$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft File: pfCiu4t57dbTfAd63-oIJRTAQg8.mft (raw, json) Hash identifier: a6VozRHI712l0D2V6nlfVxdnR5QEsCPPoqVt9ZhGHoI= Subject key identifier: 74:61:5B:8D:57:0A:0F:51:85:15:33:06:6B:50:2F:42:C5:61:C4:A9 Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F Certificate issuer: /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Certificate serial: 0242 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft Manifest number: 0232 Signing time: Wed 17 Sep 2025 04:09:56 +0000 Manifest this update: Wed 17 Sep 2025 04:09:55 +0000 Manifest next update: Fri 19 Sep 2025 04:09:55 +0000 Files and hashes: 1: pfCiu4t57dbTfAd63-oIJRTAQg8.crl (hash: uOxzMx/p/fTLvtokvOPpdkLNF/zMsusB/ZMU4cOK7lg=) 2: 245B6D34FBED11EE8128962C017001B1.roa (hash: TrN9lcQpNeQiZwKFjsOsULheFfvRBy2GwIMFcOXP5rY=) 3: 60986EC6F10E11EEA398F1C8775412E6.roa (hash: UeXyeJMDi2GVx9uEPU+PiWuthmCddMz69n4V0SdxUZY=) 4: 4A3BF0B6E9F711EFB363B759762E951A.roa (hash: qnWjHMa6krZFafky4BYIbSFj8GVyr5kF/yN3x6ht2sE=) 5: 8C5EBF98B18D11EF93764599762E951A.roa (hash: LMCVfxRKPtEUcD+l4fHRZWVAaU9InzZT+jXi3ynNqyQ=) 6: 624DB26AFC1411EEA32C1066017001B1.roa (hash: SAKc0hgZ+mEboWzvP3K7DMfU8rpiR8UT+kWecca89NE=) 7: 767E76B2405F11F0B14520EADAE4EC9C.roa (hash: Psp54N8Zwbl9ziN2Vbyl63/0vnVM4zrW11s0ypx3pl8=) 8: 9BF619A8FCDC11EE8DA40146017001B1.roa (hash: po7czQ/bhDV7w3+Oz4IVCSJosx6dgGFsaZotpFYiUzU=) 9: 0C6B2666405B11F09F43C8CCDAE4EC9C.roa (hash: /9Ds38E/Nlm7VcSD/FOkPtqxtWfZMJuAf/6Y8lnD5JQ=) 10: ACB83E6242B211EFAFCCE28B762E951A.roa (hash: K3ivQ3+n4zlKylliwe/zTuRovNdpcW712O8vioTYjFg=) 11: A1B5AEEC442811EFA24AB347762E951A.roa (hash: WU/tv+bio89mYf5sL7OB/fhjHoVOLu5YlrkO6ttjHNQ=) 12: 7AFAA29E1F6111EFB0C39B397DDC24C2.roa (hash: e2WypnmRsaISjVRYfT/t99mLnGdtDrlVSL5Ti5URVMc=) 13: 6644E6CC4FE811EFBAAC404B762E951A.roa (hash: 48MYw/CHm3JnjY68hLvq+27NMpxBkJcznllBwP1oCwg=) 14: F6FBFB8E745D11F0BF6D9BD0DAE4EC9C.roa (hash: /YM80rpuDV3whpYSjJG05E1etVVfPSD6PQbBs+HcexM=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 19 Sep 2025 04:09:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Validity Not Before: Sep 17 04:09:55 2025 GMT Not After : Sep 19 04:09:55 2025 GMT Subject: CN=68ca3494-b6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:32:6c:34:d4:6e:b6:0f:11:f2:be:ca:12:54: ff:10:65:b3:c8:14:15:0b:a9:18:96:36:1f:bb:2a: 35:d3:2f:7d:6e:d7:90:29:93:97:ea:7d:46:16:c6: 39:36:2a:95:2a:e3:be:95:a6:27:ac:b8:af:3a:60: c0:4d:6c:8e:bf:14:97:aa:a4:92:24:65:6c:63:a7: 54:be:33:18:ec:08:74:d9:06:40:b7:a3:e2:b6:76: 99:1e:1e:87:26:c6:7d:13:e4:6b:13:88:b4:d8:84: 5a:b0:21:e4:39:e0:76:5d:46:31:77:18:4d:c4:91: e5:86:db:ff:5a:d9:ed:5c:e7:93:87:24:30:3a:de: 8c:12:de:a1:f8:a3:86:39:71:24:a1:63:bb:0d:d1: 75:fb:f5:e1:b6:e1:ba:32:6c:9e:48:87:26:ae:de: de:1a:94:0a:9a:84:6f:f6:92:35:bd:46:9e:2d:8c: 