$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft File: aMXkutXc1WSiVidTyay2Mr0ky1A.mft (raw, json) Hash identifier: dNGe7g6WfBEh3VP0Mfk0Sie+RAoapdHkOjgy0t4vsXQ= Subject key identifier: A8:C2:7C:E3:D6:8A:88:8A:B7:CD:0A:B9:88:13:18:93:50:79:8D:99 Authority key identifier: 68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50 Certificate issuer: /CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50 Certificate serial: 086B Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft Manifest number: 085A Signing time: Sun 27 Apr 2025 01:40:36 +0000 Manifest this update: Sun 27 Apr 2025 01:40:35 +0000 Manifest next update: Tue 29 Apr 2025 01:40:35 +0000 Files and hashes: 1: aMXkutXc1WSiVidTyay2Mr0ky1A.crl (hash: jRg5sybbquJqUtsIQzZIX32hkXf6HdtIN2Bn8IKrX54=) 2: 67CF4D4AC47A11EBAC1DCB2EF8AEA228.roa (hash: itFkoyhCFbkxoKe/6GZZJKhOYtJVGG20wDDeoMWtUpQ=) 3: 51DD5CFA362311EC86345D40D8A014CE.roa (hash: ZOjl1c6p5MEg7MhRsQboW+KWuk6lGFrNRsr8eT5zSuA=) 4: 2E3A1228F14211EB95363E26D8A014CE.roa (hash: vD5KpjCW2oLjrazeJW7vuUKZt8XTsZHweUUc6bDl3m8=) 5: 0668CDBA8ECF11EA92325F27F8AEA228.roa (hash: obmP99ZP4gHqQi9QCtzWh7Wc0rtLRTLbw4IjE5aS9HE=) 6: 7F90265C003411EC9AEFCB7BD8A014CE.roa (hash: Us9bdbPalZ+yx1ibe5L/RTGvBCGXXo3x0b9dZX+Z/FM=) 7: 2A0AF02ED8D711EB93E56C7BF8AEA228.roa (hash: ZQ6oLNCOYoaY+3u19bx5mMnPdr11GM9m4rQK5cGUyGQ=) 8: 5E0FF05A1C8811EC996FCB76D8A014CE.roa (hash: Vk5ASQFgQjjsZEjyJ+X43+pLR30VafAKoJRgMFTM8vk=) 9: 59AB9F46ACB311EA94FB7A5CF8AEA228.roa (hash: M7zBdV0WcI6PFd9tLd94yJGWhV8lnlP02DcFXSG5pCM=) 10: 77F17762ACB511EAB011A45EF8AEA228.roa (hash: 1/STozfAIpnz6GETEBd4lb3u077CE2WkxWA/E9NUlaI=) 11: 83CC39468F0011EA98508558F8AEA228.roa (hash: L5ieRjYiG1OFGX8hr9WtcOwJsazJ2sf4i+jmqBumzYY=) 12: 4D5B7DFA9A9911EAB460C75DF8AEA228.roa (hash: 08HHiOipKJGcq74gZtGxaBA7hKxLZk9ttDnVaGPnEtA=) 13: DA956AF2E91F11EB8EE78B08D8A014CE.roa (hash: yi/kGe9K7bgzzNjuJJ9WkvYPrz9NLiez9H+X0/yDZ1o=) 14: 4F75903E8F9B11EAB3F92A79F8AEA228.roa (hash: 4DXiHxGSCbsyOMNhnwXSRwIzqtdpPeRGAU+Vq8d2Sbo=) 15: BC497164BFC211EB9C90B47DF8AEA228.roa (hash: vShLouUDMlMysq5av2KQKsWgiT2JaBcuHkhVOPxBIWk=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 29 Apr 2025 00:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36DE46FAF, serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50 Validity Not Before: Apr 27 01:40:35 2025 GMT Not After : Apr 29 01:40:35 2025 GMT Subject: CN=680d8b14-5704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:94:4d:15:6f:ee:18:2f:3c:1e:f1:cf:23:94: c8:a4:79:9f:35:e8:06:d9:b2:75:74:0e:4f:45:2c: a8:f8:77:d2:11:72:db:ae:1e:98:f3:7f:d2:27:18: b1:9b:80:4d:88:ce:5e:1a:af:c7:c0:3a:8b:2a:ca: 42:5d:89:94:18:ba:c5:10:70:c0:9a:ec:4b:03:e6: 09:c3:cb:0a:14:42:18:52:1a:86:59:cb:a1:30:f2: f0:53:b9:e3:b7:73:0b:f0:0a:57:ae:ec:b9:0d:f5: c5:f8:03:f4:d0:9a:95:e7:a7:35:06:a3:7f:70:f7: ca:0c:bd:29:fb:5e:b5:7b:ed:52:12:d9:a3:86:bf: 1d:0c:86:ca:26:94:83:0b:21:aa:d3:fb:89:d3:51: 4a:0d:5d:83:33:dc:9c:bb:f6:a8:f2:3a:5f:a8:aa: 