$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft File: YKDl0axmyK47fJ5qjvW8BLi7uI4.mft (raw, json) Hash identifier: OkragwKjnqtBZ3e94bt/afd+ZOizN3LU/vxs9868EZM= Subject key identifier: 7F:57:0F:4B:C2:BB:63:64:CC:5A:C5:E6:2A:51:3C:38:A8:6F:46:B5 Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E Certificate serial: 0652 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft Manifest number: 05C2 Signing time: Wed 16 Apr 2025 02:50:41 +0000 Manifest this update: Wed 16 Apr 2025 02:50:40 +0000 Manifest next update: Fri 18 Apr 2025 02:50:40 +0000 Files and hashes: 1: YKDl0axmyK47fJ5qjvW8BLi7uI4.crl (hash: J2WpFu+8wwxMw4JwJtP5gquDNgm07cNFLbiGrbs9ehM=) 2: 0091161A144C11F0801A51F76DB8BCC6.roa (hash: 9oNkMM3GJvaxowbYxronZzBOKB5XFOoDP/A6k15+A4M=) 3: 488D3EB060B211EF87A97782762E951A.roa (hash: MVYbN3+gCL8uNH5R81Zu9Ge2lQxWhVsfh/rM4ZRyn/w=) 4: 9D00E53A042411F0AE942178762E951A.roa (hash: 3lO4ySirvSBJZhZS0yYuZYZ1ZoMcdgb1UxXC64iMMus=) 5: 293DA02E0E9411EFB4C6A635017001B1.roa (hash: 3+KIiU4tfg4VsfxzRAEbpE5pkr5DnXevqMRkIzk01FM=) 6: 6C7ACBF26E0A11EFAC0C4258762E951A.roa (hash: 4grD6nGcP4ytHOjXft0LrvgGLuVL2rG269xNQf6k+eI=) 7: 372AC08C8CB511EF9888555B762E951A.roa (hash: etRxaBFYkDrFKylBsUD/HBMJSKuCjzex1c6EZ66GzPQ=) 8: 3D55B2F0C43211EF8166C3BD762E951A.roa (hash: Af+fAJ8B4YCQU1OF1pDiIpmVk8a59qwsOLlr9TGYlBo=) 9: 94B69FC84F1B11EFBF7CDAAE762E951A.roa (hash: KbxuO2uDPTezjLzyouQUc4XGgC1J865f/dnmoPHmv0Q=) 10: 31F31826606411EF89390EA0762E951A.roa (hash: XJE5bowMijOEb0dwq2uI3QNwKZq01TfKw2I/yEETF+o=) 11: 0C083320B24F11EF80B52F71762E951A.roa (hash: swBYnhkImW9LhM0qswhHNCFqzYvKajWSuD7zcbFshH8=) 12: 373D29E4095511F096A41CBE762E951A.roa (hash: myBILke2RQ0OYPU057gGO3OXC3ByHG2noie9RgjT7qM=) 13: 467A6B4248DF11EFA203A954762E951A.roa (hash: j6LGYpvEwxNC35muXut5alaxgRUMQT87ILx6kToC8Qs=) 14: E2FD811CBC6511EF9197B567762E951A.roa (hash: EXiNgxy7d0tjLX1SpsLd379Zi3cAwKIMh7UFB0zyfF0=) 15: 666FD3D82EEA11EFBC63294B762E951A.roa (hash: MTXkIou//Guz3KRl/9YKtpj6n9ZVBkXEGaijhN0evTk=) 16: 646F613C003311F0A1A285B3762E951A.roa (hash: bJ1ILmkYuUC3NN3I2YJ1a0bc80c543GbkB4NCNMhrPc=) 17: A8566A94136C11EF9A119E33017001B1.roa (hash: 8n6hGcHTkYJois2LH442hMoRDS4eG3DkPDkUW4heEZ8=) 18: BC5D3D90032D11F09ED36D5F762E951A.roa (hash: fZkSIZKqHjYLVMmlSF8FT38HnKjU0BqJ7lEBUixZVJ0=) 19: 509B5B80154B11EFAAF66569017001B1.roa (hash: XKlm75kmISAu8xaI2z4uwQrQDSSx5mypluivOS+f5kk=) 20: D2D9D000F8CA11EF9DBC905D762E951A.roa (hash: Jjmu7sdBAG5AgF3w4z9AnV0gRRvL2hD/xlTYph48lzY=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 18 Apr 2025 00:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E Validity Not Before: Apr 16 02:50:40 2025 GMT Not After : Apr 18 02:50:40 2025 GMT Subject: CN=67ff1b01-0fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d7:63:ff:a4:07:ef:5b:79:8e:cd:d0:bc:3e: fd:73:21:f9:5d:9e:a8:8b:ef:61:00:c7:44:0f:c7: 87:9e:b0:6c:b7:1c:a0:a0:53:85:38:e2:91:49:93: 3d:36:6e:c6:7a:20:dc:fc:9e:da:27:22:f7:73:50: