$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft File: dwjmbxwHwddnCuvbrhhtpCvLMMc.mft (raw, json) Hash identifier: YTdq8LVx62nsl6Kqodo4N+mwzHi7FbZTduaL43Lr7yg= Subject key identifier: 50:81:A0:E0:EF:D2:E2:DD:70:73:57:6F:13:19:62:B7:50:60:31:DF Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7 Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7 Certificate serial: C0 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft Manifest number: A2 Signing time: Sun 27 Apr 2025 05:06:46 +0000 Manifest this update: Sun 27 Apr 2025 05:06:45 +0000 Manifest next update: Tue 29 Apr 2025 05:06:45 +0000 Files and hashes: 1: dwjmbxwHwddnCuvbrhhtpCvLMMc.crl (hash: TfR47Xd5i0+v3v+9WwfUd5YyJ09Ts4KXziTErM7NWBc=) 2: 4A4E4E98F36411EF90236562762E951A.roa (hash: wBEWNOxstUtXs1lRPFI8sqmbxPLl50bzZwGpAM/v03w=) 3: 8D38EA92F36411EFB4C65466762E951A.roa (hash: +EMSMJ3EYz9pXuGkf95ZpK0KIr/3eV/25E+zqK7H2d4=) 4: 6D9333C8F36411EFA21E3864762E951A.roa (hash: qCcMIGMPv6iLqntlPxto9IWFZxg/PkX6K91u1W/HaMo=) 5: 0728E8DAF35F11EFA9798CBF762E951A.roa (hash: r67qgSDZ7UK0rkKjw/6X4Z6plYnnEJR2/PdlSWRgXOE=) 6: 64579188F36311EF961F435D762E951A.roa (hash: ZkAad2oBHy70JS26s+e7DktMHSKgL2XdJzU4c7fdddc=) 7: 04466B80F36211EFB7841C54762E951A.roa (hash: k+w+Al72cOLFmLNM9M2TGC8l+4WDkBhNaHH0njxWTY4=) 8: 4608FD7CF36111EFB87F7D4F762E951A.roa (hash: q4VUHmXqhQLvC4tfCUsaK0VJ9DqAe9PMwDnLK46jh+k=) 9: 8CFF56DEF36311EF8011BE5D762E951A.roa (hash: 8VWmuQHjSKK3nmwbGTPPqeDrZfzpQRmMKrTS4U/AuaY=) 10: AB313988F36311EFBAC9DA5E762E951A.roa (hash: QYTpKFHcH+2F26H8AMuPN3ygS8KPNu9TR1X0KOssigQ=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 29 Apr 2025 00:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7 Validity Not Before: Apr 27 05:06:45 2025 GMT Not After : Apr 29 05:06:45 2025 GMT Subject: CN=680dbb66-84f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:37:de:9f:9a:8d:31:d8:2a:83:a4:3c:37:ae: 87:56:1b:f5:61:d8:20:59:64:49:57:a3:d2:2a:00: 3c:c3:70:04:0e:16:28:54:d7:a7:39:cc:7d:89:2d: e5:89:19:d4:d2:d3:00:11:e1:5d:d7:16:5d:ce:a4: e0:52:ac:79:9c:a2:e3:e9:45:02:27:ff:4b:b5:c3: 89:80:8e:83:30:1f:ea:ff:9a:76:f3:13:f6:de:26: 55:1d:f6:90:db:e7:26:de:8c:a0:a2:cc:51:18:0d: c8:30:a6:d6:7d:da:9b:56:a8:53:e5:89:86:48:cc: 01:68:df:aa:0b:86:87:ab:eb:38:78:66:ad:83:5e: 6a:28:0b:65:24:25:f6:24:4b:17:7b:e6:ab:b9:56: 37:a5:5b:0b:0f:5f:90:a2:18:08:e8:b1:e4:8e:1d: db:c4:c5:57:49:47:72:01:d5:c0:28:a1:c5:fc:9d: 33:02:79:d1:fe:82:cc:ac:9e:1f:f0:44:fc:50:0a: 44:60:4c:d1:72:31:ba:34:5f:19:85:af:36:db:e2: f2:93:06:01:63:c9:33:7a:1e:d2:d9:c1:1a:15:3a: 38:46:26:4c:fa:34:1f:79:e5:ad:20:41:4e:4a:b2: 3c:d5:62:8b:5f:fb:6d:0f:bb:17:97:11:d0:c1:df: b3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:81:A0:E0:EF:D2:E2:DD:70:73:57:6F:13:19:62:B7:50:60:31:DF X509v3 Authority Key Identifier: keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:8f:6c:33:62:8a:83:c6:ed:7c:77:20:9a:dc:33:96:f9:ee: 5f:0f:0d:fa:e8:a1:1d:5c:8b:c1:d2:ed:15:7e:4f:64:45:bc: 9c:3a:a4:24:b3:f7:c8:49:37:9c:70:74:9e:50:ea:6d:02:ea: 8f:78:90:28:6d:08:4a:c9:ab:99:fd:c5:fa:a8:f4:d0:15:65: 39:d4:5f:e7:27:ea:2b:44:b8:3f:4d:01:eb:f8:35:60:ed:85: 88:89:9a:5e:e2:67:4f:7e:05:78:bc:23:34:e3:3c:f0:2a:8f: d5:36:67:a3:1d:36:84:a0:82:60:ff:89:15:15:b8:22:43:b9: 78:d3:0b:40:ee:c2:cc:7c:dc:ec:e9:dd:0f:d7:24:d9:8d:39: 4a:56:ab:55:ce:95:8d:4f:1a:13:92:69:c1:2a:3a:fe:36:29: b8:f9:f1:9e:5e:d4:b8:84:3d:5f:56:f0:e1:9c:e1:0c:85:70: ea:2a:a5:e7:7c:dd:e6:4e:00:2d:9d:ae:dd:de:13:a4:c9:b0: be:a5:91:35:b2:1c:63:e3:8a:72:8f:e7:1c:6a:97:51:83:9e: f5:ab:a9:28:10:94:4b:d5:30:dc:8a:88:cb:2b:43:f8:01:f1: d9:f8:ed:6e:09:25:2c:91:1d:a3:65:83:b2:33:68:7e:7a:74: 98:0d:14:73 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 N0NENzJBRjExMC8GA1UEBRMoNzcwOEU2NkYxQzA3QzFENzY3MEFFQkRCQUUxODZE QTQyQkNCMzBDNzAeFw0yNTA0MjcwNTA2NDVaFw0yNTA0MjkwNTA2NDVaMBgxFjAU BgNVBAMTDTY4MGRiYjY2LTg0ZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCiN96fmo0x2CqDpDw3rodWG/Vh2CBZZElXo9IqADzDcAQOFihU16c5zH2J LeWJGdTS0wAR4V3XFl3OpOBSrHmcouPpRQIn/0u1w4mAjoMwH+r/mnbzE/beJlUd 9pDb5ybejKCizFEYDcgwptZ92ptWqFPliYZIzAFo36oLhoer6zh4Zq2DXmooC2Uk JfYkSxd75qu5VjelWwsPX5CiGAjoseSOHdvExVdJR3IB1cAoocX8nTMCedH+gsys nh/wRPxQCkRgTNFyMbo0XxmFrzbb4vKTBgFjyTN6HtLZwRoVOjhGJkz6NB955a0g QU5KsjzVYotf+20PuxeXEdDB37O1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUUIGg 4O/S4t1wc1dvExlit1BgMd8wHwYDVR0jBBgwFoAUdwjmbxwHwddnCuvbrhhtpCvL MMcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjdDRDcyLzA5NTFDMTdFQ0VBNTExRUY5M0I0NUJBRDc2MkU5NTFBL2R3am1i eHdId2RkbkN1dmJyaGh0cEN2TE1NYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2R3am1ieHdId2RkbkN1dmJyaGh0cEN2TE1NYy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2N0NENzIvMDk1MUMxN0VDRUE1MTFFRjkzQjQ1QkFENzYy RTk1MUEvZHdqbWJ4d0h3ZGRuQ3V2YnJoaHRwQ3ZMTU1jLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAdj2wzYoqDxu18dyCa3DOW+e5fDw36 6KEdXIvB0u0Vfk9kRbycOqQks/fISTeccHSeUOptAuqPeJAobQhKyauZ/cX6qPTQ FWU51F/nJ+orRLg/TQHr+DVg7YWIiZpe4mdPfgV4vCM04zzwKo/VNmejHTaEoIJg /4kVFbgiQ7l40wtA7sLMfNzs6d0P1yTZjTlKVqtVzpWNTxoTkmnBKjr+Nim4+fGe XtS4hD1fVvDhnOEMhXDqKqXnfN3mTgAtna7d3hOkybC+pZE1shxj44pyj+ccapdR g571q6koEJRL1TDciojLK0P4AfHZ+O1uCSUskR2jZYOyM2h+enSYDRRz -----END CERTIFICATE-----Generated at Sun Apr 27 16:38:46 2025 by rpki-client