$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft File: pfCiu4t57dbTfAd63-oIJRTAQg8.mft (raw, json) Hash identifier: JpqC+TMhLtmYimIh16DKfeHP/ebym17H/ax/RO3Zup4= Subject key identifier: 20:62:39:56:D5:B3:56:7B:01:FA:FD:94:48:08:CC:1A:31:D2:1F:23 Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F Certificate issuer: /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Certificate serial: 0210 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft Manifest number: 0201 Signing time: Thu 31 Jul 2025 04:34:27 +0000 Manifest this update: Thu 31 Jul 2025 04:34:26 +0000 Manifest next update: Sat 02 Aug 2025 04:34:26 +0000 Files and hashes: 1: pfCiu4t57dbTfAd63-oIJRTAQg8.crl (hash: kA2HuovzYn98/Vl2fh0kAAr2yGfyzX7dDp4CFdoYYzE=) 2: 245B6D34FBED11EE8128962C017001B1.roa (hash: TrN9lcQpNeQiZwKFjsOsULheFfvRBy2GwIMFcOXP5rY=) 3: 60986EC6F10E11EEA398F1C8775412E6.roa (hash: UeXyeJMDi2GVx9uEPU+PiWuthmCddMz69n4V0SdxUZY=) 4: 22518D92508411F0826E3AF4DAE4EC9C.roa (hash: EF6bTXfWBzzaClQqi7lC/mW1TWW3PpSaQ+RMKUgfCww=) 5: 4A3BF0B6E9F711EFB363B759762E951A.roa (hash: qnWjHMa6krZFafky4BYIbSFj8GVyr5kF/yN3x6ht2sE=) 6: 8C5EBF98B18D11EF93764599762E951A.roa (hash: LMCVfxRKPtEUcD+l4fHRZWVAaU9InzZT+jXi3ynNqyQ=) 7: 624DB26AFC1411EEA32C1066017001B1.roa (hash: SAKc0hgZ+mEboWzvP3K7DMfU8rpiR8UT+kWecca89NE=) 8: 767E76B2405F11F0B14520EADAE4EC9C.roa (hash: Psp54N8Zwbl9ziN2Vbyl63/0vnVM4zrW11s0ypx3pl8=) 9: 9BF619A8FCDC11EE8DA40146017001B1.roa (hash: po7czQ/bhDV7w3+Oz4IVCSJosx6dgGFsaZotpFYiUzU=) 10: 0C6B2666405B11F09F43C8CCDAE4EC9C.roa (hash: /9Ds38E/Nlm7VcSD/FOkPtqxtWfZMJuAf/6Y8lnD5JQ=) 11: ACB83E6242B211EFAFCCE28B762E951A.roa (hash: K3ivQ3+n4zlKylliwe/zTuRovNdpcW712O8vioTYjFg=) 12: A1B5AEEC442811EFA24AB347762E951A.roa (hash: WU/tv+bio89mYf5sL7OB/fhjHoVOLu5YlrkO6ttjHNQ=) 13: 7AFAA29E1F6111EFB0C39B397DDC24C2.roa (hash: e2WypnmRsaISjVRYfT/t99mLnGdtDrlVSL5Ti5URVMc=) 14: 6644E6CC4FE811EFBAAC404B762E951A.roa (hash: 48MYw/CHm3JnjY68hLvq+27NMpxBkJcznllBwP1oCwg=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 02 Aug 2025 00:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Validity Not Before: Jul 31 04:34:26 2025 GMT Not After : Aug 2 04:34:26 2025 GMT Subject: CN=688af252-59c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ee:1d:62:93:05:e0:de:0e:5c:54:f8:cd:6c: 41:42:60:29:5b:25:f6:76:e5:78:cf:13:8d:7d:f4: 22:76:1b:c4:69:97:f0:50:29:08:68:54:f9:30:f8: e9:52:cf:82:4c:bd:9d:8f:52:58:ff:11:08:3d:aa: f8:5f:ac:65:34:03:12:a2:df:99:e3:9a:08:31:a8: 2e:cc:18:34:fb:42:fb:6f:22:6c:28:b9:12:a0:97: 36:a5:8f:b0:83:ca:25:8f:f9:38:81:68:19:83:5e: 3c:e8:9d:68:c9:12:5f:c1:d3:2f:ec:97:2b:c8:64: 9c:2b:83:56:6c:ac:f4:70:bf:b0:48:d1:61:47:8f: 3b:99:94:39:12:70:87:f6:07:91:e2:a0:c3:7f:1d: b3:be:ca:f2:f3:fc:3c:69:74:ec:3d:9c:f2:fc:3e: 3e:ec:c4:5a:4c:f4:e2:38:1c:99:f5:32:9b:f6:e2: 