$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft File: jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft (raw, json) Hash identifier: wxLTL/3Jf1KmvsYeoyPeY4Spnw+/ycpX5bEryAn8KPM= Subject key identifier: 2E:67:FC:AF:4F:E6:87:AE:C3:56:C0:23:3F:34:20:40:E5:1A:CE:3D Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64 Certificate issuer: /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664 Certificate serial: 04C2 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft Manifest number: 04A4 Signing time: Thu 19 Jun 2025 03:03:08 +0000 Manifest this update: Thu 19 Jun 2025 03:03:07 +0000 Manifest next update: Sat 21 Jun 2025 03:03:07 +0000 Files and hashes: 1: jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl (hash: TyvF3mouQIJcFTJuMPSrmF6LWSdD9WLqYpQi1ZT3gmw=) 2: 7510A490FBDA11EFA602538E762E951A.roa (hash: K8eoOxbyDzKOVr27RbOhGjO0ujSDpgusioRxfBEGdeg=) 3: 6C4F7098FFA911EF80A256B8762E951A.roa (hash: nLVSz/e6y8EyahDhz46G+ddHGy6xFQEmZ+lSlLJOj1k=) 4: 14D0DD48FCAC11EF8F606291762E951A.roa (hash: We9A0b1twQQd49MjYQiHevJV7RGbH0zGgiiv0BmjU4w=) 5: 34F044FE336D11F0A6FE177FDAE4EC9C.roa (hash: yhXToE/ivhLm4HgJKr6OrdpT7iNJJtMwXlhtqU/6qu4=) 6: 332A33CAFFA911EF84F40CB6762E951A.roa (hash: nAe7SVEbrFBsJsSB2QjjEXejvC3k+OkB22lneTxOJs4=) 7: E9B17964E76511ECB6B242F6F1222468.roa (hash: QX79+PCfVXxj+OGB6vFI/wIK/0K3qU3aoir40/gZdAI=) 8: 565A309AAA4411EE82EC719A775412E6.roa (hash: w+NXlL7WYD4hkFC1Zg/6oqPBSnT10uVKTO9QtVy5wAw=) 9: BEB0D28EFCAA11EF97EC4A88762E951A.roa (hash: jZflyQkEOdvyH7cORlNM6RzxEc6T6GfFgEfB6W779Ik=) 10: E67C4F66FD2A11EFAFF97E57762E951A.roa (hash: 0KEac1L9NXZHhaATxDUbvggLHQuqEfxaMAc1BKGdXv0=) 11: 83013456FCAD11EF87CD979A762E951A.roa (hash: mbSp9RiZ25UX/mkuzNaTIeKIdEAGi8iGWvP9NDqM15M=) 12: FBD8F91C315911ED857E3ED8F1222468.roa (hash: F3tjPa1GVDjVxl63DkFUkmny30YoZBaG3q0D655v1oc=) 13: 6C20E300FCAB11EFA301CF8C762E951A.roa (hash: OvsUXNSmfjEutAwyrB9JnPffvmOpMIjkA04wcKDLKRY=) 14: F0DCA42CFCAA11EF9CB0AF88762E951A.roa (hash: BzJmdF2Js2FoOGSwDan1wfPrzdWX29V5MPNuA8XkzBM=) 15: 731820EAFD6B11EFA5FAAE9C762E951A.roa (hash: WBg3iidspfXKbYNsCa9+4QR22QeQEUUkOPouJHSY0gU=) 16: 84D63AD4FCAC11EFBDC66892762E951A.roa (hash: eiarFVPH9xcpuLJ9GJbS6IkBNStXLIhNVgC/u2KChdQ=) 17: D4C1004CFCAC11EF87CD1196762E951A.roa (hash: fLCcmeTVgTEV53OJny1Gldrpxh7k8xccoM8fDP287hI=) 18: 5673440CFCAC11EF9614E491762E951A.roa (hash: 6r9fkhk67fd1QL6JR1kRn7YKpBT/BIiBUWKwgxbcGDI=) 19: A7A6264AFCAD11EF8068089B762E951A.roa (hash: rW7LzojMuUG5spBMNnlWIM3kxFSqz8o4h8U+vR8ivoI=) 20: 03A4356EFCAD11EF82317896762E951A.roa (hash: qhNGvd3D7vHMLKqczxc5ocVwafHWZgDyr7UqLit5iMA=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 21 Jun 2025 00:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1218 (0x4c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36BC80AAF, serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664 Validity Not Before: Jun 19 03:03:07 2025 GMT Not After : Jun 21 03:03:07 2025 GMT Subject: CN=68537dec-ce84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a0:87:50:dc:50:ad:53:15:f1:09:2f:93:58: ca:9a:a7:68:7a:f9:cf:b4:f2:cc:e1:9a:61:2d:e4: 9b:e5:75:fe:f2:35:cd:48:9a:7a:5c:2a:f7:00:23: 55:8e:dc:9c:c4:3c:48:24:2c:41:7f:c9:0a:08:7a: 7a:d6:e6:c3:40:3d:35:4d:74:1c:9b:8f:7f:4e:46: 