$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft File: _fS_ABOx8arKOVUbpibKJGg9rmY.mft (raw, json) Hash identifier: 6+6XH5pxIaXK/+OcP0s7lwDB+46btJ0Ky5Z8Bt8kOSw= Subject key identifier: F0:4D:03:62:65:3F:5E:D3:6F:77:F8:61:C2:85:67:7E:03:21:8A:38 Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66 Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66 Certificate serial: 0246 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft Manifest number: 0223 Signing time: Mon 16 Jun 2025 04:22:55 +0000 Manifest this update: Mon 16 Jun 2025 04:22:54 +0000 Manifest next update: Wed 18 Jun 2025 04:22:54 +0000 Files and hashes: 1: _fS_ABOx8arKOVUbpibKJGg9rmY.crl (hash: 2IbWO9o7Qu6Ko/tN5lUBBKK8jKMqb8xh8fzywxaiARw=) 2: F105F828C4CE11EE939D5160775412E6.roa (hash: OVT2chMQ0Nq/o8KrWCxuVSBa6IdJd925oWRD0nztHjI=) 3: 6F89EC1EC4CE11EEB915BB5F775412E6.roa (hash: 0xzDQTGktY5SNT/oNqNDkR69eV9keuHEiaiK1qaTKh4=) 4: B1F8097EC4D211EE86535866775412E6.roa (hash: 59lN/fUbuBzBsApqG3IvBcdXKT4GXqevkBfORr82FQA=) 5: 8BA49FD0C4D211EE9EC4EB65775412E6.roa (hash: L8cuHjbSNz6+bJ/gQju0YrhFVS2tYAIiSMeuYmThWuI=) 6: DD77B4AAC4D211EEBEB69266775412E6.roa (hash: OydxnI/hxoPiyhR17/Tng3O2ILM83hRZhWDiNRN/dU4=) 7: 95C2E55CC4CE11EEB298E25F775412E6.roa (hash: 34ivVx7kCxvEM20aUk37oRsDslYZlA+xl4ns6+aB5gY=) 8: 93B700F2C4F311EE8E31E298775412E6.roa (hash: jxWkgZfYWgXiUGFUDEKR/McM7BfyCoS5P8Hm5K309v0=) 9: E93581BEC4CD11EEBD97B25E775412E6.roa (hash: 55Va12oDO8S1u6Db0FeTKlFuk9K47Rv37Hrdea7bPcE=) 10: 3DF8B8D4C4D211EEB1EC7C65775412E6.roa (hash: 9LziG0V2OwJ9n1u0dLn4KBFXmSSOMd2hKZ8b5zKpu9c=) 11: 4101D022C4CF11EEB2F10961775412E6.roa (hash: dLi4goldq2t98cgYBuvk9Jpn/HGg3ZCmLTC1jEDXh+8=) 12: FAD1EE98C4D311EEB8EF5B68775412E6.roa (hash: xrzrQk6N9A7y+gGJ1sq9ZLmMErelK63jEZa0HOn6EEE=) 13: 06EC9B8EC4CE11EE9CCFD65E775412E6.roa (hash: yxTa4SshiNJ7DHcSq54/OxpqqW1oYG+0q8Vz/U0eUK4=) 14: 4C0E8C0EC4C911EE87647756775412E6.roa (hash: 3hEwrhsuSNEta/SbVkYuC8E8cEE9Br3Bj2hXmqXW6Og=) 15: C1BC264CC4CD11EE89C2885E775412E6.roa (hash: /4XiUCjd/sd1xIFdMVmhioY/RKg6IR+Ajo98X8uy0lo=) 16: 48E43AECC4D311EE8C1B3F67775412E6.roa (hash: u/n56Tta7OlwGuEqOpX71XLsZT2jKpBxkP39WXUlLLc=) 17: 1A50080EC4D411EE9683B268775412E6.roa (hash: caLtTbJU+Ufv7BiWj1H9Gw+w4cpOtHWxcr1WeZuKjJ8=) 18: 81B67878C4C711EEA9FDDB53775412E6.roa (hash: vTf8z95jt6AfKb+uGSv38KFOEqTok2j1GUU2yZdAI08=) 19: 52716D10C4C811EEA1131155775412E6.roa (hash: xQRXL5xCOGFaycHwp48gngmbdbohfcnsUJoty1rMzbc=) 20: 2A6C3F60C4CE11EEA3D4FA5E775412E6.roa (hash: C+KA4N0o/N/27ljFsz4ZdSUMg3iOEQO8xBx9RPaXKNI=) 21: 4F31EC96C4CE11EEA565525F775412E6.roa (hash: HcZFH7qDjDPGPIsCX8qhmZSQf24/4pPHFAyHS4PESuo=) 22: B3F2595EC4D311EE97A2CE67775412E6.roa (hash: ECdHU4AArULpOT1NztEszqbSD1WJnxMYYXF31fUvbrM=) 23: 68864AB4C4F311EE8BF25B98775412E6.roa (hash: 5ft3N//XILTGHx4xJyf0ZxLMMcxslek8pxu0nWzZdwE=) 24: 648C3F8CC4CF11EEB00B3061775412E6.roa (hash: FDVWcr2ZaAbCYXZ2KHJUxLsk/2sFqJr/Vx9+VGbIRJ4=) 25: 2283DBBEC4D311EEB2E6EA66775412E6.roa (hash: vDOXm9PXQ5Zd7c1zyElcj6kt2FJGk5QRFQWZ4OnkvEI=) 26: 870416B8C4C811EE906C4D55775412E6.roa (hash: Vbe2KHg+Or1EjP08Hg3ouXICYgnv4yFEfEZ5ZITCte4=) 27: D4A143FEC4D311EE8C6C1968775412E6.roa (hash: AgQ0WKMr6LdRsNIoXgyHASIpWGf5jCQAlVVsb6zmYZ8=) 28: 5DCB92C6C4D211EE8BD1A065775412E6.roa (hash: PsrWGlKMnmYkcFOTAbq8GoiP2U6q8o3llEg2ATal3EM=) 29: CCB4D870C59311EE927FFFA7775412E6.roa (hash: 9rD0WduujgyOlEWZ+vDkwaNAJhs7jTIfIlCfix8PC/0=) 30: 9073DE6CC4D311EEB0B9C867775412E6.roa (hash: elhNbqke+6Kl2ZATVb9O1DeKyGk/Aq6WgPyX415dPg0=) 31: 96B86BD6C4CD11EEA3C61A5E775412E6.roa (hash: 1/4BsRl0z2euLNjIiSiAv+wgrdGXz1NzXtlGPkiO18s=) 32: 684B797CC4D311EE816F8467775412E6.roa (hash: zrGP4qbV7TkM2QLEaYGOzJRGNrjbHqUR2QRTvJ966ic=) 33: BFE793D2C4CE11EE81D70760775412E6.roa (hash: YKo9lE8pH+B0lF4SQUvGTWgHthQjPN6oP/oPK/YNf8s=) 34: 1D9BA0C2C4CF11EE9D26CF60775412E6.roa (hash: 0X/6wOprzARBLwyRT7sbR4YEUnDHgpq1rvlRKwpi56E=) 35: FF49F7B4C4D211EEB6F1A266775412E6.roa (hash: qvVux5l6rnVThhETsGLH9EXoxv6/IKPh5G9ATtSGJFg=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 18 Jun 2025 00:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3655D2CAF, serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66 Validity Not Before: Jun 16 04:22:54 2025 GMT Not After : Jun 18 04:22:54 2025 GMT Subject: CN=684f9c1f-8787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4d:00:18:a2:40:a8:2e:b7:b2:ec:0e:b9:2e: 1f:77:c7:1d:f7:75:35:e6:d0:c9:ed:d7:82:77:7d: bd:19:3a:f5:ee:c3:d7:ea:dc:71:fb:c7:24:36:7a: e0:ac:4b:01:02:99:5e:e3:3e:ce:1d:a8:df:e0:b0: 13:15:c3:e6:25:90:77:9e:2f:c4:23:c0:33:03:9e: 7d:b0:66:2c:dc:a2:22:cd:4c:9a:4f:97:9c:10:d0: 76:bc:87:ed:76:c8:70:09:9d:aa:da:43:ff:fa:30: 47:4b:94:fc:77:36:a3:ac:33:10:20:33:c2:7f:b5: d4:09:ca:8a:90:20:2f:2a:70:9a:4b:0c:2e:52:7c: 58:7e:af:16:17:85:9c:b6:0b:10:fb:83:c1:36:5d: 9a:07:a1:b4:63:27:31:5f:84:37:f5:cd:b4:0a:ca: 5c:36:43:b3:9d:7c:6c:ea:44:18:47:f2:c2:62:8e: d8:34:1b:fb:7e:0d:ac:8f:54:a4:07:21:2d:96:b7: 08:76:dd:6d:1a:b2:fc:17:82:07:ca:20:c7:8c:0b: 69:4f:e9:f8:58:df:96:f4:50:04:d3:dc:60:e6:33: 38:86:c2:61:df:45:ec:52:8a:59:7e:cf:77:32:49: 3d:91:6d:a8:35:6c:c7:01:9e:94:41:49:aa:44:51: 32:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4D:03:62:65:3F:5E:D3:6F:77:F8:61:C2:85:67:7E:03:21:8A:38 X509v3 Authority Key Identifier: keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9c:14:f2:58:10:1d:88:14:9c:16:37:80:be:5f:46:22:ab: 56:f5:ba:cb:26:a4:c3:1c:16:97:75:4f:90:4f:77:ea:ca:e1: 63:bf:7c:67:dc:3b:c9:94:e8:0d:77:0d:f3:82:b5:ad:00:b6: ff:de:fb:99:a4:51:f0:d5:5e:fe:0a:ef:d1:d7:49:2e:9f:50: fb:38:2c:f7:7f:26:55:9d:a0:47:68:bb:1e:78:45:55:ff:9d: 03:4e:ba:9b:23:40:4f:f7:84:4e:db:95:fe:e9:e3:7c:45:39: 02:7f:81:c2:a4:9a:26:35:f3:b9:88:ad:65:74:af:d9:78:e8: 09:49:3d:44:7a:4f:a5:ff:65:80:53:4a:b7:ce:6b:3e:54:4e: 88:0d:a2:a1:c2:8b:f3:59:d8:f8:3d:b3:3e:c0:a6:ab:9e:03: de:ff:27:48:4a:8f:11:fe:85:91:ce:ff:80:67:4f:b2:c1:8c: 76:39:32:9e:00:a6:3e:18:11:6b:cf:9c:4a:27:09:01:be:08: 44:9a:5a:21:5e:1f:63:8c:85:86:56:a4:3e:3f:1d:04:1f:10: ce:0f:36:bb:97:e9:f6:e4:d8:95:41:d9:02:2e:54:50:78:bc: d7:6c:50:b3:b6:36:f6:76:6b:1f:97:52:28:c5:1b:4b:86:d5: c8:f0:24:91 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NTVEMkNBRjExMC8GA1UEBRMoRkRGNEJGMDAxM0IxRjFBQUNBMzk1NTFCQTYyNkNB MjQ2ODNEQUU2NjAeFw0yNTA2MTYwNDIyNTRaFw0yNTA2MTgwNDIyNTRaMBgxFjAU BgNVBAMTDTY4NGY5YzFmLTg3ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDHTQAYokCoLrey7A65Lh93xx33dTXm0Mnt14J3fb0ZOvXuw9fq3HH7xyQ2 euCsSwECmV7jPs4dqN/gsBMVw+YlkHeeL8QjwDMDnn2wZizcoiLNTJpPl5wQ0Ha8 h+12yHAJnaraQ//6MEdLlPx3NqOsMxAgM8J/tdQJyoqQIC8qcJpLDC5SfFh+rxYX hZy2CxD7g8E2XZoHobRjJzFfhDf1zbQKylw2Q7OdfGzqRBhH8sJijtg0G/t+DayP VKQHIS2Wtwh23W0asvwXggfKIMeMC2lP6fhY35b0UATT3GDmMziGwmHfRexSill+ z3cyST2Rbag1bMcBnpRBSapEUTLBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU8E0D YmU/XtNvd/hhwoVnfgMhijgwHwYDVR0jBBgwFoAU/fS/ABOx8arKOVUbpibKJGg9 rmYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjU1RDJDLzFENjRDMkZDQzRDMzExRUU5QzQxOTk0Qzc3NTQxMkU2L19mU19B Qk94OGFyS09WVWJwaWJLSkdnOXJtWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL19mU19BQk94OGFyS09WVWJwaWJLSkdnOXJtWS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NTVEMkMvMUQ2NEMyRkNDNEMzMTFFRTlDNDE5OTRDNzc1 NDEyRTYvX2ZTX0FCT3g4YXJLT1ZVYnBpYktKR2c5cm1ZLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAanBTyWBAdiBScFjeAvl9GIqtW9brL JqTDHBaXdU+QT3fqyuFjv3xn3DvJlOgNdw3zgrWtALb/3vuZpFHw1V7+Cu/R10ku n1D7OCz3fyZVnaBHaLseeEVV/50DTrqbI0BP94RO25X+6eN8RTkCf4HCpJomNfO5 iK1ldK/ZeOgJST1Eek+l/2WAU0q3zms+VE6IDaKhwovzWdj4PbM+wKarngPe/ydI So8R/oWRzv+AZ0+ywYx2OTKeAKY+GBFrz5xKJwkBvghEmlohXh9jjIWGVqQ+Px0E HxDODza7l+n25NiVQdkCLlRQeLzXbFCztjb2dmsfl1IoxRtLhtXI8CSR -----END CERTIFICATE-----Generated at Mon Jun 16 19:29:44 2025 by rpki-client