$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft File: kz9w25gXuEj4wIYagksQEX3FGSw.mft (raw, json) Hash identifier: mTcSV486UTSSw3e4OtpJIx7hboPnB6wJMqc0x8Kt+I8= Subject key identifier: 30:09:95:CD:DB:FC:C2:93:AD:60:E5:FB:27:49:7A:FA:95:E5:35:B0 Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Certificate serial: 034D Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft Manifest number: 033D Signing time: Thu 01 May 2025 03:33:29 +0000 Manifest this update: Thu 01 May 2025 03:33:29 +0000 Manifest next update: Sat 03 May 2025 03:33:29 +0000 Files and hashes: 1: kz9w25gXuEj4wIYagksQEX3FGSw.crl (hash: Wl9IuFETeiSnmkFsqYQNVpyZ77j7is+/OQE5ZJg26Qk=) 2: B104EE44D53311EE8BE4F36C775412E6.roa (hash: RqxwUBj2Bc+OGaTDdk4x7to8RcdRWFqstSwOVMh1no8=) 3: 1E005EBCD53811EEA636DE73775412E6.roa (hash: NZukzj3sWyjYLO9ToCsVsgQAC/kq2Oo6mzyBtHQWmD8=) 4: 8ED6BADCD53311EEB2A2C36C775412E6.roa (hash: 4/E5JqKYHi82tnNDpVDrDiMaVaUcTpYsZcy/yA05uhA=) 5: 0DEEF6F0D53311EEB556F46B775412E6.roa (hash: P5ibcWLG9H1Kur9SCsMbIiX3jBWNN4xNF46xx72YQHI=) 6: A5A2959EDD3D11EEBAF174B7775412E6.roa (hash: ODN6UQwLRLuCmMW2LaPD2vWq9D+bquTGny4/1fInMQE=) 7: E5662DD4A17A11EEAB16F955D25BE465.roa (hash: nQB8uEKFdXSZvidfMMlhgfBX43bi5bFfOgAaXmAWfUM=) 8: 64C2AA52D53411EEB69B076E775412E6.roa (hash: ApnKXgX4qtwCc4Ec2u4PHGuX3hUujQ6rhZ5C7rafC04=) 9: 6DD19D16D53311EE8136926C775412E6.roa (hash: v2hwM/LETMN1QLgipB8E8B+3kZLiPan/2yTGEjfAszc=) 10: 4FFFB85ED53311EE9E536E6C775412E6.roa (hash: D+tEjQwBXIivLTAaXT7TthK1xPvy3VJOqpaVsbM3hVk=) 11: 3F0DCC84D53811EE9F160874775412E6.roa (hash: ZQcO3DmU3Brb6BRvD6IVWLlf8rwN0CI8i4MNTEzPGK0=) 12: BCD1ADAAD53511EEA3B22470775412E6.roa (hash: d12Kr2qwAhbDBscwoutPKxlu3aElunyjg9Yu2LBeVsw=) 13: E4B0AF5CDD3B11EE8C72BDB4775412E6.roa (hash: 0arozNRt9JTjzBkDd/i9r9NcNES2kthw5/x77T8UhJo=) 14: DF52896AD53711EE84074A73775412E6.roa (hash: uIa+9vsGlaMu/Injc/vzOUtcnqp2BVTquSWUrb4Yn00=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 03 May 2025 00:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 845 (0x34d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F364321AAR, serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Validity Not Before: May 1 03:33:29 2025 GMT Not After : May 3 03:33:29 2025 GMT Subject: CN=6812eb89-ff1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:10:b6:0e:76:cd:90:51:e3:74:7c:6c:5d:ec: 30:32:a3:eb:63:45:a6:0d:c6:0c:ab:03:f1:28:dc: 12:9e:b2:7a:d6:cd:f1:01:12:2a:7a:ac:52:be:31: e6:b2:ba:ce:51:5f:6e:df:c4:08:7a:33:42:2f:5c: f3:56:6b:5f:de:c3:b6:d1:be:05:09:02:a4:d4:d4: 59:51:0e:c8:31:51:0b:38:4f:17:6d:9d:02:0f:a2: 9a:b2:20:f6:ae:46:89:0d:d1:da:ad:ce:e1:5d:4b: 22:46:a1:09:b4:d5:c5:ae:fe:53:0f:f0:99:10:7d: 6b:6a:bc:61:ac:3d:47:06:29:a1:4e:a5:e4:d2:86: 4d:51:b6:18:af:45:ef:32:d8:f2:3e:43:df:79:40: 11:f8:4a:ce:67:8c:f0:6f:d3:45:43:d8:6f:62:cb: 2e:a4:1b:e4:93:4d:a6:cf:9a:ed:e6:b8:0c:fb:b9: df:be:a7:2c:70:8e:aa:c5:a5:6d:74:2c:d3:eb:14: 14:cb:b5:70:7f:3b:54:05:42:38:2d:9b:6e:87:a5: 30:ac:a9:86:75:45:6f:f3:b6:24:04:a5:95:f0:2d: 99:0c:e0:3f:19:a8:2f:ea:2c:7e:ef:6a:9e:9a:f8: f7:53:b6:a5:0c:bd:bd:37:82:66:d2:c3:80:d5:1f: 5a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:09:95:CD:DB:FC:C2:93:AD:60:E5:FB:27:49:7A:FA:95:E5:35:B0 X509v3 Authority Key Identifier: keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:8b:cb:fb:37:7a:78:73:4c:eb:95:ae:5a:04:0f:ae:7f:55: 85:c3:02:d6:25:bc:ed:b8:f3:93:8d:d6:c6:5c:01:4c:4d:67: 26:cd:0d:88:b0:e3:c6:67:b9:06:89:76:e9:f1:6d:94:91:b5: db:21:5a:5c:da:fc:e6:e0:64:ac:e0:e6:4c:b4:5c:8d:54:11: 45:fa:b7:6c:6c:62:46:d8:c4:ca:79:eb:e4:5a:55:24:b1:59: 3f:7c:e0:1e:72:ee:2e:f0:87:c9:aa:b8:49:de:2a:72:20:ec: 20:05:a8:00:ae:59:09:ee:33:64:e1:07:49:94:fd:f0:d7:bb: 18:ea:e7:f3:ae:a3:5f:5b:0a:66:df:c1:08:5d:31:25:3d:6d: fc:96:de:53:75:56:75:03:5b:c9:cb:96:a9:6e:bd:4c:5f:12: 6d:61:60:ee:e1:db:85:2e:ff:ea:34:be:02:93:eb:7d:b2:57: 87:3f:32:d1:28:7e:5e:d6:6f:9a:8e:f5:87:25:e3:8d:7f:88: 07:38:b7:33:a3:9c:44:b8:42:dc:83:3e:69:59:27:15:3e:4c: 33:ac:d6:3e:df:6a:50:0d:eb:07:df:20:8c:3a:46:03:b6:ed: 20:85:43:a3:96:4c:e0:57:78:b8:c7:dd:69:5a:47:7d:b8:3c: 7a:5f:c9:c6 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICA00wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDMyMUFBUjExMC8GA1UEBRMoOTMzRjcwREI5ODE3Qjg0OEY4QzA4NjFBODI0QjEw MTE3REM1MTkyQzAeFw0yNTA1MDEwMzMzMjlaFw0yNTA1MDMwMzMzMjlaMBgxFjAU BgNVBAMTDTY4MTJlYjg5LWZmMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDUELYOds2QUeN0fGxd7DAyo+tjRaYNxgyrA/Eo3BKesnrWzfEBEip6rFK+ Meayus5RX27fxAh6M0IvXPNWa1/ew7bRvgUJAqTU1FlRDsgxUQs4TxdtnQIPopqy IPauRokN0dqtzuFdSyJGoQm01cWu/lMP8JkQfWtqvGGsPUcGKaFOpeTShk1Rthiv Re8y2PI+Q995QBH4Ss5njPBv00VD2G9iyy6kG+STTabPmu3muAz7ud++pyxwjqrF pW10LNPrFBTLtXB/O1QFQjgtm26HpTCsqYZ1RW/ztiQEpZXwLZkM4D8ZqC/qLH7v ap6a+PdTtqUMvb03gmbSw4DVH1odAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUMAmV zdv8wpOtYOX7J0l6+pXlNbAwHwYDVR0jBBgwFoAUkz9w25gXuEj4wIYagksQEX3F GSwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQzMjFBLzQ5M0U0NjJFQkNEQTExRURBMUZCMEZCMEYxMjIyNDY4L2t6OXcy NWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu L2t6OXcyNWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl cG9zaXRvcnkvRjM2NDMyMUEvNDkzRTQ2MkVCQ0RBMTFFREExRkIwRkIwRjEyMjI0 Njgva3o5dzI1Z1h1RWo0d0lZYWdrc1FFWDNGR1N3Lm1mdDA1BggrBgEFBQcwDYYp aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQATi8v7N3p4c0zrla5aBA+uf1WFwwLWJbzt uPOTjdbGXAFMTWcmzQ2IsOPGZ7kGiXbp8W2UkbXbIVpc2vzm4GSs4OZMtFyNVBFF +rdsbGJG2MTKeevkWlUksVk/fOAecu4u8IfJqrhJ3ipyIOwgBagArlkJ7jNk4QdJ lP3w17sY6ufzrqNfWwpm38EIXTElPW38lt5TdVZ1A1vJy5apbr1MXxJtYWDu4duF Lv/qNL4Ck+t9sleHPzLRKH5e1m+ajvWHJeONf4gHOLczo5xEuELcgz5pWScVPkwz rNY+32pQDesH3yCMOkYDtu0ghUOjlkzgV3i4x91pWkd9uDx6X8nG -----END CERTIFICATE-----Generated at Thu May 1 15:02:11 2025 by rpki-client