$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft File: pfCiu4t57dbTfAd63-oIJRTAQg8.mft (raw, json) Hash identifier: nC0aapNSAqJ5pkxasHSDpYEyNvLLkL/cD4Wqrx6pegg= Subject key identifier: 88:51:BA:8E:E8:27:38:8D:4E:C1:B7:8E:A2:CE:91:DC:8E:0F:B0:EB Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F Certificate issuer: /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Certificate serial: 01AB Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft Manifest number: 01A0 Signing time: Wed 30 Apr 2025 04:27:09 +0000 Manifest this update: Wed 30 Apr 2025 04:27:08 +0000 Manifest next update: Fri 02 May 2025 04:27:08 +0000 Files and hashes: 1: pfCiu4t57dbTfAd63-oIJRTAQg8.crl (hash: vWxX7wKkiobHyeezHcjziCoqyybDIbNKjhAESIby/eM=) 2: 245B6D34FBED11EE8128962C017001B1.roa (hash: TrN9lcQpNeQiZwKFjsOsULheFfvRBy2GwIMFcOXP5rY=) 3: 60986EC6F10E11EEA398F1C8775412E6.roa (hash: UeXyeJMDi2GVx9uEPU+PiWuthmCddMz69n4V0SdxUZY=) 4: 4A3BF0B6E9F711EFB363B759762E951A.roa (hash: qnWjHMa6krZFafky4BYIbSFj8GVyr5kF/yN3x6ht2sE=) 5: 8C5EBF98B18D11EF93764599762E951A.roa (hash: LMCVfxRKPtEUcD+l4fHRZWVAaU9InzZT+jXi3ynNqyQ=) 6: 624DB26AFC1411EEA32C1066017001B1.roa (hash: SAKc0hgZ+mEboWzvP3K7DMfU8rpiR8UT+kWecca89NE=) 7: 9BF619A8FCDC11EE8DA40146017001B1.roa (hash: po7czQ/bhDV7w3+Oz4IVCSJosx6dgGFsaZotpFYiUzU=) 8: ACB83E6242B211EFAFCCE28B762E951A.roa (hash: K3ivQ3+n4zlKylliwe/zTuRovNdpcW712O8vioTYjFg=) 9: A1B5AEEC442811EFA24AB347762E951A.roa (hash: WU/tv+bio89mYf5sL7OB/fhjHoVOLu5YlrkO6ttjHNQ=) 10: 7AFAA29E1F6111EFB0C39B397DDC24C2.roa (hash: e2WypnmRsaISjVRYfT/t99mLnGdtDrlVSL5Ti5URVMc=) 11: 6644E6CC4FE811EFBAAC404B762E951A.roa (hash: 48MYw/CHm3JnjY68hLvq+27NMpxBkJcznllBwP1oCwg=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 02 May 2025 04:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Validity Not Before: Apr 30 04:27:08 2025 GMT Not After : May 2 04:27:08 2025 GMT Subject: CN=6811a69d-c43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:71:7b:cd:74:4f:9a:b0:07:05:a4:0b:d9:d7: 54:c3:60:71:68:07:98:97:41:a6:f9:12:b0:88:a7: d4:6b:6b:5a:11:e4:fd:ef:9e:7e:6f:0a:9d:71:12: b6:9d:07:65:52:e9:cd:3b:91:16:36:8f:64:a9:19: 5d:9d:45:06:c6:03:3d:45:af:f8:a7:32:dd:46:00: 5a:79:d9:5a:1a:a0:f1:47:ab:b6:f1:4f:2e:3a:d9: 28:52:1a:1b:8f:47:73:9e:2f:38:04:36:a2:1d:bc: 1b:a1:2e:f6:cc:ec:9b:3e:99:43:83:99:e2:dc:86: d4:9d:94:aa:35:7c:af:dc:52:9e:8b:04:f6:b2:f9: c6:dc:ae:9a:9a:3d:fd:56:c5:db:92:9d:4d:3e:ad: 4d:40:a3:9d:19:65:78:66:e8:25:96:72:b0:69:cb: 6f:7e:80:36:05:2c:6c:74:10:f6:f6:df:2b:de:80: 69:5c:1d:29:0f:04:f8:68:a3:a9:02:7f:6c:68:c6: 1c:97:59:06:22:72:f5:d6:9f:fc:01:ec:5c:ce:60: 84:4b:da:81:dd:c9:67:80:47:fc:2c:94:95:e8:ed: 