$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft File: jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft (raw, json) Hash identifier: aOQdOIbvA8fVP7wg9nbAS6/ROb2fYWPMXBWEzITrdqM= Subject key identifier: 6F:98:EC:3A:C7:CB:C1:A3:36:FD:B8:BE:DF:A3:F0:51:18:CF:0E:55 Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64 Certificate issuer: /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664 Certificate serial: 04E8 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft Manifest number: 04CA Signing time: Sun 27 Jul 2025 02:59:57 +0000 Manifest this update: Sun 27 Jul 2025 02:59:56 +0000 Manifest next update: Tue 29 Jul 2025 02:59:56 +0000 Files and hashes: 1: jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl (hash: PobRhsu19nAV/bFHnkMUhTEumb/PVB/1ISKxnil/nOk=) 2: 7510A490FBDA11EFA602538E762E951A.roa (hash: K8eoOxbyDzKOVr27RbOhGjO0ujSDpgusioRxfBEGdeg=) 3: 6C4F7098FFA911EF80A256B8762E951A.roa (hash: nLVSz/e6y8EyahDhz46G+ddHGy6xFQEmZ+lSlLJOj1k=) 4: 14D0DD48FCAC11EF8F606291762E951A.roa (hash: We9A0b1twQQd49MjYQiHevJV7RGbH0zGgiiv0BmjU4w=) 5: 34F044FE336D11F0A6FE177FDAE4EC9C.roa (hash: yhXToE/ivhLm4HgJKr6OrdpT7iNJJtMwXlhtqU/6qu4=) 6: 332A33CAFFA911EF84F40CB6762E951A.roa (hash: nAe7SVEbrFBsJsSB2QjjEXejvC3k+OkB22lneTxOJs4=) 7: E9B17964E76511ECB6B242F6F1222468.roa (hash: QX79+PCfVXxj+OGB6vFI/wIK/0K3qU3aoir40/gZdAI=) 8: 565A309AAA4411EE82EC719A775412E6.roa (hash: w+NXlL7WYD4hkFC1Zg/6oqPBSnT10uVKTO9QtVy5wAw=) 9: BEB0D28EFCAA11EF97EC4A88762E951A.roa (hash: jZflyQkEOdvyH7cORlNM6RzxEc6T6GfFgEfB6W779Ik=) 10: E67C4F66FD2A11EFAFF97E57762E951A.roa (hash: 0KEac1L9NXZHhaATxDUbvggLHQuqEfxaMAc1BKGdXv0=) 11: 83013456FCAD11EF87CD979A762E951A.roa (hash: mbSp9RiZ25UX/mkuzNaTIeKIdEAGi8iGWvP9NDqM15M=) 12: FBD8F91C315911ED857E3ED8F1222468.roa (hash: F3tjPa1GVDjVxl63DkFUkmny30YoZBaG3q0D655v1oc=) 13: 6C20E300FCAB11EFA301CF8C762E951A.roa (hash: OvsUXNSmfjEutAwyrB9JnPffvmOpMIjkA04wcKDLKRY=) 14: F0DCA42CFCAA11EF9CB0AF88762E951A.roa (hash: BzJmdF2Js2FoOGSwDan1wfPrzdWX29V5MPNuA8XkzBM=) 15: 731820EAFD6B11EFA5FAAE9C762E951A.roa (hash: WBg3iidspfXKbYNsCa9+4QR22QeQEUUkOPouJHSY0gU=) 16: 84D63AD4FCAC11EFBDC66892762E951A.roa (hash: eiarFVPH9xcpuLJ9GJbS6IkBNStXLIhNVgC/u2KChdQ=) 17: D4C1004CFCAC11EF87CD1196762E951A.roa (hash: fLCcmeTVgTEV53OJny1Gldrpxh7k8xccoM8fDP287hI=) 18: 5673440CFCAC11EF9614E491762E951A.roa (hash: 6r9fkhk67fd1QL6JR1kRn7YKpBT/BIiBUWKwgxbcGDI=) 19: A7A6264AFCAD11EF8068089B762E951A.roa (hash: rW7LzojMuUG5spBMNnlWIM3kxFSqz8o4h8U+vR8ivoI=) 20: 03A4356EFCAD11EF82317896762E951A.roa (hash: qhNGvd3D7vHMLKqczxc5ocVwafHWZgDyr7UqLit5iMA=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 29 Jul 2025 00:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1256 (0x4e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36BC80AAF, serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664 Validity Not Before: Jul 27 02:59:56 2025 GMT Not After : Jul 29 02:59:56 2025 GMT Subject: CN=6885962d-ce59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:52:9c:7c:73:ba:1a:17:9f:be:bc:d0:40:fd: 6e:03:c6:bc:61:b3:ba:f1:2f:0a:bb:6d:a7:bc:46: 4d:bc:e7:34:10:a1:b0:ef:5e:32:01:23:03:34:22: 08:23:5a:2b:5f:22:bd:97:0b:0c:4a:35:2d:17:2b: