$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft File: k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft (raw, json) Hash identifier: T3DhBniTeNfjjW2bUy6evXeQoufqwBsueQVojrkkBqc= Subject key identifier: 31:13:C2:BC:E0:82:B6:6C:A8:9F:51:8A:E8:E0:C7:1D:E0:1A:E3:D8 Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F Certificate issuer: /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F Certificate serial: 08B4 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft Manifest number: 08AB Signing time: Sat 26 Apr 2025 01:33:14 +0000 Manifest this update: Sat 26 Apr 2025 01:33:13 +0000 Manifest next update: Mon 28 Apr 2025 01:33:13 +0000 Files and hashes: 1: k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl (hash: qo+QiDmjf/CdyzmgdhzyDxVpPxRv5g/eK9p/nPLeGRo=) 2: C7641772A95111E996327569F8AEA228.roa (hash: zc2sHBHJr4VAxxPP7oCatGt+nqgAgifPd0TVAOYCceY=) 3: A3FDC7B0A95111E9AAD65A69F8AEA228.roa (hash: 0K5eGgVbvu8FC7WyD8sLN1TIhCRCwpbYVJe4XMYjSoU=) 4: DB963EBAA95011E9B922BA68F8AEA228.roa (hash: vNERaKTpGQ3bPaoxkOtKP33r5596Gf5AbL5hU7WDtMM=) 5: 040A9D2CA95211E9BA19AD69F8AEA228.roa (hash: d5eKRJswPQOdst1U1f3S5KMf2lH/jWZCYOfKv1LJoCI=) 6: E558A086A95111E981E48069F8AEA228.roa (hash: MBZdMaPZOc8kPGCwpfLOeCgHyo2GuPSxS7SV1R8ZrgE=) 7: E95E4E02065B11F0BF610D92762E951A.roa (hash: hC1qoRCVr73SSJvtnxgOKj5VeDUtOUW6+PzCj2xq8vw=) 8: 833F912AA95111E9AEA64269F8AEA228.roa (hash: CVPSUPHc97z8+REt/xLFN1h3Agjjhgwt02UGfD7Jtsc=) 9: 7B3DF01C8F6F11E9B8F82D5FF8AEA228.roa (hash: nFOWMxTM8t65qguasjyQKc77AeNcYXGCBaZB7vYGI0Q=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 28 Apr 2025 01:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2228 (0x8b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36FEA6BAF, serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F Validity Not Before: Apr 26 01:33:13 2025 GMT Not After : Apr 28 01:33:13 2025 GMT Subject: CN=680c37d9-b46a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:34:fc:d5:fe:f6:e9:98:3b:fd:4f:e1:72: 55:a8:ac:14:a2:06:92:34:3a:97:ce:31:01:d9:3a: 9c:61:af:f7:0f:c6:6a:c8:21:a5:1a:c3:ca:a5:a5: aa:cb:58:c7:5c:ce:60:fb:19:91:26:38:24:03:25: 07:44:50:2f:58:ef:8e:33:6e:67:b9:25:b5:91:3d: 65:08:e7:14:bf:bb:e6:c9:ea:9b:fa:06:8e:0d:d5: 87:b3:ba:86:e9:73:d0:39:b9:ab:cb:36:ee:71:d5: 61:bd:21:ec:ff:27:21:95:fd:1b:f6:5e:c4:59:6f: 33:15:92:bc:a5:93:a0:3a:08:01:c0:5a:ff:53:e3: 92:d7:68:7f:d0:9c:96:88:e8:82:b7:b7:ca:f9:2a: 6f:58:f5:d4:f3:4c:b9:4e:a9:22:12:9d:70:97:ea: 1c:a9:8b:15:57:e4:61:e5:16:7d:26:69:44:d2:5b: 81:09:86:58:50:54:ad:6e:05:ca:47:55:72:cc:fc: 42:f7:d3:7e:fb:8c:57:fa:5f:e6:d8:a7:f2:b3:52: eb:27:87:90:ef:2c:6b:cb:dd:8d:ef:3b:e6:df:33: 73:d4:e8:25:66:aa:91:59:da:07:11:70:1a:c4:0b: