$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft File: PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft (raw, json) Hash identifier: 2JuzLThWPpR8mJUlqbnwNWJ9vDPIIGc5LUBs2eKWtB0= Subject key identifier: 06:E5:CE:3D:85:67:B1:28:0E:22:B3:01:60:3F:65:D3:87:AB:FC:A1 Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B Certificate issuer: /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B Certificate serial: 036B Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft Manifest number: 0352 Signing time: Sat 03 May 2025 03:31:31 +0000 Manifest this update: Sat 03 May 2025 03:31:30 +0000 Manifest next update: Mon 05 May 2025 03:31:30 +0000 Files and hashes: 1: PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl (hash: ER6Zemo3GlUdPzdkyZjYw9ChzMfv75/Rui1iGhvEdAU=) 2: 4533CC40B91311EDA26291C6F1222468.roa (hash: uGFYvGCNbxCuuh0wibkKXQKGhe4pjJXmtLBEpIrE66k=) 3: 1DEB7B6C613B11EEB5C645474AD9E6FC.roa (hash: /ErXEoW0e3+UCMayKYaaeAaWHsb5XTpte5tdQ4ZnfGA=) 4: 7DF1A778B90E11EDBC79B1B8F1222468.roa (hash: k3GwCfINv0mvGU/BLwW/oIfhjiuTSdQ3PzvAnkVobV8=) 5: EB0E0D70B90D11ED810EF2B6F1222468.roa (hash: qjnrwe3aS+ux+xzqGjAAbOm7cFsu1KPed2tIU2bivU0=) 6: 6693E35CB91311ED8675F6C6F1222468.roa (hash: 6JhXHPZF0zRHLFTuJnEgTJ4LTU9hLAslWS4MPzo2NtI=) 7: D723225EB90E11ED8875AFB9F1222468.roa (hash: Kn9nxXMbZkD7/JtPdi9k9kabkdwN9RHHmYUqtxe5CgQ=) 8: 9E8E161AB90E11ED9A8907B9F1222468.roa (hash: H3Pq9ilGAR4aK1isd9uFYe7Pyx0ixqxwxPuUeqJSQs0=) 9: 17ABBADAB90E11ED91A064B7F1222468.roa (hash: 74bYn1UZ1KvUPzN2OSoZA6NmbYaUfQGtHKW8VwNxGn0=) 10: 469FD1D2B90E11EDA4D709B8F1222468.roa (hash: DwCiq+yl1LO0Hky4qis9ittQ4gAvggd/ZDmtdnICEP0=) 11: 90EE2C2EB90F11ED9409C1BBF1222468.roa (hash: bLZoCDQRzljU6a7QZaQ/7m8zC+sEgUgzOUOZvGfwhno=) 12: 1FECC31AB90411EDABCE3C9AF1222468.roa (hash: 6Uqqk7kzConxMnvXRs+CVD9wVfEepdxTtUAqdhrHQ0g=) 13: F4DE17FEB90E11ED9DADF2B9F1222468.roa (hash: tOXvv0qQ2rd5TLKqCJZzCM6weckNfsiTf+bbdsmvZM0=) 14: EA38FC82B90A11ED85FF5EAEF1222468.roa (hash: U/DFwFJXSPn3zdoS1fQC4dnFVphKMbL7mbtwJ9Z/d5w=) 15: 0E435AD2B90B11EDA524C7AEF1222468.roa (hash: 3pi1Vkolg9TLskhvKL2ooaCwse7gRq1ZH74gOxNR6rE=) 16: A1485D08B90D11EDB7DC21B6F1222468.roa (hash: UL0BFEayVaVlnK7SHN/JGWP9FuMMQ0RUBTzgrpcNFxg=) 17: 1445B006B90611ED953613A0F1222468.roa (hash: E2Pi3VCICYk9gP/HP2vBzXaAEevEu5qcMVBYIRi4msY=) 18: 2ACB0B7EB90511EDA3D72E9DF1222468.roa (hash: Y26Di5Mtx4+qnesb2dE9YlwXzFR6VIjMiaa+c4P6/vM=) 19: EA518BD2B90311ED9B1C9F99F1222468.roa (hash: J1Vz1rVLXnQTG3uxuAEebjvTI4ey+M4i/uYDE0Z3cIA=) 20: 239555A4B91311EDBDD805C6F1222468.roa (hash: TMW3XM4heg7B+zbYk8n88UWO5D0/PgqY4J8jVrpyTf4=) 21: 07F1B9A4B90511ED97E8D59CF1222468.roa (hash: Z5jkWScZAF0iUScwlLtH91pr6etSX7YQoMC+lv2EUy8=) 22: EDA6C45EB90411ED84A2979CF1222468.roa (hash: YbllMRgXv2ItWxHhyBf/RDeDvc8S+ilc9Tjl3XPHlSM=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 05 May 2025 03:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 875 (0x36b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36886B3AF, serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B Validity Not Before: May 3 03:31:30 2025 GMT Not After : May 5 03:31:30 2025 GMT Subject: CN=68158e13-1a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:ba:03:47:7f:b5:37:ac:af:82:8e:a0:27: 19:52:24:a6:4d:75:3b:65:96:e5:cf:31:31:8b:e6: 3f:f2:58:1a:ae:f1:30:fe:35:0b:22:64:05:38:87: 