$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft File: oTaOi_yA9OpasJcW0lchGTYYKFE.mft (raw, json) Hash identifier: DpFnU24f5oZOW7brvdDhyCvh3pOnFrG6G05noGEipPw= Subject key identifier: E5:2A:11:0A:9E:B3:30:50:0F:42:39:1E:AF:37:80:EC:48:C6:E3:BE Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51 Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851 Certificate serial: 0D06 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft Manifest number: 0CD6 Signing time: Sat 03 May 2025 01:06:00 +0000 Manifest this update: Sat 03 May 2025 01:06:00 +0000 Manifest next update: Mon 05 May 2025 01:06:00 +0000 Files and hashes: 1: oTaOi_yA9OpasJcW0lchGTYYKFE.crl (hash: xTJj40iwY0oXOHpo8mJuaDlaWKen1ey12d1IaB6P8N0=) 2: 688FF63C70EA11EBB58E686CF8AEA228.roa (hash: mnhwlEYLBW14RTC3favyxPOzROufnwHo5mG4Z0mXmcE=) 3: 717250DC0B1F11F0979AD09D762E951A.roa (hash: EIY2uiwrUgRTGGH5CKTX60VMZhCwzhDQZwIzPuQyzLk=) 4: FF8AE3A2D27511EBA434AC13F8AEA228.roa (hash: 5+HC4jv4qZLLiwXnjuwHxqCdddSlDf0nEOGWfUV5PQQ=) 5: 316A8CAAEAD711EBBF227926D8A014CE.roa (hash: yxveE6pApv0ntB+dr/mwCV5WzRHfetSEdQFEmXgoicI=) 6: 2A0F92DAF65311EABA5EBE2FF8AEA228.roa (hash: THMJd5DgFhWv0Jk+1OcRnImey6Na8xQ3AsnqGvmdW70=) 7: 7454200CCAC611EB8443867EF8AEA228.roa (hash: hzz/vJ+aqnVoQNL7Q9fjlul0hrPt6hbCLM46iL+BL7I=) 8: C0A9CF84CAC511EBAD8F747DF8AEA228.roa (hash: 32bh8lnMpMvqyS9cax+2bQBhBK15D7Xt6pmKKyWGT1I=) 9: 48EF3A4CCAC511EBA25AC67CF8AEA228.roa (hash: akzUSGdVFPvN0ulPbNTi4W3s+HlY+6W8WohYYTP53AQ=) 10: 8E9FB58ACAC511EB9B981F7DF8AEA228.roa (hash: i2XbNZNySL6bjfPeeqcwKUmZc1PB1OXmHSBcuRJ9wok=) 11: 0B623002CAC611EBA5FDE97DF8AEA228.roa (hash: 7vqWPa/FVhwLVFvDKi4nljJ6iFh6Jfsi7spX+XnzJ70=) 12: 4E58D686CAC611EB9365587EF8AEA228.roa (hash: 4ThPqE6/bQdWLeN6MKhRWORK90ZVKeZ9eefEc7xOcFU=) 13: 89672DF86D9011EEB83415874AD9E6FC.roa (hash: GCv1qnJWw7EowPAn9i0uz0mqCeC5AHRLSdr3MuuzS/U=) 14: 97B6F442464111ECBD1F4A20D8A014CE.roa (hash: WFh81Czx23ss3LjWPFRZ0ox6H/FOzyhXrzAkY9AMcyE=) 15: FBDC85FE280211EFA2470CDD7CDC24C2.roa (hash: N2LzgJndLmvz3cDIsfFkVtUTemoZkwL0xxlWsp4hwb0=) 16: 6023B6466D9011EEB59691864AD9E6FC.roa (hash: 8Vfkb/3Ajxlzq/FEl75zlD6gPZ0n60l+v2tc/Wmueqg=) 17: 3730DFCE0B1F11F08F24969D762E951A.roa (hash: M4evIqnQ83xbCnZoy0k3D9VPp29Fp6WHTYW6UjV2Hb8=) 18: F2BA97A6CAC511EBB828B97DF8AEA228.roa (hash: MND7CmipLpfeKz1+bS7srpKpnj7/a7fnv2q2oc1dXDk=) 19: 6EE63CF0CAC511EBB74A097DF8AEA228.roa (hash: WPe/RcweAEsw7x1mmDsXfOpYOObfldXDxTckbMWoLT4=) 20: 9474CF86ED9E11EA9B405A41F8AEA228.roa (hash: 1ODaBYEbZc5lz2DA8RW3VSuCv0cfBzMfZN9Q4vPucaM=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 05 May 2025 00:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3334 (0xd06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851 Validity Not Before: May 3 01:06:00 2025 GMT Not After : May 5 01:06:00 2025 GMT Subject: CN=68156bf8-018f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b2:74:49:d2:00:2f:4d:34:29:3d:41:41:cc: e8:ba:c3:35:3c:48:29:73:ed:c9:ea:44:af:ee:b1: 7b:4c:4b:96:d0:e0:d8:22:13:1d:88:f8:7d:e3:35: e8:c7:88:36:7f:ba:e1:67:ba:a0:dd:b5:31:f9:46: 02:e5:f2:f7:81:fa:85:50:a5:a5:ca:43:c6:2f:e0: ca:25:1b:33:f9:b4:be:d7:a7:d6:29:7a:6a:1d:d6: b4:87:1c:bf:27:4a:96:fb:b6:1f:4c:62:1a:44:ef: ad:f7:1f:90:0e:54:4e:7f:f1:15:61:96:8a:13:a7: c6:ba:2f:c7:93:1b:12:9b:a7:2e:96:be:02:3c:df: 9a:d5:b4:af:6a:c6:17:a5:2b:77:21:b4:2b:0f:05: 41:29:1f:46:75:e3:ff:93:fe:ab:bc:45:85:b5:b3: ca:63:3f:b9:1e:b5:f5:66:75:a7:1e:d3:4f:da:40: e1:39:3d:7b:71:3d:65:1a:00:58:3c:24:38:96:c2: 6f:39:f5:da:c9:bd:02:d0:76:17:1f:37:19:93:c8: 04:5a:f0:7a:55:b9:40:d9:66:7e:a6:18:37:cf:06: 78:4e:43:fc:ca:af:8c:e0:13:dd:25:4a:40:86:fc: 54:61:06:d2:d6:05:d6:a5:bc:ac:27:a8:7c:5e:b4: 9d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2A:11:0A:9E:B3:30:50:0F:42:39:1E:AF:37:80:EC:48:C6:E3:BE X509v3 Authority Key Identifier: keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:76:d7:1d:fc:a1:fe:17:26:9d:f8:e0:c6:b0:c1:6a:05:a7: 79:c9:fc:80:d7:77:a7:5a:da:b1:eb:fc:30:f3:b2:e3:93:25: ba:f0:c0:e7:5c:ce:a3:4a:c9:de:c4:57:13:9d:2c:91:14:2b: 79:f8:a3:b2:43:26:ce:68:6a:b7:85:c7:97:59:b6:5d:a9:bc: bb:c0:24:bf:d8:9c:95:f1:1b:e7:84:12:d9:ac:69:63:ea:7b: 13:53:1a:95:c5:86:e5:8f:b0:04:3f:79:dc:86:2e:4e:11:87: b2:86:9b:c2:1a:f2:ce:af:93:ad:f6:b2:04:e7:ea:ab:93:40: 18:cb:b8:d2:2a:a3:ff:b0:18:c3:9a:1a:ff:b3:c2:24:cf:bb: 3d:c8:7d:2c:c5:51:9d:8c:49:db:b0:3f:37:c9:13:85:6e:0a: 82:dc:14:ec:52:93:92:69:81:d6:20:af:c4:c9:4e:09:29:0e: 1a:39:0e:15:bd:85:ef:a0:7b:f1:1a:bf:05:76:a4:39:35:1c: 99:38:82:d7:67:41:98:60:81:a1:96:bb:2c:d2:e2:75:eb:05: 64:c9:67:64:fc:d4:76:b2:7b:d1:b4:9d:80:ca:6e:85:3b:3b: db:30:67:7e:7e:53:cf:cb:f6:ad:f8:79:05:70:c4:7c:d4:98: 98:47:b3:00 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDQYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MkUzOUVBRjExMC8GA1UEBRMoQTEzNjhFOEJGQzgwRjRFQTVBQjA5NzE2RDI1NzIx MTkzNjE4Mjg1MTAeFw0yNTA1MDMwMTA2MDBaFw0yNTA1MDUwMTA2MDBaMBgxFjAU BgNVBAMTDTY4MTU2YmY4LTAxOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC5snRJ0gAvTTQpPUFBzOi6wzU8SClz7cnqRK/usXtMS5bQ4NgiEx2I+H3j NejHiDZ/uuFnuqDdtTH5RgLl8veB+oVQpaXKQ8Yv4MolGzP5tL7Xp9Ypemod1rSH HL8nSpb7th9MYhpE7633H5AOVE5/8RVhlooTp8a6L8eTGxKbpy6WvgI835rVtK9q xhelK3chtCsPBUEpH0Z14/+T/qu8RYW1s8pjP7ketfVmdace00/aQOE5PXtxPWUa AFg8JDiWwm859drJvQLQdhcfNxmTyARa8HpVuUDZZn6mGDfPBnhOQ/zKr4zgE90l SkCG/FRhBtLWBdalvKwnqHxetJ2zAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU5SoR Cp6zMFAPQjkerzeA7EjG474wHwYDVR0jBBgwFoAUoTaOi/yA9OpasJcW0lchGTYY KFEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4QUVBMjI4L29UYU9p X3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL29UYU9pX3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MkUzOUUvMjAwMTkxODQ4MEFCMTFFNkExMTdBRTYzRjhB RUEyMjgvb1RhT2lfeUE5T3Bhc0pjVzBsY2hHVFlZS0ZFLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAudtcd/KH+Fyad+ODGsMFqBad5yfyA 13enWtqx6/ww87LjkyW68MDnXM6jSsnexFcTnSyRFCt5+KOyQybOaGq3hceXWbZd qby7wCS/2JyV8RvnhBLZrGlj6nsTUxqVxYblj7AEP3nchi5OEYeyhpvCGvLOr5Ot 9rIE5+qrk0AYy7jSKqP/sBjDmhr/s8Ikz7s9yH0sxVGdjEnbsD83yROFbgqC3BTs UpOSaYHWIK/EyU4JKQ4aOQ4VvYXvoHvxGr8FdqQ5NRyZOILXZ0GYYIGhlrss0uJ1 6wVkyWdk/NR2snvRtJ2Aym6FOzvbMGd+flPPy/at+HkFcMR81JiYR7MA -----END CERTIFICATE-----Generated at Sat May 3 06:10:28 2025 by rpki-client