$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft File: l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json) Hash identifier: cV/FsYKUeGTKc1ir2qkltsjONKPqyDi6uc1BecsVBhM= Subject key identifier: 22:F7:28:8F:CE:69:9C:A0:94:06:D7:E9:E6:A7:97:D7:C6:4C:BB:A6 Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39 Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139 Certificate serial: 0796 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft Manifest number: 070C Signing time: Fri 05 Sep 2025 02:10:55 +0000 Manifest this update: Fri 05 Sep 2025 02:10:54 +0000 Manifest next update: Sun 07 Sep 2025 02:10:54 +0000 Files and hashes: 1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: xbktM4YqTOtgfKiAY2gYEe0UqDF3pcf4YvpiZtE7H0g=) 2: DBA98D145B2211F0A20E2EA0DAE4EC9C.roa (hash: baX/jyqbDDRWJ52IpaUoPLaTxEVM5KXNaJC/ks++xuQ=) 3: EEB5856C7F6B11F0B0B6DF82DAE4EC9C.roa (hash: UIG7Jif5IiOqj4KGvbim+sNDE4xOkewikzs6NTdR8Fc=) 4: D555ACF47ED111F08EE5E58BDAE4EC9C.roa (hash: 47vFvhPfYF8MRZPiu19cy9fhXJPFVZu9WXQ1eMHjtak=) 5: 31AC1B067F2B11F0A2FC2DE1DAE4EC9C.roa (hash: pJmfeAp3o89ojiARZABIHNF+5KqQANGXnVyfWK3JWAo=) 6: 35237092849C11F085DA07E3DAE4EC9C.roa (hash: 4GhrXdLBgo+sBVSTLqs5eEid22S/IKE4eBqRbt8OBIA=) 7: 56D4E696849A11F0B5823AD6DAE4EC9C.roa (hash: BetcNBugEjXjxGnCZeCKv2trp8mNDngGMMzxYqJhmks=) 8: 5A8C7874784411F0BE639EBDDAE4EC9C.roa (hash: Tso2x+6Cusvv7XHczF8aF240Wh6DYRs6taSZ6HxpTbM=) 9: 8F66F9F2625011F093EF34AEDAE4EC9C.roa (hash: azeXExxPadQBtZQAbA3QmCVU3GUpPn3GgN81W/kzNws=) 10: C36E5120609611F0AB6F15F2DAE4EC9C.roa (hash: Fk+IfFMpvi36aQyLQYlmv26xnAUJjv0obfvmLZs4rLU=) 11: F97058B6742A11F0810B2A8DDAE4EC9C.roa (hash: MJ5nCx+xhx6AqVPExidsnCJBFtUNetW5aMJNhawGs2Y=) 12: 7FF565AE849B11F0AF3EAEDEDAE4EC9C.roa (hash: yqhEa/X79zR1eIlNu/RDuCWEuBIN03wmFicK7uPcAxk=) 13: B03C5936136B11EF9CB7442D017001B1.roa (hash: 8cn480ct0RO7vc/yrd/vQq31HhnmkbbbxOW5UAR4BoE=) 14: 9307AC26864211F0B10DDAA0DAE4EC9C.roa (hash: asyiiPpBOEH3XPd0A+rm4Mn5TAQ1pyZZcQW8jLn0FfU=) 15: 951B9DB2781711F0AAD136A0DAE4EC9C.roa (hash: rxo13RQJNN4g4AsDSu+eErcokD2GEDR1Waq9IZ5O/Qw=) 16: CBA3C1846B7011EFAF3FE084762E951A.roa (hash: pFDrtn8wEhtxFNlu2wmcpGpG41xK4cr84A6LU6JiqYg=) 17: CEA072D8776A11EEA49F007D4AD9E6FC.roa (hash: oG1ErKkSbYpP5X6eq2VOONQIy8u5lFGEO9d6IZTGw04=) 