$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft File: l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json) Hash identifier: XvYEPRzUy3HHxwWeyGiokW+FmWYvFpgkoyN+58IKqgw= Subject key identifier: 09:6E:9D:12:E7:55:65:21:C6:29:5F:56:28:E0:66:81:2A:FA:7D:14 Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39 Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139 Certificate serial: 0700 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft Manifest number: 0697 Signing time: Sun 15 Jun 2025 02:13:23 +0000 Manifest this update: Sun 15 Jun 2025 02:13:22 +0000 Manifest next update: Tue 17 Jun 2025 02:13:22 +0000 Files and hashes: 1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: 4X5gAJJyb71uIX6Ke+rIIOGLveS2YpJBnFjXX3hyujU=) 2: D08D8404E20911EFB7BBBB72762E951A.roa (hash: mxpQNEEt8eO1xH/mH0CzmPJl+5Qf8WdLQzu0l8F+kl0=) 3: 61E6EBC23A2911EF83088748762E951A.roa (hash: iFBYzRfE/E2YvLoXLa2uiVHfBVaThKSU03QGnik9L4A=) 4: CBA3C1846B7011EFAF3FE084762E951A.roa (hash: pFDrtn8wEhtxFNlu2wmcpGpG41xK4cr84A6LU6JiqYg=) 5: CEA072D8776A11EEA49F007D4AD9E6FC.roa (hash: oG1ErKkSbYpP5X6eq2VOONQIy8u5lFGEO9d6IZTGw04=) 6: 88CC23B4E20911EFAA4FEA71762E951A.roa (hash: qKFGTwFhsiiCCXBqchw56kIQ8Z0gTmXSHl71yzG85Xg=) 7: 12A476563A2911EFA2721E48762E951A.roa (hash: e3V5AAsj+AntU1+tap+GSIMt0rdBfXlp80uPXMWrRDA=) 8: 44B107BE0BBA11F0B7AF8852762E951A.roa (hash: 2lsgDetOxz2tEA/haKTe5N+JmsqBvMbXnhGs3La4Rys=) 9: 985B73F86B7011EFBCFBD082762E951A.roa (hash: rvpp6Kns5e/Pwe/rzVTNBx4KVxZUF1C0Dh+LLpfr9DM=) 10: B03C5936136B11EF9CB7442D017001B1.roa (hash: 8cn480ct0RO7vc/yrd/vQq31HhnmkbbbxOW5UAR4BoE=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 17 Jun 2025 00:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1792 (0x700) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139 Validity Not Before: Jun 15 02:13:22 2025 GMT Not After : Jun 17 02:13:22 2025 GMT Subject: CN=684e2c43-d085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bf:91:6f:fb:0d:52:f3:7a:77:6b:ef:f9:3f: 7f:c9:9a:0c:4a:26:6c:fd:3b:6a:4a:09:a8:df:b9: fc:80:a6:8b:5a:76:cc:b6:1c:a9:1a:41:e2:3c:51: 01:1f:73:b3:2c:77:62:88:e6:95:4b:39:b2:54:89: 1f:1a:41:31:a3:de:38:2b:17:29:4a:0e:26:e2:be: ab:e6:65:cc:be:fb:63:8b:56:11:1a:74:f6:2e:b1: 44:69:94:87:02:e9:c1:c7:6c:b9:ba:da:e3:01:6a: 85:b5:ed:19:9b:25:57:2c:35:c8:be:dd:ad:d0:c0: e3:06:37:7b:70:70:72:3a:3b:9e:a0:5a:4d:bc:d9: b8:85:bb:74:02:44:e3:19:bb:0c:b0:9e:3f:04:f3: d0:cb:e3:ea:b6:94:bb:10:e2:96:f3:6a:2d:ac:23: 09:8d:64:18:da:8e:67:e2:11:7c:6d:37:30:66:35: 