$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft File: x4zcO11LE2dctIrTtjvgHsWoB_g.mft (raw, json) Hash identifier: zsQTJCzIpH6r23D2LtVUeoTDkgRvA3gD88K+sKa9ux4= Subject key identifier: F1:B3:9B:7F:FA:20:8A:CC:B7:79:7F:1C:02:A6:C8:CB:A4:49:60:AC Authority key identifier: C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8 Certificate issuer: /CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8 Certificate serial: 0428 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft Manifest number: 041A Signing time: Mon 16 Jun 2025 03:18:00 +0000 Manifest this update: Mon 16 Jun 2025 03:18:00 +0000 Manifest next update: Wed 18 Jun 2025 03:18:00 +0000 Files and hashes: 1: x4zcO11LE2dctIrTtjvgHsWoB_g.crl (hash: UNAO9GBfuU6Cz2CBdXgqQ9nzSU9gCDbksA3K7ij6DjI=) 2: 45E09460492011EDA58FEACFF1222468.roa (hash: W7ubFeQV8onhDcwxeg30ugXXalNtBd+ZG/y/BamgqXk=) 3: 99986272498611F0BE1E23EEDAE4EC9C.roa (hash: Z4gQzojiEKX5fZtqwTgoYBRKXPibvfeQJQnSktukfUM=) 4: 61F3ED46A71011EFA4F58993762E951A.roa (hash: S/a4NOGDMCYqavfy2n6nHPuJWnA8uLXKDGrhZokqBOA=) 5: 88A5B71428C311F0BEF0A0B4DAE4EC9C.roa (hash: ePq4EbCDmWiOxXuBQCEii4Bej/F9RXahE4beV/zVjQ0=) 6: 24769B8AC01B11EE87488562775412E6.roa (hash: Juiav7EMo7UB6/g3W5W1dR2kpf5FMViakz+hnSTb9pI=) 7: CE07EBFC434F11EE9E338E5E4AD9E6FC.roa (hash: lLKF/LQUCJrjFGeoKrxD3GvZk7yNLfxsdpj4p8cAFcg=) 8: BA5646848B9311EFB18C87BF762E951A.roa (hash: JPWhpnri236k1i+Gn96J/0YOtSYJC79c9FGJpIaebkg=) 9: 76506164C45911EFBD701FB3762E951A.roa (hash: 99UKUf4fnRe0MO3HcCv5JDIcqSTWLiXWxRxR3pGatmc=) 10: C4CEB8AC398711EF843D2E9D762E951A.roa (hash: h7S0JCwsO3r6rweJjX0edCYo6Cy5Pss43I07DZlAHq8=) 11: 08DB71BC53EA11EF98E06585762E951A.roa (hash: 9y2Xf3yrmOHpN9GrNuG3T4PeZPIw6BfSrZ7oAs2gMlE=) 12: A278A9AC60E211EF938734A9762E951A.roa (hash: z1Jlw/yZ++yZq2QaqkGqkTifs65T2BP5GQxHjafo/Nk=) 13: 8390093077E011EF94B4F59C762E951A.roa (hash: /gwS+GQo/DPLk6XCYBj5Tt7o/4lhGYntAWZgy7TgGi0=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 18 Jun 2025 00:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36FE19EAF, serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8 Validity Not Before: Jun 16 03:18:00 2025 GMT Not After : Jun 18 03:18:00 2025 GMT Subject: CN=684f8ce8-fe52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bb:db:48:45:1d:6d:ce:b0:a2:dd:13:ba:58: c8:ca:8d:b7:5e:13:3f:b0:be:2b:f5:c4:ef:e2:7a: 83:85:da:7d:57:0d:06:dd:0f:0b:39:b3:c2:e9:22: b3:68:28:bf:85:a4:29:1a:e6:9e:4f:b9:a7:80:c6: ab:3d:a4:88:9d:04:7d:76:6c:87:a8:74:bb:29:13: e1:26:c9:61:0a:27:19:e9:64:60:ca:b5:52:22:86: 91:b8:5a:9f:5b:90:7a:66:73:18:cf:2a:01:20:40: be:5f:96:1d:26:c0:0f:03:7c:e4:7e:c7:78:5d:c4: 3e:c2:e6:64:35:ca:03:8b:7a:ac:33:af:e1:97:90: 7c:ef:62:bd:38:ae:27:a8:c9:ae:de:a3:e5:70:b0: eb:44:8a:d6:51:cd:b9:5f:03:88:b8:6c:47:b2:48: 6d:de:93:ca:4c:73:e9:c6:e8:9d:a5:6d:a6:18:73: 