$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft File: kz9w25gXuEj4wIYagksQEX3FGSw.mft (raw, json) Hash identifier: C3fJPhmugORxGOWZgW/RD5P1G4zPAFg6Zcg2c+MsU5k= Subject key identifier: 69:F9:D8:86:69:D6:D6:35:6A:8E:05:5A:45:38:21:C0:CB:52:D7:1D Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Certificate serial: 037E Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft Manifest number: 036E Signing time: Wed 18 Jun 2025 10:35:09 +0000 Manifest this update: Wed 18 Jun 2025 10:35:08 +0000 Manifest next update: Fri 20 Jun 2025 10:35:08 +0000 Files and hashes: 1: kz9w25gXuEj4wIYagksQEX3FGSw.crl (hash: eLYo0hkhKW0Ddrfc4SAF9lmSJB5SwldSoDFgrwd3AKo=) 2: B104EE44D53311EE8BE4F36C775412E6.roa (hash: RqxwUBj2Bc+OGaTDdk4x7to8RcdRWFqstSwOVMh1no8=) 3: 1E005EBCD53811EEA636DE73775412E6.roa (hash: NZukzj3sWyjYLO9ToCsVsgQAC/kq2Oo6mzyBtHQWmD8=) 4: 8ED6BADCD53311EEB2A2C36C775412E6.roa (hash: 4/E5JqKYHi82tnNDpVDrDiMaVaUcTpYsZcy/yA05uhA=) 5: 0DEEF6F0D53311EEB556F46B775412E6.roa (hash: P5ibcWLG9H1Kur9SCsMbIiX3jBWNN4xNF46xx72YQHI=) 6: A5A2959EDD3D11EEBAF174B7775412E6.roa (hash: ODN6UQwLRLuCmMW2LaPD2vWq9D+bquTGny4/1fInMQE=) 7: E5662DD4A17A11EEAB16F955D25BE465.roa (hash: nQB8uEKFdXSZvidfMMlhgfBX43bi5bFfOgAaXmAWfUM=) 8: 64C2AA52D53411EEB69B076E775412E6.roa (hash: ApnKXgX4qtwCc4Ec2u4PHGuX3hUujQ6rhZ5C7rafC04=) 9: 6DD19D16D53311EE8136926C775412E6.roa (hash: v2hwM/LETMN1QLgipB8E8B+3kZLiPan/2yTGEjfAszc=) 10: 4FFFB85ED53311EE9E536E6C775412E6.roa (hash: D+tEjQwBXIivLTAaXT7TthK1xPvy3VJOqpaVsbM3hVk=) 11: 3F0DCC84D53811EE9F160874775412E6.roa (hash: ZQcO3DmU3Brb6BRvD6IVWLlf8rwN0CI8i4MNTEzPGK0=) 12: BCD1ADAAD53511EEA3B22470775412E6.roa (hash: d12Kr2qwAhbDBscwoutPKxlu3aElunyjg9Yu2LBeVsw=) 13: E4B0AF5CDD3B11EE8C72BDB4775412E6.roa (hash: 0arozNRt9JTjzBkDd/i9r9NcNES2kthw5/x77T8UhJo=) 14: DF52896AD53711EE84074A73775412E6.roa (hash: uIa+9vsGlaMu/Injc/vzOUtcnqp2BVTquSWUrb4Yn00=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 20 Jun 2025 10:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 894 (0x37e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F364321AAR, serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Validity Not Before: Jun 18 10:35:08 2025 GMT Not After : Jun 20 10:35:08 2025 GMT Subject: CN=6852965d-3b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:43:a3:e2:89:ba:d1:94:8d:da:8f:fc:62:2e: 60:33:b7:cd:ee:fd:b3:11:fa:35:22:6a:35:3c:91: f4:df:37:ee:c7:1e:eb:61:b8:04:80:b2:b1:bd:52: 0f:c0:0d:2c:8a:00:e4:98:64:e5:ef:97:4d:fb:d8: ad:d2:7e:3c:19:2d:0d:40:58:14:0f:27:42:f9:74: 90:de:49:6d:7a:46:26:a4:f3:30:44:c3:bf:2f:84: ab:21:3f:5a:89:f0:85:d8:2d:0b:88:60:90:f6:24: a2:a8:23:4c:ee:1c:61:e5:4a:0a:c2:72:94:47:af: ee:6a:c3:f8:9d:b8:72:5e:57:3d:26:22:6b:6b:ad: 42:73:a1:e3:28:6d:f0:0b:e5:fa:c2:cb:3d:0f:2a: 7a:83:76:31:ad:d5:6a:b6:9b:99:4c:c0:e9:a2:c2: 84:f0:8d:5d:18:68:1d:45:2f:cd:5e:d8:3f:9b:fe: 