18: 591D33B4840311F0A77B64F5DAE4EC9C.roa (hash: KKjs72tQMMcJfTehebh3igFkn69k8zXYHn3PeD37EGw=) 19: 1DA0B1A4502C11F08AB1C8C2DAE4EC9C.roa (hash: O39HvXcGM8vCDm9DfWvAXNTa9fV5PX5xkVsjsSq21p8=) 20: F55A5B5C849A11F08B425BDADAE4EC9C.roa (hash: V5hnqpRztFHlvaZnik91sl9UMVtWcrRqeA+bsiZXMbo=) 21: 8771237E7EC211F099678AA8DAE4EC9C.roa (hash: zffaPiL1Y8lSkQQ6ScEJK71SQvlLK9x+FiM4WbmwqxA=) 22: E4D6EBE870A811F09D8BE6A2DAE4EC9C.roa (hash: KhPzOb5Q/r1I/qMg4YpHuENyqA7i6YjES8U96N77LE4=) 23: 0DD894EC849A11F09FE3ECD5DAE4EC9C.roa (hash: AniVLtWLvlDPHvPaJgWBDz6THQGdmRvkdFZ34Ig1BDI=) 24: 44B107BE0BBA11F0B7AF8852762E951A.roa (hash: 2lsgDetOxz2tEA/haKTe5N+JmsqBvMbXnhGs3La4Rys=) 25: 8EC0956E70A411F094929688DAE4EC9C.roa (hash: Dmc5XqbplUaGfABGKpPzYUPx32YybXd085DRK5wjFm4=) 26: 86E0F9FE849C11F0900825E5DAE4EC9C.roa (hash: ZxMl/rQ3QqnqUve7kjgNdKK4TjkEiN6csMpxs7s3FKc=) 27: 985B73F86B7011EFBCFBD082762E951A.roa (hash: rvpp6Kns5e/Pwe/rzVTNBx4KVxZUF1C0Dh+LLpfr9DM=) 28: 06EA9146625111F082ED08AFDAE4EC9C.roa (hash: DlQwSvTDJt//sym2C2UVKdfDULxPx2s6Ok+gJg27kxk=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 07 Sep 2025 00:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1942 (0x796) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139 Validity Not Before: Sep 5 02:10:54 2025 GMT Not After : Sep 7 02:10:54 2025 GMT Subject: CN=68ba46af-1e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:72:b5:c6:04:f4:fd:97:36:f7:06:8e:67:93: 63:53:6e:77:09:34:16:70:11:8a:e0:69:44:40:9b: de:2b:b6:f5:7c:fe:47:99:f7:16:11:5b:7e:0a:03: 40:10:78:3f:9f:eb:73:df:d9:ba:af:1d:90:47:6f: ef:ab:07:7f:a8:6b:5d:d1:c4:6e:0c:9d:4a:c8:36: d2:a7:5e:00:e2:3c:59:48:e5:b5:ff:e0:2b:90:2a: 0b:b7:ec:ad:28:4d:5c:f8:97:c9:b4:23:87:23:07: 19:83:26:4d:83:30:01:1a:65:1d:ca:04:48:e3:27: 1c:ac:37:75:f1:1c:37:58:38:57:84:98:3c:c0:c2: fa:19:83:87:d0:a2:da:bc:98:ef:aa:ab:a9:36:1c: 23:18:cf:66:3a:58:6e:c9:67:48:3a:14:5e:8f:f6: 23:2a:07:e6:63:38:71:46:9b:d3:d0:20:bd:3f:70: 4f:c1:af:b0:31:84:b0:48:88:52:7a:67:c7:23:03: e6:b7:42:3d:b5:2a:29:40:c2:49:ec:ec:cc:46:93: 4a:4d:8a:1e:27:53:b5:1f:ef:08:e2:2b:54:71:c1: 07:8b:bf:41:e4:7b:b4:f8:89:d2:c1:07:f4:29:a8: 5d:58:06:04:f8:60:f3:11:81:31:ec:d2:30:13:b0: 52:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F7:28:8F:CE:69:9C:A0:94:06:D7:E9:E6:A7:97:D7:C6:4C:BB:A6 X509v3 Authority Key Identifier: keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9b:20:52:93:d7:cf:0f:df:7b:ce:cf:e4:c9:f2:90:7f:a7: dd:f5:23:5e:15:13:40:02:33:10:e3:bb:59:ca:f3:dd:79:93: ac:68:4a:f2:a7:c9:cd:f9:45:db:d3:13:eb:e1:99:2d:8c:75: d1:9b:d1:3c:81:5f:5d:fa:8f:2f:4e:12:58:c4:78:8e:d0:ca: 67:c1:8c:fe:95:f6:5d:d8:5c:4a:68:84:a2:0d:4c:45:4e:cb: 6a:8b:ff:13:49:a1:84:36:30:91:8c:9b:ca:3b:ea:6e:a0:ca: 68:85:90:31:8c:c9:13:30:46:d9:bd:35:8a:6c:cf:03:7c:2e: 90:6c:86:14:96:8b:d7:ab:40:c1:22:f1:b5:74:95:29:7f:b2: 33:37:f5:01:72:93:fe:21:ea:34:f9:b6:f8:82:14:b9:eb:e2: f7:55:3f:a5:14:dc:70:4a:ab:61:56:e9:b7:e2:af:5c:34:1f: 95:ce:ba:e0:ba:65:8d:f6:04:11:26:ba:7e:30:75:0f:b0:b1: 5d:6d:32:80:84:e7:3c:cb:e3:cd:38:d1:76:e1:b7:c9:06:dc: 96:98:e4:43:72:db:14:fc:4f:b1:ba:56:56:72:2b:34:ea:13: dc:45:41:0d:e0:be:e9:83:91:65:5f:db:d9:f2:5c:cf:ae:be: b4:a0:af:fe -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICB5YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx QkE4MTJGQTEzOTAeFw0yNTA5MDUwMjEwNTRaFw0yNTA5MDcwMjEwNTRaMBgxFjAU BgNVBAMTDTY4YmE0NmFmLTFlMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDycrXGBPT9lzb3Bo5nk2NTbncJNBZwEYrgaURAm94rtvV8/keZ9xYRW34K A0AQeD+f63Pf2bqvHZBHb++rB3+oa13RxG4MnUrINtKnXgDiPFlI5bX/4CuQKgu3 7K0oTVz4l8m0I4cjBxmDJk2DMAEaZR3KBEjjJxysN3XxHDdYOFeEmDzAwvoZg4fQ otq8mO+qq6k2HCMYz2Y6WG7JZ0g6FF6P9iMqB+ZjOHFGm9PQIL0/cE/Br7AxhLBI iFJ6Z8cjA+a3Qj21KilAwkns7MxGk0pNih4nU7Uf7wjiK1RxwQeLv0Hke7T4idLB B/QpqF1YBgT4YPMRgTHs0jATsFIRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUIvco j85pnKCUBtfp5qeX18ZMu6YwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2N0RGQTQvMDhCOEQ4MjA5M0FDMTFFQkIxRDJBODMyRjhB RUEyMjgvbDhrT0pTRXRpSHo1NGQ1djNmVlJ1b0V2b1RrLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBumyBSk9fPD997zs/kyfKQf6fd9SNe FRNAAjMQ47tZyvPdeZOsaEryp8nN+UXb0xPr4ZktjHXRm9E8gV9d+o8vThJYxHiO 0MpnwYz+lfZd2FxKaISiDUxFTstqi/8TSaGENjCRjJvKO+puoMpohZAxjMkTMEbZ vTWKbM8DfC6QbIYUlovXq0DBIvG1dJUpf7IzN/UBcpP+Ieo0+bb4ghS56+L3VT+l FNxwSqthVum34q9cNB+VzrrgumWN9gQRJrp+MHUPsLFdbTKAhOc8y+PNONF24bfJ BtyWmORDctsU/E+xulZWcis06hPcRUEN4L7pg5FlX9vZ8lzPrr60oK/+ -----END CERTIFICATE-----Generated at Fri Sep 5 10:42:35 2025 by rpki-client