$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft File: k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft (raw, json) Hash identifier: orfWssifiPTfk1+3cvq8+PZ6h+oGS9l7cVi6JuQnKwg= Subject key identifier: B0:3B:55:FB:2C:3C:17:08:FF:02:43:AE:46:45:99:3C:2F:46:45:B4 Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F Certificate issuer: /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F Certificate serial: 0946 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft Manifest number: 093D Signing time: Thu 18 Sep 2025 01:29:18 +0000 Manifest this update: Thu 18 Sep 2025 01:29:18 +0000 Manifest next update: Sat 20 Sep 2025 01:29:17 +0000 Files and hashes: 1: k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl (hash: lF20yTKikAb3KW4PRonJFIDtbkYNN2m8jdKr7n4Qs7Q=) 2: C7641772A95111E996327569F8AEA228.roa (hash: zc2sHBHJr4VAxxPP7oCatGt+nqgAgifPd0TVAOYCceY=) 3: A3FDC7B0A95111E9AAD65A69F8AEA228.roa (hash: 0K5eGgVbvu8FC7WyD8sLN1TIhCRCwpbYVJe4XMYjSoU=) 4: DB963EBAA95011E9B922BA68F8AEA228.roa (hash: vNERaKTpGQ3bPaoxkOtKP33r5596Gf5AbL5hU7WDtMM=) 5: 040A9D2CA95211E9BA19AD69F8AEA228.roa (hash: d5eKRJswPQOdst1U1f3S5KMf2lH/jWZCYOfKv1LJoCI=) 6: E558A086A95111E981E48069F8AEA228.roa (hash: MBZdMaPZOc8kPGCwpfLOeCgHyo2GuPSxS7SV1R8ZrgE=) 7: E95E4E02065B11F0BF610D92762E951A.roa (hash: hC1qoRCVr73SSJvtnxgOKj5VeDUtOUW6+PzCj2xq8vw=) 8: 833F912AA95111E9AEA64269F8AEA228.roa (hash: CVPSUPHc97z8+REt/xLFN1h3Agjjhgwt02UGfD7Jtsc=) 9: 7B3DF01C8F6F11E9B8F82D5FF8AEA228.roa (hash: nFOWMxTM8t65qguasjyQKc77AeNcYXGCBaZB7vYGI0Q=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 20 Sep 2025 00:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2374 (0x946) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36FEA6BAF, serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F Validity Not Before: Sep 18 01:29:18 2025 GMT Not After : Sep 20 01:29:17 2025 GMT Subject: CN=68cb606e-cd86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:42:19:eb:39:43:5c:8e:e4:e3:a3:fd:51:8b: 30:71:2e:e7:d4:07:43:a0:6d:0b:07:60:68:e5:c5: cc:ad:88:a6:88:81:42:37:6f:85:aa:0b:7e:9b:27: e2:3e:97:23:f3:0c:97:ce:c4:c4:d4:8c:87:09:b6: d4:44:f4:3c:4c:70:7f:fd:c2:25:de:7b:e7:05:56: 67:83:f4:4f:dd:53:76:38:68:27:ef:3a:c7:fb:93: a5:f0:ee:5c:e8:43:15:e0:e8:9d:fa:d8:20:f2:54: 6e:5f:11:81:d4:c6:e1:4c:9a:84:10:9e:77:ce:90: 09:a5:ac:01:5b:63:80:bb:39:8e:59:da:1c:4f:70: d8:b0:e1:25:ee:9b:74:a3:a1:5b:b5:ca:ff:b3:21: 9c:3d:bc:fa:a8:6b:6c:8e:59:14:62:d8:00:a9:c7: e5:e9:46:12:d7:c8:95:2b:be:71:25:be:61:ec:1c: 56:c4:29:7a:31:19:ac:bd:19:12:81:9f:57:90:3f: 59:0f:b5:f3:52:f7:fd:05:02:29:94:35:bf:f8:73: a5:42:85:13:88:9c:b3:08:89:3d:25:90:65:a1:0a: 09:24:33:83:bd:3f:d5:a8:80:be:c5:7e:fd:fa:0a: 