28:06:3f:fe:e9:cb:7e:5f:40:5b:a7:0d:88:47:a0: 91:4c:8f:df:48:e8:dc:75:66:66:a9:4f:36:88:4c: 92:47:4e:1d:4c:e7:33:c4:8a:f5:f1:40:41:d9:ea: a2:ba:a7:26:0a:20:c2:e0:13:9b:94:8b:df:3c:94: ac:5d:d1:e9:ff:a7:bf:4a:3a:f6:f3:e8:d0:ab:61: 3f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:61:5B:8D:57:0A:0F:51:85:15:33:06:6B:50:2F:42:C5:61:C4:A9 X509v3 Authority Key Identifier: keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b4:de:31:c6:c7:f1:c7:49:76:36:ea:08:b9:2f:db:1d:a9: a0:80:11:a0:da:08:67:76:de:4e:a7:85:d5:06:27:64:cd:08: 0a:5e:6c:75:8e:85:64:83:6b:0a:ee:1f:16:c1:28:9f:fb:98: df:ea:63:cf:b3:2b:06:02:c8:5f:cf:c2:c4:30:a2:16:7b:f1: c6:84:9b:20:bc:df:9b:07:33:68:7b:24:3c:4f:52:a2:7d:23: 82:f1:4a:58:dc:53:0f:d1:3a:6e:dc:df:3a:af:eb:0b:3c:9c: 93:af:a3:98:66:46:d1:c0:04:40:6e:4a:eb:f4:ce:56:b7:d8: 46:ff:6f:18:4f:96:6f:da:be:95:61:6d:e1:84:fb:48:ca:9e: 61:2d:d6:b1:d2:37:e6:f5:cc:c9:c7:3e:a5:c2:bd:28:f3:bf: ab:54:14:e6:77:ee:08:58:3f:00:ce:5f:ec:ca:eb:5f:9c:e8: 60:6c:4f:09:b5:e5:3d:19:cf:26:45:de:5d:7b:ce:e4:f3:82: 15:9b:1c:37:30:e4:24:42:46:57:82:7a:cb:2d:f2:69:d0:43: a3:09:cb:12:b8:f9:a6:d2:73:33:be:5b:2c:cb:b2:b7:83:78: 30:19:e3:52:a4:de:bf:d2:3e:9f:16:de:d4:22:54:1f:62:ed: dd:57:4a:18 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 Q0IxQkVBRjExMC8GA1UEBRMoQTVGMEEyQkI4Qjc5RURENkQzN0MwNzdBREZFQTA4 MjUxNEMwNDIwRjAeFw0yNTA5MTcwNDA5NTVaFw0yNTA5MTkwNDA5NTVaMBgxFjAU BgNVBAMTDTY4Y2EzNDk0LWI2ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCfMmw01G62DxHyvsoSVP8QZbPIFBULqRiWNh+7KjXTL31u15Apk5fqfUYW xjk2KpUq476VpiesuK86YMBNbI6/FJeqpJIkZWxjp1S+MxjsCHTZBkC3o+K2dpke Hocmxn0T5GsTiLTYhFqwIeQ54HZdRjF3GE3EkeWG2/9a2e1c55OHJDA63owS3qH4 o4Y5cSShY7sN0XX79eG24boybJ5Ihyau3t4alAqahG/2kjW9Rp4tjCgGP/7py35f QFunDYhHoJFMj99I6Nx1ZmapTzaITJJHTh1M5zPEivXxQEHZ6qK6pyYKIMLgE5uU i988lKxd0en/p79KOvbz6NCrYT9hAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUdGFb jVcKD1GFFTMGa1AvQsVhxKkwHwYDVR0jBBgwFoAUpfCiu4t57dbTfAd63+oIJRTA Qg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkNCMUJFL0YzMjI4RTg2RjBFRTExRUVBM0JFMEY1ODc3NTQxMkU2L3BmQ2l1 NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3BmQ2l1NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2Q0IxQkUvRjMyMjhFODZGMEVFMTFFRUEzQkUwRjU4Nzc1 NDEyRTYvcGZDaXU0dDU3ZGJUZkFkNjMtb0lKUlRBUWc4Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBatN4xxsfxx0l2NuoIuS/bHamggBGg 2ghndt5Op4XVBidkzQgKXmx1joVkg2sK7h8WwSif+5jf6mPPsysGAshfz8LEMKIW e/HGhJsgvN+bBzNoeyQ8T1KifSOC8UpY3FMP0Tpu3N86r+sLPJyTr6OYZkbRwARA bkrr9M5Wt9hG/28YT5Zv2r6VYW3hhPtIyp5hLdax0jfm9czJxz6lwr0o87+rVBTm d+4IWD8Azl/syutfnOhgbE8JteU9Gc8mRd5de87k84IVmxw3MOQkQkZXgnrLLfJp 0EOjCcsSuPmm0nMzvlssy7K3g3gwGeNSpN6/0j6fFt7UIlQfYu3dV0oY -----END CERTIFICATE-----Generated at Thu Sep 18 02:06:18 2025 by rpki-client