$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft File: oTaOi_yA9OpasJcW0lchGTYYKFE.mft (raw, json) Hash identifier: BZRtjGq+Eo07tsnglP4VWw5KecapFyANbilsGCfjuYQ= Subject key identifier: 6D:F3:35:A5:D7:05:03:A9:58:A3:C1:18:34:28:FD:8C:0E:D7:4D:F8 Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51 Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851 Certificate serial: 0CF5 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft Manifest number: 0CC5 Signing time: Wed 16 Apr 2025 01:09:24 +0000 Manifest this update: Wed 16 Apr 2025 01:09:23 +0000 Manifest next update: Fri 18 Apr 2025 01:09:23 +0000 Files and hashes: 1: oTaOi_yA9OpasJcW0lchGTYYKFE.crl (hash: kZYlBUfXHMAar0q81myxk1xD2W8z4chPJGBZGDzOFqE=) 2: 688FF63C70EA11EBB58E686CF8AEA228.roa (hash: mnhwlEYLBW14RTC3favyxPOzROufnwHo5mG4Z0mXmcE=) 3: 717250DC0B1F11F0979AD09D762E951A.roa (hash: EIY2uiwrUgRTGGH5CKTX60VMZhCwzhDQZwIzPuQyzLk=) 4: FF8AE3A2D27511EBA434AC13F8AEA228.roa (hash: 5+HC4jv4qZLLiwXnjuwHxqCdddSlDf0nEOGWfUV5PQQ=) 5: 316A8CAAEAD711EBBF227926D8A014CE.roa (hash: yxveE6pApv0ntB+dr/mwCV5WzRHfetSEdQFEmXgoicI=) 6: 2A0F92DAF65311EABA5EBE2FF8AEA228.roa (hash: THMJd5DgFhWv0Jk+1OcRnImey6Na8xQ3AsnqGvmdW70=) 7: 7454200CCAC611EB8443867EF8AEA228.roa (hash: hzz/vJ+aqnVoQNL7Q9fjlul0hrPt6hbCLM46iL+BL7I=) 8: C0A9CF84CAC511EBAD8F747DF8AEA228.roa (hash: 32bh8lnMpMvqyS9cax+2bQBhBK15D7Xt6pmKKyWGT1I=) 9: 48EF3A4CCAC511EBA25AC67CF8AEA228.roa (hash: akzUSGdVFPvN0ulPbNTi4W3s+HlY+6W8WohYYTP53AQ=) 10: 8E9FB58ACAC511EB9B981F7DF8AEA228.roa (hash: i2XbNZNySL6bjfPeeqcwKUmZc1PB1OXmHSBcuRJ9wok=) 11: 0B623002CAC611EBA5FDE97DF8AEA228.roa (hash: 7vqWPa/FVhwLVFvDKi4nljJ6iFh6Jfsi7spX+XnzJ70=) 12: 4E58D686CAC611EB9365587EF8AEA228.roa (hash: 4ThPqE6/bQdWLeN6MKhRWORK90ZVKeZ9eefEc7xOcFU=) 13: 89672DF86D9011EEB83415874AD9E6FC.roa (hash: GCv1qnJWw7EowPAn9i0uz0mqCeC5AHRLSdr3MuuzS/U=) 14: 97B6F442464111ECBD1F4A20D8A014CE.roa (hash: WFh81Czx23ss3LjWPFRZ0ox6H/FOzyhXrzAkY9AMcyE=) 15: FBDC85FE280211EFA2470CDD7CDC24C2.roa (hash: N2LzgJndLmvz3cDIsfFkVtUTemoZkwL0xxlWsp4hwb0=) 16: 6023B6466D9011EEB59691864AD9E6FC.roa (hash: 8Vfkb/3Ajxlzq/FEl75zlD6gPZ0n60l+v2tc/Wmueqg=) 17: 3730DFCE0B1F11F08F24969D762E951A.roa (hash: M4evIqnQ83xbCnZoy0k3D9VPp29Fp6WHTYW6UjV2Hb8=) 18: F2BA97A6CAC511EBB828B97DF8AEA228.roa (hash: MND7CmipLpfeKz1+bS7srpKpnj7/a7fnv2q2oc1dXDk=) 19: 6EE63CF0CAC511EBB74A097DF8AEA228.roa (hash: WPe/RcweAEsw7x1mmDsXfOpYOObfldXDxTckbMWoLT4=) 20: 9474CF86ED9E11EA9B405A41F8AEA228.roa (hash: 1ODaBYEbZc5lz2DA8RW3VSuCv0cfBzMfZN9Q4vPucaM=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 18 Apr 2025 00:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3317 (0xcf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851 Validity Not Before: Apr 16 01:09:23 2025 GMT Not After : Apr 18 01:09:23 2025 GMT Subject: CN=67ff0344-f6bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:ff:39:f6:d7:39:9f:c1:0a:55:d9:21:0b: f6:7e:ef:3f:10:d9:a4:9e:25:37:0f:82:85:f1:9e: 47:3c:87:2a:25:f8:82:b1:bd:d3:b5:6b:f0:51:7d: 49:8c:ad:ce:96:af:02:f1:5d:45:e2:b5:d7:73:05: 7a:a1:11:7b:a6:b9:64:f1:5f:de:b9:c9:01:c3:ce: 