$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft File: YKDl0axmyK47fJ5qjvW8BLi7uI4.mft (raw, json) Hash identifier: IZ9xt0gIk/OVLBBf2owij2f1+47qs4vqJWmBaddBtPM= Subject key identifier: 8E:C0:94:BD:D2:CD:1A:A1:85:8F:EE:03:A8:72:E0:93:1A:E7:20:A8 Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E Certificate serial: 06A1 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft Manifest number: 060C Signing time: Thu 19 Jun 2025 02:45:58 +0000 Manifest this update: Thu 19 Jun 2025 02:45:57 +0000 Manifest next update: Sat 21 Jun 2025 02:45:57 +0000 Files and hashes: 1: YKDl0axmyK47fJ5qjvW8BLi7uI4.crl (hash: DPEng5Y9kKjtcl6WeQ2wtlB/kKl0TQsn+IUjQRlUcHw=) 2: 0091161A144C11F0801A51F76DB8BCC6.roa (hash: 9oNkMM3GJvaxowbYxronZzBOKB5XFOoDP/A6k15+A4M=) 3: 488D3EB060B211EF87A97782762E951A.roa (hash: MVYbN3+gCL8uNH5R81Zu9Ge2lQxWhVsfh/rM4ZRyn/w=) 4: 9D00E53A042411F0AE942178762E951A.roa (hash: 3lO4ySirvSBJZhZS0yYuZYZ1ZoMcdgb1UxXC64iMMus=) 5: CBF2E4B829EC11F0A80400EBDAE4EC9C.roa (hash: JxQxoQO5e0xyVP8JrZC6HNTSh2BQxTdpde2yD+5NMPI=) 6: 293DA02E0E9411EFB4C6A635017001B1.roa (hash: 3+KIiU4tfg4VsfxzRAEbpE5pkr5DnXevqMRkIzk01FM=) 7: 6C7ACBF26E0A11EFAC0C4258762E951A.roa (hash: 4grD6nGcP4ytHOjXft0LrvgGLuVL2rG269xNQf6k+eI=) 8: 372AC08C8CB511EF9888555B762E951A.roa (hash: etRxaBFYkDrFKylBsUD/HBMJSKuCjzex1c6EZ66GzPQ=) 9: 3D55B2F0C43211EF8166C3BD762E951A.roa (hash: Af+fAJ8B4YCQU1OF1pDiIpmVk8a59qwsOLlr9TGYlBo=) 10: 94B69FC84F1B11EFBF7CDAAE762E951A.roa (hash: KbxuO2uDPTezjLzyouQUc4XGgC1J865f/dnmoPHmv0Q=) 11: 0C083320B24F11EF80B52F71762E951A.roa (hash: swBYnhkImW9LhM0qswhHNCFqzYvKajWSuD7zcbFshH8=) 12: 373D29E4095511F096A41CBE762E951A.roa (hash: myBILke2RQ0OYPU057gGO3OXC3ByHG2noie9RgjT7qM=) 13: 467A6B4248DF11EFA203A954762E951A.roa (hash: j6LGYpvEwxNC35muXut5alaxgRUMQT87ILx6kToC8Qs=) 14: D64D49223E5911F0956A9DBBDAE4EC9C.roa (hash: YsGQStqKKIJfkra1egaJQtfLnvLGLX2PlxNcSWIc/0Q=) 15: 01E1321A3E5A11F0B7F45DBCDAE4EC9C.roa (hash: tNYBiIqQJL0JjP5Fr7JKp7+lo47X4fq0T1n16WVA4Lc=) 16: E2FD811CBC6511EF9197B567762E951A.roa (hash: EXiNgxy7d0tjLX1SpsLd379Zi3cAwKIMh7UFB0zyfF0=) 17: 666FD3D82EEA11EFBC63294B762E951A.roa (hash: MTXkIou//Guz3KRl/9YKtpj6n9ZVBkXEGaijhN0evTk=) 18: 646F613C003311F0A1A285B3762E951A.roa (hash: bJ1ILmkYuUC3NN3I2YJ1a0bc80c543GbkB4NCNMhrPc=) 19: A8566A94136C11EF9A119E33017001B1.roa (hash: 8n6hGcHTkYJois2LH442hMoRDS4eG3DkPDkUW4heEZ8=) 20: BC5D3D90032D11F09ED36D5F762E951A.roa (hash: fZkSIZKqHjYLVMmlSF8FT38HnKjU0BqJ7lEBUixZVJ0=) 21: 509B5B80154B11EFAAF66569017001B1.roa (hash: XKlm75kmISAu8xaI2z4uwQrQDSSx5mypluivOS+f5kk=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 21 Jun 2025 00:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1697 (0x6a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E Validity Not Before: Jun 19 02:45:57 2025 GMT Not After : Jun 21 02:45:57 2025 GMT Subject: CN=685379e6-39d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:92:d3:1f:40:3a:e5:d5:f9:e8:2d:f2:03: 3c:d5:0a:f7:c1:44:2f:f3:f5:51:8c:43:c5:02:0d: 20:41:67:3c:24:d2:49:9b:96:58:7d:ba:35:08:1f: c8:6f:9f:48:a3:e4:a6:64:84:ca:92:b5:d4:f2:e6: 71:4d:0a:72:6d:f1:09:4b:5a:e5:b5:10:5e:1f:91: 93:f0:d2:d1:b9:48:e9:a4:d6:e6:0f:64:77:2d:b2: 7e:a1:5a:d6:09:1e:26:11:32:6a:44:56:27:57:3a: c0:ce:08:bd:ae:62:62:14:57:08:33:aa:c1:4b:e8: 66:4c:18:3e:e2:70:27:16:11:77:d4:a6:f7:fa:29: f2:cf:be:04:79:d4:0e:de:90:e8:02:d0:4b:3b:08: 32:94:93:c8:38:0f:5f:c2:a6:2d:2c:0d:16:de:8c: 05:55:75:48:75:99:57:81:d2:d7:fd:d1:66:e3:4c: 93:34:9e:61:aa:ce:aa:9a:14:51:5c:1f:01:e5:14: df:ab:49:c1:b6:23:01:fb:5c:b2:33:67:33:d6:42: 52:ba:aa:a5:bc:dd:c2:9a:2b:20:61:cb:61:32:ab: 5a:f6:3b:0e:7e:9c:d0:b4:08:95:83:2d:3e:02:cd: d6:a0:c1:91:79:3c:19:0e:02:de:21:3e:8f:e2:e9: 18:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C0:94:BD:D2:CD:1A:A1:85:8F:EE:03:A8:72:E0:93:1A:E7:20:A8 X509v3 Authority Key Identifier: keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:ab:d7:99:c8:d7:05:8c:24:03:ef:2c:b9:f0:24:61:63:96: 06:c8:77:d6:54:a8:32:12:b2:4e:1c:f8:1b:83:f4:c0:6d:b5: b7:b5:cd:4b:e5:73:c9:aa:70:ae:9d:ab:68:75:df:72:33:76: d5:4c:43:82:dd:a3:73:98:02:47:c0:b6:9c:68:0d:71:07:5f: d1:d5:c2:41:d8:20:25:40:2a:d3:e9:40:1d:a2:dc:51:24:3a: 8d:6e:f4:45:66:97:21:f9:10:80:75:9c:29:68:dd:a6:79:16: 4f:3b:9d:75:2c:2d:17:31:d9:0f:60:ef:39:be:b5:ac:33:d5: 51:e3:89:d4:68:95:e0:81:e6:fb:61:aa:62:88:5d:e6:f7:3e: 80:97:19:2c:79:69:6e:0c:24:02:5b:70:d0:c3:0b:88:49:a2: ae:1b:1b:60:44:2f:7d:12:97:b0:a3:56:c2:91:2b:1b:b6:31: 76:16:c2:f8:3a:f9:6f:c6:c1:38:06:26:b8:90:8c:7d:d6:a1: 80:ca:a7:3e:01:64:8f:7c:7f:45:38:7b:1e:63:c6:cd:43:5b: d2:4e:f2:48:27:46:3d:71:d4:59:f5:91:2d:9a:c4:63:f0:47: 18:6f:54:64:59:2f:5b:b4:b9:ea:e7:dd:b6:48:3f:47:bd:16: fe:1b:bf:05 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBqEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD MDRCOEJCQjg4RTAeFw0yNTA2MTkwMjQ1NTdaFw0yNTA2MjEwMjQ1NTdaMBgxFjAU BgNVBAMTDTY4NTM3OWU2LTM5ZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC/MpLTH0A65dX56C3yAzzVCvfBRC/z9VGMQ8UCDSBBZzwk0kmbllh9ujUI H8hvn0ij5KZkhMqStdTy5nFNCnJt8QlLWuW1EF4fkZPw0tG5SOmk1uYPZHctsn6h WtYJHiYRMmpEVidXOsDOCL2uYmIUVwgzqsFL6GZMGD7icCcWEXfUpvf6KfLPvgR5 1A7ekOgC0Es7CDKUk8g4D1/Cpi0sDRbejAVVdUh1mVeB0tf90WbjTJM0nmGqzqqa FFFcHwHlFN+rScG2IwH7XLIzZzPWQlK6qqW83cKaKyBhy2Eyq1r2Ow5+nNC0CJWD LT4CzdagwZF5PBkOAt4hPo/i6RghAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUjsCU vdLNGqGFj+4DqHLgkxrnIKgwHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7 uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MTQ2NTkvNjY1NkRFNzQ2REY4MTFFQ0JDQzIxMDc2NUE0 MEQ1NzcvWUtEbDBheG15SzQ3Zko1cWp2VzhCTGk3dUk0Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCFq9eZyNcFjCQD7yy58CRhY5YGyHfW VKgyErJOHPgbg/TAbbW3tc1L5XPJqnCunatodd9yM3bVTEOC3aNzmAJHwLacaA1x B1/R1cJB2CAlQCrT6UAdotxRJDqNbvRFZpch+RCAdZwpaN2meRZPO511LC0XMdkP YO85vrWsM9VR44nUaJXggeb7YapiiF3m9z6AlxkseWluDCQCW3DQwwuISaKuGxtg RC99Epewo1bCkSsbtjF2FsL4OvlvxsE4Bia4kIx91qGAyqc+AWSPfH9FOHseY8bN Q1vSTvJIJ0Y9cdRZ9ZEtmsRj8EcYb1RkWS9btLnq5922SD9HvRb+G78F -----END CERTIFICATE-----Generated at Thu Jun 19 07:00:32 2025 by rpki-client