$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft File: l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json) Hash identifier: TqSdoCO+L8kw5JmeZgWCTUkSbZIbByfTpS+dA2ep208= Subject key identifier: 88:54:97:74:C0:C0:27:D7:DA:8F:D9:37:91:ED:62:48:2A:9D:35:7D Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39 Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139 Certificate serial: 06CA Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft Manifest number: 0663 Signing time: Sat 26 Apr 2025 02:13:05 +0000 Manifest this update: Sat 26 Apr 2025 02:13:04 +0000 Manifest next update: Mon 28 Apr 2025 02:13:04 +0000 Files and hashes: 1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: xZg/F+wxTwI8sDgIwf05CyAM2a9EBoxEzLnq5O4A8Cw=) 2: B8419F060BA911F0AE291B6E762E951A.roa (hash: m8Bb8NoO1D+xiWKOmt0v+8wQGL39FsFRi5rMWWAs3Nk=) 3: D08D8404E20911EFB7BBBB72762E951A.roa (hash: mxpQNEEt8eO1xH/mH0CzmPJl+5Qf8WdLQzu0l8F+kl0=) 4: 61E6EBC23A2911EF83088748762E951A.roa (hash: iFBYzRfE/E2YvLoXLa2uiVHfBVaThKSU03QGnik9L4A=) 5: CBA3C1846B7011EFAF3FE084762E951A.roa (hash: pFDrtn8wEhtxFNlu2wmcpGpG41xK4cr84A6LU6JiqYg=) 6: CEA072D8776A11EEA49F007D4AD9E6FC.roa (hash: oG1ErKkSbYpP5X6eq2VOONQIy8u5lFGEO9d6IZTGw04=) 7: 88CC23B4E20911EFAA4FEA71762E951A.roa (hash: qKFGTwFhsiiCCXBqchw56kIQ8Z0gTmXSHl71yzG85Xg=) 8: 12A476563A2911EFA2721E48762E951A.roa (hash: e3V5AAsj+AntU1+tap+GSIMt0rdBfXlp80uPXMWrRDA=) 9: 44B107BE0BBA11F0B7AF8852762E951A.roa (hash: 2lsgDetOxz2tEA/haKTe5N+JmsqBvMbXnhGs3La4Rys=) 10: D45146480BA811F0965DEC69762E951A.roa (hash: /38gf9L/lK+aNxVRmRr+WwErxz1SgWT4QmXDrhoLlwc=) 11: 02EF1DC60BAA11F09DB9FB71762E951A.roa (hash: inZXUhfqreSJFiRhNzpeSLsmYXgoI2B/ekZfVg0es18=) 12: 985B73F86B7011EFBCFBD082762E951A.roa (hash: rvpp6Kns5e/Pwe/rzVTNBx4KVxZUF1C0Dh+LLpfr9DM=) 13: B03C5936136B11EF9CB7442D017001B1.roa (hash: 8cn480ct0RO7vc/yrd/vQq31HhnmkbbbxOW5UAR4BoE=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 28 Apr 2025 02:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1738 (0x6ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139 Validity Not Before: Apr 26 02:13:04 2025 GMT Not After : Apr 28 02:13:04 2025 GMT Subject: CN=680c4131-956e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c5:38:c6:3a:0b:4a:f9:a1:4d:46:e5:4d:df: 92:d1:b7:02:de:7e:44:21:be:74:06:b2:4e:61:49: 87:9d:d1:b0:ab:61:17:92:f1:79:4b:11:55:f2:c7: 67:5b:e4:fb:b7:27:a7:3c:77:95:50:0e:a0:6e:d5: e1:cf:cb:6a:e4:2a:57:6a:b0:48:7a:76:0c:99:d9: 4d:a7:8d:79:28:67:2c:2a:21:fa:91:73:61:e1:23: 4a:f6:11:10:45:bf:2b:95:f6:9a:81:13:ca:c8:1a: b3:23:9a:c8:3d:10:1c:59:00:87:e6:f6:d5:47:34: df:12:a3:a1:19:e2:75:b2:e3:23:f5:be:de:51:3e: b6:ba:d3:2f:7d:5b:7d:fa:98:6a:82:6a:f1:d0:13: 9c:9a:35:dc:d7:f7:7d:09:c6:20:59:ee:9e:59:eb: e2:4e:bb:f7:25:94:23:23:08:72:1c:ee:10:22:b0: 32:ce:f8:02:11:7b:cc:ad:1e:ea:d6:95:08:df:07: 26:09:40:b0:5e:8a:58:f2:52:4a:87:7f:37:f5:94: d3:fe:f0:8e:22:15:9a:25:be:f9:bd:52:e3:9f:a7: ad:c1:c9:7e:ed:71:9a:6f:ca:f5:2e:9a:fa:2e:3d: 6f:1f:e3:87:98:9e:bd:51:6a:dc:69:91:96:a7:48: 97:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:54:97:74:C0:C0:27:D7:DA:8F:D9:37:91:ED:62:48:2A:9D:35:7D X509v3 Authority Key Identifier: keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:b2:ba:e7:a9:61:8f:8d:21:70:63:28:c9:a4:07:b1:fd:89: 95:bd:2d:e5:59:dd:1a:7e:4f:c8:54:ac:66:06:c2:43:bd:27: 7a:57:89:0d:05:95:70:2d:2c:80:ae:c2:8c:b8:18:3d:07:1f: 1b:f2:d2:b4:00:d9:43:ea:d9:32:7b:41:62:17:fd:c9:64:6d: 3f:d4:b3:81:88:24:f5:0d:89:76:01:cc:01:26:d7:fe:65:85: 8d:11:2d:1f:53:75:28:47:8c:2e:fc:0c:24:37:91:cb:f7:bb: 8a:31:a9:ad:67:ed:aa:60:5a:0a:2d:fc:6a:ac:9b:9a:17:0e: 74:8d:58:e3:0b:d9:1d:c1:53:2f:9b:72:d0:39:ae:9a:38:ec: 46:3e:b6:ed:cf:48:d8:54:f5:3b:b2:a0:f0:45:20:ff:44:ee: 76:c0:65:5e:bf:1e:84:12:ee:74:65:e5:59:92:9e:1b:e3:e6: d1:be:52:96:1b:dd:ba:63:ec:5e:7e:84:0c:03:89:5c:73:97: 32:fd:6f:93:6e:d9:b8:29:93:5b:db:e2:29:d2:5a:65:fa:c7: b2:69:9c:d5:2b:ea:63:e2:72:23:b8:de:5b:80:96:d9:d0:78: 63:34:5c:90:62:ea:c2:63:9a:eb:25:d9:46:50:ab:65:81:84: 1b:1e:db:3e -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBsowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx QkE4MTJGQTEzOTAeFw0yNTA0MjYwMjEzMDRaFw0yNTA0MjgwMjEzMDRaMBgxFjAU BgNVBAMTDTY4MGM0MTMxLTk1NmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC+xTjGOgtK+aFNRuVN35LRtwLefkQhvnQGsk5hSYed0bCrYReS8XlLEVXy x2db5Pu3J6c8d5VQDqBu1eHPy2rkKldqsEh6dgyZ2U2njXkoZywqIfqRc2HhI0r2 ERBFvyuV9pqBE8rIGrMjmsg9EBxZAIfm9tVHNN8So6EZ4nWy4yP1vt5RPra60y99 W336mGqCavHQE5yaNdzX930JxiBZ7p5Z6+JOu/cllCMjCHIc7hAisDLO+AIRe8yt HurWlQjfByYJQLBeiljyUkqHfzf1lNP+8I4iFZolvvm9UuOfp63ByX7tcZpvyvUu mvouPW8f44eYnr1RatxpkZanSJfVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiFSX dMDAJ9faj9k3ke1iSCqdNX0wHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2N0RGQTQvMDhCOEQ4MjA5M0FDMTFFQkIxRDJBODMyRjhB RUEyMjgvbDhrT0pTRXRpSHo1NGQ1djNmVlJ1b0V2b1RrLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCtsrrnqWGPjSFwYyjJpAex/YmVvS3l Wd0afk/IVKxmBsJDvSd6V4kNBZVwLSyArsKMuBg9Bx8b8tK0ANlD6tkye0FiF/3J ZG0/1LOBiCT1DYl2AcwBJtf+ZYWNES0fU3UoR4wu/AwkN5HL97uKMamtZ+2qYFoK LfxqrJuaFw50jVjjC9kdwVMvm3LQOa6aOOxGPrbtz0jYVPU7sqDwRSD/RO52wGVe vx6EEu50ZeVZkp4b4+bRvlKWG926Y+xefoQMA4lcc5cy/W+Tbtm4KZNb2+Ip0lpl +seyaZzVK+pj4nIjuN5bgJbZ0HhjNFyQYurCY5rrJdlGUKtlgYQbHts+ -----END CERTIFICATE-----Generated at Sun Apr 27 01:08:49 2025 by rpki-client