$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft File: zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft (raw, json) Hash identifier: o3gu4OgzVgicZMvI2t1Kcz6qNroN/W7d6P/MTCuJ8Uc= Subject key identifier: D9:D2:BD:1B:7E:9E:F0:E2:F7:D8:E0:C2:D7:7C:3D:80:6C:D4:85:EC Authority key identifier: CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D Certificate issuer: /CN=F369BF27AR/serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D Certificate serial: 090D Authority info access: rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft Manifest number: 0901 Signing time: Tue 29 Jul 2025 01:34:24 +0000 Manifest this update: Tue 29 Jul 2025 01:34:24 +0000 Manifest next update: Thu 31 Jul 2025 01:34:24 +0000 Files and hashes: 1: zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl (hash: QA1h9+o8sWt0ZREmzPzvwJjsZQ5+CRP7POAG/M953/g=) 2: C28DA6C44D5F11F089D77C8ADAE4EC9C.roa (hash: dABQoz9AGXGyoNBAetMSbs1U62SRqLiX8c5R1HY93gg=) 3: 1AD0D08C4D5F11F08E482186DAE4EC9C.roa (hash: OhoSn83syBewwYcLzVXxyO/+vTXDKKmwuhAAzmLRplo=) 4: E2B1CB3E4D5E11F0AC9C0484DAE4EC9C.roa (hash: yv5AfJmE56S5ts/c2onzn6ricd3K2oEmGaCJUOJTiXA=) 5: 7F9AB1CC98F711E9BABB4B76F8AEA228.roa (hash: jzZ3XEm/0+bQmIh4jXGZex7PIgjtpornzaVmedGVKeA=) 6: 4601A8304D5F11F0AA717286DAE4EC9C.roa (hash: O60MwYsiZd+UlKceOJ85IOxK7Q1+As/RwsVdr1Ykpjc=) 7: 8D638E94EA6911EBA5AD1D78D8A014CE.roa (hash: TSjbcBjzqOEDoCJOFKA/gcs+86bsN6ECxtsUBjgtesg=) 8: 937EE7024D6011F09A38078FDAE4EC9C.roa (hash: pbBP0ntQdVgVm+KFXqo/FvwDRupvw0CtUQRgWotDjnY=) 9: 318EA42098F711E9A08C1176F8AEA228.roa (hash: w0LdOEkkXXKRsW1PLK4DZkJUwY2G0SIkANImRgbjTcI=) 10: 3A1D58C44D6011F093A9B58CDAE4EC9C.roa (hash: R1suNQZf1mKtdv/mgrGQzmzP42VGw/+PJeTA6yPQF0w=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 31 Jul 2025 00:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2317 (0x90d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F369BF27AR, serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D Validity Not Before: Jul 29 01:34:24 2025 GMT Not After : Jul 31 01:34:24 2025 GMT Subject: CN=68882520-7736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5b:01:b9:d9:a9:bc:bd:0a:fb:43:00:99:3f: e0:75:b6:ef:7a:9e:a3:1c:5c:3f:94:70:34:8f:88: d7:10:4e:35:6d:3c:5b:72:4e:cf:77:5a:39:e8:02: fa:8b:77:00:19:11:9f:49:88:86:b4:98:20:57:d4: 94:42:f2:5d:11:9e:f3:3d:34:ec:62:07:02:cc:18: f3:07:b5:69:d3:b4:f7:07:f9:24:ea:84:a4:55:20: b7:cb:e6:c9:ef:0d:ea:a0:cf:94:6b:71:d5:75:6c: eb:69:f2:42:36:ae:c6:a1:94:50:2c:92:ef:77:7e: 0e:9a:2f:90:f1:92:d8:e6:3e:a0:4a:13:08:2b:6a: 42:aa:d2:76:ef:c9:cb:ea:ef:21:f1:a9:49:d3:a5: b0:bb:41:c4:fc:e8:0f:84:51:8f:0c:0e:fa:87:be: c1:19:fc:fe:64:1e:5f:0a:06:d7:15:6e:ab:26:a1: 9c:d1:11:50:0b:2a:52:a5:a0:a3:a1:50:0c:60:8e: 5a:d6:18:00:a5:d8:26:87:a7:97:40:18:8e:23:38: 40:36:6b:5a:25:77:95:46:39:58:41:74:75:af:76: 