44:50:c7:e0:eb:c7:93:45:44:ef:2b:ee:c0:3a:e3: 28:ee:22:8e:85:bd:20:ec:6b:dd:a9:d4:25:ff:f8: f7:5a:82:b8:2c:b7:ce:59:26:93:20:8f:28:54:a7: e2:51:eb:cf:74:d0:98:f0:ba:06:ca:7c:45:2e:39: f8:65:fc:d4:d0:f5:4e:53:90:32:4f:da:cb:c5:9f: 8d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6E:9D:12:E7:55:65:21:C6:29:5F:56:28:E0:66:81:2A:FA:7D:14 X509v3 Authority Key Identifier: keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:59:bb:bf:20:af:4f:67:11:50:30:ec:18:42:a8:ea:8e:7a: fe:6c:6f:7c:10:86:ff:57:a4:e6:58:df:b7:51:b6:55:7f:7d: 1b:3f:6a:c4:27:07:e2:5f:5a:ce:ba:6a:4f:2c:3c:43:a8:d2: 7a:78:3c:55:e8:ec:80:cf:87:f9:53:7a:2a:7c:ef:30:5b:3a: 7b:01:2e:a5:b4:fc:b0:4b:30:9f:5b:2e:c6:d8:f1:c8:24:2f: 52:b3:b7:2d:21:eb:89:d0:5e:b7:0a:7c:a8:9b:27:ad:e8:03: 51:af:74:a1:7d:b7:7b:8e:ab:41:be:17:38:9c:f9:8e:40:e5: 21:a3:24:64:41:a8:f2:a9:62:47:db:09:2d:7c:c6:46:63:e0: 72:76:f7:22:b6:aa:0a:ad:e2:bd:0c:c7:63:07:6d:29:d0:c4: 48:38:2f:e0:a4:7c:fa:6e:79:88:f5:04:17:a6:0b:8c:aa:f5: 35:08:bb:da:51:55:ef:ab:71:4e:93:49:19:f6:60:28:71:21: c1:02:4d:02:f9:19:d6:d8:56:8d:e3:2d:fa:2a:70:f2:72:82: d1:93:e2:a1:84:fe:e3:05:85:15:91:45:f3:66:3b:65:1c:47: b7:b4:95:39:0c:0d:c4:ed:63:39:82:5a:23:c8:d0:fc:bc:d3: f9:11:5d:e3 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBwAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx QkE4MTJGQTEzOTAeFw0yNTA2MTUwMjEzMjJaFw0yNTA2MTcwMjEzMjJaMBgxFjAU BgNVBAMTDTY4NGUyYzQzLWQwODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCqv5Fv+w1S83p3a+/5P3/JmgxKJmz9O2pKCajfufyApotadsy2HKkaQeI8 UQEfc7Msd2KI5pVLObJUiR8aQTGj3jgrFylKDibivqvmZcy++2OLVhEadPYusURp lIcC6cHHbLm62uMBaoW17RmbJVcsNci+3a3QwOMGN3twcHI6O56gWk282biFu3QC ROMZuwywnj8E89DL4+q2lLsQ4pbzai2sIwmNZBjajmfiEXxtNzBmNURQx+Drx5NF RO8r7sA64yjuIo6FvSDsa92p1CX/+Pdagrgst85ZJpMgjyhUp+JR68900JjwugbK fEUuOfhl/NTQ9U5TkDJP2svFn40hAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUCW6d EudVZSHGKV9WKOBmgSr6fRQwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2N0RGQTQvMDhCOEQ4MjA5M0FDMTFFQkIxRDJBODMyRjhB RUEyMjgvbDhrT0pTRXRpSHo1NGQ1djNmVlJ1b0V2b1RrLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDbWbu/IK9PZxFQMOwYQqjqjnr+bG98 EIb/V6TmWN+3UbZVf30bP2rEJwfiX1rOumpPLDxDqNJ6eDxV6OyAz4f5U3oqfO8w Wzp7AS6ltPywSzCfWy7G2PHIJC9Ss7ctIeuJ0F63Cnyomyet6ANRr3Shfbd7jqtB vhc4nPmOQOUhoyRkQajyqWJH2wktfMZGY+BydvcitqoKreK9DMdjB20p0MRIOC/g pHz6bnmI9QQXpguMqvU1CLvaUVXvq3FOk0kZ9mAocSHBAk0C+RnW2FaN4y36KnDy coLRk+KhhP7jBYUVkUXzZjtlHEe3tJU5DA3E7WM5glojyND8vNP5EV3j -----END CERTIFICATE-----Generated at Sun Jun 15 06:30:58 2025 by rpki-client