$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft File: H025rGtjEIoZvc2-7P9EmELI1qA.mft (raw, json) Hash identifier: xVubRZKEJjuPAFzf893p58ipbdEXrVLbM92WdGy6bAs= Subject key identifier: 02:C3:E8:54:8E:BC:92:42:C3:79:FD:5F:50:52:56:AE:8C:E7:23:2E Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0 Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0 Certificate serial: 05F0 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft Manifest number: 05D9 Signing time: Wed 18 Jun 2025 09:25:45 +0000 Manifest this update: Wed 18 Jun 2025 09:25:44 +0000 Manifest next update: Fri 20 Jun 2025 09:25:44 +0000 Files and hashes: 1: H025rGtjEIoZvc2-7P9EmELI1qA.crl (hash: fiZLZtOvi6EdlAv1SbtB0JXCSx9XYxSzIDVgBD7GIaw=) 2: 147022E0FF7811EF8AD31A7F762E951A.roa (hash: qYTfJITsVD5T5eimpEou1GQGKMzGQHZktsprbHqNuAg=) 3: 97E5095A63C011EF90B900AC762E951A.roa (hash: CHhNHwLMIMRB1HS45x0TZaQ8HwPIwiq6phsmJWqlNls=) 4: A4A1D2764B2511EF8EF8344D762E951A.roa (hash: 1LENRmO0LraUT6L3MliWDe3/LJksiV6Jf6oYUUqLkKg=) 5: 37B83E60FFEE11EFABEA6E81762E951A.roa (hash: gsvCvW76OaOtF8689d8WlWC5LaBRhvA+SlkfDprHioM=) 6: E631AAE263E211EFB8CD0280762E951A.roa (hash: XSoqhxLLsPMFAUnlaR/flj6HqH5kA2geBpaO4zUAc7M=) 7: 78DBB3A8509111EE8C794A224AD9E6FC.roa (hash: SDX6NV8iUbdSzDkDOEULuuCRJop7B8rmcDLu1uSO9fs=) 8: DB5852DAF85D11EC930D6BE8F1222468.roa (hash: 24EK8b+p2r7qpQuA2QKiuCsydz+C8t9Qpt7D1suQdos=) 9: 0EB33C3E515B11ED8AE4D0AAF1222468.roa (hash: eiq5eNdm8hOD/A+aOoYrfS2hurAaCz5anYykVp73ybM=) 10: 873E69A426D411EE808251234AD9E6FC.roa (hash: aoo+0TPZ+18QyH80oIAYV8B61S0zAuLxyHBVzKd8FOQ=) 11: 455DB88A63C011EF901665A8762E951A.roa (hash: pGHG04rI1V24GpX027/GUmlPC9Q173BRWV0hc0ib0ko=) 12: DBFE937C426511EEBE348D774AD9E6FC.roa (hash: QIaZqhKkN8RZ2TMX3IFJAuphOSd06o9Ok298FA+iNs4=) 13: BBDB457C50B211ED936AB1EFF1222468.roa (hash: Ic3/YAN//xfDApEXJkLHl3ajCQB8DF7eTF+JzdLiPrw=) 14: CBA17CF8509111EEB65831234AD9E6FC.roa (hash: wP6aKsEiYvGLq91LUKac5Hf0WJB6D/C/9SQUe8eJUqs=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 20 Jun 2025 09:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1520 (0x5f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36960E7AF, serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0 Validity Not Before: Jun 18 09:25:44 2025 GMT Not After : Jun 20 09:25:44 2025 GMT Subject: CN=68528619-0c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a1:f1:f7:4e:f4:fa:f3:7f:de:62:0e:11:73: 28:4f:34:4b:cd:c0:a2:2a:af:4b:55:90:0a:83:6b: 6d:ea:67:87:e5:c7:36:2f:49:9e:9e:13:4a:48:d0: be:63:9c:8a:42:5c:22:c8:db:b3:2e:b5:c5:49:36: ef:92:8b:24:5d:2f:06:7b:b6:f9:8e:52:8e:05:e4: d5:47:d7:6e:ba:02:15:fc:a8:ae:af:73:8b:d4:4f: 4f:60:de:89:19:1b:f2:76:41:1c:fb:8f:6e:e4:00: 82:ad:26:0f:6b:bf:09:09:7a:92:98:2f:8c:df:54: ce:d9:1c:c1:44:1c:38:ad:c3:0e:4f:c2:cd:16:81: 30:94:17:73:8e:8d:3e:9f:b8:dc:15:8b:fe:78:d3: 64:98:13:9e:a0:c2:d8:5b:bf:6c:70:7c:77:e0:be: ed:e8:b5:e0:8f:9e:5c:6b:fc:65:f9:da:03:03:e8: 98:d6:d3:ff:20:b6:db:bb:a3:94:47:8c:61:0a:5f: 2f:ce:b5:c7:e9:a9:ee:09:5a:f4:02:a6:52:ce:4f: c0:00:d3:15:13:db:6a:6e:81:30:46:09:ea:1a:49: 98:6c:b3:66:78:9a:06:34:4c:b9:7e:b6:84:a7:1e: f5:ff:8a:bf:b9:7b:4b:ab:e4:50:87:8d:ea:b2:64: a7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C3:E8:54:8E:BC:92:42:C3:79:FD:5F:50:52:56:AE:8C:E7:23:2E X509v3 Authority Key Identifier: keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:3a:08:96:b7:d4:39:05:43:fb:94:f1:24:c3:9b:8a:c2:ba: 93:72:28:94:bf:ff:65:ae:68:3e:6a:ed:1b:d5:31:23:5a:a7: 7d:91:c9:09:b0:59:cc:95:08:4d:f1:71:f5:1e:8e:34:0f:3f: 82:fd:f1:30:b4:85:c7:39:5a:c6:20:7d:3c:36:cf:4d:03:56: 33:74:58:ec:f9:a6:94:57:88:1a:7f:28:9b:1c:08:b4:b8:16: b7:0c:e9:48:6d:92:bc:b3:1e:83:53:24:c0:01:2f:d1:a2:a9: 48:e4:b4:bd:2d:58:f7:45:99:a1:73:43:d8:b9:20:1c:82:09: fc:84:01:62:d0:4f:95:c2:a1:36:18:c2:73:ff:d3:6a:65:55: 30:2e:6e:6a:db:86:84:61:9c:75:6a:f6:f8:a3:16:7a:a8:ee: 02:8a:e0:d9:90:82:6e:35:62:d1:b3:d6:36:96:6c:17:be:25: cc:8a:77:fc:90:bf:35:75:e0:79:3f:d9:00:fb:57:7c:7a:d1: d1:09:b8:b1:34:00:af:72:69:ce:7b:13:43:87:1d:d9:8c:42: 71:cf:a2:fa:93:c1:da:c4:ba:03:b8:51:ee:74:e7:e5:2d:e5: 7a:13:eb:e7:72:a9:61:af:66:f3:49:91:b3:a4:01:6c:33:62: 2f:d1:2f:e3 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBfAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 OTYwRTdBRjExMC8GA1UEBRMoMUY0REI5QUM2QjYzMTA4QTE5QkRDREJFRUNGRjQ0 OTg0MkM4RDZBMDAeFw0yNTA2MTgwOTI1NDRaFw0yNTA2MjAwOTI1NDRaMBgxFjAU BgNVBAMTDTY4NTI4NjE5LTBjNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCeofH3TvT683/eYg4RcyhPNEvNwKIqr0tVkAqDa23qZ4flxzYvSZ6eE0pI 0L5jnIpCXCLI27MutcVJNu+SiyRdLwZ7tvmOUo4F5NVH1266AhX8qK6vc4vUT09g 3okZG/J2QRz7j27kAIKtJg9rvwkJepKYL4zfVM7ZHMFEHDitww5Pws0WgTCUF3OO jT6fuNwVi/5402SYE56gwthbv2xwfHfgvu3oteCPnlxr/GX52gMD6JjW0/8gttu7 o5RHjGEKXy/Otcfpqe4JWvQCplLOT8AA0xUT22pugTBGCeoaSZhss2Z4mgY0TLl+ toSnHvX/ir+5e0ur5FCHjeqyZKc9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUAsPo VI68kkLDef1fUFJWroznIy4wHwYDVR0jBBgwFoAUH025rGtjEIoZvc2+7P9EmELI 1qAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjk2MEU3LzFDMEFFNjNFRUI3NzExRUI4MERFN0MxRUQ4QTAxNENFL0gwMjVy R3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0gwMjVyR3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2OTYwRTcvMUMwQUU2M0VFQjc3MTFFQjgwREU3QzFFRDhB MDE0Q0UvSDAyNXJHdGpFSW9admMyLTdQOUVtRUxJMXFBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXOgiWt9Q5BUP7lPEkw5uKwrqTciiU v/9lrmg+au0b1TEjWqd9kckJsFnMlQhN8XH1Ho40Dz+C/fEwtIXHOVrGIH08Ns9N A1YzdFjs+aaUV4gafyibHAi0uBa3DOlIbZK8sx6DUyTAAS/RoqlI5LS9LVj3RZmh c0PYuSAcggn8hAFi0E+VwqE2GMJz/9NqZVUwLm5q24aEYZx1avb4oxZ6qO4CiuDZ kIJuNWLRs9Y2lmwXviXMinf8kL81deB5P9kA+1d8etHRCbixNACvcmnOexNDhx3Z jEJxz6L6k8HaxLoDuFHudOflLeV6E+vncqlhr2bzSZGzpAFsM2Iv0S/j -----END CERTIFICATE-----Generated at Wed Jun 18 17:58:25 2025 by rpki-client