$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft File: S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft (raw, json) Hash identifier: bQxPH7gQzO94UCEeqUHEISHppN/Z+rGp04+t5Jw7owg= Subject key identifier: 40:CB:33:56:03:30:4C:F0:76:6C:AC:A3:78:E9:43:24:75:AC:2F:D0 Authority key identifier: 4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70 Certificate issuer: /CN=F36A7021AF/serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70 Certificate serial: 01F3 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft Manifest number: 01E8 Signing time: Thu 31 Jul 2025 04:38:46 +0000 Manifest this update: Thu 31 Jul 2025 04:38:45 +0000 Manifest next update: Sat 02 Aug 2025 04:38:45 +0000 Files and hashes: 1: S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl (hash: fnOwMHk6DVBaQTF0UBarRyWYWPWdEEVcM7vHC7FSSRA=) 2: 13E45E1C0E8911EF82A4F35A017001B1.roa (hash: eSu/uNHefvRDyXuPd6bFN5AOugU7elsPo3xlxIjj8Jg=) 3: 8A38C304166411EFB6DD9865017001B1.roa (hash: BNl8LzAAIi2V4u4Uq6J4OERouFI7xdVKsG2qa+DYXuM=) 4: 5386CFDE0B8A11EF94113C6D017001B1.roa (hash: +ksSk336SAPxQuepQDqlYfI3yCwLjxok4/1qF910PT0=) 5: 67A273EE166411EFBD7C3965017001B1.roa (hash: XYlnou7kQfD138NpOpxfEa0ALGHIsAR97sWZnC83Ikk=) 6: 2342ECF6166411EF86A28464017001B1.roa (hash: LAeP18nBFk8e55lig13p1FU7erjKKZ2bUOy7MssyCfI=) 7: 10F75FE0166511EF9BA89F6A017001B1.roa (hash: tQ6IcNtYg4Q1dSfQDi4FIUeQKLa90qMyIm8jTAnmXuE=) 8: C37E4A0E166311EFB9A5E45F017001B1.roa (hash: Qp36Juuigfj3IghvTSmzrtpde3+TFB8XRGmUObCG6Jw=) 9: 258EC7AC02E911EF84DA781F017001B1.roa (hash: MKLHz01B1hcRnrm1BW8ZdbgoDIWCXXjJPB+3zMRkn5k=) 10: 45A131960E8911EFB58ADB5E017001B1.roa (hash: h14yox0jQvTPprZRCXkBDOwPFxmyJDOyS+ltHOkYJCY=) 11: ED324F4E166311EF80A74E60017001B1.roa (hash: yLMrRx31o9f3857chkGq2HGPGPmxnmeZmw24iYDHkdE=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 02 Aug 2025 00:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36A7021AF, serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70 Validity Not Before: Jul 31 04:38:45 2025 GMT Not After : Aug 2 04:38:45 2025 GMT Subject: CN=688af356-a4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1a:83:65:ee:52:f7:b8:14:13:bb:60:84:67: ba:30:e2:30:89:48:cb:db:81:f0:b7:f6:a2:a8:34: 2a:80:ec:43:d1:d9:ac:71:d0:69:fa:bb:bd:6b:94: fd:4f:b3:fe:a4:72:26:6f:65:ef:d4:b6:e3:ac:e8: 8c:d0:1b:21:f9:e2:ef:b1:32:a0:71:c5:22:2e:d6: 8d:fc:eb:95:f8:bb:ef:c7:49:f7:ae:70:9c:c9:c2: 2c:5f:a2:ff:e4:8d:d4:74:a0:09:d4:b2:91:0c:83: e6:9a:c7:26:93:67:71:d3:61:1e:64:91:40:cd:48: 5b:34:00:d7:23:38:11:67:7b:a4:2a:ea:cb:58:af: 62:e8:aa:2c:bf:a4:0f:c5:d1:3f:c8:7c:79:be:d0: 7f:e5:43:97:93:79:22:88:0f:60:d9:9d:e2:7f:5c: 36:50:eb:28:8a:b2:63:16:79:78:fc:d1:b1:fb:c3: 75:ab:a8:3d:cf:bf:98:bc:e7:96:9d:5c:fb:63:d3: 