$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft File: pfCiu4t57dbTfAd63-oIJRTAQg8.mft (raw, json) Hash identifier: W2YnEyUpY7oID+sZAxyI1ViOHH+r50+oPbmkjZl3uCw= Subject key identifier: F0:DE:5A:38:E5:B9:6E:91:83:F0:7E:AE:B7:14:03:20:BD:F1:8D:7C Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F Certificate issuer: /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Certificate serial: 01E2 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft Manifest number: 01D5 Signing time: Thu 19 Jun 2025 04:32:06 +0000 Manifest this update: Thu 19 Jun 2025 04:32:06 +0000 Manifest next update: Sat 21 Jun 2025 04:32:06 +0000 Files and hashes: 1: pfCiu4t57dbTfAd63-oIJRTAQg8.crl (hash: DzDEpzwLaOOlaDFaHRzTHXwlM3wCgdf0914J67NgSpo=) 2: 245B6D34FBED11EE8128962C017001B1.roa (hash: TrN9lcQpNeQiZwKFjsOsULheFfvRBy2GwIMFcOXP5rY=) 3: 60986EC6F10E11EEA398F1C8775412E6.roa (hash: UeXyeJMDi2GVx9uEPU+PiWuthmCddMz69n4V0SdxUZY=) 4: 4A3BF0B6E9F711EFB363B759762E951A.roa (hash: qnWjHMa6krZFafky4BYIbSFj8GVyr5kF/yN3x6ht2sE=) 5: 8C5EBF98B18D11EF93764599762E951A.roa (hash: LMCVfxRKPtEUcD+l4fHRZWVAaU9InzZT+jXi3ynNqyQ=) 6: 624DB26AFC1411EEA32C1066017001B1.roa (hash: SAKc0hgZ+mEboWzvP3K7DMfU8rpiR8UT+kWecca89NE=) 7: 767E76B2405F11F0B14520EADAE4EC9C.roa (hash: Psp54N8Zwbl9ziN2Vbyl63/0vnVM4zrW11s0ypx3pl8=) 8: 9BF619A8FCDC11EE8DA40146017001B1.roa (hash: po7czQ/bhDV7w3+Oz4IVCSJosx6dgGFsaZotpFYiUzU=) 9: 0C6B2666405B11F09F43C8CCDAE4EC9C.roa (hash: /9Ds38E/Nlm7VcSD/FOkPtqxtWfZMJuAf/6Y8lnD5JQ=) 10: ACB83E6242B211EFAFCCE28B762E951A.roa (hash: K3ivQ3+n4zlKylliwe/zTuRovNdpcW712O8vioTYjFg=) 11: A1B5AEEC442811EFA24AB347762E951A.roa (hash: WU/tv+bio89mYf5sL7OB/fhjHoVOLu5YlrkO6ttjHNQ=) 12: 7AFAA29E1F6111EFB0C39B397DDC24C2.roa (hash: e2WypnmRsaISjVRYfT/t99mLnGdtDrlVSL5Ti5URVMc=) 13: 6644E6CC4FE811EFBAAC404B762E951A.roa (hash: 48MYw/CHm3JnjY68hLvq+27NMpxBkJcznllBwP1oCwg=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 21 Jun 2025 00:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Validity Not Before: Jun 19 04:32:06 2025 GMT Not After : Jun 21 04:32:06 2025 GMT Subject: CN=685392c6-c21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:16:fd:77:d7:fa:c5:53:3c:fe:cc:3b:a6:08: aa:a2:0d:6f:9f:67:20:63:94:f6:89:ec:b7:48:3f: 4f:8f:7a:19:fb:3d:45:1a:68:d3:68:1c:8b:fb:b9: 94:eb:ba:32:5f:96:d6:10:21:02:2f:3a:94:9c:f7: 02:62:e2:5c:6d:50:07:3a:42:43:cc:27:c7:02:79: 31:22:f3:ff:fb:13:7a:64:23:74:d6:0b:d4:ad:9a: b6:36:ed:94:66:58:90:bd:12:0c:b4:f2:2f:f2:a2: 4b:be:be:5c:70:1c:fe:6f:70:83:b4:3a:42:93:d3: 69:c0:47:0c:29:e2:d5:5c:58:dc:f7:84:de:e7:dc: f8:d6:34:49:fd:19:14:ca:72:cb:d8:1f:01:06:13: bb:b9:a4:cd:93:11:bc:cc:40:04:2e:a7:ee:45:46: fc:53:9e:d4:36:8b:34:58:05:89:91:6a:4e:e8:77: e6:a4:20:35:f7:25:dc:8b:1b:df:2c:0e:f7:eb:cd: b9:56:c7:f6:26:fb:27:d9:14:4c:c2:cd:24:8c:a1: 61:34:7f:68:d4:bf:43:bc:f3:46:55:94:10:6a:f6: ff:6e:5a:1d:4f:0a:fd:9a:97:ed:cd:08:9b:60:94: 95:e5:17:4f:0b:ce:d0:49:9e:c9:6a:f6:d2:fa:67: aa:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DE:5A:38:E5:B9:6E:91:83:F0:7E:AE:B7:14:03:20:BD:F1:8D:7C X509v3 Authority Key Identifier: keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:d9:61:cd:54:d5:1a:a5:bf:53:65:95:0c:94:8d:92:88:bb: 13:1e:6c:8e:d6:67:b2:41:6c:bd:ae:5d:85:2f:ce:1f:bf:c5: 90:92:0f:d2:f0:82:2e:c6:7d:3a:9e:c1:f4:04:d2:b4:9e:4e: e3:d9:d6:93:fa:6e:ed:ac:be:25:56:f5:1f:7c:a8:3e:36:ec: 92:f2:fc:00:e4:d9:11:94:61:e6:cc:2e:73:67:09:10:02:d9: 4c:97:cd:1e:a6:ec:86:9b:29:c4:e3:1a:ae:9d:1a:fe:b7:4b: e7:26:5b:80:a2:75:c2:39:69:c4:5c:d0:cf:5b:f5:33:41:e1: 04:41:41:10:99:8e:cd:1c:8f:06:df:11:d3:81:4c:3e:77:79: fc:d3:b1:c4:a9:86:89:be:ff:52:b6:36:79:9f:95:09:e4:78: 97:bf:5c:1e:a7:51:12:54:85:a1:49:7d:92:87:7b:e2:5b:27: c7:06:0a:cd:b5:80:85:19:a2:37:38:63:fe:86:40:66:57:ec: 8c:dd:c5:69:bd:df:a5:40:1d:6b:d0:2b:2b:4e:6c:7b:b7:ec: 2b:82:d1:60:9f:45:d1:01:66:a1:61:a0:41:5e:7c:73:56:61: 58:65:ec:34:78:c4:0e:a8:ea:77:0c:e1:05:ef:28:19:72:c8: f3:a1:93:38 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 Q0IxQkVBRjExMC8GA1UEBRMoQTVGMEEyQkI4Qjc5RURENkQzN0MwNzdBREZFQTA4 MjUxNEMwNDIwRjAeFw0yNTA2MTkwNDMyMDZaFw0yNTA2MjEwNDMyMDZaMBgxFjAU BgNVBAMTDTY4NTM5MmM2LWMyMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC0Fv131/rFUzz+zDumCKqiDW+fZyBjlPaJ7LdIP0+Pehn7PUUaaNNoHIv7 uZTrujJfltYQIQIvOpSc9wJi4lxtUAc6QkPMJ8cCeTEi8//7E3pkI3TWC9StmrY2 7ZRmWJC9Egy08i/yoku+vlxwHP5vcIO0OkKT02nARwwp4tVcWNz3hN7n3PjWNEn9 GRTKcsvYHwEGE7u5pM2TEbzMQAQup+5FRvxTntQ2izRYBYmRak7od+akIDX3JdyL G98sDvfrzblWx/Ym+yfZFEzCzSSMoWE0f2jUv0O880ZVlBBq9v9uWh1PCv2al+3N CJtglJXlF08LztBJnslq9tL6Z6oFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU8N5a OOW5bpGD8H6utxQDIL3xjXwwHwYDVR0jBBgwFoAUpfCiu4t57dbTfAd63+oIJRTA Qg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkNCMUJFL0YzMjI4RTg2RjBFRTExRUVBM0JFMEY1ODc3NTQxMkU2L3BmQ2l1 NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3BmQ2l1NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2Q0IxQkUvRjMyMjhFODZGMEVFMTFFRUEzQkUwRjU4Nzc1 NDEyRTYvcGZDaXU0dDU3ZGJUZkFkNjMtb0lKUlRBUWc4Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBB2WHNVNUapb9TZZUMlI2SiLsTHmyO 1meyQWy9rl2FL84fv8WQkg/S8IIuxn06nsH0BNK0nk7j2daT+m7trL4lVvUffKg+ NuyS8vwA5NkRlGHmzC5zZwkQAtlMl80epuyGmynE4xqunRr+t0vnJluAonXCOWnE XNDPW/UzQeEEQUEQmY7NHI8G3xHTgUw+d3n807HEqYaJvv9StjZ5n5UJ5HiXv1we p1ESVIWhSX2Sh3viWyfHBgrNtYCFGaI3OGP+hkBmV+yM3cVpvd+lQB1r0CsrTmx7 t+wrgtFgn0XRAWahYaBBXnxzVmFYZew0eMQOqOp3DOEF7ygZcsjzoZM4 -----END CERTIFICATE-----Generated at Thu Jun 19 11:28:15 2025 by rpki-client