1e:6c:04:b9:5e:7a:a0:38:18:96:1e:1e:b2:d4:bb: 49:c3:2d:3f:7c:2a:e8:fc:01:2e:06:49:b1:45:25: 3f:6a:10:a0:9b:31:e2:11:76:55:d6:4b:1c:3c:03: 46:cf:c1:d5:73:b1:44:55:77:e2:39:32:de:7f:b3: 18:6d:c9:7c:b2:a2:31:3a:3d:b9:ed:f0:fd:db:7b: 72:71:27:bf:9c:53:01:81:81:ea:b1:06:29:71:4e: 07:6d:4e:26:df:b3:b5:56:93:3e:1c:01:86:db:fa: 60:d8:a5:ab:a8:e5:6a:b8:15:46:ea:96:68:af:3e: be:bd:eb:6b:08:50:13:2e:b2:bd:d6:68:69:57:e0: d7:ce:ee:65:3a:45:01:4e:2e:af:a1:9f:6f:97:33: 88:a4:24:c6:9b:ef:75:36:a5:1e:3e:90:78:4f:88: 1f:a9:32:c4:ca:cc:de:eb:69:34:c1:11:32:b7:07: 14:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:67:FC:AF:4F:E6:87:AE:C3:56:C0:23:3F:34:20:40:E5:1A:CE:3D X509v3 Authority Key Identifier: keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:34:5f:ce:4f:be:1d:2b:c9:7c:d2:5e:94:18:30:12:9f:f2: c4:9b:9c:c8:61:63:11:3f:82:08:1f:58:6e:8d:33:bd:70:e4: 5f:ca:a5:23:78:1f:ee:12:a9:88:6f:22:1c:36:e6:63:d3:01: 47:30:48:90:6c:47:c3:76:54:ba:7f:8e:b8:d5:99:6c:42:43: 8a:e6:0f:4a:e7:b8:a0:f7:56:8d:0e:85:ac:99:83:3d:c5:c0: 77:c5:39:68:35:c9:54:8f:07:17:95:a0:6e:72:bf:b4:f3:c1: ae:57:ed:c7:24:14:80:c9:4e:99:69:6b:1d:ce:02:f0:85:bf: f4:c0:54:67:b4:fe:2e:21:68:1f:f7:43:44:a6:19:a8:13:86: 3e:5a:6c:4b:b7:56:2c:f0:3c:b2:19:f9:ea:7f:b6:a6:2c:f4: db:df:f5:77:a9:46:ec:cf:0d:fb:e3:c1:d2:e1:a4:55:b5:32: dc:36:de:27:a1:88:46:2e:d2:01:92:85:ca:7d:e3:1e:49:8a: a0:92:59:84:28:66:7f:5b:b7:9c:9f:91:7f:b4:33:9e:14:63: e1:27:1b:74:a0:1f:af:a0:9b:bb:f5:33:73:c5:63:79:32:52: 3a:56:31:32:34:37:ba:20:de:4e:ca:48:8d:3c:a1:a4:32:13: bd:ea:45:2f -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBMIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QkM4MEFBRjExMC8GA1UEBRMoOEM4RjhDRTJBRDU1QjkzNjZCRUM2RURGNDkyQ0Q5 QzE0OThFMDY2NDAeFw0yNTA2MTkwMzAzMDdaFw0yNTA2MjEwMzAzMDdaMBgxFjAU BgNVBAMTDTY4NTM3ZGVjLWNlODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDGoIdQ3FCtUxXxCS+TWMqap2h6+c+08szhmmEt5Jvldf7yNc1ImnpcKvcA I1WO3JzEPEgkLEF/yQoIenrW5sNAPTVNdBybj39ORh5sBLleeqA4GJYeHrLUu0nD LT98Kuj8AS4GSbFFJT9qEKCbMeIRdlXWSxw8A0bPwdVzsURVd+I5Mt5/sxhtyXyy ojE6Pbnt8P3be3JxJ7+cUwGBgeqxBilxTgdtTibfs7VWkz4cAYbb+mDYpauo5Wq4 FUbqlmivPr6962sIUBMusr3WaGlX4NfO7mU6RQFOLq+hn2+XM4ikJMab73U2pR4+ kHhPiB+pMsTKzN7raTTBETK3BxTTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQULmf8 r0/mh67DVsAjPzQgQOUazj0wHwYDVR0jBBgwFoAUjI+M4q1VuTZr7G7fSSzZwUmO BmQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkJDODBBLzQ3MkVGNUIyRTc1QzExRUM5RDdGOTBEOEYxMjIyNDY4L2pJLU00 cTFWdVRacjdHN2ZTU3pad1VtT0JtUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2pJLU00cTFWdVRacjdHN2ZTU3pad1VtT0JtUS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QkM4MEEvNDcyRUY1QjJFNzVDMTFFQzlEN0Y5MEQ4RjEy MjI0NjgvakktTTRxMVZ1VFpyN0c3ZlNTelp3VW1PQm1RLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxNF/OT74dK8l80l6UGDASn/LEm5zI YWMRP4IIH1hujTO9cORfyqUjeB/uEqmIbyIcNuZj0wFHMEiQbEfDdlS6f4641Zls QkOK5g9K57ig91aNDoWsmYM9xcB3xTloNclUjwcXlaBucr+088GuV+3HJBSAyU6Z aWsdzgLwhb/0wFRntP4uIWgf90NEphmoE4Y+WmxLt1Ys8DyyGfnqf7amLPTb3/V3 qUbszw3748HS4aRVtTLcNt4noYhGLtIBkoXKfeMeSYqgklmEKGZ/W7ecn5F/tDOe FGPhJxt0oB+voJu79TNzxWN5MlI6VjEyNDe6IN5OykiNPKGkMhO96kUv -----END CERTIFICATE-----Generated at Thu Jun 19 08:08:07 2025 by rpki-client