43:02:d6:21:a0:0d:af:24:6e:5c:cc:74:25:84:cd: 02:80:b7:97:b5:51:99:cc:25:70:73:7b:aa:29:fc: 6d:0b:3a:89:61:da:7d:54:d0:29:c4:37:cb:a0:7c: 88:e5:42:c0:20:86:4a:59:21:f7:b7:16:22:95:40: bb:62:42:f4:9e:64:06:d4:c3:ba:4e:7f:e9:f6:02: 40:20:23:c5:19:86:ad:0e:68:67:1e:44:5c:45:31: 1d:0b:76:a0:d8:c2:a1:ee:76:ce:68:61:63:7c:95: 2b:a1:5e:50:f1:9c:d1:33:aa:a7:08:24:a1:1d:21: f0:73:6b:90:3b:23:60:82:2c:90:6f:e5:36:5d:2c: 79:92:e6:4c:b1:e0:ac:32:c4:68:a3:4c:20:60:ee: 4f:b2:c0:f8:42:f4:75:93:cb:a7:23:5e:a1:76:3c: 5a:b5:d1:01:b5:d1:b7:f5:5a:4c:b5:ce:39:3e:ff: 46:a6:f1:53:5b:7b:28:c9:ed:21:6d:94:a3:95:ce: ce:b8:de:93:cc:f0:e8:09:92:da:a7:9d:5a:74:0f: 3c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E5:CE:3D:85:67:B1:28:0E:22:B3:01:60:3F:65:D3:87:AB:FC:A1 X509v3 Authority Key Identifier: keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:04:37:b0:d9:12:95:c4:37:a6:33:dc:09:2a:9f:5a:4b:de: c4:94:ad:dd:cd:67:f9:06:f7:79:ee:63:09:d4:de:cc:13:59: fd:83:db:46:25:ad:51:85:f4:34:5a:45:6c:1b:40:c2:f8:c2: ed:2a:65:1b:4b:e4:39:fd:bb:68:72:c8:cc:5b:47:18:05:b1: cc:b1:1e:30:93:bc:d8:fb:ff:fc:c7:84:ef:c9:fc:5c:82:b8: 26:d2:5d:b5:ce:7b:52:45:75:d5:3f:e9:49:b1:bc:f7:17:ca: 7e:fe:db:e0:0b:b1:30:29:c3:2b:df:b8:83:0d:1d:ef:69:87: c3:ca:0d:d2:25:6b:6e:eb:c9:30:41:d6:d8:9d:8a:f0:91:38: ce:5b:75:e7:ef:aa:bf:48:e6:e4:e3:bd:01:ab:da:fd:8c:7b: e4:2c:d3:be:b0:a7:f7:31:65:df:da:f5:66:30:7b:1e:b1:ac: ec:c2:4d:5e:5d:43:33:25:3d:15:87:b3:d2:24:7e:c0:72:d5: 89:c8:3b:41:92:4d:b6:60:53:2f:70:d8:36:25:33:0e:5a:61: c0:54:11:86:51:37:18:7c:0a:51:a5:f8:d1:6f:52:6d:aa:d2: 12:d1:99:18:e2:88:e6:6b:4b:89:32:e2:1f:a3:55:51:5c:6c: 1e:7e:73:6d -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA2swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODg2QjNBRjExMC8GA1UEBRMoM0Q2RUQ5MDUwMzdDODNDNTczNzgwQjBDQ0RDNzBE NUQ4Q0VGMDM4QjAeFw0yNTA1MDMwMzMxMzBaFw0yNTA1MDUwMzMxMzBaMBgxFjAU BgNVBAMTDTY4MTU4ZTEzLTFhMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCrproDR3+1N6yvgo6gJxlSJKZNdTtlluXPMTGL5j/yWBqu8TD+NQsiZAU4 h0MC1iGgDa8kblzMdCWEzQKAt5e1UZnMJXBze6op/G0LOolh2n1U0CnEN8ugfIjl QsAghkpZIfe3FiKVQLtiQvSeZAbUw7pOf+n2AkAgI8UZhq0OaGceRFxFMR0LdqDY wqHuds5oYWN8lSuhXlDxnNEzqqcIJKEdIfBza5A7I2CCLJBv5TZdLHmS5kyx4Kwy xGijTCBg7k+ywPhC9HWTy6cjXqF2PFq10QG10bf1Wky1zjk+/0am8VNbeyjJ7SFt lKOVzs643pPM8OgJktqnnVp0DzzvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBuXO PYVnsSgOIrMBYD9l04er/KEwHwYDVR0jBBgwFoAUPW7ZBQN8g8VzeAsMzccNXYzv A4swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjg4NkIzLzM1MzVDQTFBQjhFRjExRURBOUIzNDFEQUYxMjIyNDY4L1BXN1pC UU44ZzhWemVBc016Y2NOWFl6dkE0cy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1BXN1pCUU44ZzhWemVBc016Y2NOWFl6dkE0cy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2ODg2QjMvMzUzNUNBMUFCOEVGMTFFREE5QjM0MURBRjEy MjI0NjgvUFc3WkJRTjhnOFZ6ZUFzTXpjY05YWXp2QTRzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQClBDew2RKVxDemM9wJKp9aS97ElK3d zWf5Bvd57mMJ1N7ME1n9g9tGJa1RhfQ0WkVsG0DC+MLtKmUbS+Q5/btocsjMW0cY BbHMsR4wk7zY+//8x4Tvyfxcgrgm0l21zntSRXXVP+lJsbz3F8p+/tvgC7EwKcMr 37iDDR3vaYfDyg3SJWtu68kwQdbYnYrwkTjOW3Xn76q/SObk470Bq9r9jHvkLNO+ sKf3MWXf2vVmMHsesazswk1eXUMzJT0Vh7PSJH7ActWJyDtBkk22YFMvcNg2JTMO WmHAVBGGUTcYfApRpfjRb1JtqtIS0ZkY4ojma0uJMuIfo1VRXGwefnNt -----END CERTIFICATE-----Generated at Sun May 4 04:11:05 2025 by rpki-client