$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft File: T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft (raw, json) Hash identifier: lryWGikPA4WTsXPIbZK6L3GyKEOu2UkGbtPFv2PvBdw= Subject key identifier: BE:9E:37:6A:B2:01:F4:84:FB:6C:71:2F:16:63:D9:23:61:F9:95:21 Authority key identifier: 4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79 Certificate issuer: /CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179 Certificate serial: 07CA Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft Manifest number: 07BE Signing time: Mon 28 Apr 2025 01:48:26 +0000 Manifest this update: Mon 28 Apr 2025 01:48:25 +0000 Manifest next update: Wed 30 Apr 2025 01:48:25 +0000 Files and hashes: 1: T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl (hash: 8HkebwRgWqTOFlLpIsFifn//CBx3VXKRfx6TPX9RucQ=) 2: D2CA8558427911EAA3FED044F8AEA228.roa (hash: wurkYmqla/v4WBGYx1KQBTG96SHI4XZxvbfOZjy6dDc=) 3: FDA49C78427911EABA58F344F8AEA228.roa (hash: eNItvTIs3jbqReG8otIUPR5mjUnULKzx6gvlJCH+hbE=) 4: 41B6AD86469C11EA81469227F8AEA228.roa (hash: GFpsTEOd32IACxfCYv+4g0rk0Bgklgcuemi0F5TjBIo=) 5: C856574C41AB11EA9C27F52BF8AEA228.roa (hash: bz5TA1squK7Ifl9jqtLCRwvkOyW8Qa1kaJWgUXUsT5Y=) 6: 57CE8E244FFF11EF959DB964762E951A.roa (hash: fyxQpuVFjDxsdPdxESeE+9woq7cT+VNLSx/q/+d4MIo=) 7: 3281CE182B7211EEAF2893194AD9E6FC.roa (hash: fkff7v1iK+AxXqvd4C6nSAa4nFagy3GTQ4X7UfCbswc=) 8: D3167F64BBA311EA84581016F8AEA228.roa (hash: olteyMOY4v7fnBH8LXpkJqIEF+laR8HIc07JsyM+o9Y=) 9: 482F6A4C583F11EDA5C92AB4F1222468.roa (hash: 1bNHg5hR2N1EwB0UNF89B2hLunHKeyd9Nx1pg6+rORw=) 10: 7576B97E4FFF11EF84A6EB64762E951A.roa (hash: 33ok2yqrTl57C64Sr4/sUY8EF0IDi0i5pKehUOrq0+s=) 11: 168D8CF6BBA411EA82D06016F8AEA228.roa (hash: GX7T680/ieOsGwBZtEWumw47ki7Ge95lGqYGrmNJnos=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 30 Apr 2025 00:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1994 (0x7ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36F6E4AAF, serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179 Validity Not Before: Apr 28 01:48:25 2025 GMT Not After : Apr 30 01:48:25 2025 GMT Subject: CN=680ede6a-75f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d1:b2:06:2b:32:d9:73:22:bc:44:c5:e8:d2: 09:b4:4a:d8:a0:64:1c:30:b8:53:64:e9:0c:04:4b: ad:4e:d0:8f:54:bb:4d:09:0e:69:03:a1:e7:57:80: b5:11:18:6c:a0:7c:e5:c1:ec:4c:ea:6d:e6:da:b9: 99:0e:02:88:a2:d5:03:8e:63:e5:d0:91:eb:a9:7f: 2a:16:2a:53:c6:40:c4:43:0b:78:a4:e8:fd:59:9c: 40:34:12:7d:42:68:fa:bf:3c:c3:4a:19:4f:1b:cf: 8f:05:e9:19:b2:9e:7e:76:8a:de:05:0e:83:92:3f: a0:ce:d8:6b:52:b3:9e:19:72:20:68:71:ec:08:91: 97:2a:c6:a7:23:58:85:7c:92:d8:39:4a:af:f4:17: d5:8e:ba:49:8d:09:6f:52:6a:98:2d:ec:11:f3:a6: b0:e2:10:ac:e5:f3:cd:f6:8b:e7:7a:8f:e0:eb:18: 51:8f:02:0d:2d:b7:25:7e:a6:2f:55:d7:63:52:54: 1d:22:13:63:71:bc:48:2c:17:a7:75:75:84:c8:e4: 