$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft File: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft (raw, json) Hash identifier: YlRLfmM4ZMPntCkH5vyVwuxRpk+FQaSIyl1llExthcw= Subject key identifier: 97:6C:9D:07:08:D8:74:DF:03:DD:2F:F3:05:B2:43:B5:A6:42:77:AC Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49 Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149 Certificate serial: 04B9 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft Manifest number: 049B Signing time: Thu 23 Oct 2025 03:05:35 +0000 Manifest this update: Thu 23 Oct 2025 03:05:35 +0000 Manifest next update: Sat 25 Oct 2025 03:05:35 +0000 Files and hashes: 1: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl (hash: MzB8K78G+ytlLzD+JzQ0zqV3IgODeQXkIQViE0aD8Zo=) 2: CAB5EB42374D11EE8810A0744AD9E6FC.roa (hash: Rd+cT1WHVj6VPW10DhoJe1VPjes86osECuBqlAPA/jk=) 3: 20D8603A3C6311EEBD05616B4AD9E6FC.roa (hash: yn1GI8XUJDZhc/a1VL4Ew8aXczcEtSuNRFvBTlTvah0=) 4: 662EC19C3C6311EEA2CE226C4AD9E6FC.roa (hash: qJZA5eX+xbJzCe6D7i9PnOvJU1CqeC3CU+zF75cZcts=) 5: F67E4B16374D11EEB5DE38754AD9E6FC.roa (hash: hU4jFk//Gd5275KQZyF78ZmsmvKAmuy74Zm19XPUqO4=) 6: 14B6AF743B4011EEADF20A804AD9E6FC.roa (hash: K4yraD6px2otzCCbUQWt+Yh6khumJagXOv/4f3vipmU=) 7: 53D289E63CCE11EE935F8A394AD9E6FC.roa (hash: 4HBFVVMsDOfA/xrur5pE2xRwqQtzwcjvpCJfYPdn3co=) 8: 5F94B5287E1F11EEB18DE56B4AD9E6FC.roa (hash: NnfOKQOywlCm8MbXuo5ryxtlJJnqWeXUY/Zc4KGtk9o=) 9: 03541FA67E1F11EE99591D6B4AD9E6FC.roa (hash: tMNuryIys8bdcGqr2btn+01OsiqNMJcIT+oXA5sB548=) 10: 4ED14CDCA6DA11EDAEF82299F1222468.roa (hash: iXehJ8WLWU6cHBFHQ5qsEfloV58oVEhPLmmW3fV/BY4=) 11: 4788CE9A3C6311EE9733C66B4AD9E6FC.roa (hash: 0sVxWZVOpyK0cudH1BB1HUmOSWE0Bj2HjfkgAIa158s=) 12: 158513F4518011EE8BDBCE164AD9E6FC.roa (hash: sbl6JhnjaIL3BTU2+lQRNeSnxalVE/sMDYPWi7BO8vg=) 13: 85435BE23C6311EE9E2BB76C4AD9E6FC.roa (hash: ZIlXxtD8wXr16Udjo8wBxB2atTHwjE6MF56MpocHqts=) 14: 4433C912374E11EEBD8F3D764AD9E6FC.roa (hash: lHtBjObTBwNyVhJrHEQ/zHzgJmnlb42wMC73m5Dh7UE=) 15: A775C5D83C6311EEA094166D4AD9E6FC.roa (hash: L972nqC78lcXrhC+mjzOc5OXmYgCBGyLNtGIrSD8tWw=) 16: 20EEA9507E1F11EEAD686A6B4AD9E6FC.roa (hash: +kuN9/TLBGpI4GFRii8gvKOE9Vh3yGtX4DQwHRmVzSA=) 17: 88A2141457EF11F0A48D2AC4DAE4EC9C.roa (hash: jwxUZ7nPgwu7fA4ugBBwspQYrmkSwfz/KGPZiiShxok=) 18: 04540B763C6311EE82DB186B4AD9E6FC.roa (hash: 8pLsZ3suwRhldyF5vniTCRO+W8oJo+1mBH+nN66FQ8k=) 19: 329D5926A54311EEA7A66B2ED25BE465.roa (hash: 1pPOf7iWBENGk84AGGgfnWlGuOjuG2CHIm2+lZTlGVY=) 20: 9369A48A374D11EEBBBCC3734AD9E6FC.roa (hash: LriikUtiyzWDzN+qJjLYRklCy7tVdfyDgc1icmMt3FY=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 25 Oct 2025 00:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1209 (0x4b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149 Validity Not Before: Oct 23 03:05:35 2025 GMT Not After : Oct 25 03:05:35 2025 GMT Subject: CN=68f99b7f-1905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4e:1f:a2:4e:be:2f:18:b3:8b:85:81:e0:7f: b7:bf:8b:c5:88:b5:16:38:bb:57:f7:85:84:bd:3e: 8f:d9:ff:55:ca:45:9f:48:69:ad:a0:e3:43:91:52: 60:04:32:f8:92:d8:11:95:a1:21:3c:e9:e0:c2:3e: bb:c3:ea:8f:c5:c9:23:de:14:a3:38:3b:c1:5c:75: 99:40:e1:23:1c:f2:d6:54:2d:67:3b:78:ef:d3:23: dc:d5:60:88:28:f2:55:98:4a:87:1c:33:fc:d4:ee: 84:63:28:6e:48:16:fb:4c:bf:0a:fa:8f:bb:bb:7d: 7a:92:5d:aa:b3:90:cc:f7:55:41:e0:6e:2a:20:8e: 64:2e:2f:61:ad:5a:51:f9:d6:53:7a:f9:83:12:15: 24:d5:37:19:db:83:96:08:27:75:bb:3c:97:fb:60: b4:25:56:8c:ac:52:0d:37:87:e9:33:39:fd:22:13: 4f:37:8c:f4:bf:17:e7:26:ae:f0:fa:7b:bd:66:4a: ea:2d:6b:04:f9:8a:35:1f:47:81:7e:8c:b0:9a:30: ec:e5:f6:6e:c0:c5:db:d1:05:ea:e7:b6:e1:f7:21: cf:93:1c:a8:a4:b0:b0:1d:c1:1b:2c:75:b5:4a:f4: c7:88:44:fb:70:ad:0a:3c:59:44:1e:56:f6:bc:4f: 87:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6C:9D:07:08:D8:74:DF:03:DD:2F:F3:05:B2:43:B5:A6:42:77:AC X509v3 Authority Key Identifier: keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:83:f1:86:27:7b:ee:d1:10:02:86:43:74:54:4f:b9:43:e5: 56:b3:4a:0a:8a:cc:2b:62:2d:5f:34:d6:a2:0f:38:dc:2e:8f: f4:29:28:98:61:b5:ae:47:3b:df:61:47:cd:08:27:2b:c5:f4: fa:f2:99:fe:41:97:07:45:4b:18:96:64:13:5a:34:2d:82:52: 48:2b:94:7d:93:e6:21:0b:15:69:0a:24:c2:54:bb:d7:5d:da: ab:a8:2a:6a:13:81:59:9b:9c:4c:27:44:44:37:1b:e5:16:51: b6:b4:d8:10:01:47:16:c0:90:3c:99:3b:72:cf:5c:72:d6:e3: 8d:05:3e:15:0b:10:9f:92:89:67:fb:df:d4:d6:c8:94:d2:58: 9b:b4:cb:39:98:76:c8:48:37:4f:d9:76:bf:c4:95:d0:6a:ba: 9c:88:d4:ff:af:e3:de:c8:f2:5b:9d:d7:b7:42:57:f3:88:75: 9b:09:2e:2c:c2:0d:dc:9e:35:68:eb:92:70:9d:87:95:f5:12: 11:4a:a4:4e:3a:58:57:36:77:c9:4e:70:6f:c4:84:4f:d0:47: 6e:f1:4d:1b:34:7b:7e:14:b3:b1:98:3c:35:8d:8f:7d:95:e0: 08:b6:ec:54:f5:b5:f3:71:6c:89:9b:ec:81:d9:60:43:4b:76: 45:59:99:ae -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBLkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 REI0OTJBRjExMC8GA1UEBRMoRjQzRTA2NjhFRjcyQkQ4N0ZBNTM2OEJFMkI2ODE1 QzBCQ0I0MDE0OTAeFw0yNTEwMjMwMzA1MzVaFw0yNTEwMjUwMzA1MzVaMBgxFjAU BgNVBAMTDTY4Zjk5YjdmLTE5MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCeTh+iTr4vGLOLhYHgf7e/i8WItRY4u1f3hYS9Po/Z/1XKRZ9Iaa2g40OR UmAEMviS2BGVoSE86eDCPrvD6o/FySPeFKM4O8FcdZlA4SMc8tZULWc7eO/TI9zV YIgo8lWYSoccM/zU7oRjKG5IFvtMvwr6j7u7fXqSXaqzkMz3VUHgbiogjmQuL2Gt WlH51lN6+YMSFSTVNxnbg5YIJ3W7PJf7YLQlVoysUg03h+kzOf0iE083jPS/F+cm rvD6e71mSuotawT5ijUfR4F+jLCaMOzl9m7AxdvRBerntuH3Ic+THKiksLAdwRss dbVK9MeIRPtwrQo8WUQeVva8T4cxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUl2yd BwjYdN8D3S/zBbJDtaZCd6wwHwYDVR0jBBgwFoAU9D4GaO9yvYf6U2i+K2gVwLy0 AUkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkRCNDkyLzEwREE5OTc2NEEwMzExRUQ4RjU5RDg5RUYxMjIyNDY4LzlENEdh Tzl5dllmNlUyaS1LMmdWd0x5MEFVay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLzlENEdhTzl5dllmNlUyaS1LMmdWd0x5MEFVay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2REI0OTIvMTBEQTk5NzY0QTAzMTFFRDhGNTlEODlFRjEy MjI0NjgvOUQ0R2FPOXl2WWY2VTJpLUsyZ1Z3THkwQVVrLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBmg/GGJ3vu0RAChkN0VE+5Q+VWs0oK iswrYi1fNNaiDzjcLo/0KSiYYbWuRzvfYUfNCCcrxfT68pn+QZcHRUsYlmQTWjQt glJIK5R9k+YhCxVpCiTCVLvXXdqrqCpqE4FZm5xMJ0RENxvlFlG2tNgQAUcWwJA8 mTtyz1xy1uONBT4VCxCfkoln+9/U1siU0libtMs5mHbISDdP2Xa/xJXQarqciNT/ r+PeyPJbnde3QlfziHWbCS4swg3cnjVo65JwnYeV9RIRSqROOlhXNnfJTnBvxIRP 0Edu8U0bNHt+FLOxmDw1jY99leAItuxU9bXzcWyJm+yB2WBDS3ZFWZmu -----END CERTIFICATE-----Generated at Thu Oct 23 12:08:29 2025 by rpki-client