$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft File: YKDl0axmyK47fJ5qjvW8BLi7uI4.mft (raw, json) Hash identifier: dvZhVquD+rfcvLsucwFEenrtd4WXFE7ElpSfc1wMnW0= Subject key identifier: 30:9B:EE:09:D6:13:48:D5:27:48:75:7A:11:5A:37:F4:C7:C0:20:E0 Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E Certificate serial: 0696 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft Manifest number: 0601 Signing time: Mon 09 Jun 2025 02:46:43 +0000 Manifest this update: Mon 09 Jun 2025 02:46:42 +0000 Manifest next update: Wed 11 Jun 2025 02:46:42 +0000 Files and hashes: 1: YKDl0axmyK47fJ5qjvW8BLi7uI4.crl (hash: xwcQNAVUmGoD+Xd8dibwklfxYMc1amsj9P7ZI7r7cfU=) 2: 0091161A144C11F0801A51F76DB8BCC6.roa (hash: 9oNkMM3GJvaxowbYxronZzBOKB5XFOoDP/A6k15+A4M=) 3: 488D3EB060B211EF87A97782762E951A.roa (hash: MVYbN3+gCL8uNH5R81Zu9Ge2lQxWhVsfh/rM4ZRyn/w=) 4: 9D00E53A042411F0AE942178762E951A.roa (hash: 3lO4ySirvSBJZhZS0yYuZYZ1ZoMcdgb1UxXC64iMMus=) 5: CBF2E4B829EC11F0A80400EBDAE4EC9C.roa (hash: JxQxoQO5e0xyVP8JrZC6HNTSh2BQxTdpde2yD+5NMPI=) 6: 293DA02E0E9411EFB4C6A635017001B1.roa (hash: 3+KIiU4tfg4VsfxzRAEbpE5pkr5DnXevqMRkIzk01FM=) 7: 6C7ACBF26E0A11EFAC0C4258762E951A.roa (hash: 4grD6nGcP4ytHOjXft0LrvgGLuVL2rG269xNQf6k+eI=) 8: 372AC08C8CB511EF9888555B762E951A.roa (hash: etRxaBFYkDrFKylBsUD/HBMJSKuCjzex1c6EZ66GzPQ=) 9: 3D55B2F0C43211EF8166C3BD762E951A.roa (hash: Af+fAJ8B4YCQU1OF1pDiIpmVk8a59qwsOLlr9TGYlBo=) 10: 94B69FC84F1B11EFBF7CDAAE762E951A.roa (hash: KbxuO2uDPTezjLzyouQUc4XGgC1J865f/dnmoPHmv0Q=) 11: 0C083320B24F11EF80B52F71762E951A.roa (hash: swBYnhkImW9LhM0qswhHNCFqzYvKajWSuD7zcbFshH8=) 12: 373D29E4095511F096A41CBE762E951A.roa (hash: myBILke2RQ0OYPU057gGO3OXC3ByHG2noie9RgjT7qM=) 13: 467A6B4248DF11EFA203A954762E951A.roa (hash: j6LGYpvEwxNC35muXut5alaxgRUMQT87ILx6kToC8Qs=) 14: D64D49223E5911F0956A9DBBDAE4EC9C.roa (hash: YsGQStqKKIJfkra1egaJQtfLnvLGLX2PlxNcSWIc/0Q=) 15: 01E1321A3E5A11F0B7F45DBCDAE4EC9C.roa (hash: tNYBiIqQJL0JjP5Fr7JKp7+lo47X4fq0T1n16WVA4Lc=) 16: E2FD811CBC6511EF9197B567762E951A.roa (hash: EXiNgxy7d0tjLX1SpsLd379Zi3cAwKIMh7UFB0zyfF0=) 17: 666FD3D82EEA11EFBC63294B762E951A.roa (hash: MTXkIou//Guz3KRl/9YKtpj6n9ZVBkXEGaijhN0evTk=) 18: 646F613C003311F0A1A285B3762E951A.roa (hash: bJ1ILmkYuUC3NN3I2YJ1a0bc80c543GbkB4NCNMhrPc=) 19: A8566A94136C11EF9A119E33017001B1.roa (hash: 8n6hGcHTkYJois2LH442hMoRDS4eG3DkPDkUW4heEZ8=) 20: BC5D3D90032D11F09ED36D5F762E951A.roa (hash: fZkSIZKqHjYLVMmlSF8FT38HnKjU0BqJ7lEBUixZVJ0=) 21: 509B5B80154B11EFAAF66569017001B1.roa (hash: XKlm75kmISAu8xaI2z4uwQrQDSSx5mypluivOS+f5kk=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 11 Jun 2025 00:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E Validity Not Before: Jun 9 02:46:42 2025 GMT Not After : Jun 11 02:46:42 2025 GMT Subject: CN=68464b13-6d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:3e:8e:50:1e:77:f7:0d:c5:67:b4:c3:ee: 9c:e5:14:3f:3f:13:a9:34:89:2a:66:9d:d7:13:4a: 36:f0:a8:ec:92:bf:ab:74:17:26:21:99:e5:26:05: d8:e4:b9:3f:d0:d7:97:66:f8:20:37:ca:5e:81:6e: af:b4:9f:78:98:59:8a:73:5b:31:6c:da:fe:73:e8: 9b:c9:90:23:3c:42:b7:dd:68:cc:72:91:07:2e:5a: 40:36:3a:83:24:ad:0a:7b:0f:22:59:d6:cf:d7:1a: 6b:8d:59:bb:fe:86:f8:13:15:e7:6e:e6:a1:3b:c1: 0b:14:e0:72:b2:d4:ad:ca:76:eb:0f:e3:bc:57:bd: f9:51:d5:32:c3:77:5e:3d:31:80:de:32:e9:28:26: 4c:ec:72:a4:74:04:98:81:54:01:2f:05:cb:da:9b: 41:b7:b7:9a:63:7d:c5:25:26:58:c7:88:9c:73:d0: 1d:37:6f:a6:34:42:f0:8f:47:e8:d8:77:43:c4:77: 63:c1:08:d2:49:45:7f:51:55:9e:14:76:24:c4:01: 5e:f9:5a:c1:69:bb:b7:f9:51:a3:7e:bc:54:36:d0: 7a:ef:b0:da:79:d9:f3:33:2a:36:a7:bc:40:70:51: e6:6f:b8:60:61:17:28:30:6f:6f:fe:85:15:1e:1d: 6e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9B:EE:09:D6:13:48:D5:27:48:75:7A:11:5A:37:F4:C7:C0:20:E0 X509v3 Authority Key Identifier: keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:2c:4c:67:b0:87:ca:ae:ed:c5:e8:c8:0a:f4:3d:4b:aa:92: dc:f3:0e:5d:a7:12:2e:dc:0f:e0:54:b9:13:08:4e:69:da:72: e4:54:9e:0e:ac:2e:e5:a3:9e:2e:37:e8:c8:1b:67:a4:af:68: 7a:05:cc:17:eb:df:02:8c:66:b5:fb:b3:c6:45:b2:a0:04:2a: a8:5d:f1:47:5d:c6:3a:02:09:50:0e:48:92:aa:9f:16:ca:57: 41:40:02:90:fa:8c:99:aa:16:ba:17:c3:96:0a:a5:da:99:f9: fe:7e:cf:bf:31:57:c3:0e:1d:eb:ed:27:cb:34:d0:95:11:43: a7:09:df:67:d1:df:a4:62:6c:c5:7c:f9:ad:d6:e1:72:4a:24: 36:de:6e:d8:8f:db:5a:ca:5e:91:a8:41:f0:84:59:3d:6a:cf: 3e:f2:ce:4e:7f:ac:b1:6d:79:91:6b:dc:f7:83:f7:d1:d9:97: 1b:d5:c2:69:25:5a:56:01:d5:a6:4a:ed:c7:a9:62:05:b5:f9: 4d:39:20:c3:c3:64:e9:da:a5:a5:d7:f8:7a:47:78:59:19:c5: 9e:30:10:98:c1:b8:6c:6d:e6:fe:f3:57:c8:87:a5:db:a7:12: 29:04:cb:24:0f:6d:da:d2:0e:85:44:cd:d3:07:70:92:e1:8a: c9:33:41:be -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD MDRCOEJCQjg4RTAeFw0yNTA2MDkwMjQ2NDJaFw0yNTA2MTEwMjQ2NDJaMBgxFjAU BgNVBAMTDTY4NDY0YjEzLTZkNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCzOj6OUB539w3FZ7TD7pzlFD8/E6k0iSpmndcTSjbwqOySv6t0FyYhmeUm BdjkuT/Q15dm+CA3yl6Bbq+0n3iYWYpzWzFs2v5z6JvJkCM8QrfdaMxykQcuWkA2 OoMkrQp7DyJZ1s/XGmuNWbv+hvgTFedu5qE7wQsU4HKy1K3KdusP47xXvflR1TLD d149MYDeMukoJkzscqR0BJiBVAEvBcvam0G3t5pjfcUlJljHiJxz0B03b6Y0QvCP R+jYd0PEd2PBCNJJRX9RVZ4UdiTEAV75WsFpu7f5UaN+vFQ20HrvsNp52fMzKjan vEBwUeZvuGBhFygwb2/+hRUeHW7PAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUMJvu CdYTSNUnSHV6EVo39MfAIOAwHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7 uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MTQ2NTkvNjY1NkRFNzQ2REY4MTFFQ0JDQzIxMDc2NUE0 MEQ1NzcvWUtEbDBheG15SzQ3Zko1cWp2VzhCTGk3dUk0Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyLExnsIfKru3F6MgK9D1LqpLc8w5d pxIu3A/gVLkTCE5p2nLkVJ4OrC7lo54uN+jIG2ekr2h6BcwX698CjGa1+7PGRbKg BCqoXfFHXcY6AglQDkiSqp8WyldBQAKQ+oyZqha6F8OWCqXamfn+fs+/MVfDDh3r 7SfLNNCVEUOnCd9n0d+kYmzFfPmt1uFySiQ23m7Yj9tayl6RqEHwhFk9as8+8s5O f6yxbXmRa9z3g/fR2Zcb1cJpJVpWAdWmSu3HqWIFtflNOSDDw2Tp2qWl1/h6R3hZ GcWeMBCYwbhsbeb+81fIh6XbpxIpBMskD23a0g6FRM3TB3CS4YrJM0G+ -----END CERTIFICATE-----Generated at Mon Jun 9 23:44:42 2025 by rpki-client