$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft File: aMXkutXc1WSiVidTyay2Mr0ky1A.mft (raw, json) Hash identifier: c+qi7v0WEbCOEs4iuus0gtSopUTO9veou7TdGDW/5v8= Subject key identifier: 4C:DD:24:95:47:19:03:25:CF:EC:9A:AD:E4:D3:9F:11:99:F5:46:F4 Authority key identifier: 68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50 Certificate issuer: /CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50 Certificate serial: 08C7 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft Manifest number: 08B6 Signing time: Sun 27 Jul 2025 01:41:29 +0000 Manifest this update: Sun 27 Jul 2025 01:41:28 +0000 Manifest next update: Tue 29 Jul 2025 01:41:28 +0000 Files and hashes: 1: aMXkutXc1WSiVidTyay2Mr0ky1A.crl (hash: qI7/R3bcTfHfq/jM4nvvm88wRk78ZC8LMieUh/BZmz8=) 2: 67CF4D4AC47A11EBAC1DCB2EF8AEA228.roa (hash: itFkoyhCFbkxoKe/6GZZJKhOYtJVGG20wDDeoMWtUpQ=) 3: 51DD5CFA362311EC86345D40D8A014CE.roa (hash: ZOjl1c6p5MEg7MhRsQboW+KWuk6lGFrNRsr8eT5zSuA=) 4: 2E3A1228F14211EB95363E26D8A014CE.roa (hash: vD5KpjCW2oLjrazeJW7vuUKZt8XTsZHweUUc6bDl3m8=) 5: 0668CDBA8ECF11EA92325F27F8AEA228.roa (hash: obmP99ZP4gHqQi9QCtzWh7Wc0rtLRTLbw4IjE5aS9HE=) 6: 7F90265C003411EC9AEFCB7BD8A014CE.roa (hash: Us9bdbPalZ+yx1ibe5L/RTGvBCGXXo3x0b9dZX+Z/FM=) 7: 2A0AF02ED8D711EB93E56C7BF8AEA228.roa (hash: ZQ6oLNCOYoaY+3u19bx5mMnPdr11GM9m4rQK5cGUyGQ=) 8: 5E0FF05A1C8811EC996FCB76D8A014CE.roa (hash: Vk5ASQFgQjjsZEjyJ+X43+pLR30VafAKoJRgMFTM8vk=) 9: 59AB9F46ACB311EA94FB7A5CF8AEA228.roa (hash: M7zBdV0WcI6PFd9tLd94yJGWhV8lnlP02DcFXSG5pCM=) 10: 77F17762ACB511EAB011A45EF8AEA228.roa (hash: 1/STozfAIpnz6GETEBd4lb3u077CE2WkxWA/E9NUlaI=) 11: 83CC39468F0011EA98508558F8AEA228.roa (hash: L5ieRjYiG1OFGX8hr9WtcOwJsazJ2sf4i+jmqBumzYY=) 12: 4D5B7DFA9A9911EAB460C75DF8AEA228.roa (hash: 08HHiOipKJGcq74gZtGxaBA7hKxLZk9ttDnVaGPnEtA=) 13: DA956AF2E91F11EB8EE78B08D8A014CE.roa (hash: yi/kGe9K7bgzzNjuJJ9WkvYPrz9NLiez9H+X0/yDZ1o=) 14: 4F75903E8F9B11EAB3F92A79F8AEA228.roa (hash: 4DXiHxGSCbsyOMNhnwXSRwIzqtdpPeRGAU+Vq8d2Sbo=) 15: BC497164BFC211EB9C90B47DF8AEA228.roa (hash: vShLouUDMlMysq5av2KQKsWgiT2JaBcuHkhVOPxBIWk=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 29 Jul 2025 00:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2247 (0x8c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36DE46FAF, serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50 Validity Not Before: Jul 27 01:41:28 2025 GMT Not After : Jul 29 01:41:28 2025 GMT Subject: CN=688583c9-9def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:87:78:c9:9d:da:1a:5d:f7:fb:44:5f:a1:91: b8:40:a3:99:23:47:0e:5d:1f:21:5f:f9:9d:9a:d3: 21:a8:c4:23:eb:89:99:8d:2e:a7:77:fc:9d:d3:6e: 9f:da:0b:da:e4:46:30:15:9a:05:83:3a:77:6d:a1: 8f:bc:26:ff:a4:ba:40:90:b2:78:23:0c:fa:8b:e0: 7b:3b:f0:e8:c0:4d:49:d3:84:32:be:2c:36:b4:39: 91:40:a4:3d:a8:41:69:aa:5b:38:d7:78:86:c7:78: bc:5b:d8:ab:d2:ca:b9:a6:48:5c:9f:f9:93:8a:b3: 0d:5e:f5:f4:d9:56:09:c5:4c:9a:db:14:ab:65:d7: 21:bd:5c:90:bc:aa:f3:08:63:64:23:bf:12:66:4b: ab:04:64:b5:79:8b:e1:63:6e:cb:c3:d8:92:0d:c2: 91:0a:66:bf:19:6c:6a:8c:ef:54:af:50:a1:db:0a: a7:7b:eb:ff:65:17:82:95:3e:26:31:99:3e:44:9d: 81:d1:2c:8c:e1:a8:f3:c2:c6:7d:2d:95:30:3f:8b: 91:f9:28:e0:dd:e0:f0:ea:4a:a5:be:9d:32:d8:29: ad:84:89:37:c8:32:83:11:b2:ae:f7:95:f5:42:70: f5:af:df:4b:32:2e:78:4d:52:91:1c:e4:96:ae:2e: 02:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DD:24:95:47:19:03:25:CF:EC:9A:AD:E4:D3:9F:11:99:F5:46:F4 X509v3 Authority Key Identifier: keyid:68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:98:da:43:10:59:42:24:e7:cd:a3:bb:27:ad:32:d1:5f:cf: f8:e2:91:7c:2a:3f:05:a6:30:66:57:81:95:5c:9d:b8:67:c7: 8a:09:92:0e:c5:3f:b5:45:d4:06:2f:66:e0:75:c7:0a:b2:b6: aa:da:cc:b2:6c:9e:5e:0e:1b:d2:f8:d5:7c:61:32:1b:5a:18: 17:38:62:73:dc:31:57:b4:f1:46:7f:aa:53:42:b4:cf:9c:bb: 8d:45:5b:1c:bf:a3:bb:ea:b2:d3:b5:99:d5:bc:3a:7e:94:1f: 3c:4c:50:a9:7b:60:1f:03:26:2d:2d:d2:61:f7:5b:41:61:68: a4:a8:80:84:af:e7:74:bd:15:ff:28:d4:76:5a:b6:b2:f6:33: 8e:bb:3d:20:bd:84:79:cf:5e:b5:48:a6:74:70:a8:f5:93:e8: 9f:78:98:95:82:40:9b:b8:fc:f7:d7:1c:f0:13:75:1c:5c:b5: 8f:55:21:5e:d1:28:69:a9:0b:92:39:0b:d7:e3:1c:11:1c:da: d5:5a:85:52:bb:34:5c:58:ee:fd:9e:ee:59:dc:01:95:6e:ac: 27:f1:40:4e:e3:44:fb:0b:4d:7d:8c:47:f1:c0:62:24:35:09: 44:d9:b7:5f:20:67:d3:8b:84:44:ae:1a:ac:a4:e4:46:2b:9b: 3d:70:f7:c6 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCMcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 REU0NkZBRjExMC8GA1UEBRMoNjhDNUU0QkFENURDRDU2NEEyNTYyNzUzQzlBQ0I2 MzJCRDI0Q0I1MDAeFw0yNTA3MjcwMTQxMjhaFw0yNTA3MjkwMTQxMjhaMBgxFjAU BgNVBAMTDTY4ODU4M2M5LTlkZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCph3jJndoaXff7RF+hkbhAo5kjRw5dHyFf+Z2a0yGoxCPriZmNLqd3/J3T bp/aC9rkRjAVmgWDOndtoY+8Jv+kukCQsngjDPqL4Hs78OjATUnThDK+LDa0OZFA pD2oQWmqWzjXeIbHeLxb2KvSyrmmSFyf+ZOKsw1e9fTZVgnFTJrbFKtl1yG9XJC8 qvMIY2QjvxJmS6sEZLV5i+FjbsvD2JINwpEKZr8ZbGqM71SvUKHbCqd76/9lF4KV PiYxmT5EnYHRLIzhqPPCxn0tlTA/i5H5KODd4PDqSqW+nTLYKa2EiTfIMoMRsq73 lfVCcPWv30syLnhNUpEc5JauLgJRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUTN0k lUcZAyXP7Jqt5NOfEZn1RvQwHwYDVR0jBBgwFoAUaMXkutXc1WSiVidTyay2Mr0k y1AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkRFNDZGL0VCNDkzNENDRDVGRTExRTk5NTI4MTkzQkY4QUVBMjI4L2FNWGt1 dFhjMVdTaVZpZFR5YXkyTXIwa3kxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2FNWGt1dFhjMVdTaVZpZFR5YXkyTXIwa3kxQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2REU0NkYvRUI0OTM0Q0NENUZFMTFFOTk1MjgxOTNCRjhB RUEyMjgvYU1Ya3V0WGMxV1NpVmlkVHlheTJNcjBreTFBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMmNpDEFlCJOfNo7snrTLRX8/44pF8 Kj8FpjBmV4GVXJ24Z8eKCZIOxT+1RdQGL2bgdccKsraq2syybJ5eDhvS+NV8YTIb WhgXOGJz3DFXtPFGf6pTQrTPnLuNRVscv6O76rLTtZnVvDp+lB88TFCpe2AfAyYt LdJh91tBYWikqICEr+d0vRX/KNR2Wray9jOOuz0gvYR5z161SKZ0cKj1k+ifeJiV gkCbuPz31xzwE3UcXLWPVSFe0ShpqQuSOQvX4xwRHNrVWoVSuzRcWO79nu5Z3AGV bqwn8UBO40T7C019jEfxwGIkNQlE2bdfIGfTi4RErhqspORGK5s9cPfG -----END CERTIFICATE-----Generated at Sun Jul 27 08:10:18 2025 by rpki-client