de:4d:d6:d1:61:2d:07:59:05:e4:84:b8:32:66:c7: 12:ef:34:e9:d1:95:68:e7:37:81:21:24:2b:1e:bf: 85:e6:9d:49:2d:c4:5b:c5:61:b0:27:37:be:35:84: f1:fb:d6:23:bd:d6:9f:2c:d2:78:a8:e8:dc:e5:c6: 67:c7:94:1e:4b:14:62:2c:53:60:4c:61:dc:36:d3: d6:03:90:94:67:50:d9:a6:5b:5e:51:d9:38:93:0b: 8c:25:e7:01:f3:d0:69:5b:5b:35:59:68:10:d0:a2: 62:41:29:85:72:ff:78:f3:a0:b1:a6:aa:f0:c0:93: b2:1d:ee:4f:1e:85:7c:9e:5c:40:ab:79:68:df:7a: 34:37:bc:41:68:4f:9e:a1:17:62:b6:6d:b9:11:9a: 76:99:37:ff:68:d5:e9:73:f8:40:c3:36:6d:af:f2: 89:18:6c:c5:aa:34:13:b6:15:cd:b2:21:20:5d:65: 57:82:cc:0c:26:c6:75:05:65:ca:b8:be:22:18:7a: f8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:57:0F:4B:C2:BB:63:64:CC:5A:C5:E6:2A:51:3C:38:A8:6F:46:B5 X509v3 Authority Key Identifier: keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c1:7e:ab:37:ab:ef:2c:8b:fe:17:85:03:39:7b:5b:9d:23: 75:5f:96:ee:aa:3e:83:00:27:09:1d:06:a7:45:6d:44:88:dd: 2a:f0:76:2f:68:da:10:d8:bb:ea:cc:e7:98:aa:73:4e:e7:be: 10:31:72:50:40:1d:b1:96:94:cb:74:90:7f:e3:c1:6f:60:8d: 29:cd:8f:aa:d6:ea:41:b8:38:7e:f8:f5:f8:36:c0:0e:67:e2: 7b:d2:b9:69:6e:a6:8f:17:8e:06:d5:87:13:f2:1a:25:1d:dc: c4:00:6b:26:5d:44:53:30:86:27:c2:13:97:39:62:26:7a:fc: a3:e8:e8:76:4d:f1:28:c0:89:ab:f2:17:61:c7:6c:ea:5c:3b: fa:0b:d6:2e:01:5b:12:20:33:da:5f:93:e1:3d:bb:64:72:1a: 45:84:3e:19:7e:aa:9e:75:78:de:a7:95:05:68:43:05:e7:9b: 9b:e4:d3:32:c0:5c:03:d9:bc:42:1f:60:46:c9:06:c4:a0:e8: 86:92:eb:4b:46:07:27:f3:21:f1:fa:f8:ab:7a:88:cf:ab:24: af:69:49:83:f4:04:c9:98:8b:5e:c1:49:d6:ad:66:3f:5e:83: f3:99:23:58:24:e5:06:5c:24:7d:2c:f3:85:1b:69:bb:02:25: 4a:de:a9:cc -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD MDRCOEJCQjg4RTAeFw0yNTA0MTYwMjUwNDBaFw0yNTA0MTgwMjUwNDBaMBgxFjAU BgNVBAMTDTY3ZmYxYjAxLTBmYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCh12P/pAfvW3mOzdC8Pv1zIfldnqiL72EAx0QPx4eesGy3HKCgU4U44pFJ kz02bsZ6INz8ntonIvdzUN5N1tFhLQdZBeSEuDJmxxLvNOnRlWjnN4EhJCsev4Xm nUktxFvFYbAnN741hPH71iO91p8s0nio6NzlxmfHlB5LFGIsU2BMYdw209YDkJRn UNmmW15R2TiTC4wl5wHz0GlbWzVZaBDQomJBKYVy/3jzoLGmqvDAk7Id7k8ehXye XECreWjfejQ3vEFoT56hF2K2bbkRmnaZN/9o1elz+EDDNm2v8okYbMWqNBO2Fc2y ISBdZVeCzAwmxnUFZcq4viIYevhrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUf1cP S8K7Y2TMWsXmKlE8OKhvRrUwHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7 uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MTQ2NTkvNjY1NkRFNzQ2REY4MTFFQ0JDQzIxMDc2NUE0 MEQ1NzcvWUtEbDBheG15SzQ3Zko1cWp2VzhCTGk3dUk0Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAewX6rN6vvLIv+F4UDOXtbnSN1X5bu qj6DACcJHQanRW1EiN0q8HYvaNoQ2LvqzOeYqnNO574QMXJQQB2xlpTLdJB/48Fv YI0pzY+q1upBuDh++PX4NsAOZ+J70rlpbqaPF44G1YcT8holHdzEAGsmXURTMIYn whOXOWImevyj6Oh2TfEowImr8hdhx2zqXDv6C9YuAVsSIDPaX5PhPbtkchpFhD4Z fqqedXjep5UFaEMF55ub5NMywFwD2bxCH2BGyQbEoOiGkutLRgcn8yHx+vireojP qySvaUmD9ATJmItewUnWrWY/XoPzmSNYJOUGXCR9LPOFG2m7AiVK3qnM -----END CERTIFICATE-----Generated at Wed Apr 16 17:17:56 2025 by rpki-client