$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft File: PVXHhOoXkS8OlgolxsqSDhACMAo.mft (raw, json) Hash identifier: Pgt1FQKQt/g8ytY2g9ADLModVSing2uOnOe7McnHg9E= Subject key identifier: 22:0F:19:BF:0E:84:0A:6B:10:BC:54:50:3A:75:5D:4A:A1:7B:9D:C3 Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A Certificate issuer: /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A Certificate serial: 061F Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft Manifest number: 060A Signing time: Thu 01 May 2025 02:14:29 +0000 Manifest this update: Thu 01 May 2025 02:14:28 +0000 Manifest next update: Sat 03 May 2025 02:14:28 +0000 Files and hashes: 1: PVXHhOoXkS8OlgolxsqSDhACMAo.crl (hash: a6YcOLk4PjKh/xd5pDQDErHLKFyLSMg6kveHXXXhgMI=) 2: 4F98057C463A11EC8FC05E15D8A014CE.roa (hash: xBs6Vj/OeiFnzOXPhSwdSucFxUDsg3Mh5ATS3BYbuQQ=) 3: A081D0764BB711EC90B9B946D8A014CE.roa (hash: gyJOxBOesIDsoX+F0wCqdrw9sX0TpvZI+h6iVzCHXus=) 4: 8665119A463911EC88B22A14D8A014CE.roa (hash: 9v5B2xaH3Bc4zwDA3exaH6jQCediAk11PcOAPXe7o5k=) 5: D6EDC7E0517E11EEB8E0E4124AD9E6FC.roa (hash: FEIMhfmeS/WDUY9eK4oDCHAUgtEzM8qgwjxj7XmdiaM=) 6: 5A777F624BB811EC988AD647D8A014CE.roa (hash: 1YHFKzIw60VPhLGMqgaM8DC3X+uEENoWlpBODyIvx+8=) 7: 88C7F19A463A11EC8A6DCA15D8A014CE.roa (hash: anrHJdrDwUVVxzqA0H5Lv7h5BhwjhCFTP0rDmIVAs5g=) 8: 2D81E60CD70411EFA4774B68762E951A.roa (hash: WMzMow+21CqdCgojBhlWOGoOTPRBXGbF6iL94Q4Dv5A=) 9: D955A76630FE11ECB753D321D8A014CE.roa (hash: xjCeaYd+LKJvUwcXfMZMX504OiVLskv9I2sBgX5AZDo=) 10: 44276DB4463911EC8EA8D613D8A014CE.roa (hash: 4eP0uQUhgh8UojN9cwAJrEyBjLKtzCe+6TB80lYgykw=) 11: 29A1C4C4463B11ECBE2BB116D8A014CE.roa (hash: O5Px9+yMxD3h4TaIj58cVZ2T/wrbePoVvt5KjLdgZMg=) 12: C25BF862463911EC9C659114D8A014CE.roa (hash: TAmKKzQBDoLwr1xj5R0Z1MOOtgdIjMvjgf/j1EH6WSQ=) 13: 05AE8E624BB811ECB8B77047D8A014CE.roa (hash: IqZdrn6PDd5tCiFmENh9gtBL/vqPbtxvIIhISM2npRA=) 14: 5B28A01A463811ECB5776C12D8A014CE.roa (hash: sw9X0bgyaC8iP6hm/pS3038w/pYcaM83WRGaPy6yt0M=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 03 May 2025 00:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1567 (0x61f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A Validity Not Before: May 1 02:14:28 2025 GMT Not After : May 3 02:14:28 2025 GMT Subject: CN=6812d904-ecef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:be:86:97:b7:58:56:f0:18:d2:63:cd:ee:7c: ac:ce:88:b2:b9:66:88:22:53:2d:7d:bd:cd:8b:b0: 3c:8a:42:f9:68:7c:a6:d4:2f:67:f4:00:8a:16:af: 91:50:91:90:c0:d0:2d:d2:28:a7:47:f1:95:01:af: a5:26:4f:a1:03:b9:ff:34:fb:e9:83:47:81:3f:41: d1:56:96:df:1b:ac:5f:00:a6:95:f8:58:cb:4d:1d: e2:80:6b:be:dd:96:39:dc:fd:20:35:7f:0a:bc:2f: c0:fe:87:26:d4:59:1e:d2:39:51:c1:cf:e7:fd:68: 