$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft File: OlU7bvgL-SIxL5a43cHyGajEEhs.mft (raw, json) Hash identifier: hRr6M4/XrVbMQo11OOUWczxp0r3+eLLBbZiSDJ2PCHQ= Subject key identifier: B7:CE:44:1A:62:A7:CF:C7:0D:8B:DD:A5:78:59:97:E9:A7:19:D8:F3 Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B Certificate serial: 033C Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft Manifest number: 031A Signing time: Sat 26 Apr 2025 03:43:00 +0000 Manifest this update: Sat 26 Apr 2025 03:42:59 +0000 Manifest next update: Mon 28 Apr 2025 03:42:59 +0000 Files and hashes: 1: OlU7bvgL-SIxL5a43cHyGajEEhs.crl (hash: M7OxamEcmTVr6Q7oTQWR22reqAOn4Ex5w7Bsbb3wapo=) 2: 00C569A2002D11F08D8D918C762E951A.roa (hash: J2zGLkOSE56js9RNvJ4OT497mQJdthstAM3GPqfXq4g=) 3: 4C04590A19C311F086AB4AFF6DB8BCC6.roa (hash: xIo3hGREn8S9T23pTXvTH+br+zFpiR4dijmgM7JOPi8=) 4: A9777DB400A111F0BFE5D984762E951A.roa (hash: /NRI84ju86WCQqU5dc2FqAKEMK10FL0ooHDMUCIRqrU=) 5: 8A0596E448DE11EF82EDFA4F762E951A.roa (hash: pTkaYfOMalP4Ac9YVOrNd/HL6aUPMLSzJ9NLjfsNk8k=) 6: 1C19002A58A711EF91CC474E762E951A.roa (hash: 28b+AJrYiZxyaN6PahnQJz38qCvJBTTx3Q3ULsHDeuc=) 7: A46FECBA0D4611EF94FE720E017001B1.roa (hash: 1+eZFsoTVxew2nM8QAmKo9cbdoGw9gIVLATJ2Cve9BY=) 8: 715F7C6A20EA11F0B8E627ACDAE4EC9C.roa (hash: xAuCxSESapePheQaNQUQosVQuvFdA5GWHeFuEjIS95k=) 9: 487DF37800FE11F09431944D762E951A.roa (hash: vFH43GxrKZ9rqeJkPBqFNCpNF2wmx+m29HBGPHLRYRU=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 28 Apr 2025 03:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 828 (0x33c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B Validity Not Before: Apr 26 03:42:59 2025 GMT Not After : Apr 28 03:42:59 2025 GMT Subject: CN=680c5644-5a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:80:aa:8c:f5:f5:bf:e6:aa:44:09:e5:67:2f: 06:46:57:f0:73:7c:23:6b:20:52:87:4f:a4:e2:92: 31:e1:96:3f:31:20:0d:95:66:c8:8f:79:86:af:c2: 52:c7:32:6b:d8:b8:ef:23:c0:9c:73:e6:05:f6:78: 75:27:2f:79:2f:1f:08:b9:2e:28:9c:4d:50:54:7a: fc:61:5f:15:08:e3:c6:82:52:e1:a7:c7:23:27:f6: 96:9b:e6:ce:57:e2:3f:73:51:66:c3:21:e9:44:4a: 72:86:4b:dc:37:e7:28:8d:4f:1e:f4:bd:59:12:a6: 7c:ca:06:73:4e:1d:3e:12:d6:e2:ec:8d:ea:a2:58: 17:d5:d7:77:14:24:e3:ac:ef:a0:92:2a:a9:c7:d9: 86:c9:e0:32:52:54:9b:a5:8f:5c:d5:32:f6:5b:ab: 5c:e2:1c:f5:22:57:8f:68:3e:61:98:b8:52:ef:9f: d3:d3:80:ec:80:d5:e1:dd:b5:97:2c:db:a2:ec:90: c0:b5:4f:6c:ea:24:3f:af:5e:4e:77:c2:6b:0b:0f: 37:73:aa:48:e1:06:8e:03:85:d8:d5:da:99:7d:22: 14:a2:a8:8c:83:b0:7f:5e:4d:c3:c0:b6:a9:7f:c5: d5:2a:da:f0:69:e3:4a:27:2d:c6:a9:8f:08:c8:cf: bf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CE:44:1A:62:A7:CF:C7:0D:8B:DD:A5:78:59:97:E9:A7:19:D8:F3 X509v3 Authority Key Identifier: keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:62:0e:fc:51:40:02:22:15:67:1e:1c:72:9c:e4:e6:f6:04: 88:46:9f:2d:88:bd:dc:19:3a:4a:08:c4:8e:93:0e:c3:b1:79: cb:07:88:57:2b:bc:19:47:f5:6d:1e:ea:8d:d0:e8:43:65:19: bb:5a:d8:68:3b:a4:51:6d:37:6e:8c:e3:5a:c3:9f:ad:1c:13: 13:4a:56:89:e1:83:6f:4c:03:1f:24:b6:dc:87:86:a9:1f:db: 2a:91:09:b3:f8:13:fb:66:ed:4b:01:45:5c:17:fa:e3:37:2a: 3b:40:f2:8f:36:a8:67:64:9e:be:21:f4:81:08:ba:94:f3:e2: 2c:9c:32:88:44:ee:e8:10:ba:fe:bd:96:b8:66:1e:10:3e:80: 24:94:d1:ea:53:cb:b9:61:d8:fa:a8:a6:99:e9:1c:60:4e:97: ec:cf:76:4c:b4:c7:c0:9b:24:12:bb:e1:88:3f:9d:c8:72:00: ae:3f:ad:3b:01:6c:6b:af:b5:a1:86:10:f2:45:9a:87:f8:eb: a3:f6:07:14:75:d4:2a:86:52:bb:02:6c:77:0f:48:34:47:49: 9a:65:31:69:7d:d0:8f:e5:f9:74:c4:21:20:3b:d6:c3:8d:1d: da:e0:f2:c8:2c:31:de:0d:b1:db:d0:cc:81:e4:40:38:4a:cf: b3:23:9f:25 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAzwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RUY3RDBBRjExMC8GA1UEBRMoM0E1NTNCNkVGODBCRjkyMjMxMkY5NkI4RERDMUYy MTlBOEM0MTIxQjAeFw0yNTA0MjYwMzQyNTlaFw0yNTA0MjgwMzQyNTlaMBgxFjAU BgNVBAMTDTY4MGM1NjQ0LTVhMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC3gKqM9fW/5qpECeVnLwZGV/BzfCNrIFKHT6TikjHhlj8xIA2VZsiPeYav wlLHMmvYuO8jwJxz5gX2eHUnL3kvHwi5LiicTVBUevxhXxUI48aCUuGnxyMn9pab 5s5X4j9zUWbDIelESnKGS9w35yiNTx70vVkSpnzKBnNOHT4S1uLsjeqiWBfV13cU JOOs76CSKqnH2YbJ4DJSVJulj1zVMvZbq1ziHPUiV49oPmGYuFLvn9PTgOyA1eHd tZcs26LskMC1T2zqJD+vXk53wmsLDzdzqkjhBo4DhdjV2pl9IhSiqIyDsH9eTcPA tql/xdUq2vBp40onLcapjwjIz79fAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUt85E GmKnz8cNi92leFmX6acZ2PMwHwYDVR0jBBgwFoAUOlU7bvgL+SIxL5a43cHyGajE EhswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRBRDlFNkZDL09sVTdi dmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL09sVTdidmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RUY3RDAvMzZFNDBBMTZGMkZCMTFFRDgyMUI5RDgwNEFE OUU2RkMvT2xVN2J2Z0wtU0l4TDVhNDNjSHlHYWpFRWhzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQChYg78UUACIhVnHhxynOTm9gSIRp8t iL3cGTpKCMSOkw7DsXnLB4hXK7wZR/VtHuqN0OhDZRm7WthoO6RRbTdujONaw5+t HBMTSlaJ4YNvTAMfJLbch4apH9sqkQmz+BP7Zu1LAUVcF/rjNyo7QPKPNqhnZJ6+ IfSBCLqU8+IsnDKIRO7oELr+vZa4Zh4QPoAklNHqU8u5Ydj6qKaZ6RxgTpfsz3ZM tMfAmyQSu+GIP53IcgCuP607AWxrr7WhhhDyRZqH+Ouj9gcUddQqhlK7Amx3D0g0 R0maZTFpfdCP5fl0xCEgO9bDjR3a4PLILDHeDbHb0MyB5EA4Ss+zI58l -----END CERTIFICATE-----Generated at Sun Apr 27 00:10:45 2025 by rpki-client