e2:a9:e2:24:35:d7:04:a3:ce:f7:07:a0:4e:e0:95: d4:79:47:a0:03:f4:12:6b:26:eb:cc:2e:a8:0a:e4: 39:03:1b:73:18:aa:a3:fd:b5:b5:78:b6:22:f9:01: 8d:89:a6:2d:a4:cf:06:f6:df:94:5e:77:a2:fd:85: 7b:52:78:04:34:f1:79:db:b5:0a:f6:df:f3:c8:ea: ee:01:6e:f6:cd:9e:87:52:5a:84:13:5b:fb:53:64: f5:3f:ff:2f:94:c5:c2:a8:a4:a1:e1:ed:84:e2:a1: f4:8d:07:a0:79:b3:d5:16:06:90:71:0e:93:78:1c: 12:14:d2:c1:2e:69:e8:43:f4:98:9b:a7:11:c9:1c: 39:99:a9:86:72:75:7c:9a:35:86:43:d4:52:f4:d6: cc:f4:47:98:06:3b:42:61:94:cd:d4:bd:5d:8c:24: 20:12:c6:c0:5a:dd:e7:1a:ec:e5:00:06:32:4a:08: e0:c7:4a:e2:5c:96:77:97:c1:df:96:f5:c8:29:55: 41:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:98:EC:3A:C7:CB:C1:A3:36:FD:B8:BE:DF:A3:F0:51:18:CF:0E:55 X509v3 Authority Key Identifier: keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:f0:05:05:b1:3e:07:b9:fd:0b:6c:4e:5c:9d:bd:ab:3a:f1: 09:37:c0:93:54:cf:9a:81:ab:03:e1:02:21:8d:e8:77:80:bd: f8:49:af:5a:a2:87:ef:b5:af:9f:ed:62:aa:f3:c5:f8:83:2f: ac:e7:3a:a9:d6:f7:39:75:eb:9a:43:d5:14:c0:cb:d3:ac:bb: f5:05:aa:99:8e:c7:b7:e4:41:2e:ea:77:69:7f:4a:91:fe:ee: d2:9b:be:a9:18:c1:69:e2:03:90:92:3c:02:b1:dc:e7:99:62: 3a:ea:73:03:26:63:5d:be:27:08:3c:ed:22:db:87:c4:e6:a5: 99:78:72:e0:92:77:80:29:ec:d4:32:36:3e:15:72:75:23:4c: f4:08:fb:25:9b:1e:4a:f3:5d:e2:84:f6:5a:42:5c:f1:1c:52: cf:00:03:1d:7a:8b:73:87:59:d9:8d:5f:4f:35:ad:ba:09:cc: 04:0c:1f:9c:bb:e3:60:cd:6e:67:dc:e7:c1:7e:72:a6:1f:19: 9e:d4:9a:a4:a4:ac:f4:ee:57:a6:e6:8e:18:66:4d:a4:61:51: 5b:74:e2:18:60:74:e6:a8:3d:40:cf:db:14:16:d7:85:0d:f6: 4a:96:11:cd:2c:0f:5f:6f:10:80:5d:09:0a:42:76:ce:c7:85: 16:91:2e:8a -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QkM4MEFBRjExMC8GA1UEBRMoOEM4RjhDRTJBRDU1QjkzNjZCRUM2RURGNDkyQ0Q5 QzE0OThFMDY2NDAeFw0yNTA3MjcwMjU5NTZaFw0yNTA3MjkwMjU5NTZaMBgxFjAU BgNVBAMTDTY4ODU5NjJkLWNlNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC9Upx8c7oaF5++vNBA/W4Dxrxhs7rxLwq7bae8Rk285zQQobDvXjIBIwM0 IggjWitfIr2XCwxKNS0XK+Kp4iQ11wSjzvcHoE7gldR5R6AD9BJrJuvMLqgK5DkD G3MYqqP9tbV4tiL5AY2Jpi2kzwb235Red6L9hXtSeAQ08XnbtQr23/PI6u4BbvbN nodSWoQTW/tTZPU//y+UxcKopKHh7YTiofSNB6B5s9UWBpBxDpN4HBIU0sEuaehD 9JibpxHJHDmZqYZydXyaNYZD1FL01sz0R5gGO0JhlM3UvV2MJCASxsBa3eca7OUA BjJKCODHSuJclneXwd+W9cgpVUE/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUb5js OsfLwaM2/bi+36PwURjPDlUwHwYDVR0jBBgwFoAUjI+M4q1VuTZr7G7fSSzZwUmO BmQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkJDODBBLzQ3MkVGNUIyRTc1QzExRUM5RDdGOTBEOEYxMjIyNDY4L2pJLU00 cTFWdVRacjdHN2ZTU3pad1VtT0JtUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2pJLU00cTFWdVRacjdHN2ZTU3pad1VtT0JtUS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QkM4MEEvNDcyRUY1QjJFNzVDMTFFQzlEN0Y5MEQ4RjEy MjI0NjgvakktTTRxMVZ1VFpyN0c3ZlNTelp3VW1PQm1RLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBD8AUFsT4Huf0LbE5cnb2rOvEJN8CT VM+agasD4QIhjeh3gL34Sa9aoofvta+f7WKq88X4gy+s5zqp1vc5deuaQ9UUwMvT rLv1BaqZjse35EEu6ndpf0qR/u7Sm76pGMFp4gOQkjwCsdznmWI66nMDJmNdvicI PO0i24fE5qWZeHLgkneAKezUMjY+FXJ1I0z0CPslmx5K813ihPZaQlzxHFLPAAMd eotzh1nZjV9PNa26CcwEDB+cu+NgzW5n3OfBfnKmHxme1JqkpKz07lem5o4YZk2k YVFbdOIYYHTmqD1Az9sUFteFDfZKlhHNLA9fbxCAXQkKQnbOx4UWkS6K -----END CERTIFICATE-----Generated at Sun Jul 27 07:59:49 2025 by rpki-client