1c:08:f9:f1:ee:82:fc:5d:64:10:65:ed:99:12:8d: 57:a1:1e:b9:30:ea:72:12:a0:00:0a:fb:92:09:6e: 4d:b9:31:9f:44:2a:c9:77:36:f0:14:07:e4:0a:93: 0c:08:dc:15:b6:5c:ed:49:0b:3f:f8:70:09:37:b3: 7a:1f:73:d7:fb:c8:2b:7d:4f:84:a3:19:34:8a:19: e6:7e:4e:5e:18:20:2e:c2:d9:81:44:42:3c:a0:57: 71:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C2:7C:E3:D6:8A:88:8A:B7:CD:0A:B9:88:13:18:93:50:79:8D:99 X509v3 Authority Key Identifier: keyid:68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:2f:0d:8f:cb:aa:cc:f7:49:8f:44:cd:67:55:1e:bc:f6:82: 11:1e:d5:a8:cc:e7:f3:27:da:6d:74:7b:68:61:9e:fe:ba:b6: b6:a6:39:a7:3e:b9:ce:01:97:1d:ec:a3:45:11:0f:b1:19:ca: 53:02:81:4c:5d:91:b8:d2:2c:a2:c6:97:f6:fa:ab:04:f9:32: 08:86:9a:7e:31:bb:29:d3:d0:da:0b:46:6a:ce:1e:4a:af:87: d4:cc:ff:70:a2:28:bd:65:63:10:5b:1c:d5:cd:20:db:57:66: 6a:a6:be:f2:f1:2d:eb:6a:9a:2d:a7:c9:7c:ee:73:06:a3:ca: 70:bc:b7:07:cb:d4:05:51:bd:85:14:bc:11:08:d9:44:cb:cd: 3a:9f:c5:87:e1:df:f8:b8:5a:e2:e0:09:be:0e:ff:e1:8e:b0: 09:32:e5:31:8b:21:00:41:cd:8e:05:43:d6:bb:02:8f:5d:2d: 3e:1c:82:7e:0e:f7:7b:af:2a:6b:50:5d:a3:c1:9c:5a:7a:ab: 77:e7:03:72:aa:eb:2d:d0:70:07:e6:86:4c:71:4d:c8:9e:07: 01:67:89:e3:3a:04:0b:a0:f6:e8:85:17:ea:75:8a:3b:de:f3: 1e:45:ad:b2:02:53:ba:04:88:8c:b0:9e:28:da:7a:97:8f:44: b9:75:de:5f -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCGswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 REU0NkZBRjExMC8GA1UEBRMoNjhDNUU0QkFENURDRDU2NEEyNTYyNzUzQzlBQ0I2 MzJCRDI0Q0I1MDAeFw0yNTA0MjcwMTQwMzVaFw0yNTA0MjkwMTQwMzVaMBgxFjAU BgNVBAMTDTY4MGQ4YjE0LTU3MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDflE0Vb+4YLzwe8c8jlMikeZ816AbZsnV0Dk9FLKj4d9IRctuuHpjzf9In GLGbgE2Izl4ar8fAOosqykJdiZQYusUQcMCa7EsD5gnDywoUQhhSGoZZy6Ew8vBT ueO3cwvwCleu7LkN9cX4A/TQmpXnpzUGo39w98oMvSn7XrV77VIS2aOGvx0Mhsom lIMLIarT+4nTUUoNXYMz3Jy79qjyOl+oqhwI+fHugvxdZBBl7ZkSjVehHrkw6nIS oAAK+5IJbk25MZ9EKsl3NvAUB+QKkwwI3BW2XO1JCz/4cAk3s3ofc9f7yCt9T4Sj GTSKGeZ+Tl4YIC7C2YFEQjygV3EfAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUqMJ8 49aKiIq3zQq5iBMYk1B5jZkwHwYDVR0jBBgwFoAUaMXkutXc1WSiVidTyay2Mr0k y1AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkRFNDZGL0VCNDkzNENDRDVGRTExRTk5NTI4MTkzQkY4QUVBMjI4L2FNWGt1 dFhjMVdTaVZpZFR5YXkyTXIwa3kxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2FNWGt1dFhjMVdTaVZpZFR5YXkyTXIwa3kxQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2REU0NkYvRUI0OTM0Q0NENUZFMTFFOTk1MjgxOTNCRjhB RUEyMjgvYU1Ya3V0WGMxV1NpVmlkVHlheTJNcjBreTFBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAMLw2Py6rM90mPRM1nVR689oIRHtWo zOfzJ9ptdHtoYZ7+ura2pjmnPrnOAZcd7KNFEQ+xGcpTAoFMXZG40iyixpf2+qsE +TIIhpp+Mbsp09DaC0Zqzh5Kr4fUzP9woii9ZWMQWxzVzSDbV2Zqpr7y8S3rapot p8l87nMGo8pwvLcHy9QFUb2FFLwRCNlEy806n8WH4d/4uFri4Am+Dv/hjrAJMuUx iyEAQc2OBUPWuwKPXS0+HIJ+Dvd7ryprUF2jwZxaeqt35wNyqust0HAH5oZMcU3I ngcBZ4njOgQLoPbohRfqdYo73vMeRa2yAlO6BIiMsJ4o2nqXj0S5dd5f -----END CERTIFICATE-----Generated at Sun Apr 27 05:51:33 2025 by rpki-client