55:fc:c2:93:b6:4a:2e:df:57:a7:67:1f:7e:03:00: 14:37:30:e5:70:e8:62:d6:d1:a4:5b:85:3a:4d:20: 1e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D2:BD:1B:7E:9E:F0:E2:F7:D8:E0:C2:D7:7C:3D:80:6C:D4:85:EC X509v3 Authority Key Identifier: keyid:CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:d9:60:25:96:2b:87:45:55:2e:3d:db:6b:63:35:ea:00:4a: 1b:e6:f8:3e:e5:93:88:93:f2:7f:7d:4d:8c:b6:d0:ab:47:81: 3d:f6:c9:e7:e7:97:16:6e:9d:19:3f:30:11:df:51:9c:66:cf: 30:23:92:06:f1:5e:52:04:ac:62:c7:e0:b6:f2:16:b5:72:4d: cb:b5:7f:28:31:de:8a:3d:0f:97:ee:d3:d0:40:bb:ed:11:2f: 28:fd:22:e8:75:e7:8c:61:c2:76:2d:44:de:7d:ca:18:6f:14: 75:ed:c7:54:e9:53:e4:75:5f:cc:2f:6a:d7:78:4e:5e:68:6d: 6f:e8:53:7a:b9:69:17:73:39:c4:7a:e9:7b:fb:a5:9a:5f:6c: 18:3f:67:ed:9b:9c:84:4b:36:f7:a0:ea:14:1a:40:f9:64:3b: c8:c8:7a:13:a3:6e:5f:da:cf:8f:c9:1b:f9:c5:55:7a:e9:d4: 39:f0:9e:0d:3a:b2:63:ac:14:ac:2b:d3:bc:a1:b7:d3:37:0a: f7:1e:49:54:2b:d2:3e:43:52:79:9c:c3:db:77:1e:9f:9b:71: 3d:f7:88:95:bb:45:d9:9e:1c:62:1a:9d:eb:fe:4f:7b:79:e3: 82:b9:2f:64:70:ff:6e:07:67:20:b4:af:3a:95:28:c2:00:86: 76:0e:92:81 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICCQ0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 OUJGMjdBUjExMC8GA1UEBRMoQ0QwN0Q3Qzg5RUNFNEMwRjlEMDRBMUIxNTNCQkM3 MTBERjAxNkIyRDAeFw0yNTA3MjkwMTM0MjRaFw0yNTA3MzEwMTM0MjRaMBgxFjAU BgNVBAMTDTY4ODgyNTIwLTc3MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDjWwG52am8vQr7QwCZP+B1tu96nqMcXD+UcDSPiNcQTjVtPFtyTs93Wjno AvqLdwAZEZ9JiIa0mCBX1JRC8l0RnvM9NOxiBwLMGPMHtWnTtPcH+STqhKRVILfL 5snvDeqgz5RrcdV1bOtp8kI2rsahlFAsku93fg6aL5DxktjmPqBKEwgrakKq0nbv ycvq7yHxqUnTpbC7QcT86A+EUY8MDvqHvsEZ/P5kHl8KBtcVbqsmoZzREVALKlKl oKOhUAxgjlrWGACl2CaHp5dAGI4jOEA2a1old5VGOVhBdHWvdlX8wpO2Si7fV6dn H34DABQ3MOVw6GLW0aRbhTpNIB6hAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU2dK9 G36e8OL32ODC13w9gGzUhewwHwYDVR0jBBgwFoAUzQfXyJ7OTA+dBKGxU7vHEN8B ay0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjlCRjI3LzU4MDBEQ0Y0OTFFQTExRTlCQTU2OTI3QUY4QUVBMjI4L3pRZlh5 SjdPVEEtZEJLR3hVN3ZIRU44QmF5MC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu L3pRZlh5SjdPVEEtZEJLR3hVN3ZIRU44QmF5MC5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl cG9zaXRvcnkvRjM2OUJGMjcvNTgwMERDRjQ5MUVBMTFFOUJBNTY5MjdBRjhBRUEy MjgvelFmWHlKN09UQS1kQktHeFU3dkhFTjhCYXkwLm1mdDA1BggrBgEFBQcwDYYp aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCp2WAlliuHRVUuPdtrYzXqAEob5vg+5ZOI k/J/fU2MttCrR4E99snn55cWbp0ZPzAR31GcZs8wI5IG8V5SBKxix+C28ha1ck3L tX8oMd6KPQ+X7tPQQLvtES8o/SLodeeMYcJ2LUTefcoYbxR17cdU6VPkdV/ML2rX eE5eaG1v6FN6uWkXcznEeul7+6WaX2wYP2ftm5yESzb3oOoUGkD5ZDvIyHoTo25f 2s+PyRv5xVV66dQ58J4NOrJjrBSsK9O8obfTNwr3HklUK9I+Q1J5nMPbdx6fm3E9 94iVu0XZnhxiGp3r/k97eeOCuS9kcP9uB2cgtK86lSjCAIZ2DpKB -----END CERTIFICATE-----Generated at Tue Jul 29 12:10:28 2025 by rpki-client