$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft File: qO-WBRTjNkRNPN43sktm3DnUPRs.mft (raw, json) Hash identifier: BHa0OEVBEPfWKFm3KYJfy+Wpw/5Q2c+1JZTlYvc86qk= Subject key identifier: F9:F8:F4:B9:62:71:13:D1:F3:64:4D:EE:C3:8F:92:55:5E:AE:6D:56 Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Certificate serial: 02B2 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft Manifest number: 029E Signing time: Wed 30 Apr 2025 03:55:52 +0000 Manifest this update: Wed 30 Apr 2025 03:55:51 +0000 Manifest next update: Fri 02 May 2025 03:55:51 +0000 Files and hashes: 1: qO-WBRTjNkRNPN43sktm3DnUPRs.crl (hash: O1hPvFTmurfN9aV/hdEdUHkuWXZho4EsxL0KqrGTG1E=) 2: C64BDF325B8611EE8F5917154AD9E6FC.roa (hash: lOfMw6yYmupoBGzZG06JxE7nkGYN0SjR1YBL+6yU110=) 3: 221DE36C5B7F11EEBAA0307C4AD9E6FC.roa (hash: akgSyzvUhBZdD/Jo/1snS9zDQnQhIY/z4b5eUssk1L4=) 4: 3FC126045B7F11EE91B3797C4AD9E6FC.roa (hash: B4Jxb4zuiNxx8ARYO+8FuXUu5CFHZJCjPVqFobOB2EU=) 5: F592AE225B7E11EEAAD8A37B4AD9E6FC.roa (hash: H2+/hMWhZrQQ/v+xp+P99me7GUvAhaEZLEIOvuDJ8+o=) 6: 9389DEB25B7E11EE85FB5A794AD9E6FC.roa (hash: saW9gDDU1fU/ss5E5QByOp+7T1wbc1vVgpJ7XS+gk+s=) 7: 39E85D245B7F11EE90195D7C4AD9E6FC.roa (hash: eHbXQ/7kild+PjHeBFmSGxlAnlG3pi2uyC9o63m5Mio=) 8: 44122BBE5B7E11EEA5C359784AD9E6FC.roa (hash: dlLpBI0Us25zgjOKkdJouRreKgFknaWvSBpHKXaHN4Q=) 9: 0DDE14645B8711EEBE2DF3154AD9E6FC.roa (hash: OVYm5oOpe8XlJOHUYg0R0oIytfPmlhVRgGeohPVoeGg=) 10: E29E1C625B7D11EEAFF513774AD9E6FC.roa (hash: cL6yXVTdN5LFRK/8lI56JvUwQ8huIMxP3ArtUJsfAsg=) 11: 0DB547A45B7E11EE95F5E0774AD9E6FC.roa (hash: sgLUjm9KT8NBSGsfPuF7zb59LXdnTNhjWZlBuJluY4o=) 12: 82BE0D345B8711EE8AF170174AD9E6FC.roa (hash: du0kSdCk2tSzKNVUZIxuV5z/5Bcr0/T6HJ/NasAIv4s=) 13: 673167545B7E11EE98EEBD784AD9E6FC.roa (hash: adqbPWSj3qJmhRpUh3DUEWmWfDKPs4YfwC9ZlFS5ias=) 14: A97AA9E05B7E11EEAD5E8F794AD9E6FC.roa (hash: 3NkJ+hNEcmyOZzaQCsy/+Ozh2yGmiiWLNtnnqsmfG2I=) 15: EFB2EA005B8611EEB1C27E154AD9E6FC.roa (hash: ArKkYMPjrZ4ijgIQyF9Kcy4ua9ozHX8IBDIWFIk7DdU=) 16: BBA7D8A05B8711EEA5880E184AD9E6FC.roa (hash: NwbjXk0kj8eY+sbmyk9mA7z7P4Od2Lqrhnl5SE+949A=) 17: 7D84FCC85B7E11EE930F05794AD9E6FC.roa (hash: LbVSQZqmCHBXF80jfRgZ632p1CiqtMRJRyKOIJ1fwIY=) 18: 5A3685F85B7D11EEB4B9A0754AD9E6FC.roa (hash: hua4m2v20w0RdcluLq3SvMVi3aYeRg47OfgA9wTRs3E=) 19: D6AA10E05B7E11EE9B32467A4AD9E6FC.roa (hash: RAafA0ML5VlgZ60Y1uxp4EowWyBnwvs0LOD/pOddd5E=) 20: 9FF8CF2E5B8711EE9F40A5174AD9E6FC.roa (hash: lG9MW9PGMEKdmiEYPlQxLtvMK2I/+bgWEhfhck5fvqA=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 02 May 2025 03:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3668CFEAF, serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Validity Not Before: Apr 30 03:55:51 2025 GMT Not After : May 2 03:55:51 2025 GMT Subject: CN=68119f47-4130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:21:eb:bf:26:a3:10:22:6b:cc:75:25:11:69: b1:10:0b:85:c1:d0:86:bb:24:03:e6:6a:d8:2e:7a: c1:2f:aa:d3:a0:8b:3c:ae:b0:44:44:61:e8:6d:04: d3:c7:3a:d8:ac:1a:e4:d6:74:80:45:dd:e5:a1:35: 6e:58:53:33:d9:93:a3:a9:e3:32:95:af:de:84:ae: 3c:42:61:13:66:49:7b:db:06:84:41:f7:b1:f9:6d: ec:87:ab:ca:ae:0e:ce:55:a4:12:09:2b:33:75:4b: 