$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft File: gvHGYRo6FGfbPXikpf7VCgilexM.mft (raw, json) Hash identifier: iu6D4S/RjCUWX8kujMOheTxhwWkioDvQ6YYmsY0wpC0= Subject key identifier: 8A:88:02:5F:EA:5F:52:5C:99:80:43:E7:8A:AF:7D:3A:64:CC:2B:7D Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13 Certificate issuer: /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13 Certificate serial: 0647 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft Manifest number: 0623 Signing time: Sun 27 Jul 2025 02:29:27 +0000 Manifest this update: Sun 27 Jul 2025 02:29:26 +0000 Manifest next update: Tue 29 Jul 2025 02:29:26 +0000 Files and hashes: 1: gvHGYRo6FGfbPXikpf7VCgilexM.crl (hash: c/c4HA644e9aT/U9YKdGqJ8iV0ap4HjnvYZF12ZEd5w=) 2: 711BB0AC609611F0B59372F1DAE4EC9C.roa (hash: Wa2xWuIQ8AtZwNFgdslwoJn1vnFVZInDmWmorn2qG0A=) 3: 8C266FAEC0BC11ECB6B937B8F1222468.roa (hash: LWvmdfRyuuShkSq5nvy5VVYhaFiedLSRZGh/sW4VoMQ=) 4: C02A73A2567E11ECA2238761D8A014CE.roa (hash: cFnUhnC13xlP5TD/7yV6xNwGQ5BruaAC4MIqLANVH3s=) 5: 9224A498414611ECB18B9C4AD8A014CE.roa (hash: XPzMQpRyXNj7tfbthuedXxw7eoOCCt4TWOt0ECkjiSw=) 6: FCFB2C46429311EF932F40BD762E951A.roa (hash: aj7dKtZkdlsVdxJmDsYKu4bL2W4gvGpRJEhdeSSyuFM=) 7: DD2ED276554811ED808E48E0F1222468.roa (hash: o9F5NASkXJeGRpOxZTi10DlR3PhpAb42z8vnQSf1W6Y=) 8: 56D48534366511ECAAF07024D8A014CE.roa (hash: 9qlP2hqRYd4Iy/H8X2UWaaYT/2UVtHIcp+5pW7Qt6Lk=) 9: 5634B5344B2D11EEB602566E4AD9E6FC.roa (hash: RXMYhudjIg+5B4S6A7PfziGVGL2i90FJjq9kDBWz4BY=) 10: 971C03BE6E9011EEBC47C1344AD9E6FC.roa (hash: FEtfb6h/Qjj5+1EDaqJAUTaRNW+izq+4MGEPVm7WQu4=) 11: 664C2930DBAA11EEBDCFF69B775412E6.roa (hash: jXvx3Rxn9FpNmCMQtH/GLTAUSkTFxeG70DHFMH0gCrs=) 12: C0F8837027AE11EEB3D5C11B4AD9E6FC.roa (hash: U9lrbioleJrfDazSStxWONg+gePpOFN84WZgOOuwefs=) 13: 4A88B5706B5211EDA0EA3F88F1222468.roa (hash: FO1Dj1s2/gzgT9jLou3n+Fly82D5SCTFYMrpFqZDnjk=) 14: B539B9C439CE11EDA2E2E4CCF1222468.roa (hash: L8tv2tXp84t94j7so0pE6pjeZqF4W79+avnFF/AtOjc=) 15: 09FAFAEA4FE911EFAC30AC4F762E951A.roa (hash: xrcP6Mtrc5qzAh2bF+djzR18bQ7En6DPKHoIPS7kqyo=) 16: 26AF521EA44F11ECAA08306F5A40D577.roa (hash: EcPn6/6HlIpqU2DVcgtdl0S9cxELvsIzT/v9a33Hhbc=) 17: AC4B6082210C11ECAD741215D8A014CE.roa (hash: AtxMUNLLrkxyey3dAGtkIWE+tCR3TEwc6YhmNlJxQio=) 18: 23D6AEEE13D911EDB46DE9BDF1222468.roa (hash: l28mywAfwN/N3mAJ5uusY3xTHQqgOweo5f2TzG8SlCU=) 19: 1530CE00EBE911ECAA0878D2F1222468.roa (hash: +MPXKqkSfw55uXv63KcDQA0uk/2t7djdRht6zW2wMbY=) 20: 094210AEC41411EE88C9EDA3775412E6.roa (hash: d6MjgYyVOT5Zjb/xnHtqT0+LbviGAM5BCPUU3e5A5oc=) 