$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft File: jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft (raw, json) Hash identifier: 2HJBjvZPjScavZFQz1RAdcbfQPVD3ZCFpApPqIfDAx8= Subject key identifier: D3:CE:14:25:20:9C:A8:65:AE:B8:68:D4:D4:62:AC:3B:E3:C8:59:D6 Authority key identifier: 8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B Certificate issuer: /CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B Certificate serial: 0FEC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft Manifest number: 0F7A Signing time: Tue 06 May 2025 00:50:20 +0000 Manifest this update: Tue 06 May 2025 00:50:19 +0000 Manifest next update: Thu 08 May 2025 00:50:19 +0000 Files and hashes: 1: jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl (hash: qbJYwA7OoBbUBqefCQrE779d6tzaXYTT53SNFu9MSaM=) 2: 82FBB372A33F11EF9D8E7B9F762E951A.roa (hash: Z8VTeq5VqCny1+2qc2eer7aayU4OabcWlvbrSBQ3Ro0=) 3: 735085F4A33711EFBFDF326E762E951A.roa (hash: jq+UT0fK2rQNaQWZwZg77u/Waht7x2v+K6T6njUJmJs=) 4: 54C9E530A33C11EF8A87278C762E951A.roa (hash: Fipj06TEsqxVsD67CiV+Mvae6ysLWsUXL2sTVldoRiY=) 5: E48179B0A33F11EF9D185FA1762E951A.roa (hash: h1WcrKRrme1HSVB6iW5WfVK4RCLangeBC8c4FQmnp6M=) 6: 81687628A33D11EF9216D192762E951A.roa (hash: MvfxEFROJ1f++TBAwntjCOy+iPFhUtpXYzOBk7MbpP4=) 7: 9C775130A33011EF9B156D43762E951A.roa (hash: 4NbZq7JmrO2d8IflCmt6RHPllibhD0U5Ha7Xi8m2cPI=) 8: 8D61B536A33B11EF8C1E2886762E951A.roa (hash: dcFvRkXmKR5D9lCNCutI/eY/0GCKBG/swTZgNYWQDMY=) 9: BD6C4342A32F11EFAFC746BD762E951A.roa (hash: 35thfBdQw104zKjzssgfjCxYAhX2GyaM8nwv/1VU2vI=) 10: 60B5E0E0A32F11EFBE3358BB762E951A.roa (hash: KV4KZRn3mj8zp6sAZP8gPe1HTi1HLT0ooFTzAWyksqs=) 11: CEB92EECA34011EF8354EBA7762E951A.roa (hash: e/XiE/BTRSTugXSWmIFYyEVY36JAaMrSiY7TlscErnw=) 12: E6587778A33C11EFBA029B8E762E951A.roa (hash: rDQVkDweKoOmH2DbgJ7AoD1HobVkhybI6APGqQpO4LQ=) 13: 40CDEE54A32411EFBEA2AA76762E951A.roa (hash: ygTC9DuKVJ/n7JrTrzQh7m9cfirLf1U+TjLI8piQ1Js=) 14: DF802CB6A33711EF9437A370762E951A.roa (hash: Nhh/C7s39Zf/p6vDE9S3MXfBEg4Auj+HjABWmIR/tBE=) 15: 67AB7E84A34111EFB5E402AA762E951A.roa (hash: 6rGJ9xD1BmaW9JiB2JgP9Ns3uFYbBGDy9vjDStzzOIY=) 16: E9EB8D9EA32311EF998D4074762E951A.roa (hash: f7LbuCsz1hH/ZnBV298StqdOFHNpw2u4DY5EmshcxuE=) 17: 5184AD26A33011EFA3900B41762E951A.roa (hash: vZEzW20+Dxa0Bltx2ptZesMsOHj6zG5xhOYGhqGHcpk=) 18: 2C76CC86A33E11EFBB321097762E951A.roa (hash: PemMUTC7nta4SQMeeYXeNHrbnDsXMh5V6ePiUVaeRVo=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 08 May 2025 00:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4076 (0xfec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3634D22AF, serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B Validity Not Before: May 6 00:50:19 2025 GMT Not After : May 8 00:50:19 2025 GMT Subject: CN=68195ccc-a179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f4:cb:86:4e:a5:80:30:34:00:88:d3:02:bf: f3:06:a8:4e:d0:06:4f:ee:45:ca:bb:6b:08:b3:56: 8c:27:5c:ee:2b:18:38:75:ca:db:3b:c3:cb:48:bd: 49:26:c9:16:bd:9d:09:92:f5:77:5c:d6:92:55:5f: ef:76:ff:68:1b:df:ac:81:cd:df:af:63:ca:f7:d0: 39:75:03:6d:9d:c6:25:09:7e:7f:fb:9e:d0:8c:03: c5:17:d7:90:86:97:fb:63:53:99:7a:94:0c:85:24: 