwof04OYH1Wg3FXOoizLnSajxsO CTLJ5F7WWxXhFPWAQDjgc72jsarDR3IkKixAQLHaUF9ln0Ucj7KW5eCWseHNkOD/ XrF1SeKT/bummihfFihmjz6SRUFkIa8A6RKPJOi0oKHn2Khaq/TGoJoSU4VRSZBn p850J+R/BG8edI8SRpmXvLK8QTzrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUxRnv ETYcDXxbpJilfXF1BVgZ9NYwHwYDVR0jBBgwFoAUqO+WBRTjNkRNPN43sktm3DnU PRswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjY4Q0ZFLzk1RUZENzRDMzc1NzExRUVCQjE0MzIxODRBRDlFNkZDL3FPLVdC UlRqTmtSTlBONDNza3RtM0RuVVBScy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3FPLVdCUlRqTmtSTlBONDNza3RtM0RuVVBScy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NjhDRkUvOTVFRkQ3NEMzNzU3MTFFRUJCMTQzMjE4NEFE OUU2RkMvcU8tV0JSVGpOa1JOUE40M3NrdG0zRG5VUFJzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoLmM8PybPSQbaNTVn5OC9BzPelrF8 i3ukv2iYzQdeI64ZIkBwt3P3bzK4NW5HxSTtbLJMjr4gvqsZXCAda5o0Ayd5V7bk GXlhUvPGWXQu7G5bBXVvRwnlbujTojTM/kg2Q6V6Ddzg68bAgBxYdBQEAHGicUeF H0HFt5hscti88G0I36VuQOP9nCbHNcda+Rd3cZltL4vwgjwy0lE72QF1Mz1+c1EW aoYpE8n4k1BmPcClhXKYe+k72crHnglnEzeNEchpr5cyviKIo41lxjYAZPzdfYrb pHzBh2NV5WEk+M6rdFXqP9ZJfImU0lNNoNbr+zMP44pBxvCfRUmkuSJ4 -----END CERTIFICATE-----Generated at Wed Sep 17 01:04:04 2025 by rpki-client