3e:79:40:a7:ed:eb:ce:cb:0f:c5:f4:42:8c:a7:5c: ab:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3B:55:FB:2C:3C:17:08:FF:02:43:AE:46:45:99:3C:2F:46:45:B4 X509v3 Authority Key Identifier: keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:72:e6:77:74:26:e5:e8:1b:dc:a1:33:a5:8a:7b:a7:ca:46: 8e:ad:3a:94:a4:12:24:4e:30:ae:b3:80:37:7f:cf:b3:fd:65: 79:4b:f9:8d:38:e8:b1:6e:1b:94:29:97:43:ce:68:81:48:5c: 74:15:6d:c1:3c:9c:13:f9:5b:3c:d7:b2:b9:4c:32:dc:d5:e9: 16:dc:51:14:92:2d:ff:9d:4e:9d:95:81:b9:63:10:a7:e4:80: 05:20:ef:61:a4:75:f0:8b:42:dd:d5:f1:46:df:a2:23:fd:78: f4:80:ba:20:d6:86:ad:42:1a:c0:c7:60:eb:44:4a:fa:91:65: 84:1a:f1:ad:36:86:09:b4:4e:56:58:25:0b:99:d8:d7:e7:75: fc:29:ca:a8:c5:a4:c6:62:53:eb:b1:79:ab:9d:c4:f3:48:74: 4b:ad:87:37:df:6a:d2:db:86:01:3a:5b:e4:fb:95:7f:8b:78: f6:89:3e:71:b8:07:28:c5:ba:e5:5c:33:7d:bf:40:e8:af:ea: 0c:9c:ff:e1:ae:73:07:d6:f8:7b:0e:22:af:46:e9:49:eb:13: bb:82:bb:92:a6:39:ad:65:d4:93:53:d1:60:bb:bb:9f:e8:fa: db:61:ee:e5:a8:ca:fe:15:07:6d:c5:98:f7:76:b6:44:b1:20: 0f:cc:ac:33 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCUYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RkVBNkJBRjExMC8GA1UEBRMoOTNDMkM5OUFGMEVDNEQxQTQ2NDM0OTdGNUY4Q0JE QzdFQzQ1NzQ4RjAeFw0yNTA5MTgwMTI5MThaFw0yNTA5MjAwMTI5MTdaMBgxFjAU BgNVBAMTDTY4Y2I2MDZlLWNkODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDKQhnrOUNcjuTjo/1RizBxLufUB0OgbQsHYGjlxcytiKaIgUI3b4WqC36b J+I+lyPzDJfOxMTUjIcJttRE9DxMcH/9wiXee+cFVmeD9E/dU3Y4aCfvOsf7k6Xw 7lzoQxXg6J362CDyVG5fEYHUxuFMmoQQnnfOkAmlrAFbY4C7OY5Z2hxPcNiw4SXu m3SjoVu1yv+zIZw9vPqoa2yOWRRi2ACpx+XpRhLXyJUrvnElvmHsHFbEKXoxGay9 GRKBn1eQP1kPtfNS9/0FAimUNb/4c6VChROInLMIiT0lkGWhCgkkM4O9P9WogL7F fv36Cj55QKft687LD8X0QoynXKtXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUsDtV +yw8Fwj/AkOuRkWZPC9GRbQwHwYDVR0jBBgwFoAUk8LJmvDsTRpGQ0l/X4y9x+xF dI8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkZFQTZCLzdCMjc5MjBFOEI4MjExRTk4ODhCNkY3M0Y4QUVBMjI4L2s4TEpt dkRzVFJwR1EwbF9YNHk5eC14RmRJOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2s4TEptdkRzVFJwR1EwbF9YNHk5eC14RmRJOC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RkVBNkIvN0IyNzkyMEU4QjgyMTFFOTg4OEI2RjczRjhB RUEyMjgvazhMSm12RHNUUnBHUTBsX1g0eTl4LXhGZEk4Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJcuZ3dCbl6BvcoTOlinunykaOrTqU pBIkTjCus4A3f8+z/WV5S/mNOOixbhuUKZdDzmiBSFx0FW3BPJwT+Vs817K5TDLc 1ekW3FEUki3/nU6dlYG5YxCn5IAFIO9hpHXwi0Ld1fFG36Ij/Xj0gLog1oatQhrA x2DrREr6kWWEGvGtNoYJtE5WWCULmdjX53X8KcqoxaTGYlPrsXmrncTzSHRLrYc3 32rS24YBOlvk+5V/i3j2iT5xuAcoxbrlXDN9v0Dor+oMnP/hrnMH1vh7DiKvRulJ 6xO7gruSpjmtZdSTU9Fgu7uf6PrbYe7lqMr+FQdtxZj3drZEsSAPzKwz -----END CERTIFICATE-----Generated at Thu Sep 18 08:12:02 2025 by rpki-client