0e:61:10:c2:bc:4b:e7:a7:86:52:a7:10:87:a9:6b: 6e:7a:ec:7e:c3:1e:89:98:c0:cc:48:09:fa:9e:a2: 6c:37:a2:ac:35:3f:dc:5f:99:fb:28:ed:f5:7f:d1: b2:87:0f:7d:65:bf:63:c1:86:20:66:03:09:fb:ae: cc:1d:9b:41:48:f2:39:b2:c3:31:8c:a5:ca:0c:c7: d5:84:80:04:a5:f3:fa:01:8c:28:99:ce:4d:12:25: 23:da:82:a4:a5:7e:48:91:25:c4:50:2a:8c:35:16: f7:34:70:74:0b:d1:47:f3:28:ea:f0:48:40:29:66: e5:a9:89:07:50:4d:bf:a0:d2:ed:64:f3:26:00:25: 75:5f:d5:7f:f9:b9:38:cc:09:52:11:5b:2f:37:37: 96:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F8:F4:B9:62:71:13:D1:F3:64:4D:EE:C3:8F:92:55:5E:AE:6D:56 X509v3 Authority Key Identifier: keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:30:c0:a6:f1:23:1b:f8:65:71:28:de:f0:86:81:eb:de:eb: 6b:01:b2:d8:02:d0:b9:c2:92:ef:cc:44:88:09:4e:a1:05:64: 30:2a:0b:d4:99:76:3d:58:ed:51:66:92:bb:c1:a0:47:76:2c: 2d:53:29:e1:4a:f2:f7:76:ef:d0:7a:25:4d:06:4d:1b:7d:06: 46:85:f7:0b:fa:66:65:e1:76:55:be:34:f9:bd:68:03:f7:75: 08:b7:8c:8e:04:cd:d6:80:5f:a8:ff:8e:43:cf:e1:41:2b:98: 64:41:44:b9:b7:f0:f7:57:a9:56:64:c9:f1:0a:c2:16:30:e3: 59:c4:b4:71:f7:e2:14:29:68:2a:0f:03:19:5b:d9:fd:d8:12: 5f:b2:e3:17:79:b8:c8:88:07:c0:2a:01:8b:6a:e8:f7:96:24: 07:97:96:84:25:0e:e7:21:9f:a6:d1:5b:e9:fa:05:ac:4f:2f: 27:97:b6:3d:9b:20:01:26:19:8d:ca:c2:e3:fb:a4:d5:44:e5: 79:e6:49:33:39:9d:10:64:43:25:eb:0d:66:3e:fd:5b:7e:af: 12:c6:1a:74:12:1c:b7:99:84:07:d7:48:e7:a2:42:1f:d4:08: 4a:67:ac:88:d4:9a:e5:d2:92:a0:eb:ec:67:ec:96:b1:55:02: f3:1b:1a:ef -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICArIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NjhDRkVBRjExMC8GA1UEBRMoQThFRjk2MDUxNEUzMzY0NDREM0NERTM3QjI0QjY2 REMzOUQ0M0QxQjAeFw0yNTA0MzAwMzU1NTFaFw0yNTA1MDIwMzU1NTFaMBgxFjAU BgNVBAMTDTY4MTE5ZjQ3LTQxMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDIIeu/JqMQImvMdSURabEQC4XB0Ia7JAPmatguesEvqtOgizyusEREYeht BNPHOtisGuTWdIBF3eWhNW5YUzPZk6Op4zKVr96ErjxCYRNmSXvbBoRB97H5beyH q8quDs5VpBIJKzN1Sw5hEMK8S+enhlKnEIepa2567H7DHomYwMxICfqeomw3oqw1 P9xfmfso7fV/0bKHD31lv2PBhiBmAwn7rswdm0FI8jmywzGMpcoMx9WEgASl8/oB jCiZzk0SJSPagqSlfkiRJcRQKow1Fvc0cHQL0UfzKOrwSEApZuWpiQdQTb+g0u1k 8yYAJXVf1X/5uTjMCVIRWy83N5ZvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+fj0 uWJxE9HzZE3uw4+SVV6ubVYwHwYDVR0jBBgwFoAUqO+WBRTjNkRNPN43sktm3DnU PRswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjY4Q0ZFLzk1RUZENzRDMzc1NzExRUVCQjE0MzIxODRBRDlFNkZDL3FPLVdC UlRqTmtSTlBONDNza3RtM0RuVVBScy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3FPLVdCUlRqTmtSTlBONDNza3RtM0RuVVBScy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NjhDRkUvOTVFRkQ3NEMzNzU3MTFFRUJCMTQzMjE4NEFE OUU2RkMvcU8tV0JSVGpOa1JOUE40M3NrdG0zRG5VUFJzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnMMCm8SMb+GVxKN7whoHr3utrAbLY AtC5wpLvzESICU6hBWQwKgvUmXY9WO1RZpK7waBHdiwtUynhSvL3du/QeiVNBk0b fQZGhfcL+mZl4XZVvjT5vWgD93UIt4yOBM3WgF+o/45Dz+FBK5hkQUS5t/D3V6lW ZMnxCsIWMONZxLRx9+IUKWgqDwMZW9n92BJfsuMXebjIiAfAKgGLauj3liQHl5aE JQ7nIZ+m0Vvp+gWsTy8nl7Y9myABJhmNysLj+6TVROV55kkzOZ0QZEMl6w1mPv1b fq8Sxhp0Ehy3mYQH10jnokIf1AhKZ6yI1Jrl0pKg6+xn7JaxVQLzGxrv -----END CERTIFICATE-----Generated at Thu May 1 00:42:37 2025 by rpki-client