$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft File: _Y4EWISxZp69QwrlZnIdl0BKbOg.mft (raw, json) Hash identifier: U/A27Ru5usZnJ+JDR6z6R7tK41FIpj+xWNKJWAKi+Oo= Subject key identifier: 52:37:48:5C:BD:02:A5:1B:20:F8:13:E3:43:85:46:52:D6:05:B6:64 Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8 Certificate issuer: /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8 Certificate serial: 0940 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft Manifest number: 0924 Signing time: Tue 29 Jul 2025 01:32:35 +0000 Manifest this update: Tue 29 Jul 2025 01:32:35 +0000 Manifest next update: Thu 31 Jul 2025 01:32:34 +0000 Files and hashes: 1: _Y4EWISxZp69QwrlZnIdl0BKbOg.crl (hash: FFsEQB9iQyBc2WzIqXLDb8D7xV3DT8gLlep1AMmcqcc=) 2: 72FDA95EBED111EBB1E95938F8AEA228.roa (hash: BFwqjnvA7M7iOe8MrvjQVzzYtcahDaV6kGy9p/HlFzg=) 3: 8CFF0D3452E011EEB9E2557C4AD9E6FC.roa (hash: AjdT4e8a6WXfxGEzOMU2Ejz3vHkEPA/+xC+T83HmsUY=) 4: 7E2AA4AC953C11ECB825FCA95A40D577.roa (hash: V0xEm03mcnP/23ED2cL/AoR2czYuEnqqGtBl0cqLVJY=) 5: 771B25DAC1DC11EBAFF27A22F8AEA228.roa (hash: hB7LK5vkWRJBikNKLrZykTmcN1gbhqGJuoapPw28t74=) 6: 487A092ADA8611ED9609AEE52F6D8C1D.roa (hash: D/BuyKELkA6Kinn/ZmmBBy28n4BcPuuOdNb0VMO9tSc=) 7: EBFDEB1CDA8511EDAD8DC8E42F6D8C1D.roa (hash: T0K4k+0IgpuVi35+ZPDqnwWPZANeAHrt4BvXYlWbXMI=) 8: 417B7412681D11EABAE8A23BF8AEA228.roa (hash: EcSboq3Auo5ZSfF9dSrc6D9TXAo4UTRY5/uzWoCkLSY=) 9: A0A710B2C1DC11EBBC70BD22F8AEA228.roa (hash: nWisPdHBij3RvecNt34Yu238DLfWQU7kpk3sAXEBWpo=) 10: 9132C716F59111E9AF6CD33BF8AEA228.roa (hash: rXypH2zp9nVVHeDRCTVV4b8eCSlSkXxt3YUitRlyOEk=) 11: 9364DF78BED111EBB8FF9938F8AEA228.roa (hash: NRhe7qbaq8yZpi9FGOqJZVS+hbrFKmeWDZsrvab3+uA=) 12: 7F0A8334DA8611ED854699E62F6D8C1D.roa (hash: GP3NdP5uExbY2GZHQJ+RZAHZhDY8bRc/dyrY/rF4P6I=) 13: 238CE30A681D11EA8E2A7D3BF8AEA228.roa (hash: ydKx4ungEUC7wspHHxXIcDKz2U1m9S6af+pOZ0cF1vY=) 14: D7EB2302681D11EA9D36683CF8AEA228.roa (hash: AgNVSSf6L6GA3IHpXql3JWZ8L6ROJY9bnjmSjQeMQnU=) 15: F251F7A2681D11EA847A8F3CF8AEA228.roa (hash: CH6IVgy5lqquXIo/aSkiaRuN6dDR9B17P94pxUuhf4w=) 16: AF1ED052BED111EBAE20BD38F8AEA228.roa (hash: 4XRclk/yI8EJN8d2ChhuI+DM9Txu0zUGc/TXnREwp8M=) 17: A6F9E6BC52E711EEA98697134AD9E6FC.roa (hash: 522xUbFyDNAfNVyOqkEJj/kgs5vlVi6RihMtJZxJPIA=) 18: 51E7667A198311EDA6FEC5BFF1222468.roa (hash: 5AYXvFdqlcLtOaW600VeglJz5MATpO6Rt2/LbZme/P8=) 19: DBFF1E3C43DD11ED95883DBCF1222468.roa (hash: Y8zoZUQnQqpVoToxLOumwxqYjQxD2d4+Fg81697ZwlM=) 20: 60E94C82DA8611EDB9B5F0E52F6D8C1D.roa (hash: uN0Q1zV+VPkcLgC9gryjBgSon2OLOyHeE5NbuOjD/vU=) 21: 14FC84CEDA8611EDAD5B23E52F6D8C1D.roa (hash: S6+GPt3mMdOMUzMxpxdXeFeENM7hq23EiAhTHkvC6fQ=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 31 Jul 2025 00:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2368 (0x940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36E373DAF, serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8 Validity Not Before: Jul 29 01:32:35 2025 GMT Not After : Jul 31 01:32:34 2025 GMT Subject: CN=688824b3-a852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c9:47:c8:46:e9:5c:ab:e6:66:ca:00:80:f4: cb:43:74:af:13:26:c5:66:4a:69:7c:d3:69:a4:c3: 90:99:96:07:fa:02:7a:d6:57:39:86:9c:9b:57:4e: e4:38:64:5b:41:e0:96:eb:5a:54:58:34:a7:5f:9c: 