21: A398E3A0F13D11EBB63B911FD8A014CE.roa (hash: v/uCWtn5mJZb+o9+Q5aNz15BP+IXm6kUIIRfortJmRE=) 22: 38270294F36311EDBEFE48354AD9E6FC.roa (hash: JCpUwcLlyeyID1rok4mjUMaVBm5RDKXVOymn9hFwm98=) 23: 4BEC690082F511EEBBB42B674AD9E6FC.roa (hash: ASnfqkuhQSFv0giROiw8EEeT1sMeoGjHEd6cWLcq/WE=) 24: A4E1241E5FD211EF867BDA77762E951A.roa (hash: zKqkWjXQKLviduKuQs8CcF6kO9y5LGaxWQboRjofXP4=) 25: 8895C070E02811EC98F4E491F1222468.roa (hash: hD4lS4pjWF7aAeKADbA1StyEyHLEar0949VpnchH3NY=) 26: B2ABC5C08DA911EC804C33E45A40D577.roa (hash: IDD186STTmdWGeqHCysVf0QPkT7GBsIIrvPyxHmrdtc=) 27: 65989AD8BC3311ED9E2B88B5F1222468.roa (hash: xeuVwfGkXyt1z3GydC6wSInWF5cPlZls2ZzQPi+g8P0=) 28: 10E66CAA858011EFA65B285B762E951A.roa (hash: lCBqjCpnLebiZhdULUm/2pXJNsFL2JTGwIc/hckdIcU=) 29: 9E5D6708928111ED9F33B1E9F1222468.roa (hash: IFudCUkdHq1Zpz3PyDrq/xUDpQ0MHKE8CA1etAVXR0g=) 30: 4577EBD2124811ECB3765C5ED8A014CE.roa (hash: C6keONk5pX9vxi2GbZolDI5QMW6KdyBmAMv7Kf4uGPQ=) 31: 3D6F6E96F37711EBAC8D9D1AD8A014CE.roa (hash: 9VXniEQa7EvwyuNK+E+0ZuAUlWwrOJps+Bu2VlcENpI=) 32: 6AF017587A0811EDBFC04983F1222468.roa (hash: 2CrRYRu/rPDODQF+1u1w+NJEjDucfctIyM+OcrCAuXQ=) 33: E8FED1743FC811F08A18A692DAE4EC9C.roa (hash: hnmo7N4/a67YEauOpu4H6ZsRDwn3yhjbg25d6FFf+tw=) 34: D98A56900ACE11EEA9A723454AD9E6FC.roa (hash: EKbiex9REKFqFg3KeIAaHxBhBnGQAgLlrP3B5Rpt+ew=) 35: 11AC7B6A124811ECA010225ED8A014CE.roa (hash: NuKKPHhieBdz0VtTkdtt2pca0XP6l2AgJ2AAzjs2NuY=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 29 Jul 2025 00:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1607 (0x647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13 Validity Not Before: Jul 27 02:29:26 2025 GMT Not After : Jul 29 02:29:26 2025 GMT Subject: CN=68858f07-699e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:48:4d:5f:55:a9:c8:e7:2c:31:c3:47:0a:bb: 6c:a0:4e:ba:0e:b5:c3:22:22:f9:33:36:e8:75:8c: 02:cc:0d:73:92:40:45:2d:dc:57:24:ed:2d:c8:67: 56:a7:0b:c3:44:66:32:2f:62:c3:c6:ff:ab:cd:a1: 33:3f:e7:ea:a3:09:5a:df:1c:d6:28:7e:a9:b0:60: 35:57:34:1c:45:1c:20:3d:91:a7:e9:6d:38:18:4c: 17:9b:fc:b5:24:30:5a:cc:6f:99:fa:fe:59:1c:3c: c2:18:64:6c:11:8c:50:c5:6a:5e:0e:e0:90:60:80: 35:0b:98:ac:65:6e:4e:c8:12:e0:7f:8d:0d:52:a2: e6:ae:02:13:ad:af:8a:68:77:ef:ca:81:a7:f1:34: b1:24:2c:84:13:be:54:68:82:73:88:c0:23:9e:c0: 2d:bd:19:8e:e0:3d:8e:ed:6e:be:fa:e6:5b:e0:61: 54:56:bc:16:fd:af:01:bf:4e:99:50:84:9d:62:7f: 9f:3b:ed:8b:69:4a:f8:c9:dd:00:d8:ff:31:17:d3: 5c:11:ca:86:8e:71:46:8d:45:59:b9:18:ed:13:85: b4:b8:7c:b0:ee:6c:b3:6c:27:aa:88:66:5b:35:f5: 