98:0e:91:4c:22:5e:4b:c1:8f:c2:e1:32:89:c1:57: c9:49:80:a8:03:b1:81:36:71:5b:12:08:3b:af:c9: 4a:3b:65:62:85:b9:d2:3d:d7:ee:a0:46:c2:7f:a9: 9e:b7:54:4b:b7:86:ee:51:0e:30:b3:8f:4f:d1:20: 2b:35:2e:e4:ca:84:44:9e:ba:dc:65:06:4c:31:36: f6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:62:39:56:D5:B3:56:7B:01:FA:FD:94:48:08:CC:1A:31:D2:1F:23 X509v3 Authority Key Identifier: keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:89:a6:c2:56:58:d6:7c:d1:f5:ab:a6:bf:91:4a:b6:7e:5c: 25:11:6c:2b:e9:41:75:59:c0:cc:5e:4c:30:d4:60:b5:4c:f6: 2b:c5:97:14:10:ff:d5:06:04:36:26:7d:77:60:e3:42:f1:56: 9c:bc:c7:f7:86:87:8d:d1:ff:1e:cf:56:45:5b:2e:3f:34:f6: d2:62:1c:e8:07:28:c6:73:11:96:d5:9d:35:db:95:0c:4a:bb: 5f:37:37:e0:b6:ab:01:90:a6:bf:c7:ea:2c:af:74:0a:48:72: 77:0a:57:fa:82:7e:4d:9d:5b:db:b5:72:9f:dd:77:13:13:73: 32:b5:04:33:ba:fd:7e:9b:04:33:f5:35:21:66:a1:37:38:ff: eb:45:60:35:84:34:ad:0f:76:76:f5:ab:e1:43:b2:ef:9b:dc: 66:e2:44:42:43:6b:d8:9a:c1:cf:21:68:4a:cb:4c:05:4b:e7: cd:69:98:a7:a2:e7:25:c5:de:cd:f5:3c:1a:b7:0b:15:83:4b: 30:7d:9c:de:32:ce:c0:43:59:ba:02:c0:29:09:6f:40:b4:0d: ca:df:a0:39:3e:3a:2f:e5:79:3d:a6:74:19:0b:85:28:be:58: d4:5b:80:ad:28:70:2e:c2:17:39:6b:1d:61:29:aa:c3:20:e6: 5f:82:ca:70 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 Q0IxQkVBRjExMC8GA1UEBRMoQTVGMEEyQkI4Qjc5RURENkQzN0MwNzdBREZFQTA4 MjUxNEMwNDIwRjAeFw0yNTA3MzEwNDM0MjZaFw0yNTA4MDIwNDM0MjZaMBgxFjAU BgNVBAMTDTY4OGFmMjUyLTU5YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCz7h1ikwXg3g5cVPjNbEFCYClbJfZ25XjPE4199CJ2G8Rpl/BQKQhoVPkw +OlSz4JMvZ2PUlj/EQg9qvhfrGU0AxKi35njmggxqC7MGDT7QvtvImwouRKglzal j7CDyiWP+TiBaBmDXjzonWjJEl/B0y/slyvIZJwrg1ZsrPRwv7BI0WFHjzuZlDkS cIf2B5HioMN/HbO+yvLz/DxpdOw9nPL8Pj7sxFpM9OI4HJn1Mpv24pgOkUwiXkvB j8LhMonBV8lJgKgDsYE2cVsSCDuvyUo7ZWKFudI91+6gRsJ/qZ63VEu3hu5RDjCz j0/RICs1LuTKhESeutxlBkwxNvZBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUIGI5 VtWzVnsB+v2USAjMGjHSHyMwHwYDVR0jBBgwFoAUpfCiu4t57dbTfAd63+oIJRTA Qg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkNCMUJFL0YzMjI4RTg2RjBFRTExRUVBM0JFMEY1ODc3NTQxMkU2L3BmQ2l1 NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3BmQ2l1NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2Q0IxQkUvRjMyMjhFODZGMEVFMTFFRUEzQkUwRjU4Nzc1 NDEyRTYvcGZDaXU0dDU3ZGJUZkFkNjMtb0lKUlRBUWc4Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPiabCVljWfNH1q6a/kUq2flwlEWwr 6UF1WcDMXkww1GC1TPYrxZcUEP/VBgQ2Jn13YONC8VacvMf3hoeN0f8ez1ZFWy4/ NPbSYhzoByjGcxGW1Z0125UMSrtfNzfgtqsBkKa/x+osr3QKSHJ3Clf6gn5NnVvb tXKf3XcTE3MytQQzuv1+mwQz9TUhZqE3OP/rRWA1hDStD3Z29avhQ7Lvm9xm4kRC Q2vYmsHPIWhKy0wFS+fNaZinouclxd7N9TwatwsVg0swfZzeMs7AQ1m6AsApCW9A tA3K36A5Pjov5Xk9pnQZC4UovljUW4CtKHAuwhc5ax1hKarDIOZfgspw -----END CERTIFICATE-----Generated at Thu Jul 31 11:20:24 2025 by rpki-client