3b:39:cd:56:34:24:5a:c7:c5:03:06:a7:ea:df:2f: f0:1b:e0:f6:4b:3c:38:c4:05:b8:20:a1:a3:60:a9: ff:a0:bd:94:12:d7:83:53:74:38:4b:52:3a:15:9b: 68:b5:1d:95:b0:23:da:e3:ad:b9:39:f8:e3:46:d8: 3a:2c:f4:3e:bd:6a:d8:2a:30:8d:94:8d:58:ab:26: 2d:2a:33:d3:01:55:b0:80:4a:d3:f1:9d:8c:17:90: e1:15:cb:56:12:d0:a3:07:bc:24:b8:e7:25:f4:28: 10:cf:10:d3:1e:b4:24:f7:4c:9c:fd:6d:bb:b7:e3: dc:22:fc:5a:28:7b:27:c9:0d:17:05:63:de:fc:02: 18:e1:dc:84:d4:27:13:f2:58:44:83:ae:ea:40:d2: 63:00:05:d1:6f:ab:7e:73:4d:a6:c2:5c:07:79:6b: 27:d4:fc:43:24:19:27:c5:7d:af:af:6c:8c:3c:84: f3:00:e8:73:7e:9d:a2:3c:6c:e8:25:d0:34:66:06: ac:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:37:48:5C:BD:02:A5:1B:20:F8:13:E3:43:85:46:52:D6:05:B6:64 X509v3 Authority Key Identifier: keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:5c:93:e2:7e:0c:b8:c5:f4:44:69:1e:65:c1:34:06:6a:97: c4:67:0b:fe:0e:81:71:77:ec:fa:3d:99:2a:97:cd:b9:bf:3e: ed:b7:15:15:c6:5d:6e:f3:ab:1d:8f:ff:a1:54:a9:d7:c2:96: 4c:81:b7:00:92:9b:4b:8b:8b:28:1d:db:47:68:26:27:cb:c4: 6f:c1:ac:8f:3d:c1:08:e2:27:78:ea:56:b0:90:52:d2:c6:e8: 43:24:2d:f5:37:98:c0:7c:cf:95:58:c1:6f:ee:25:58:ca:c3: d2:fe:d3:ba:1c:5f:bd:30:ec:1b:0b:e1:d5:ef:e4:a9:6d:a8: 4e:bc:49:8f:0e:00:5c:94:73:62:74:67:08:67:62:bf:58:cb: 10:fd:dd:5e:ab:c6:88:0f:7d:c2:68:ab:f3:e8:6c:4f:12:80: db:a1:6c:43:96:c1:8b:98:0f:36:47:39:39:02:48:74:0d:96: 72:25:65:0e:a9:8f:03:f3:58:ae:b0:08:cd:7d:ae:3f:25:f0: 9e:46:8f:7c:ec:84:ea:2b:3c:6f:60:d5:e7:2d:ac:5a:d8:b0: 9f:57:ed:9a:a9:eb:4c:d0:33:67:59:3e:ed:dc:b2:80:26:e9: 07:ba:bf:92:a8:b9:29:55:bc:53:46:0b:a7:ca:5b:a0:84:9e: b4:29:5e:45 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCUAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RTM3M0RBRjExMC8GA1UEBRMoRkQ4RTA0NTg4NEIxNjY5RUJENDMwQUU1NjY3MjFE OTc0MDRBNkNFODAeFw0yNTA3MjkwMTMyMzVaFw0yNTA3MzEwMTMyMzRaMBgxFjAU BgNVBAMTDTY4ODgyNGIzLWE4NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDKyUfIRulcq+ZmygCA9MtDdK8TJsVmSml802mkw5CZlgf6AnrWVzmGnJtX TuQ4ZFtB4JbrWlRYNKdfnDs5zVY0JFrHxQMGp+rfL/Ab4PZLPDjEBbggoaNgqf+g vZQS14NTdDhLUjoVm2i1HZWwI9rjrbk5+ONG2Dos9D69atgqMI2UjVirJi0qM9MB VbCAStPxnYwXkOEVy1YS0KMHvCS45yX0KBDPENMetCT3TJz9bbu349wi/FooeyfJ DRcFY978Ahjh3ITUJxPyWESDrupA0mMABdFvq35zTabCXAd5ayfU/EMkGSfFfa+v bIw8hPMA6HN+naI8bOgl0DRmBqxpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUUjdI XL0CpRsg+BPjQ4VGUtYFtmQwHwYDVR0jBBgwFoAU/Y4EWISxZp69QwrlZnIdl0BK bOgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkUzNzNELzREMjJBQ0Q2OEI3MzExRTlBNDlBNDM2OEY4QUVBMjI4L19ZNEVX SVN4WnA2OVF3cmxabklkbDBCS2JPZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL19ZNEVXSVN4WnA2OVF3cmxabklkbDBCS2JPZy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RTM3M0QvNEQyMkFDRDY4QjczMTFFOUE0OUE0MzY4RjhB RUEyMjgvX1k0RVdJU3hacDY5UXdybFpuSWRsMEJLYk9nLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBIXJPifgy4xfREaR5lwTQGapfEZwv+ DoFxd+z6PZkql825vz7ttxUVxl1u86sdj/+hVKnXwpZMgbcAkptLi4soHdtHaCYn y8RvwayPPcEI4id46lawkFLSxuhDJC31N5jAfM+VWMFv7iVYysPS/tO6HF+9MOwb C+HV7+SpbahOvEmPDgBclHNidGcIZ2K/WMsQ/d1eq8aID33CaKvz6GxPEoDboWxD lsGLmA82Rzk5Akh0DZZyJWUOqY8D81iusAjNfa4/JfCeRo987ITqKzxvYNXnLaxa 2LCfV+2aqetM0DNnWT7t3LKAJukHur+SqLkpVbxTRgunylughJ60KV5F -----END CERTIFICATE-----Generated at Tue Jul 29 16:34:21 2025 by rpki-client