$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft File: SoPzGxsGBMptC3KkU9qj61h7TII.mft (raw, json) Hash identifier: CuUrxhTRG/t8k3zA/oTqIvmVkU68nyGBRnYivOH5tpM= Subject key identifier: 99:95:EF:99:55:C0:AB:D8:55:F4:F0:15:C4:C6:FF:0C:D2:30:C9:21 Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82 Certificate issuer: /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82 Certificate serial: 038D Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft Manifest number: 037F Signing time: Sun 27 Jul 2025 03:38:49 +0000 Manifest this update: Sun 27 Jul 2025 03:38:48 +0000 Manifest next update: Tue 29 Jul 2025 03:38:48 +0000 Files and hashes: 1: SoPzGxsGBMptC3KkU9qj61h7TII.crl (hash: QsmB70/PtEmpkdUJ38CCe4DTI/LbVRhURuMFT4goTUo=) 2: C644833AEE7111EE86F7F361775412E6.roa (hash: YgdlYAvq9L3YlpIV33voCNPfR5sCeCWFkjxpZfRsE/k=) 3: 7B89F0F65C1011F097764BA7DAE4EC9C.roa (hash: eGy/v5dJ9Sg7LBFixJArYusJNOZkmFriL3Cy5EJmVsc=) 4: 42CC1EC00B7611EEA5D28A444AD9E6FC.roa (hash: hsH3WbP2I/ts2EY2aQeTrcaXJgp89zEB64yilwHc5pg=) 5: 1E00E01A052911EE84BBD2454AD9E6FC.roa (hash: sJsPXhS2u3JarGDtOh1UZa0tPJmz8vwB7/YeLKri/dk=) 6: F8481206047B11EE91F2EF354AD9E6FC.roa (hash: jtUAjy0+9QV2iQ02jzkoPCkRiaIb/F60j3I68U9pgH4=) 7: F65930865B2911F0A6F411CCDAE4EC9C.roa (hash: zlBIS1j6PkXW4nIJqeYYZE1QxvGn2R6vJr3qJUI1Apc=) 8: C210ED2E064611F094E66494762E951A.roa (hash: Gw9d4UydYI1TKn6YtgmxyrXffZXD7vcLeB5cryG7IG4=) 9: F4E7AB82052811EE94115E454AD9E6FC.roa (hash: 0f6Udr5nVgdqIgPgxaXYb0TifWritIk3wQmsNXYsjss=) 10: 1587E6CCEE7111EEAAFBB25C775412E6.roa (hash: zasoVhr4ZDA3BPJ+ug5ooyH3/rY2lwS6n6p8BUEgx2w=) 11: 4F0B564AF51511EEB208C151775412E6.roa (hash: XNyDHYdBwPvc7NbnPS7pTjwqkoohEdJw312l57VSDB8=) 12: 4A7830A0D18B11EFAB9E6B88762E951A.roa (hash: xV745XWxYsFhNII926E/fN4gSuSPSdyN3viLNfdZy9M=) 13: 31CFB30C052C11EEAC0EDC4E4AD9E6FC.roa (hash: 707c2EgzG32Mlw18CbzTHauUb9G8+7v2J+8ka2UNIbA=) 14: 506B37B0FD0A11EEA3B5DB34017001B1.roa (hash: 12EkqcvUqaX3EcpZliJ64g6Wrfs7WAZ3LR6j5D262RI=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 29 Jul 2025 00:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 909 (0x38d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82 Validity Not Before: Jul 27 03:38:48 2025 GMT Not After : Jul 29 03:38:48 2025 GMT Subject: CN=68859f49-b764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:2f:19:2a:07:f8:5a:4e:60:35:21:37:72: e7:db:2a:d5:11:d0:95:4a:d9:b1:6d:f1:66:53:1f: af:a9:5e:06:38:42:2b:13:79:ff:d8:de:f5:1d:d6: 11:23:0d:73:fc:87:9e:56:4c:ec:b0:bd:1b:fe:11: de:5e:03:e1:5d:27:08:33:b1:23:3b:c6:ce:14:4a: 73:39:8a:cb:34:31:56:41:2e:c0:37:69:9c:13:23: 2d:e9:8e:a7:2f:08:62:82:95:75:49:1a:04:31:41: 03:36:63:d6:6e:76:77:04:cc:4b:0c:fd:3d:a1:e9: 38:a4:50:7b:7d:37:c0:c1:3c:a4:a3:21:b8:5f:60: 8e:ac:d5:6d:4d:79:54:8e:90:b7:d5:29:11:d0:59: 43:73:38:cf:87:19:43:dd:31:5d:ef:50:4f:88:47: cd:c2:a1:b7:c0:5a:91:97:96:49:52:d1:1a:63:fb: a6:d4:cf:4d:21:0f:e1:2f:3c:41:64:d9:12:d1:92: 71:f0:2b:bb:28:12:df:d2:0d:8e:bd:32:3e:25:88: de:19:25:bc:dd:32:ea:92:60:23:53:11:52:d0:83: fa:82:4e:3a:20:40:f0:93:21:e8:5c:f3:41:f2:a8: 0e:1d:57:0e:bc:75:02:8c:04:95:0b:5d:e9:70:28: 1f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:95:EF:99:55:C0:AB:D8:55:F4:F0:15:C4:C6:FF:0C:D2:30:C9:21 X509v3 Authority Key Identifier: keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:6c:0f:e3:fa:83:f4:97:23:b1:6c:36:a8:87:02:2b:d0:8d: 75:c2:36:91:21:f8:0a:4a:05:b9:2e:72:01:21:9c:67:39:dc: 83:a1:1d:14:b6:28:4d:4c:b5:43:42:48:56:70:c9:6e:1e:76: e3:32:f8:35:a2:bf:06:b5:b2:34:86:01:fd:21:6b:5e:d2:57: 9b:09:42:53:7a:30:3b:66:19:a3:13:8c:4e:b9:3b:4a:bc:12: de:a2:9b:a4:fc:d1:5b:1e:5e:b1:cb:fd:01:3b:f4:16:f6:c0: e3:5c:12:f7:f7:84:98:28:b1:ac:1d:94:d9:b4:7b:75:44:88: 91:cb:9d:5b:e7:5c:73:3f:06:0b:cf:34:b0:fc:ec:ba:50:63: 68:77:21:1c:d9:74:98:3f:33:64:42:21:55:3f:cc:64:9b:29: 1e:7d:c3:fc:7b:f9:60:1b:83:e6:c8:fc:d1:09:6a:14:7c:17: 05:04:f4:5c:a4:fd:ec:8e:34:04:3d:56:dd:5b:5f:af:3c:c1: c0:ea:72:20:da:58:34:dc:6a:23:0b:06:cc:38:b6:3a:ff:52: ec:38:bb:58:45:d9:c4:de:a3:45:7d:5a:33:04:c5:f3:d5:64: a6:30:e8:7d:23:f1:8c:44:20:4e:a3:cb:0d:c8:b5:a2:51:93: 63:89:7f:90 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA40wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODFFRDBBRjExMC8GA1UEBRMoNEE4M0YzMUIxQjA2MDRDQTZEMEI3MkE0NTNEQUEz RUI1ODdCNEM4MjAeFw0yNTA3MjcwMzM4NDhaFw0yNTA3MjkwMzM4NDhaMBgxFjAU BgNVBAMTDTY4ODU5ZjQ5LWI3NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC0HC8ZKgf4Wk5gNSE3cufbKtUR0JVK2bFt8WZTH6+pXgY4QisTef/Y3vUd 1hEjDXP8h55WTOywvRv+Ed5eA+FdJwgzsSM7xs4USnM5iss0MVZBLsA3aZwTIy3p jqcvCGKClXVJGgQxQQM2Y9ZudncEzEsM/T2h6TikUHt9N8DBPKSjIbhfYI6s1W1N eVSOkLfVKRHQWUNzOM+HGUPdMV3vUE+IR83CobfAWpGXlklS0Rpj+6bUz00hD+Ev PEFk2RLRknHwK7soEt/SDY69Mj4liN4ZJbzdMuqSYCNTEVLQg/qCTjogQPCTIehc 80HyqA4dVw68dQKMBJULXelwKB9jAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUmZXv mVXAq9hV9PAVxMb/DNIwySEwHwYDVR0jBBgwFoAUSoPzGxsGBMptC3KkU9qj61h7 TIIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjgxRUQwLzUyNTFDMDc4Q0UyNDExRURBMDkyRDBBQ0YxMjIyNDY4L1NvUHpH eHNHQk1wdEMzS2tVOXFqNjFoN1RJSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1NvUHpHeHNHQk1wdEMzS2tVOXFqNjFoN1RJSS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2ODFFRDAvNTI1MUMwNzhDRTI0MTFFREEwOTJEMEFDRjEy MjI0NjgvU29Qekd4c0dCTXB0QzNLa1U5cWo2MWg3VElJLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDAbA/j+oP0lyOxbDaohwIr0I11wjaR IfgKSgW5LnIBIZxnOdyDoR0UtihNTLVDQkhWcMluHnbjMvg1or8GtbI0hgH9IWte 0lebCUJTejA7ZhmjE4xOuTtKvBLeopuk/NFbHl6xy/0BO/QW9sDjXBL394SYKLGs HZTZtHt1RIiRy51b51xzPwYLzzSw/Oy6UGNodyEc2XSYPzNkQiFVP8xkmykefcP8 e/lgG4PmyPzRCWoUfBcFBPRcpP3sjjQEPVbdW1+vPMHA6nIg2lg03GojCwbMOLY6 /1LsOLtYRdnE3qNFfVozBMXz1WSmMOh9I/GMRCBOo8sNyLWiUZNjiX+Q -----END CERTIFICATE-----Generated at Sun Jul 27 08:00:45 2025 by rpki-client