98:7e:0b:a9:f4:50:b9:34:7d:52:ec:28:28:46:12: 3e:21:4a:c6:c5:f2:76:58:d5:d7:80:0b:5c:0b:81: 1c:ea:a4:60:e1:6d:88:48:f9:f1:5f:33:d9:8f:9b: 71:64:25:4c:97:e4:92:43:5f:6d:e1:28:a2:7a:c6: cc:71:97:9c:6c:90:e2:b4:c3:f7:bb:78:74:ec:82: 7e:64:aa:95:2b:97:2b:18:25:c4:b3:7a:61:16:99: 7d:98:65:b6:ff:f7:c6:94:ff:6d:f7:6f:32:9b:1f: b8:61:81:05:20:c9:91:9c:72:1d:0b:12:5d:0e:8e: 05:9f:da:0a:bb:b5:a3:47:c6:41:82:f6:ad:b3:b4: 75:47:d9:15:3b:0b:2c:b8:9d:40:5c:69:12:85:10: 97:e1:8d:4e:04:c4:f7:6c:a8:0c:36:9a:9a:3b:78: a3:ea:bc:07:a7:6d:81:b8:68:3c:7e:c0:44:61:7f: 91:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F3:35:A5:D7:05:03:A9:58:A3:C1:18:34:28:FD:8C:0E:D7:4D:F8 X509v3 Authority Key Identifier: keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:29:93:a1:98:99:99:21:6c:46:ac:83:5a:50:b4:01:b0:d4: 1d:16:0a:1a:6d:63:2d:21:38:91:33:34:f6:81:ae:01:cf:42: f9:18:49:c3:d9:16:0f:c8:70:8e:49:64:82:a3:1d:62:fe:64: 3c:9d:29:a3:71:12:65:b4:d1:78:21:47:58:c8:c7:24:c5:c9: 4c:bd:f7:3b:7d:35:cf:66:15:07:98:1a:b8:85:57:c4:a9:90: 5b:1f:76:cd:49:8e:8c:61:cf:95:4b:d0:2d:02:b7:8c:d1:db: 28:b7:f3:95:c8:00:1e:b3:9c:13:2c:93:ae:b3:e8:50:1e:e0: c1:52:93:72:49:d0:5b:80:15:aa:1a:d1:82:8a:44:73:a9:ec: c9:4a:e6:5a:76:bd:70:f2:ef:85:e2:63:ad:46:b3:74:35:e2: 78:25:26:66:3d:34:0d:99:52:c6:1d:8d:54:ce:4a:1a:c9:99: e8:88:7c:fd:d9:ed:f1:c0:34:de:e4:fd:3d:f2:97:10:8f:8b: 34:5b:a8:83:11:68:20:a9:5c:b8:64:75:a0:fd:ba:b3:0b:9b: 9f:e5:45:f4:ca:4d:ce:04:6c:70:81:3c:3d:29:31:eb:17:16: 06:ef:39:62:cb:8a:03:3c:a0:16:b0:f8:2a:75:2f:a5:ec:52: 16:f3:ad:c2 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDPUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MkUzOUVBRjExMC8GA1UEBRMoQTEzNjhFOEJGQzgwRjRFQTVBQjA5NzE2RDI1NzIx MTkzNjE4Mjg1MTAeFw0yNTA0MTYwMTA5MjNaFw0yNTA0MTgwMTA5MjNaMBgxFjAU BgNVBAMTDTY3ZmYwMzQ0LWY2YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCykf859tc5n8EKVdkhC/Z+7z8Q2aSeJTcPgoXxnkc8hyol+IKxvdO1a/BR fUmMrc6WrwLxXUXitddzBXqhEXumuWTxX965yQHDzph+C6n0ULk0fVLsKChGEj4h SsbF8nZY1deAC1wLgRzqpGDhbYhI+fFfM9mPm3FkJUyX5JJDX23hKKJ6xsxxl5xs kOK0w/e7eHTsgn5kqpUrlysYJcSzemEWmX2YZbb/98aU/233bzKbH7hhgQUgyZGc ch0LEl0OjgWf2gq7taNHxkGC9q2ztHVH2RU7Cyy4nUBcaRKFEJfhjU4ExPdsqAw2 mpo7eKPqvAenbYG4aDx+wERhf5F3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUbfM1 pdcFA6lYo8EYNCj9jA7XTfgwHwYDVR0jBBgwFoAUoTaOi/yA9OpasJcW0lchGTYY KFEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4QUVBMjI4L29UYU9p X3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL29UYU9pX3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MkUzOUUvMjAwMTkxODQ4MEFCMTFFNkExMTdBRTYzRjhB RUEyMjgvb1RhT2lfeUE5T3Bhc0pjVzBsY2hHVFlZS0ZFLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDZKZOhmJmZIWxGrINaULQBsNQdFgoa bWMtITiRMzT2ga4Bz0L5GEnD2RYPyHCOSWSCox1i/mQ8nSmjcRJltNF4IUdYyMck xclMvfc7fTXPZhUHmBq4hVfEqZBbH3bNSY6MYc+VS9AtAreM0dsot/OVyAAes5wT LJOus+hQHuDBUpNySdBbgBWqGtGCikRzqezJSuZadr1w8u+F4mOtRrN0NeJ4JSZm PTQNmVLGHY1UzkoayZnoiHz92e3xwDTe5P098pcQj4s0W6iDEWggqVy4ZHWg/bqz C5uf5UX0yk3OBGxwgTw9KTHrFxYG7zliy4oDPKAWsPgqdS+l7FIW863C -----END CERTIFICATE-----Generated at Wed Apr 16 17:19:19 2025 by rpki-client