$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft File: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft (raw, json) Hash identifier: pewLU/Y0JvWviqxW8i+7czmvzEQEvXJSjM5mBphRDig= Subject key identifier: 0E:B8:E2:26:AC:5A:2E:30:FB:CD:AF:01:FC:8F:1D:7D:EC:47:06:D4 Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49 Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149 Certificate serial: 0402 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft Manifest number: 03E5 Signing time: Sat 26 Apr 2025 03:16:50 +0000 Manifest this update: Sat 26 Apr 2025 03:16:49 +0000 Manifest next update: Mon 28 Apr 2025 03:16:49 +0000 Files and hashes: 1: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl (hash: Dytq9zJsjtBFSmtYzBGlQBmtRbub3Acd3f3fTT6+7hc=) 2: CAB5EB42374D11EE8810A0744AD9E6FC.roa (hash: Rd+cT1WHVj6VPW10DhoJe1VPjes86osECuBqlAPA/jk=) 3: 20D8603A3C6311EEBD05616B4AD9E6FC.roa (hash: yn1GI8XUJDZhc/a1VL4Ew8aXczcEtSuNRFvBTlTvah0=) 4: 662EC19C3C6311EEA2CE226C4AD9E6FC.roa (hash: qJZA5eX+xbJzCe6D7i9PnOvJU1CqeC3CU+zF75cZcts=) 5: F67E4B16374D11EEB5DE38754AD9E6FC.roa (hash: hU4jFk//Gd5275KQZyF78ZmsmvKAmuy74Zm19XPUqO4=) 6: 14B6AF743B4011EEADF20A804AD9E6FC.roa (hash: K4yraD6px2otzCCbUQWt+Yh6khumJagXOv/4f3vipmU=) 7: 53D289E63CCE11EE935F8A394AD9E6FC.roa (hash: 4HBFVVMsDOfA/xrur5pE2xRwqQtzwcjvpCJfYPdn3co=) 8: 5F94B5287E1F11EEB18DE56B4AD9E6FC.roa (hash: NnfOKQOywlCm8MbXuo5ryxtlJJnqWeXUY/Zc4KGtk9o=) 9: 03541FA67E1F11EE99591D6B4AD9E6FC.roa (hash: tMNuryIys8bdcGqr2btn+01OsiqNMJcIT+oXA5sB548=) 10: 4ED14CDCA6DA11EDAEF82299F1222468.roa (hash: iXehJ8WLWU6cHBFHQ5qsEfloV58oVEhPLmmW3fV/BY4=) 11: 4788CE9A3C6311EE9733C66B4AD9E6FC.roa (hash: 0sVxWZVOpyK0cudH1BB1HUmOSWE0Bj2HjfkgAIa158s=) 12: 158513F4518011EE8BDBCE164AD9E6FC.roa (hash: sbl6JhnjaIL3BTU2+lQRNeSnxalVE/sMDYPWi7BO8vg=) 13: 85435BE23C6311EE9E2BB76C4AD9E6FC.roa (hash: ZIlXxtD8wXr16Udjo8wBxB2atTHwjE6MF56MpocHqts=) 14: 4433C912374E11EEBD8F3D764AD9E6FC.roa (hash: lHtBjObTBwNyVhJrHEQ/zHzgJmnlb42wMC73m5Dh7UE=) 15: A775C5D83C6311EEA094166D4AD9E6FC.roa (hash: L972nqC78lcXrhC+mjzOc5OXmYgCBGyLNtGIrSD8tWw=) 16: 20EEA9507E1F11EEAD686A6B4AD9E6FC.roa (hash: +kuN9/TLBGpI4GFRii8gvKOE9Vh3yGtX4DQwHRmVzSA=) 17: 04540B763C6311EE82DB186B4AD9E6FC.roa (hash: 8pLsZ3suwRhldyF5vniTCRO+W8oJo+1mBH+nN66FQ8k=) 18: 329D5926A54311EEA7A66B2ED25BE465.roa (hash: 1pPOf7iWBENGk84AGGgfnWlGuOjuG2CHIm2+lZTlGVY=) 19: 9369A48A374D11EEBBBCC3734AD9E6FC.roa (hash: LriikUtiyzWDzN+qJjLYRklCy7tVdfyDgc1icmMt3FY=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 28 Apr 2025 03:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1026 (0x402) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149 Validity Not Before: Apr 26 03:16:49 2025 GMT Not After : Apr 28 03:16:49 2025 GMT Subject: CN=680c5022-46c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:42:74:0b:0d:bb:93:dd:58:39:3d:05:b5:f3: 1c:19:ce:26:b9:be:6a:5b:63:ad:49:9f:f9:68:0c: 07:88:ad:f3:00:86:ae:b3:b1:00:ed:ef:5a:37:cf: 67:de:c8:23:7d:26:49:8f:bc:6a:e9:60:61:31:78: a6:10:74:d4:36:ef:9f:d4:fd:46:26:4e:4b:3a:ff: 03:71:7b:ae:51:8d:2d:1b:47:e8:a5:5d:82:61:d7: 8e:7b:2c:55:f5:c7:f1:45:6c:96:90:bf:9a:ec:9c: 