$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft File: YKDl0axmyK47fJ5qjvW8BLi7uI4.mft (raw, json) Hash identifier: GIjk116/catyBF+uvu7oy1h8FdxNhZA0DGnOtRmUrwU= Subject key identifier: 47:B5:D8:23:82:CD:2D:84:8F:85:F3:8C:8C:9B:48:C0:33:E6:B8:77 Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E Certificate serial: 0662 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft Manifest number: 05D2 Signing time: Fri 02 May 2025 02:45:59 +0000 Manifest this update: Fri 02 May 2025 02:45:59 +0000 Manifest next update: Sun 04 May 2025 02:45:59 +0000 Files and hashes: 1: YKDl0axmyK47fJ5qjvW8BLi7uI4.crl (hash: PKPDLkT9ONPpeMGk5IGBCcB/9HCuNzMG70YFQVJJpt8=) 2: 0091161A144C11F0801A51F76DB8BCC6.roa (hash: 9oNkMM3GJvaxowbYxronZzBOKB5XFOoDP/A6k15+A4M=) 3: 488D3EB060B211EF87A97782762E951A.roa (hash: MVYbN3+gCL8uNH5R81Zu9Ge2lQxWhVsfh/rM4ZRyn/w=) 4: 9D00E53A042411F0AE942178762E951A.roa (hash: 3lO4ySirvSBJZhZS0yYuZYZ1ZoMcdgb1UxXC64iMMus=) 5: 293DA02E0E9411EFB4C6A635017001B1.roa (hash: 3+KIiU4tfg4VsfxzRAEbpE5pkr5DnXevqMRkIzk01FM=) 6: 6C7ACBF26E0A11EFAC0C4258762E951A.roa (hash: 4grD6nGcP4ytHOjXft0LrvgGLuVL2rG269xNQf6k+eI=) 7: 372AC08C8CB511EF9888555B762E951A.roa (hash: etRxaBFYkDrFKylBsUD/HBMJSKuCjzex1c6EZ66GzPQ=) 8: 3D55B2F0C43211EF8166C3BD762E951A.roa (hash: Af+fAJ8B4YCQU1OF1pDiIpmVk8a59qwsOLlr9TGYlBo=) 9: 94B69FC84F1B11EFBF7CDAAE762E951A.roa (hash: KbxuO2uDPTezjLzyouQUc4XGgC1J865f/dnmoPHmv0Q=) 10: 31F31826606411EF89390EA0762E951A.roa (hash: XJE5bowMijOEb0dwq2uI3QNwKZq01TfKw2I/yEETF+o=) 11: 0C083320B24F11EF80B52F71762E951A.roa (hash: swBYnhkImW9LhM0qswhHNCFqzYvKajWSuD7zcbFshH8=) 12: 373D29E4095511F096A41CBE762E951A.roa (hash: myBILke2RQ0OYPU057gGO3OXC3ByHG2noie9RgjT7qM=) 13: 467A6B4248DF11EFA203A954762E951A.roa (hash: j6LGYpvEwxNC35muXut5alaxgRUMQT87ILx6kToC8Qs=) 14: E2FD811CBC6511EF9197B567762E951A.roa (hash: EXiNgxy7d0tjLX1SpsLd379Zi3cAwKIMh7UFB0zyfF0=) 15: 666FD3D82EEA11EFBC63294B762E951A.roa (hash: MTXkIou//Guz3KRl/9YKtpj6n9ZVBkXEGaijhN0evTk=) 16: 646F613C003311F0A1A285B3762E951A.roa (hash: bJ1ILmkYuUC3NN3I2YJ1a0bc80c543GbkB4NCNMhrPc=) 17: A8566A94136C11EF9A119E33017001B1.roa (hash: 8n6hGcHTkYJois2LH442hMoRDS4eG3DkPDkUW4heEZ8=) 18: BC5D3D90032D11F09ED36D5F762E951A.roa (hash: fZkSIZKqHjYLVMmlSF8FT38HnKjU0BqJ7lEBUixZVJ0=) 19: 509B5B80154B11EFAAF66569017001B1.roa (hash: XKlm75kmISAu8xaI2z4uwQrQDSSx5mypluivOS+f5kk=) 20: D2D9D000F8CA11EF9DBC905D762E951A.roa (hash: Jjmu7sdBAG5AgF3w4z9AnV0gRRvL2hD/xlTYph48lzY=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 04 May 2025 00:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1634 (0x662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E Validity Not Before: May 2 02:45:59 2025 GMT Not After : May 4 02:45:59 2025 GMT Subject: CN=681431e7-a30c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0c:95:e9:51:41:f3:ed:5e:21:ca:c9:f7:be: 80:d4:ee:d8:59:dd:66:f7:f8:6f:bb:c0:ae:0a:08: 74:2e:be:c2:25:c4:67:47:6d:56:68:c7:ec:62:cb: 24:af:79:93:57:79:8b:7a:0a:5f:7c:54:ed:76:4b: d0:7a:f9:1e:08:3f:59:3b:d9:f8:02:09:d3:51:24: 29:2f:29:27:c5:6e:c1:91:4a:37:d5:fa:a8:27:21: 77:5a:68:9f:fa:7c:fd:80:5e:d8:8a:d9:7b:53:fe: 0b:80:64:bf:6d:a7:51:de:be:d7:3e:41:2e:97:bc: d3:aa:e0:9c:8b:b8:76:38:c9:e8:02:3c:78:91:1f: 23:70:f0:d0:67:74:49:ef:4c:ab:45:16:2a:dd:f7: 87:71:83:24:8e:37:cb:1c:0a:10:ef:63:c9:05:61: 0e:12:59:d0:24:dc:ef:3b:84:38:3f:e5:9e:d7:ee: 05:a6:6a:60:25:bd:ad:fb:75:84:a2:9d:1a:ec:67: cd:d2:8b:d2:9d:9f:ae:ae:a6:53:c7:fa:2a:7f:ab: 36:fa:d8:e5:ef:61:ab:c2:f4:08:41:94:d2:1c:d4: c4:6b:04:d5:4d:c3:9a:03:3a:fc:54:a0:df:d1:86: c0:ba:01:9b:7a:10:74:49:4a:a1:92:8d:72:ed:b1: 39:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B5:D8:23:82:CD:2D:84:8F:85:F3:8C:8C:9B:48:C0:33:E6:B8:77 X509v3 Authority Key Identifier: keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ee:da:6d:b3:07:70:6f:f3:bb:7c:83:69:d5:7d:76:e7:a0: 34:23:4e:08:34:66:b8:45:e8:d6:54:39:40:c6:1d:dd:59:f9: 87:7b:64:6e:95:94:1f:ae:39:2e:c3:ba:36:15:f4:de:2d:db: 6d:62:58:06:69:17:c8:a9:91:25:22:3c:42:14:0d:50:b2:f3: 19:88:23:45:4c:2a:ef:8e:0a:4b:0f:1c:c3:73:b3:66:8c:a2: e4:34:b7:4b:eb:43:00:3a:20:7c:72:c1:6a:50:a3:25:74:c8: af:45:aa:26:9d:da:fd:25:87:9d:06:db:20:c6:cc:07:d5:bf: ad:73:aa:ed:b7:03:3c:ac:0c:a3:ce:f8:c9:16:df:db:4d:88: b2:93:ba:85:8b:14:60:e6:75:7a:ed:e9:59:ff:ff:33:d0:a8: 2c:3b:13:6e:83:22:b3:d3:58:e4:05:e9:a2:a8:ca:38:d0:7b: 5e:2b:a3:d8:3d:85:ac:04:d6:00:42:f1:af:da:cc:92:ce:db: 9d:51:2d:3e:2f:fa:1d:c7:0b:ce:76:80:93:c6:a3:09:31:e1: 6b:33:3e:52:f3:a2:17:a0:a5:1b:c0:ae:45:3d:92:2a:1d:7b: 37:e0:90:6a:1b:ef:70:b4:96:b1:88:ab:16:25:4c:92:12:a9: c2:18:44:c5 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBmIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD MDRCOEJCQjg4RTAeFw0yNTA1MDIwMjQ1NTlaFw0yNTA1MDQwMjQ1NTlaMBgxFjAU BgNVBAMTDTY4MTQzMWU3LWEzMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDFDJXpUUHz7V4hysn3voDU7thZ3Wb3+G+7wK4KCHQuvsIlxGdHbVZox+xi yySveZNXeYt6Cl98VO12S9B6+R4IP1k72fgCCdNRJCkvKSfFbsGRSjfV+qgnIXda aJ/6fP2AXtiK2XtT/guAZL9tp1Hevtc+QS6XvNOq4JyLuHY4yegCPHiRHyNw8NBn dEnvTKtFFird94dxgySON8scChDvY8kFYQ4SWdAk3O87hDg/5Z7X7gWmamAlva37 dYSinRrsZ83Si9Kdn66uplPH+ip/qzb62OXvYavC9AhBlNIc1MRrBNVNw5oDOvxU oN/RhsC6AZt6EHRJSqGSjXLtsTmxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUR7XY I4LNLYSPhfOMjJtIwDPmuHcwHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7 uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MTQ2NTkvNjY1NkRFNzQ2REY4MTFFQ0JDQzIxMDc2NUE0 MEQ1NzcvWUtEbDBheG15SzQ3Zko1cWp2VzhCTGk3dUk0Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAL7tptswdwb/O7fINp1X1256A0I04I NGa4RejWVDlAxh3dWfmHe2RulZQfrjkuw7o2FfTeLdttYlgGaRfIqZElIjxCFA1Q svMZiCNFTCrvjgpLDxzDc7NmjKLkNLdL60MAOiB8csFqUKMldMivRaomndr9JYed BtsgxswH1b+tc6rttwM8rAyjzvjJFt/bTYiyk7qFixRg5nV67elZ//8z0KgsOxNu gyKz01jkBemiqMo40HteK6PYPYWsBNYAQvGv2sySztudUS0+L/odxwvOdoCTxqMJ MeFrMz5S86IXoKUbwK5FPZIqHXs34JBqG+9wtJaxiKsWJUySEqnCGETF -----END CERTIFICATE-----Generated at Fri May 2 18:14:07 2025 by rpki-client