72:83:45:4c:92:60:ab:1b:41:69:53:f9:c8:79:b0: 08:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:88:02:5F:EA:5F:52:5C:99:80:43:E7:8A:AF:7D:3A:64:CC:2B:7D X509v3 Authority Key Identifier: keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:39:fc:18:29:53:d9:77:a0:63:3d:79:cb:07:e8:f8:b8:9c: ab:89:52:ce:ec:c4:5b:02:8d:b8:84:e9:16:20:de:b1:c5:bd: 9c:d1:ba:83:2f:f7:c1:93:ec:09:d2:a1:cd:27:28:be:46:15: 9b:d2:05:e1:5c:2b:a2:70:d8:e6:fe:1b:e6:e9:ad:58:b7:81: 1b:3a:9a:6d:48:94:18:0f:6a:33:ea:03:df:7f:e1:cb:10:a5: 7b:4e:fb:d7:12:cd:eb:1a:90:44:58:e3:d7:2d:72:10:55:9f: e8:81:7d:f9:54:85:1c:d8:e7:71:b6:3f:1d:a5:12:45:28:d2: a8:41:17:22:c2:27:63:7b:69:1b:c2:f6:d9:0b:01:f9:77:a7: e2:b1:97:5e:6c:ab:13:e4:ea:44:d1:7f:58:3b:e8:77:7e:a1: cb:47:6f:10:d2:76:8f:ef:f0:f9:28:dd:35:a3:29:b0:4b:51: 6b:75:98:77:49:fd:65:55:83:6f:ad:0e:27:7d:93:6d:42:a0: 0a:90:55:27:86:fc:f4:08:55:fd:e8:c8:8d:57:2c:41:fd:8c: f2:a2:a7:f6:a4:b1:89:eb:71:c4:67:9d:a0:01:29:56:e8:1d: d0:e2:a6:55:51:bd:a1:1e:1d:d9:04:b2:6e:25:05:e6:bc:46: 1f:db:1d:61 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QTFDRUZBRjExMC8GA1UEBRMoODJGMUM2NjExQTNBMTQ2N0RCM0Q3OEE0QTVGRUQ1 MEEwOEE1N0IxMzAeFw0yNTA3MjcwMjI5MjZaFw0yNTA3MjkwMjI5MjZaMBgxFjAU BgNVBAMTDTY4ODU4ZjA3LTY5OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC8SE1fVanI5ywxw0cKu2ygTroOtcMiIvkzNuh1jALMDXOSQEUt3Fck7S3I Z1anC8NEZjIvYsPG/6vNoTM/5+qjCVrfHNYofqmwYDVXNBxFHCA9kafpbTgYTBeb /LUkMFrMb5n6/lkcPMIYZGwRjFDFal4O4JBggDULmKxlbk7IEuB/jQ1SouauAhOt r4pod+/KgafxNLEkLIQTvlRognOIwCOewC29GY7gPY7tbr765lvgYVRWvBb9rwG/ TplQhJ1if5877YtpSvjJ3QDY/zEX01wRyoaOcUaNRVm5GO0ThbS4fLDubLNsJ6qI Zls19XKDRUySYKsbQWlT+ch5sAiRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiogC X+pfUlyZgEPniq99OmTMK30wHwYDVR0jBBgwFoAUgvHGYRo6FGfbPXikpf7VCgil exMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4QTAxNENFL2d2SEdZ Um82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2d2SEdZUm82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QTFDRUYvN0YzODhERTRGMTM4MTFFQjkxN0ZENzE3RDhB MDE0Q0UvZ3ZIR1lSbzZGR2ZiUFhpa3BmN1ZDZ2lsZXhNLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWOfwYKVPZd6BjPXnLB+j4uJyriVLO 7MRbAo24hOkWIN6xxb2c0bqDL/fBk+wJ0qHNJyi+RhWb0gXhXCuicNjm/hvm6a1Y t4EbOpptSJQYD2oz6gPff+HLEKV7TvvXEs3rGpBEWOPXLXIQVZ/ogX35VIUc2Odx tj8dpRJFKNKoQRciwidje2kbwvbZCwH5d6fisZdebKsT5OpE0X9YO+h3fqHLR28Q 0naP7/D5KN01oymwS1FrdZh3Sf1lVYNvrQ4nfZNtQqAKkFUnhvz0CFX96MiNVyxB /Yzyoqf2pLGJ63HEZ52gASlW6B3Q4qZVUb2hHh3ZBLJuJQXmvEYf2x1h -----END CERTIFICATE-----Generated at Sun Jul 27 07:49:31 2025 by rpki-client