82:ff:e3:79:05:1d:bb:ed:25:90:e1:91:a4:e3:78: fb:0d:4e:81:c2:7a:f8:e6:b7:31:35:a1:ef:55:84: 57:f6:98:a7:42:c3:dc:99:7c:3d:1e:0d:6a:cc:0e: 0c:e8:9e:68:98:e5:32:ac:5e:f2:1a:06:e1:e6:55: b6:0e:98:ed:42:ba:18:b3:e3:27:18:00:08:ba:ff: 95:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F9:D8:86:69:D6:D6:35:6A:8E:05:5A:45:38:21:C0:CB:52:D7:1D X509v3 Authority Key Identifier: keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:06:73:56:9b:cb:99:33:f7:d7:3b:95:14:db:06:3e:03:10: af:9c:d5:85:75:71:d7:0a:39:ab:68:8c:8d:25:4c:32:38:77: e5:a4:9f:be:6d:13:4e:76:3d:4f:47:58:74:4b:18:88:8a:2a: 12:67:fd:ee:92:d4:7f:63:b1:d0:f2:a2:07:6c:20:23:9b:a5: eb:98:95:aa:ce:a7:7c:fc:65:1b:c0:a8:b0:cd:05:a5:87:f2: a9:3e:3c:b1:7b:b7:f1:49:04:73:12:80:37:ed:3d:3c:28:4a: eb:6d:7b:ef:6c:e6:6d:d4:da:58:b3:66:a4:0c:32:f9:d8:9b: e8:84:11:f1:12:69:e3:14:c8:45:72:97:53:75:8e:4a:9a:c3: 47:1c:6c:16:0c:94:4f:40:da:87:83:dc:06:d3:2d:e3:69:39: fc:7c:5b:4a:ca:da:85:71:74:a1:ef:7a:05:b0:e0:a0:b0:fe: 1f:bf:8f:fe:1a:cb:6d:56:db:b3:2e:0b:b3:6f:c9:e3:5b:e1: 59:67:be:6e:22:d9:be:d4:bc:e2:20:6e:1c:22:f6:83:47:d2: 7a:f3:b2:1f:cf:c3:1e:42:cb:3f:4a:76:e2:93:6c:8e:5d:31: ed:f1:9f:93:10:6a:83:f8:37:de:4f:a1:7e:d1:29:b7:58:66: 03:e5:11:a9 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICA34wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDMyMUFBUjExMC8GA1UEBRMoOTMzRjcwREI5ODE3Qjg0OEY4QzA4NjFBODI0QjEw MTE3REM1MTkyQzAeFw0yNTA2MTgxMDM1MDhaFw0yNTA2MjAxMDM1MDhaMBgxFjAU BgNVBAMTDTY4NTI5NjVkLTNiM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDZQ6PiibrRlI3aj/xiLmAzt83u/bMR+jUiajU8kfTfN+7HHuthuASAsrG9 Ug/ADSyKAOSYZOXvl0372K3SfjwZLQ1AWBQPJ0L5dJDeSW16Riak8zBEw78vhKsh P1qJ8IXYLQuIYJD2JKKoI0zuHGHlSgrCcpRHr+5qw/iduHJeVz0mImtrrUJzoeMo bfAL5frCyz0PKnqDdjGt1Wq2m5lMwOmiwoTwjV0YaB1FL81e2D+b/oL/43kFHbvt JZDhkaTjePsNToHCevjmtzE1oe9VhFf2mKdCw9yZfD0eDWrMDgzonmiY5TKsXvIa BuHmVbYOmO1Cuhiz4ycYAAi6/5XZAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUafnY hmnW1jVqjgVaRTghwMtS1x0wHwYDVR0jBBgwFoAUkz9w25gXuEj4wIYagksQEX3F GSwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQzMjFBLzQ5M0U0NjJFQkNEQTExRURBMUZCMEZCMEYxMjIyNDY4L2t6OXcy NWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu L2t6OXcyNWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl cG9zaXRvcnkvRjM2NDMyMUEvNDkzRTQ2MkVCQ0RBMTFFREExRkIwRkIwRjEyMjI0 Njgva3o5dzI1Z1h1RWo0d0lZYWdrc1FFWDNGR1N3Lm1mdDA1BggrBgEFBQcwDYYp aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwBnNWm8uZM/fXO5UU2wY+AxCvnNWFdXHX CjmraIyNJUwyOHflpJ++bRNOdj1PR1h0SxiIiioSZ/3uktR/Y7HQ8qIHbCAjm6Xr mJWqzqd8/GUbwKiwzQWlh/KpPjyxe7fxSQRzEoA37T08KErrbXvvbOZt1NpYs2ak DDL52JvohBHxEmnjFMhFcpdTdY5KmsNHHGwWDJRPQNqHg9wG0y3jaTn8fFtKytqF cXSh73oFsOCgsP4fv4/+GsttVtuzLguzb8njW+FZZ75uItm+1LziIG4cIvaDR9J6 87Ifz8MeQss/Snbik2yOXTHt8Z+TEGqD+DfeT6F+0Sm3WGYD5RGp -----END CERTIFICATE-----Generated at Thu Jun 19 05:17:25 2025 by rpki-client