97:9a:c5:7a:fe:b6:a2:99:8f:b6:06:79:4e:14:28: 91:7a:3e:f9:a2:3a:55:44:c9:f0:29:24:3d:5b:28: f7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:51:BA:8E:E8:27:38:8D:4E:C1:B7:8E:A2:CE:91:DC:8E:0F:B0:EB X509v3 Authority Key Identifier: keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:2a:cb:23:6b:da:b9:9a:ce:78:72:8d:d0:a7:7e:55:c3:7d: 5a:a3:68:10:ff:82:1f:39:f4:bf:b4:78:36:38:3b:5f:34:ac: 7c:c8:3d:e6:fa:be:3c:24:a1:7e:9c:19:4f:51:3c:e7:b9:f7: 71:85:2d:0d:94:18:89:3e:e0:f4:7c:1b:ba:2f:c7:f0:19:69: 7b:be:e8:fe:e0:ff:f7:cb:73:e9:1a:f3:e2:21:e0:2d:58:d1: a4:0b:ac:79:87:a0:ef:39:5d:70:4b:5b:5d:d7:51:02:ec:0f: 97:73:4d:35:3b:33:ac:79:12:b7:86:71:de:02:9c:81:6e:ff: 2a:1f:d1:ae:a3:c3:a9:1d:e8:2d:09:78:d0:b9:c3:8b:d1:df: 91:8d:08:a9:1b:5b:9b:0b:1e:ee:05:bd:18:20:ac:6d:55:34: 37:e0:a8:09:23:f5:c2:a7:82:58:74:5e:bf:8c:29:e8:fc:24: 57:56:fb:27:08:b6:cf:21:15:4a:44:11:94:ca:8e:ee:4f:92: ac:7c:87:ef:50:1f:47:1f:4a:a6:d3:57:1c:7b:b6:85:93:73: 39:3c:28:8e:13:1f:e3:9f:f2:39:3d:af:4c:9f:3b:a9:b8:f4: 81:79:66:01:8d:dd:3e:b6:a2:44:f3:33:94:f6:48:bf:15:a4: 3c:41:cc:89 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAaswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 Q0IxQkVBRjExMC8GA1UEBRMoQTVGMEEyQkI4Qjc5RURENkQzN0MwNzdBREZFQTA4 MjUxNEMwNDIwRjAeFw0yNTA0MzAwNDI3MDhaFw0yNTA1MDIwNDI3MDhaMBgxFjAU BgNVBAMTDTY4MTFhNjlkLWM0M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCpcXvNdE+asAcFpAvZ11TDYHFoB5iXQab5ErCIp9Rra1oR5P3vnn5vCp1x EradB2VS6c07kRY2j2SpGV2dRQbGAz1Fr/inMt1GAFp52VoaoPFHq7bxTy462ShS GhuPR3OeLzgENqIdvBuhLvbM7Js+mUODmeLchtSdlKo1fK/cUp6LBPay+cbcrpqa Pf1WxduSnU0+rU1Ao50ZZXhm6CWWcrBpy29+gDYFLGx0EPb23yvegGlcHSkPBPho o6kCf2xoxhyXWQYicvXWn/wB7FzOYIRL2oHdyWeAR/wslJXo7ZeaxXr+tqKZj7YG eU4UKJF6PvmiOlVEyfApJD1bKPfjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiFG6 jugnOI1OwbeOos6R3I4PsOswHwYDVR0jBBgwFoAUpfCiu4t57dbTfAd63+oIJRTA Qg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkNCMUJFL0YzMjI4RTg2RjBFRTExRUVBM0JFMEY1ODc3NTQxMkU2L3BmQ2l1 NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3BmQ2l1NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2Q0IxQkUvRjMyMjhFODZGMEVFMTFFRUEzQkUwRjU4Nzc1 NDEyRTYvcGZDaXU0dDU3ZGJUZkFkNjMtb0lKUlRBUWc4Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+Kssja9q5ms54co3Qp35Vw31ao2gQ /4IfOfS/tHg2ODtfNKx8yD3m+r48JKF+nBlPUTznufdxhS0NlBiJPuD0fBu6L8fw GWl7vuj+4P/3y3PpGvPiIeAtWNGkC6x5h6DvOV1wS1td11EC7A+Xc001OzOseRK3 hnHeApyBbv8qH9Guo8OpHegtCXjQucOL0d+RjQipG1ubCx7uBb0YIKxtVTQ34KgJ I/XCp4JYdF6/jCno/CRXVvsnCLbPIRVKRBGUyo7uT5KsfIfvUB9HH0qm01cce7aF k3M5PCiOEx/jn/I5Pa9MnzupuPSBeWYBjd0+tqJE8zOU9ki/FaQ8QcyJ -----END CERTIFICATE-----Generated at Wed Apr 30 23:48:02 2025 by rpki-client