$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft File: _fS_ABOx8arKOVUbpibKJGg9rmY.mft (raw, json) Hash identifier: d2vWae8wIH5EeHnirJ6GObRhBMQHRLAR8o+cjo5x9Xw= Subject key identifier: 5B:09:E1:25:58:61:7A:C8:19:51:9E:3B:14:D9:35:0A:5A:A8:78:24 Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66 Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66 Certificate serial: 0214 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft Manifest number: 01F1 Signing time: Sun 27 Apr 2025 04:19:52 +0000 Manifest this update: Sun 27 Apr 2025 04:19:51 +0000 Manifest next update: Tue 29 Apr 2025 04:19:51 +0000 Files and hashes: 1: _fS_ABOx8arKOVUbpibKJGg9rmY.crl (hash: 02rTX9H8LIbk0meA4G/9oSPTNyg4z1HQluQUYMLfFS0=) 2: F105F828C4CE11EE939D5160775412E6.roa (hash: OVT2chMQ0Nq/o8KrWCxuVSBa6IdJd925oWRD0nztHjI=) 3: 6F89EC1EC4CE11EEB915BB5F775412E6.roa (hash: 0xzDQTGktY5SNT/oNqNDkR69eV9keuHEiaiK1qaTKh4=) 4: B1F8097EC4D211EE86535866775412E6.roa (hash: 59lN/fUbuBzBsApqG3IvBcdXKT4GXqevkBfORr82FQA=) 5: 8BA49FD0C4D211EE9EC4EB65775412E6.roa (hash: L8cuHjbSNz6+bJ/gQju0YrhFVS2tYAIiSMeuYmThWuI=) 6: DD77B4AAC4D211EEBEB69266775412E6.roa (hash: OydxnI/hxoPiyhR17/Tng3O2ILM83hRZhWDiNRN/dU4=) 7: 95C2E55CC4CE11EEB298E25F775412E6.roa (hash: 34ivVx7kCxvEM20aUk37oRsDslYZlA+xl4ns6+aB5gY=) 8: 93B700F2C4F311EE8E31E298775412E6.roa (hash: jxWkgZfYWgXiUGFUDEKR/McM7BfyCoS5P8Hm5K309v0=) 9: E93581BEC4CD11EEBD97B25E775412E6.roa (hash: 55Va12oDO8S1u6Db0FeTKlFuk9K47Rv37Hrdea7bPcE=) 10: 3DF8B8D4C4D211EEB1EC7C65775412E6.roa (hash: 9LziG0V2OwJ9n1u0dLn4KBFXmSSOMd2hKZ8b5zKpu9c=) 11: 4101D022C4CF11EEB2F10961775412E6.roa (hash: dLi4goldq2t98cgYBuvk9Jpn/HGg3ZCmLTC1jEDXh+8=) 12: FAD1EE98C4D311EEB8EF5B68775412E6.roa (hash: xrzrQk6N9A7y+gGJ1sq9ZLmMErelK63jEZa0HOn6EEE=) 13: 06EC9B8EC4CE11EE9CCFD65E775412E6.roa (hash: yxTa4SshiNJ7DHcSq54/OxpqqW1oYG+0q8Vz/U0eUK4=) 14: 4C0E8C0EC4C911EE87647756775412E6.roa (hash: 3hEwrhsuSNEta/SbVkYuC8E8cEE9Br3Bj2hXmqXW6Og=) 15: C1BC264CC4CD11EE89C2885E775412E6.roa (hash: /4XiUCjd/sd1xIFdMVmhioY/RKg6IR+Ajo98X8uy0lo=) 16: 48E43AECC4D311EE8C1B3F67775412E6.roa (hash: u/n56Tta7OlwGuEqOpX71XLsZT2jKpBxkP39WXUlLLc=) 17: 1A50080EC4D411EE9683B268775412E6.roa (hash: caLtTbJU+Ufv7BiWj1H9Gw+w4cpOtHWxcr1WeZuKjJ8=) 18: 81B67878C4C711EEA9FDDB53775412E6.roa (hash: vTf8z95jt6AfKb+uGSv38KFOEqTok2j1GUU2yZdAI08=) 19: 52716D10C4C811EEA1131155775412E6.roa (hash: xQRXL5xCOGFaycHwp48gngmbdbohfcnsUJoty1rMzbc=) 20: 2A6C3F60C4CE11EEA3D4FA5E775412E6.roa (hash: C+KA4N0o/N/27ljFsz4ZdSUMg3iOEQO8xBx9RPaXKNI=) 21: 4F31EC96C4CE11EEA565525F775412E6.roa (hash: HcZFH7qDjDPGPIsCX8qhmZSQf24/4pPHFAyHS4PESuo=) 22: B3F2595EC4D311EE97A2CE67775412E6.roa (hash: ECdHU4AArULpOT1NztEszqbSD1WJnxMYYXF31fUvbrM=) 23: 68864AB4C4F311EE8BF25B98775412E6.roa (hash: 5ft3N//XILTGHx4xJyf0ZxLMMcxslek8pxu0nWzZdwE=) 24: 648C3F8CC4CF11EEB00B3061775412E6.roa (hash: FDVWcr2ZaAbCYXZ2KHJUxLsk/2sFqJr/Vx9+VGbIRJ4=) 25: 2283DBBEC4D311EEB2E6EA66775412E6.roa (hash: vDOXm9PXQ5Zd7c1zyElcj6kt2FJGk5QRFQWZ4OnkvEI=) 26: 870416B8C4C811EE906C4D55775412E6.roa (hash: Vbe2KHg+Or1EjP08Hg3ouXICYgnv4yFEfEZ5ZITCte4=) 27: D4A143FEC4D311EE8C6C1968775412E6.roa (hash: AgQ0WKMr6LdRsNIoXgyHASIpWGf5jCQAlVVsb6zmYZ8=) 28: 5DCB92C6C4D211EE8BD1A065775412E6.roa (hash: PsrWGlKMnmYkcFOTAbq8GoiP2U6q8o3llEg2ATal3EM=) 29: CCB4D870C59311EE927FFFA7775412E6.roa (hash: 9rD0WduujgyOlEWZ+vDkwaNAJhs7jTIfIlCfix8PC/0=) 30: 9073DE6CC4D311EEB0B9C867775412E6.roa (hash: elhNbqke+6Kl2ZATVb9O1DeKyGk/Aq6WgPyX415dPg0=) 31: 96B86BD6C4CD11EEA3C61A5E775412E6.roa (hash: 1/4BsRl0z2euLNjIiSiAv+wgrdGXz1NzXtlGPkiO18s=) 32: 684B797CC4D311EE816F8467775412E6.roa (hash: zrGP4qbV7TkM2QLEaYGOzJRGNrjbHqUR2QRTvJ966ic=) 33: BFE793D2C4CE11EE81D70760775412E6.roa (hash: YKo9lE8pH+B0lF4SQUvGTWgHthQjPN6oP/oPK/YNf8s=) 34: 1D9BA0C2C4CF11EE9D26CF60775412E6.roa (hash: 0X/6wOprzARBLwyRT7sbR4YEUnDHgpq1rvlRKwpi56E=) 35: FF49F7B4C4D211EEB6F1A266775412E6.roa (hash: qvVux5l6rnVThhETsGLH9EXoxv6/IKPh5G9ATtSGJFg=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 29 Apr 2025 00:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3655D2CAF, serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66 Validity Not Before: Apr 27 04:19:51 2025 GMT Not After : Apr 29 04:19:51 2025 GMT Subject: CN=680db067-adfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6a:03:92:dd:c2:2f:ce:90:6d:ab:31:a5:32: 36:9a:d4:16:39:29:e0:4a:22:8e:08:e4:07:7b:f1: 3d:90:32:a7:ce:c3:78:13:3e:52:f2:02:0c:d5:94: ed:99:b7:dd:b4:fa:05:0b:cd:ce:77:41:96:2d:a7: d3:1b:44:be:3d:0c:bc:f6:73:f5:65:fc:de:1b:d8: 60:7e:53:70:ba:98:bb:11:bb:de:47:98:5d:10:8a: 38:9d:20:40:52:cd:fd:15:33:a5:8d:fb:75:a3:13: a0:d9:87:c6:5f:8b:e4:03:1e:c2:31:03:0c:3c:c5: c2:22:2a:dd:db:4f:ff:c1:90:11:bd:1c:c6:3b:ce: c1:00:7a:70:bf:5f:9c:da:f8:25:75:1e:71:89:15: 1f:03:e5:f6:29:11:b8:b0:9c:96:e4:f2:20:f8:5a: 2c:f2:3d:d5:4c:1c:50:7e:70:ef:e7:22:68:38:0f: b5:72:b2:44:27:8e:b9:f9:33:51:12:fb:75:7a:d9: 09:8e:a8:ef:20:c3:be:ed:7b:34:67:b2:ab:18:9e: fa:66:6f:25:88:30:64:c4:93:98:7b:7d:38:96:c3: be:fb:0f:22:95:0e:da:28:00:ba:33:02:50:e0:ff: 41:9d:4d:59:64:10:a4:a0:2e:7b:72:91:6b:ef:70: f9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:09:E1:25:58:61:7A:C8:19:51:9E:3B:14:D9:35:0A:5A:A8:78:24 X509v3 Authority Key Identifier: keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:29:8e:ee:0c:36:a0:c6:2e:ac:62:f9:a1:ad:49:9e:83:b4: 2b:35:1c:a2:9a:c1:c2:06:4d:db:42:f3:19:4b:0c:d5:97:c2: a5:bd:47:95:3b:b3:0e:00:3a:18:41:34:89:a7:77:97:08:54: 68:e0:f9:5b:bb:b3:da:34:59:07:35:24:c0:f9:c7:ec:71:dc: e2:24:c2:65:b5:6a:c2:f7:31:43:60:ec:f1:ae:0a:95:62:ce: ea:eb:ce:39:bf:b9:d2:ac:d2:75:6d:c6:dd:df:a0:32:74:11: 41:62:d0:c6:01:7d:58:b9:86:77:0d:d1:9d:09:f0:8e:16:04: af:ea:60:67:e3:31:40:0c:26:32:d0:75:e4:f8:ed:8b:15:ea: ed:ce:a5:50:f2:73:fa:ef:dc:95:f4:66:28:7c:d4:33:84:f2: 4e:3b:cb:d3:90:18:aa:9f:60:81:e2:c5:25:d3:d0:8e:86:9b: 37:dd:e6:05:32:db:94:51:69:e9:87:4f:81:2b:76:b0:e8:de: 1c:8b:9b:80:5c:60:0a:20:a2:60:59:fd:5e:bf:cb:9a:9f:26: 1d:17:db:aa:21:7b:35:5f:cd:31:f2:a4:cd:50:75:0f:75:1b: 0a:d5:8c:80:4d:ef:e1:da:90:02:0c:8e:e8:a5:ad:5e:a3:3c: 25:57:3b:92 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NTVEMkNBRjExMC8GA1UEBRMoRkRGNEJGMDAxM0IxRjFBQUNBMzk1NTFCQTYyNkNB MjQ2ODNEQUU2NjAeFw0yNTA0MjcwNDE5NTFaFw0yNTA0MjkwNDE5NTFaMBgxFjAU BgNVBAMTDTY4MGRiMDY3LWFkZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDhagOS3cIvzpBtqzGlMjaa1BY5KeBKIo4I5Ad78T2QMqfOw3gTPlLyAgzV lO2Zt920+gULzc53QZYtp9MbRL49DLz2c/Vl/N4b2GB+U3C6mLsRu95HmF0Qijid IEBSzf0VM6WN+3WjE6DZh8Zfi+QDHsIxAww8xcIiKt3bT//BkBG9HMY7zsEAenC/ X5za+CV1HnGJFR8D5fYpEbiwnJbk8iD4WizyPdVMHFB+cO/nImg4D7VyskQnjrn5 M1ES+3V62QmOqO8gw77tezRnsqsYnvpmbyWIMGTEk5h7fTiWw777DyKVDtooALoz AlDg/0GdTVlkEKSgLntykWvvcPkRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUWwnh JVhhesgZUZ47FNk1ClqoeCQwHwYDVR0jBBgwFoAU/fS/ABOx8arKOVUbpibKJGg9 rmYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjU1RDJDLzFENjRDMkZDQzRDMzExRUU5QzQxOTk0Qzc3NTQxMkU2L19mU19B Qk94OGFyS09WVWJwaWJLSkdnOXJtWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL19mU19BQk94OGFyS09WVWJwaWJLSkdnOXJtWS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NTVEMkMvMUQ2NEMyRkNDNEMzMTFFRTlDNDE5OTRDNzc1 NDEyRTYvX2ZTX0FCT3g4YXJLT1ZVYnBpYktKR2c5cm1ZLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzKY7uDDagxi6sYvmhrUmeg7QrNRyi msHCBk3bQvMZSwzVl8KlvUeVO7MOADoYQTSJp3eXCFRo4Plbu7PaNFkHNSTA+cfs cdziJMJltWrC9zFDYOzxrgqVYs7q6845v7nSrNJ1bcbd36AydBFBYtDGAX1YuYZ3 DdGdCfCOFgSv6mBn4zFADCYy0HXk+O2LFertzqVQ8nP679yV9GYofNQzhPJOO8vT kBiqn2CB4sUl09COhps33eYFMtuUUWnph0+BK3aw6N4ci5uAXGAKIKJgWf1ev8ua nyYdF9uqIXs1X80x8qTNUHUPdRsK1YyATe/h2pACDI7opa1eozwlVzuS -----END CERTIFICATE-----Generated at Sun Apr 27 16:50:47 2025 by rpki-client