14:0f:c0:ea:08:b9:f7:ac:7e:b6:7c:c8:bb:72:ed: 35:53:2d:49:cc:73:7f:9b:15:fe:72:66:e4:51:99: 5a:c3:fa:32:a4:a0:95:bd:27:3f:b6:f6:0e:65:4e: 08:c2:c6:62:6b:3c:44:d3:32:4d:1c:c9:4b:43:29: 9f:6d:c0:50:58:d8:76:fc:56:32:4d:71:fe:1c:6e: b8:99:93:38:59:a7:b4:57:61:00:03:39:01:d8:05: a8:94:7e:17:5d:df:10:a5:c3:31:8f:35:23:65:16: 4d:31:b9:56:d8:79:a8:5b:f5:0a:d4:cd:24:91:7b: 8c:55:54:d2:7e:a9:18:7b:37:c4:e6:bc:ac:70:73: b6:d5:02:5e:fd:30:bd:71:ef:21:ac:8a:41:94:16: 23:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CE:14:25:20:9C:A8:65:AE:B8:68:D4:D4:62:AC:3B:E3:C8:59:D6 X509v3 Authority Key Identifier: keyid:8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:67:b2:ac:74:a7:dc:1b:8a:2f:1c:4b:db:ad:e8:34:97:35: 6a:25:c4:e3:b7:ca:93:7c:c8:07:ca:7e:96:24:9b:81:e6:1a: 91:08:fd:07:c3:51:15:bb:55:82:c8:54:25:e0:79:ef:72:d1: 99:ae:81:05:0a:f0:59:3b:4b:e8:86:30:64:6a:b7:21:11:61: 0e:d8:f3:71:bf:a6:44:9a:e5:c3:1c:4d:1e:a0:63:fd:e7:1d: 6e:cc:78:db:be:72:62:43:e1:cb:9f:7a:c7:14:90:47:c9:53: cf:c5:36:f1:08:ff:43:d1:7b:5a:8f:80:97:69:83:c4:f9:fa: 1f:ca:5a:10:80:43:b1:9e:84:72:c1:f8:2d:9f:c5:82:41:be: f8:a8:af:78:7c:94:7e:5a:0c:0f:ed:19:0c:0d:1e:08:8a:4a: 9a:0f:ea:7c:e8:13:01:3c:8a:e2:1d:f4:79:ad:76:78:63:34: b5:00:53:7d:c1:44:ee:0b:8a:57:9a:2c:4d:4c:cb:a9:c2:9e: b1:76:41:df:4e:a1:f6:41:d9:d6:4b:fc:e4:6d:d9:fb:f4:7b: 27:9e:b7:e0:5c:73:10:fa:8a:96:02:70:d8:67:d4:db:10:f2: 0c:72:2c:fa:84:3d:ff:9f:ed:ce:8f:df:51:73:cf:0e:e5:4d: 6d:db:9c:6a -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICD+wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MzREMjJBRjExMC8GA1UEBRMoOEQwMUQ4MDhFODk3NzQ1NDNERTIyRDBEQTg0NDM3 OEVDRUE4QkI5QjAeFw0yNTA1MDYwMDUwMTlaFw0yNTA1MDgwMDUwMTlaMBgxFjAU BgNVBAMTDTY4MTk1Y2NjLWExNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDM9MuGTqWAMDQAiNMCv/MGqE7QBk/uRcq7awizVownXO4rGDh1yts7w8tI vUkmyRa9nQmS9Xdc1pJVX+92/2gb36yBzd+vY8r30Dl1A22dxiUJfn/7ntCMA8UX 15CGl/tjU5l6lAyFJBQPwOoIufesfrZ8yLty7TVTLUnMc3+bFf5yZuRRmVrD+jKk oJW9Jz+29g5lTgjCxmJrPETTMk0cyUtDKZ9twFBY2Hb8VjJNcf4cbriZkzhZp7RX YQADOQHYBaiUfhdd3xClwzGPNSNlFk0xuVbYeahb9QrUzSSRe4xVVNJ+qRh7N8Tm vKxwc7bVAl79ML1x7yGsikGUFiPpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU084U JSCcqGWuuGjU1GKsO+PIWdYwHwYDVR0jBBgwFoAUjQHYCOiXdFQ94i0NqEQ3js6o u5swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjM0RDIyLzFENUY3QzI2MDQ3MzExRTU4MEMxOEEwNkY4QUVBMjI4L2pRSFlD T2lYZEZROTRpME5xRVEzanM2b3U1cy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2pRSFlDT2lYZEZROTRpME5xRVEzanM2b3U1cy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MzREMjIvMUQ1RjdDMjYwNDczMTFFNTgwQzE4QTA2RjhB RUEyMjgvalFIWUNPaVhkRlE5NGkwTnFFUTNqczZvdTVzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBaZ7KsdKfcG4ovHEvbreg0lzVqJcTj t8qTfMgHyn6WJJuB5hqRCP0Hw1EVu1WCyFQl4HnvctGZroEFCvBZO0vohjBkarch EWEO2PNxv6ZEmuXDHE0eoGP95x1uzHjbvnJiQ+HLn3rHFJBHyVPPxTbxCP9D0Xta j4CXaYPE+fofyloQgEOxnoRywfgtn8WCQb74qK94fJR+WgwP7RkMDR4IikqaD+p8 6BMBPIriHfR5rXZ4YzS1AFN9wUTuC4pXmixNTMupwp6xdkHfTqH2QdnWS/zkbdn7 9HsnnrfgXHMQ+oqWAnDYZ9TbEPIMciz6hD3/n+3Oj99Rc88O5U1t25xq -----END CERTIFICATE-----Generated at Tue May 6 03:55:44 2025 by rpki-client