0d:a5:b5:53:e8:1b:a8:cc:a3:ab:cc:f7:4d:6d:e0: 40:4a:2d:df:4f:16:3d:1c:e0:c1:0b:b2:cb:b7:b7: 8d:43:9f:33:7c:f1:d7:94:d4:2c:89:a4:da:d3:a9: f0:12:a4:ff:8b:cc:f1:85:75:4d:68:c9:1c:ec:ff: 35:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CB:33:56:03:30:4C:F0:76:6C:AC:A3:78:E9:43:24:75:AC:2F:D0 X509v3 Authority Key Identifier: keyid:4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:b5:9d:6f:2e:06:51:1d:f8:f6:e7:04:e3:f8:ec:40:0c:18: 84:a7:af:12:a2:61:1d:a1:82:7d:1d:0e:dd:00:23:c5:75:a7: a9:da:3d:d1:03:ad:2f:a9:02:05:23:07:ed:af:2b:85:8a:0e: 86:53:d7:24:9c:1e:62:a9:fa:e7:52:30:53:af:a2:c3:fd:76: f8:b0:d7:0a:fe:3a:e4:d2:d4:33:fc:db:d1:75:21:b4:6c:24: 13:71:2b:57:67:0f:23:ef:2e:9c:8d:a5:14:8a:f0:4a:07:45: 4b:e5:b1:28:fc:7e:e7:55:f3:96:c5:fb:29:58:5a:ed:c8:4e: 83:96:a7:ce:d5:f9:ff:f5:da:ef:85:8d:60:6b:2b:64:db:90: 33:d2:8e:a9:15:90:dd:b8:e3:83:28:04:b3:bd:9e:ad:8d:95: d2:e2:ef:bd:0d:cd:a9:a4:cb:01:9f:b6:70:d4:2a:b2:a9:8c: d0:72:8b:ca:09:2f:e7:6b:b4:1c:6c:89:62:c8:6f:6d:95:dd: 97:f5:2e:a4:b8:5b:50:4b:1c:4c:cf:8b:fd:34:4b:10:89:75: dd:a2:5e:6e:83:91:b6:4e:72:66:1e:8f:93:94:1e:b8:da:4d: ea:6b:32:97:eb:ad:8a:44:74:45:db:0e:7f:c4:c0:74:62:69: d5:ce:60:cb -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QTcwMjFBRjExMC8GA1UEBRMoNEI0ODY2MjAwNDA4OUY1QkI2ODE5NEFCMDRCODMw Q0Q0MzNBMkI3MDAeFw0yNTA3MzEwNDM4NDVaFw0yNTA4MDIwNDM4NDVaMBgxFjAU BgNVBAMTDTY4OGFmMzU2LWE0ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDQGoNl7lL3uBQTu2CEZ7ow4jCJSMvbgfC39qKoNCqA7EPR2axx0Gn6u71r lP1Ps/6kciZvZe/UtuOs6IzQGyH54u+xMqBxxSIu1o3865X4u+/HSfeucJzJwixf ov/kjdR0oAnUspEMg+aaxyaTZ3HTYR5kkUDNSFs0ANcjOBFne6Qq6stYr2Loqiy/ pA/F0T/IfHm+0H/lQ5eTeSKID2DZneJ/XDZQ6yiKsmMWeXj80bH7w3WrqD3Pv5i8 55adXPtj0w2ltVPoG6jMo6vM901t4EBKLd9PFj0c4MELssu3t41DnzN88deU1CyJ pNrTqfASpP+LzPGFdU1oyRzs/zV7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQMsz VgMwTPB2bKyjeOlDJHWsL9AwHwYDVR0jBBgwFoAUS0hmIAQIn1u2gZSrBLgwzUM6 K3AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkE3MDIxL0U1MDM5OTFDMDJDMzExRUZCRDEyNzdGNTAwNzAwMUIxL1MwaG1J QVFJbjF1MmdaU3JCTGd3elVNNkszQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1MwaG1JQVFJbjF1MmdaU3JCTGd3elVNNkszQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QTcwMjEvRTUwMzk5MUMwMkMzMTFFRkJEMTI3N0Y1MDA3 MDAxQjEvUzBobUlBUUluMXUyZ1pTckJMZ3d6VU02SzNBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJtZ1vLgZRHfj25wTj+OxADBiEp68S omEdoYJ9HQ7dACPFdaep2j3RA60vqQIFIwftryuFig6GU9cknB5iqfrnUjBTr6LD /Xb4sNcK/jrk0tQz/NvRdSG0bCQTcStXZw8j7y6cjaUUivBKB0VL5bEo/H7nVfOW xfspWFrtyE6DlqfO1fn/9drvhY1gaytk25Az0o6pFZDduOODKASzvZ6tjZXS4u+9 Dc2ppMsBn7Zw1CqyqYzQcovKCS/na7QcbIliyG9tld2X9S6kuFtQSxxMz4v9NEsQ iXXdol5ug5G2TnJmHo+TlB642k3qazKX662KRHRF2w5/xMB0YmnVzmDL -----END CERTIFICATE-----Generated at Thu Jul 31 11:16:53 2025 by rpki-client