47:46:5f:19:37:29:0d:d4:aa:21:22:97:7a:05:cc: cf:33:3c:d7:19:42:21:35:e2:f9:5d:78:36:2c:be: 2f:29:f0:f1:ba:8d:d1:a2:fd:be:ee:c6:6b:bb:2c: 20:b7:f3:4a:c9:72:9c:15:37:d9:4e:38:f1:0f:c1: 89:a2:94:bd:de:15:bf:7b:2b:47:0e:3f:dc:24:30: e3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B3:9B:7F:FA:20:8A:CC:B7:79:7F:1C:02:A6:C8:CB:A4:49:60:AC X509v3 Authority Key Identifier: keyid:C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4f:69:04:a6:6b:a5:b4:f2:23:0c:b1:bd:48:6a:68:47:00: 41:7c:ed:7f:66:4b:40:fc:73:4d:89:20:82:4d:c1:49:16:d3: e1:ec:7e:90:6a:fe:13:0d:f2:f6:b7:4f:99:45:7e:8c:ff:7d: 7b:17:7d:e4:ce:80:3c:ea:df:db:ef:74:22:23:e9:f5:52:28: e6:83:69:a5:06:7c:4f:f5:51:d1:3a:5e:72:9f:c4:0a:42:4e: d2:38:30:c3:e3:ab:9f:ed:67:ca:3c:f0:8a:39:6c:66:16:23: f1:d1:89:63:7e:8b:18:cd:68:02:5f:b4:d9:6c:e2:69:02:78: c2:e3:7e:e5:4f:8f:52:79:8d:1c:9f:65:14:38:7c:57:29:96: e5:69:ec:72:98:e5:ec:f6:c4:02:30:73:c9:d5:ba:98:87:ab: 0b:85:04:77:f4:09:41:61:22:85:93:85:0e:a4:6c:38:15:c7: 66:38:64:1e:54:79:19:d6:5c:c8:e0:13:6c:b4:af:cd:3f:aa: 27:5e:7c:00:04:5e:f9:1e:3c:7e:cc:40:d3:32:07:7b:42:cd: ca:53:80:34:fb:a4:8b:b0:bf:b4:eb:1b:58:e2:cc:94:0a:8a: 53:5a:02:26:44:f3:1f:75:7d:81:15:9a:de:30:f0:9c:92:e3: 83:ff:e2:5d -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RkUxOUVBRjExMC8GA1UEBRMoQzc4Q0RDM0I1RDRCMTM2NzVDQjQ4QUQzQjYzQkUw MUVDNUE4MDdGODAeFw0yNTA2MTYwMzE4MDBaFw0yNTA2MTgwMzE4MDBaMBgxFjAU BgNVBAMTDTY4NGY4Y2U4LWZlNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDku9tIRR1tzrCi3RO6WMjKjbdeEz+wviv1xO/ieoOF2n1XDQbdDws5s8Lp IrNoKL+FpCka5p5PuaeAxqs9pIidBH12bIeodLspE+EmyWEKJxnpZGDKtVIihpG4 Wp9bkHpmcxjPKgEgQL5flh0mwA8DfOR+x3hdxD7C5mQ1ygOLeqwzr+GXkHzvYr04 rieoya7eo+VwsOtEitZRzblfA4i4bEeySG3ek8pMc+nG6J2lbaYYc0dGXxk3KQ3U qiEil3oFzM8zPNcZQiE14vldeDYsvi8p8PG6jdGi/b7uxmu7LCC380rJcpwVN9lO OPEPwYmilL3eFb97K0cOP9wkMOOVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU8bOb f/ogisy3eX8cAqbIy6RJYKwwHwYDVR0jBBgwFoAUx4zcO11LE2dctIrTtjvgHsWo B/gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkZFMTlFL0FCN0U3OEJFNDhERjExRURBNzYxQjI5Q0YxMjIyNDY4L3g0emNP MTFMRTJkY3RJclR0anZnSHNXb0JfZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3g0emNPMTFMRTJkY3RJclR0anZnSHNXb0JfZy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RkUxOUUvQUI3RTc4QkU0OERGMTFFREE3NjFCMjlDRjEy MjI0NjgveDR6Y08xMUxFMmRjdElyVHRqdmdIc1dvQl9nLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAOT2kEpmultPIjDLG9SGpoRwBBfO1/ ZktA/HNNiSCCTcFJFtPh7H6Qav4TDfL2t0+ZRX6M/317F33kzoA86t/b73QiI+n1 Uijmg2mlBnxP9VHROl5yn8QKQk7SODDD46uf7WfKPPCKOWxmFiPx0YljfosYzWgC X7TZbOJpAnjC437lT49SeY0cn2UUOHxXKZblaexymOXs9sQCMHPJ1bqYh6sLhQR3 9AlBYSKFk4UOpGw4FcdmOGQeVHkZ1lzI4BNstK/NP6onXnwABF75Hjx+zEDTMgd7 Qs3KU4A0+6SLsL+06xtY4syUCopTWgImRPMfdX2BFZreMPCckuOD/+Jd -----END CERTIFICATE-----Generated at Mon Jun 16 06:01:15 2025 by rpki-client