f1:99:c0:d9:10:36:09:16:60:92:e7:84:e0:4c:de: 94:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:13:C2:BC:E0:82:B6:6C:A8:9F:51:8A:E8:E0:C7:1D:E0:1A:E3:D8 X509v3 Authority Key Identifier: keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:0d:b4:48:24:20:26:4e:ae:3e:fb:4a:12:44:97:76:81:ac: 73:91:a6:7f:0e:7c:55:49:4b:cf:72:2b:77:a1:60:a6:82:c7: 35:98:b9:d7:8c:3b:84:48:84:83:73:ee:1e:c4:ab:b9:30:5f: e0:5b:d3:8e:12:c1:cc:5f:79:6d:18:63:46:af:b9:a9:bf:b3: 9b:52:23:f3:fe:1e:3a:b6:de:c4:28:ae:a4:40:38:d5:31:ea: c8:f2:1e:80:38:72:0f:75:fc:f6:88:2a:51:04:7c:90:2a:29: 3d:0a:99:bb:2f:e4:3e:89:4a:ab:ad:74:f1:8a:a2:4f:fc:dc: cd:d6:b0:f2:89:a8:6d:98:b3:ff:47:3d:3a:73:79:13:b9:ad: ab:eb:c2:5b:9c:5a:13:d9:d2:41:fb:f1:9f:e9:07:53:53:f6: 2f:3e:de:f3:4a:d9:1f:44:3a:3e:56:43:9e:11:00:e8:6a:10: f7:1c:08:99:89:86:44:88:76:1b:79:a6:5d:5f:c1:fd:66:3a: 53:ff:c2:29:53:84:51:5c:3f:9e:12:06:67:14:a7:98:05:77: 92:91:fa:66:35:0c:3d:e9:36:47:0a:d4:be:a3:10:8f:5b:93: 5b:13:24:08:5d:f8:43:e9:55:7d:e4:a1:7a:93:f3:00:21:e8: be:98:6f:1e -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCLQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RkVBNkJBRjExMC8GA1UEBRMoOTNDMkM5OUFGMEVDNEQxQTQ2NDM0OTdGNUY4Q0JE QzdFQzQ1NzQ4RjAeFw0yNTA0MjYwMTMzMTNaFw0yNTA0MjgwMTMzMTNaMBgxFjAU BgNVBAMTDTY4MGMzN2Q5LWI0NmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDC1zT81f726Zg7/U/hclWorBSiBpI0OpfOMQHZOpxhr/cPxmrIIaUaw8ql parLWMdczmD7GZEmOCQDJQdEUC9Y744zbme5JbWRPWUI5xS/u+bJ6pv6Bo4N1Yez uobpc9A5uavLNu5x1WG9Iez/JyGV/Rv2XsRZbzMVkrylk6A6CAHAWv9T45LXaH/Q nJaI6IK3t8r5Km9Y9dTzTLlOqSISnXCX6hypixVX5GHlFn0maUTSW4EJhlhQVK1u BcpHVXLM/EL30377jFf6X+bYp/KzUusnh5DvLGvL3Y3vO+bfM3PU6CVmqpFZ2gcR cBrEC/GZwNkQNgkWYJLnhOBM3pQZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUMRPC vOCCtmyon1GK6ODHHeAa49gwHwYDVR0jBBgwFoAUk8LJmvDsTRpGQ0l/X4y9x+xF dI8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkZFQTZCLzdCMjc5MjBFOEI4MjExRTk4ODhCNkY3M0Y4QUVBMjI4L2s4TEpt dkRzVFJwR1EwbF9YNHk5eC14RmRJOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2s4TEptdkRzVFJwR1EwbF9YNHk5eC14RmRJOC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RkVBNkIvN0IyNzkyMEU4QjgyMTFFOTg4OEI2RjczRjhB RUEyMjgvazhMSm12RHNUUnBHUTBsX1g0eTl4LXhGZEk4Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwDbRIJCAmTq4++0oSRJd2gaxzkaZ/ DnxVSUvPcit3oWCmgsc1mLnXjDuESISDc+4exKu5MF/gW9OOEsHMX3ltGGNGr7mp v7ObUiPz/h46tt7EKK6kQDjVMerI8h6AOHIPdfz2iCpRBHyQKik9Cpm7L+Q+iUqr rXTxiqJP/NzN1rDyiahtmLP/Rz06c3kTua2r68JbnFoT2dJB+/Gf6QdTU/YvPt7z StkfRDo+VkOeEQDoahD3HAiZiYZEiHYbeaZdX8H9ZjpT/8IpU4RRXD+eEgZnFKeY BXeSkfpmNQw96TZHCtS+oxCPW5NbEyQIXfhD6VV95KF6k/MAIei+mG8e -----END CERTIFICATE-----Generated at Sat Apr 26 20:31:33 2025 by rpki-client