25:8e:ba:39:4b:99:0c:0f:5e:b2:c2:24:48:2d:2b: 0d:ff:fd:56:c0:a6:dc:28:1c:bd:de:2f:67:39:09: db:aa:dd:b5:be:43:04:c9:ab:cd:40:a3:8e:91:16: 88:6d:68:32:cc:1e:a8:0c:7f:21:d9:a9:cb:76:32: ff:38:5d:34:75:6a:bc:51:31:e7:ce:f8:3d:5b:a4: 91:13:e2:77:b4:82:c7:f9:c4:ae:83:5f:04:1e:73: 9e:cb:aa:11:6c:86:63:9a:ab:d5:ef:3f:40:f3:f2: 59:68:f4:cf:25:19:fe:09:b8:0b:49:fc:2a:a2:d0: 1e:20:8d:1c:bb:4f:a2:a5:85:da:97:fa:64:d6:16: 7a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0F:19:BF:0E:84:0A:6B:10:BC:54:50:3A:75:5D:4A:A1:7B:9D:C3 X509v3 Authority Key Identifier: keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:11:d2:dd:0d:fa:5d:70:1d:4d:fc:bf:f0:36:0a:0f:4c:de: 0c:6f:89:58:da:2e:e1:09:99:20:1b:7e:d4:c5:4f:14:44:0d: a8:28:13:ee:ea:16:bd:1b:09:4e:14:9e:a9:c0:86:95:8b:9a: 5b:7e:06:3b:a0:c3:e3:83:a6:7a:43:5a:de:4c:b0:d2:46:4d: 51:53:04:04:3f:cf:fc:58:16:b7:0d:b6:d6:ae:94:de:49:79: 1c:7a:3c:94:1f:1a:9a:a5:10:01:84:2a:7d:98:3f:f6:ce:ac: bc:00:b5:dd:97:fe:f5:a3:37:6e:08:39:30:6d:8a:93:50:6b: 8b:bf:04:8c:53:8d:9e:95:52:8a:bd:7c:a7:a3:ef:11:4a:e4: 09:6c:4f:79:21:fb:8c:07:86:f2:b0:da:46:93:17:3a:1d:22: a1:a1:2a:1c:25:68:db:9d:bd:61:b4:e3:af:68:8e:d1:3f:b3: 82:3f:86:cb:41:85:0b:aa:75:6f:1b:cf:c6:51:d8:19:d0:a6: 71:4e:39:dc:e8:49:db:8c:53:63:08:10:75:3e:e8:97:24:87: 25:c6:32:24:5d:6d:19:37:3c:c7:6c:86:17:d4:13:66:09:42: 19:ce:1e:d8:4f:8f:9b:b7:ad:8c:58:09:07:bf:63:6f:6d:c4: 1d:18:21:27 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBh8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky MEUxMDAyMzAwQTAeFw0yNTA1MDEwMjE0MjhaFw0yNTA1MDMwMjE0MjhaMBgxFjAU BgNVBAMTDTY4MTJkOTA0LWVjZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQD1voaXt1hW8BjSY83ufKzOiLK5ZogiUy19vc2LsDyKQvlofKbUL2f0AIoW r5FQkZDA0C3SKKdH8ZUBr6UmT6EDuf80++mDR4E/QdFWlt8brF8AppX4WMtNHeKA a77dljnc/SA1fwq8L8D+hybUWR7SOVHBz+f9aCWOujlLmQwPXrLCJEgtKw3//VbA ptwoHL3eL2c5Cduq3bW+QwTJq81Ao46RFohtaDLMHqgMfyHZqct2Mv84XTR1arxR MefO+D1bpJET4ne0gsf5xK6DXwQec57LqhFshmOaq9XvP0Dz8llo9M8lGf4JuAtJ /Cqi0B4gjRy7T6KlhdqX+mTWFnpJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUIg8Z vw6ECmsQvFRQOnVdSqF7ncMwHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NDcxMkYvRTlDNEJBQTJBMEU4MTFFQjg4OTU4RDEwRjhB RUEyMjgvUFZYSGhPb1hrUzhPbGdvbHhzcVNEaEFDTUFvLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1EdLdDfpdcB1N/L/wNgoPTN4Mb4lY 2i7hCZkgG37UxU8URA2oKBPu6ha9GwlOFJ6pwIaVi5pbfgY7oMPjg6Z6Q1reTLDS Rk1RUwQEP8/8WBa3DbbWrpTeSXkcejyUHxqapRABhCp9mD/2zqy8ALXdl/71ozdu CDkwbYqTUGuLvwSMU42elVKKvXyno+8RSuQJbE95IfuMB4bysNpGkxc6HSKhoSoc JWjbnb1htOOvaI7RP7OCP4bLQYULqnVvG8/GUdgZ0KZxTjnc6EnbjFNjCBB1PuiX JIclxjIkXW0ZNzzHbIYX1BNmCUIZzh7YT4+bt62MWAkHv2NvbcQdGCEn -----END CERTIFICATE-----Generated at Thu May 1 08:48:35 2025 by rpki-client