$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft File: k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft (raw, json) Hash identifier: hvMibsvRkkpk+fdiPgFC0iEUfvvvNK5vPPvvMzr2oGU= Subject key identifier: 45:D5:9A:7B:2C:4A:EA:FD:0B:51:2A:6F:A5:C4:82:9A:B0:4B:DA:48 Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F Certificate issuer: /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F Certificate serial: 0915 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft Manifest number: 090C Signing time: Thu 31 Jul 2025 01:34:01 +0000 Manifest this update: Thu 31 Jul 2025 01:34:00 +0000 Manifest next update: Sat 02 Aug 2025 01:34:00 +0000 Files and hashes: 1: k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl (hash: bgmbI4p5GYZoGDxUZfNw7B3c9Da3wKPf8sk88WadEM8=) 2: C7641772A95111E996327569F8AEA228.roa (hash: zc2sHBHJr4VAxxPP7oCatGt+nqgAgifPd0TVAOYCceY=) 3: A3FDC7B0A95111E9AAD65A69F8AEA228.roa (hash: 0K5eGgVbvu8FC7WyD8sLN1TIhCRCwpbYVJe4XMYjSoU=) 4: DB963EBAA95011E9B922BA68F8AEA228.roa (hash: vNERaKTpGQ3bPaoxkOtKP33r5596Gf5AbL5hU7WDtMM=) 5: 040A9D2CA95211E9BA19AD69F8AEA228.roa (hash: d5eKRJswPQOdst1U1f3S5KMf2lH/jWZCYOfKv1LJoCI=) 6: E558A086A95111E981E48069F8AEA228.roa (hash: MBZdMaPZOc8kPGCwpfLOeCgHyo2GuPSxS7SV1R8ZrgE=) 7: E95E4E02065B11F0BF610D92762E951A.roa (hash: hC1qoRCVr73SSJvtnxgOKj5VeDUtOUW6+PzCj2xq8vw=) 8: 833F912AA95111E9AEA64269F8AEA228.roa (hash: CVPSUPHc97z8+REt/xLFN1h3Agjjhgwt02UGfD7Jtsc=) 9: 7B3DF01C8F6F11E9B8F82D5FF8AEA228.roa (hash: nFOWMxTM8t65qguasjyQKc77AeNcYXGCBaZB7vYGI0Q=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 02 Aug 2025 00:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2325 (0x915) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36FEA6BAF, serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F Validity Not Before: Jul 31 01:34:00 2025 GMT Not After : Aug 2 01:34:00 2025 GMT Subject: CN=688ac809-3d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:86:14:0e:e1:fa:d5:2d:cc:53:ed:01:76:32: f4:f6:39:30:23:4b:d6:c5:52:87:bb:c7:40:6d:26: 49:d4:0c:21:35:49:da:e4:83:b6:61:77:c0:e6:e6: 31:5e:4c:99:f7:97:ab:f4:90:e7:89:52:73:3f:10: d4:3d:08:5d:68:b8:ed:ce:e1:2b:d0:23:31:1c:f4: 34:97:4c:28:e4:17:9f:c7:3d:d9:75:50:cb:6a:a2: 8e:e8:43:7e:d6:ec:03:9c:5f:d3:3d:d4:8a:b7:93: 74:30:2c:5f:c5:5b:40:27:02:96:40:68:47:2f:2d: e9:9f:aa:e1:7d:78:08:55:47:f6:f3:09:e6:ff:2d: 6e:95:96:02:93:e6:9c:70:31:a2:06:6b:c5:18:ac: fa:86:95:03:72:52:c8:52:77:49:f0:2c:25:6d:4a: 7d:82:c0:7b:85:40:c6:bc:dc:73:5f:03:ce:7b:26: ce:39:29:db:7c:62:80:70:89:e0:f1:24:b3:5c:ab: 3a:7d:9e:55:61:df:08:ad:8e:a5:9d:e2:e0:f9:90: 9b:5b:7d:26:23:77:ab:43:05:9b:20:d9:69:47:f3: d5:36:3f:13:53:d8:61:dc:e7:b7:57:d4:ac:c8:34: b8:22:7b:60:19:75:ca:e8:79:35:d6:e3:a2:0b:02: 0a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D5:9A:7B:2C:4A:EA:FD:0B:51:2A:6F:A5:C4:82:9A:B0:4B:DA:48 X509v3 Authority Key Identifier: keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:5d:4a:ba:d1:a8:6e:d7:d7:85:03:33:c8:92:ef:ca:ab:63: 45:a5:8a:20:4e:8e:f3:e7:c9:73:a5:6f:56:ea:1f:68:d8:50: d0:5d:42:19:b4:24:93:5b:59:c8:9b:07:20:27:84:cb:28:ae: b4:ae:da:a9:d1:ba:48:22:96:0b:5c:5a:16:56:1d:5c:c2:74: 81:6d:59:85:f1:76:ab:62:5a:89:06:39:3a:68:f5:92:41:fb: bf:d3:34:9f:f6:75:d1:1c:28:8a:d0:f2:47:94:02:f6:fc:b7: e5:b6:cf:ac:8c:56:b6:3b:71:b7:ed:69:84:0e:2e:cf:8d:77: 07:97:66:7a:ee:c9:5a:26:3a:49:e2:db:e6:d9:77:39:5e:d3: 35:93:85:c7:cd:7c:79:6a:27:5b:ce:c5:0e:cd:d8:6c:b7:15: 02:71:b7:28:d0:6a:5a:18:43:a0:ac:b8:5d:cb:83:85:71:7d: 4b:1c:20:27:1f:f6:9f:92:4d:4f:b9:6c:a0:01:2b:a9:b2:3e: d8:0a:9d:48:f6:16:db:d5:65:59:37:f2:79:d5:65:00:bf:5d: e8:75:77:06:7b:d0:be:78:e9:14:a6:f3:e3:5c:dd:c4:00:88: 08:0f:52:49:30:8b:a9:b6:da:e4:7c:6f:51:2f:3b:0d:50:96: 5e:70:f3:85 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCRUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RkVBNkJBRjExMC8GA1UEBRMoOTNDMkM5OUFGMEVDNEQxQTQ2NDM0OTdGNUY4Q0JE QzdFQzQ1NzQ4RjAeFw0yNTA3MzEwMTM0MDBaFw0yNTA4MDIwMTM0MDBaMBgxFjAU BgNVBAMTDTY4OGFjODA5LTNkNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDKhhQO4frVLcxT7QF2MvT2OTAjS9bFUoe7x0BtJknUDCE1Sdrkg7Zhd8Dm 5jFeTJn3l6v0kOeJUnM/ENQ9CF1ouO3O4SvQIzEc9DSXTCjkF5/HPdl1UMtqoo7o Q37W7AOcX9M91Iq3k3QwLF/FW0AnApZAaEcvLemfquF9eAhVR/bzCeb/LW6VlgKT 5pxwMaIGa8UYrPqGlQNyUshSd0nwLCVtSn2CwHuFQMa83HNfA857Js45Kdt8YoBw ieDxJLNcqzp9nlVh3witjqWd4uD5kJtbfSYjd6tDBZsg2WlH89U2PxNT2GHc57dX 1KzINLgie2AZdcroeTXW46ILAgo9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQURdWa eyxK6v0LUSpvpcSCmrBL2kgwHwYDVR0jBBgwFoAUk8LJmvDsTRpGQ0l/X4y9x+xF dI8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkZFQTZCLzdCMjc5MjBFOEI4MjExRTk4ODhCNkY3M0Y4QUVBMjI4L2s4TEpt dkRzVFJwR1EwbF9YNHk5eC14RmRJOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2s4TEptdkRzVFJwR1EwbF9YNHk5eC14RmRJOC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RkVBNkIvN0IyNzkyMEU4QjgyMTFFOTg4OEI2RjczRjhB RUEyMjgvazhMSm12RHNUUnBHUTBsX1g0eTl4LXhGZEk4Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDIXUq60ahu19eFAzPIku/Kq2NFpYog To7z58lzpW9W6h9o2FDQXUIZtCSTW1nImwcgJ4TLKK60rtqp0bpIIpYLXFoWVh1c wnSBbVmF8XarYlqJBjk6aPWSQfu/0zSf9nXRHCiK0PJHlAL2/Lflts+sjFa2O3G3 7WmEDi7PjXcHl2Z67slaJjpJ4tvm2Xc5XtM1k4XHzXx5aidbzsUOzdhstxUCcbco 0GpaGEOgrLhdy4OFcX1LHCAnH/afkk1PuWygASupsj7YCp1I9hbb1WVZN/J51WUA v13odXcGe9C+eOkUpvPjXN3EAIgID1JJMIupttrkfG9RLzsNUJZecPOF -----END CERTIFICATE-----Generated at Thu Jul 31 10:02:15 2025 by rpki-client