03:3e:22:94:c8:6c:f8:1f:39:b1:27:0d:46:08:18: 45:2f:c2:5a:8e:69:43:34:6d:fd:22:d0:48:b2:db: 37:63:7e:3c:93:9f:13:a3:ee:51:7b:c7:47:14:17: 76:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9E:37:6A:B2:01:F4:84:FB:6C:71:2F:16:63:D9:23:61:F9:95:21 X509v3 Authority Key Identifier: keyid:4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8e:d6:fc:37:53:a3:e2:c6:b0:c6:d5:c8:b7:1f:92:a3:f5: 01:65:2c:e2:b7:d7:4e:ae:79:0e:26:59:73:60:ed:0e:e0:12: 8d:c5:73:89:98:d8:0f:51:2d:9b:09:ca:56:43:13:9a:59:2e: 61:78:cc:49:2f:82:09:05:c3:5c:ff:5d:c0:9b:26:3e:ab:a7: 20:bd:af:52:59:d8:9a:52:98:a6:4b:cc:3e:7c:23:ac:b1:30: 48:d3:b8:5e:fc:9e:1d:0e:51:80:8e:da:23:6e:fc:65:81:2f: 5a:d6:d2:8b:d4:51:4d:32:9e:b9:82:7e:d8:d3:7e:f0:b2:8b: 07:06:35:7b:5e:bd:28:1f:cb:5e:11:0d:65:ca:42:dd:9a:c7: c0:b4:df:16:2d:eb:87:6c:07:8c:d0:96:2e:d1:4f:ba:0c:2b: 94:f9:92:42:1b:71:ea:71:82:40:97:7f:63:09:12:9c:5c:48: aa:d2:07:4d:8e:c7:d3:a6:6e:ca:2d:ff:b3:1e:a9:bf:9f:97: 14:c6:63:d6:12:b9:91:82:02:5c:67:8b:c2:1a:1e:d7:db:68: 0c:37:af:ba:c6:53:6b:d0:83:01:8a:49:b7:aa:75:b0:c1:e9: d2:e7:0d:09:51:31:59:95:c4:ea:5b:73:1b:37:82:1c:59:c8: 60:a5:2d:b8 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICB8owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RjZFNEFBRjExMC8GA1UEBRMoNEZFRTEyOUQwOUFCODUwREEwMzlFN0Y1QkIyNEI2 Njk5QTBGODE3OTAeFw0yNTA0MjgwMTQ4MjVaFw0yNTA0MzAwMTQ4MjVaMBgxFjAU BgNVBAMTDTY4MGVkZTZhLTc1ZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC/0bIGKzLZcyK8RMXo0gm0StigZBwwuFNk6QwES61O0I9Uu00JDmkDoedX gLURGGygfOXB7EzqbebauZkOAoii1QOOY+XQkeupfyoWKlPGQMRDC3ik6P1ZnEA0 En1CaPq/PMNKGU8bz48F6Rmynn52it4FDoOSP6DO2GtSs54ZciBocewIkZcqxqcj WIV8ktg5Sq/0F9WOukmNCW9Sapgt7BHzprDiEKzl8832i+d6j+DrGFGPAg0ttyV+ pi9V12NSVB0iE2NxvEgsF6d1dYTI5AM+IpTIbPgfObEnDUYIGEUvwlqOaUM0bf0i 0Eiy2zdjfjyTnxOj7lF7x0cUF3Y9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUvp43 arIB9IT7bHEvFmPZI2H5lSEwHwYDVR0jBBgwFoAUT+4SnQmrhQ2gOef1uyS2aZoP gXkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkY2RTRBLzlENTk0RjcyNDFBNjExRUE4ODg2M0UyOEY4QUVBMjI4L1QtNFNu UW1yaFEyZ09lZjF1eVMyYVpvUGdYay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1QtNFNuUW1yaFEyZ09lZjF1eVMyYVpvUGdYay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RjZFNEEvOUQ1OTRGNzI0MUE2MTFFQTg4ODYzRTI4RjhB RUEyMjgvVC00U25RbXJoUTJnT2VmMXV5UzJhWm9QZ1hrLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCbjtb8N1Oj4sawxtXItx+So/UBZSzi t9dOrnkOJllzYO0O4BKNxXOJmNgPUS2bCcpWQxOaWS5heMxJL4IJBcNc/13AmyY+ q6cgva9SWdiaUpimS8w+fCOssTBI07he/J4dDlGAjtojbvxlgS9a1tKL1FFNMp65 gn7Y037wsosHBjV7Xr0oH8teEQ1lykLdmsfAtN8WLeuHbAeM0JYu0U+6DCuU+ZJC G3HqcYJAl39jCRKcXEiq0gdNjsfTpm7KLf+zHqm/n5cUxmPWErmRggJcZ4vCGh7X 22gMN6+6xlNr0IMBikm3qnWwwenS5w0JUTFZlcTqW3MbN4IcWchgpS24 -----END CERTIFICATE-----Generated at Mon Apr 28 21:08:04 2025 by rpki-client