9c:71:14:71:a4:c0:02:d4:4f:f4:7d:80:46:14:1e: d5:1e:7e:ad:d0:ab:98:5f:02:1b:92:08:f0:57:a1: 3c:77:20:4c:98:0b:5f:c3:16:df:68:a5:a6:ff:5e: 3f:15:cb:d9:b9:97:cf:28:b5:6c:e0:18:83:bf:2c: 89:b2:54:6c:e6:1b:fa:0f:4f:87:b7:d7:3a:6e:9c: 99:7c:75:50:0b:c6:75:e7:a5:44:ee:f7:a8:74:79: 9b:14:f9:71:c6:c3:f6:95:9e:b2:0e:1a:10:39:4e: 59:e5:6b:15:29:31:c1:f5:fb:75:89:77:f1:33:51: 3d:da:33:d4:b4:fb:80:a4:71:66:b3:71:42:22:0a: ff:cc:f3:79:66:40:6f:df:6c:c7:7e:8a:bb:70:44: ae:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B8:E2:26:AC:5A:2E:30:FB:CD:AF:01:FC:8F:1D:7D:EC:47:06:D4 X509v3 Authority Key Identifier: keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:9b:43:7a:f1:c2:e8:37:7f:e2:85:1b:1a:ed:d7:25:e7:68: 11:54:07:56:a0:0b:15:e9:b3:af:b5:b2:35:85:ef:0b:66:59: b8:80:b5:27:46:2c:8a:e7:f4:f2:76:67:a2:5c:3c:cf:65:79: 3f:85:94:f8:b8:7d:75:29:a9:fb:45:bf:f6:a6:bd:b3:27:e8: 89:84:1a:54:0e:53:9d:06:01:7a:09:a4:b3:d6:c7:0c:de:24: 7d:1a:22:9d:35:d5:fb:92:d8:96:3b:46:cf:b6:06:bd:e7:c3: e7:b4:9b:60:b7:e9:a3:92:d7:f3:c6:37:93:9b:b0:a6:22:e0: 8a:ef:78:e3:3e:7f:13:0f:20:98:e3:c3:db:ab:3b:6b:bc:fa: 7d:11:a5:26:bd:d9:a0:c4:a5:1a:c8:f4:7c:32:3b:a7:d1:36: fa:c7:41:46:2d:b4:f7:f1:4c:18:9f:ad:34:f0:c7:8e:76:4c: 8b:bd:e7:e4:07:4a:8c:3d:98:6d:ac:f4:7e:f0:0e:7a:e8:6a: 5d:cb:da:32:27:f6:56:5c:23:56:8e:f8:6e:2a:4d:ee:78:06: c9:8a:22:98:9b:48:04:d4:fa:9e:8e:68:51:f7:36:6a:f3:8d: fb:96:cd:35:71:d3:47:dd:f9:ff:10:ea:54:1e:aa:f9:d0:35: f4:09:84:59 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBAIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 REI0OTJBRjExMC8GA1UEBRMoRjQzRTA2NjhFRjcyQkQ4N0ZBNTM2OEJFMkI2ODE1 QzBCQ0I0MDE0OTAeFw0yNTA0MjYwMzE2NDlaFw0yNTA0MjgwMzE2NDlaMBgxFjAU BgNVBAMTDTY4MGM1MDIyLTQ2YzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDcQnQLDbuT3Vg5PQW18xwZzia5vmpbY61Jn/loDAeIrfMAhq6zsQDt71o3 z2feyCN9JkmPvGrpYGExeKYQdNQ275/U/UYmTks6/wNxe65RjS0bR+ilXYJh1457 LFX1x/FFbJaQv5rsnJxxFHGkwALUT/R9gEYUHtUefq3Qq5hfAhuSCPBXoTx3IEyY C1/DFt9opab/Xj8Vy9m5l88otWzgGIO/LImyVGzmG/oPT4e31zpunJl8dVALxnXn pUTu96h0eZsU+XHGw/aVnrIOGhA5TlnlaxUpMcH1+3WJd/EzUT3aM9S0+4CkcWaz cUIiCv/M83lmQG/fbMd+irtwRK4XAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUDrji JqxaLjD7za8B/I8dfexHBtQwHwYDVR0jBBgwFoAU9D4GaO9yvYf6U2i+K2gVwLy0 AUkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkRCNDkyLzEwREE5OTc2NEEwMzExRUQ4RjU5RDg5RUYxMjIyNDY4LzlENEdh Tzl5dllmNlUyaS1LMmdWd0x5MEFVay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLzlENEdhTzl5dllmNlUyaS1LMmdWd0x5MEFVay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2REI0OTIvMTBEQTk5NzY0QTAzMTFFRDhGNTlEODlFRjEy MjI0NjgvOUQ0R2FPOXl2WWY2VTJpLUsyZ1Z3THkwQVVrLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBmm0N68cLoN3/ihRsa7dcl52gRVAdW oAsV6bOvtbI1he8LZlm4gLUnRiyK5/TydmeiXDzPZXk/hZT4uH11Kan7Rb/2pr2z J+iJhBpUDlOdBgF6CaSz1scM3iR9GiKdNdX7ktiWO0bPtga958PntJtgt+mjktfz xjeTm7CmIuCK73jjPn8TDyCY48PbqztrvPp9EaUmvdmgxKUayPR8Mjun0Tb6x0FG LbT38UwYn6008MeOdkyLvefkB0qMPZhtrPR+8A566Gpdy9oyJ/ZWXCNWjvhuKk3u eAbJiiKYm0gE1PqejmhR9zZq8437ls01cdNH3fn/EOpUHqr50DX0CYRZ -----END CERTIFICATE-----Generated at Sun Apr 27 04:13:11 2025 by rpki-client