$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft File: ycEp-8PIJzpGKVWpUo4KrC8umCw.mft (raw, json) Hash identifier: YJjBgtyo8nszbd6nkvvEG0spc1VCVsErVC6L6Mf7NFA= Subject key identifier: D9:0B:78:91:B1:01:8D:EC:3F:1C:63:37:F3:55:DF:D9:DC:57:96:5A Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C Certificate issuer: /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C Certificate serial: 011B Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft Manifest number: 010D Signing time: Wed 04 Jun 2025 09:39:15 +0000 Manifest this update: Wed 04 Jun 2025 09:39:15 +0000 Manifest next update: Fri 06 Jun 2025 09:39:15 +0000 Files and hashes: 1: ycEp-8PIJzpGKVWpUo4KrC8umCw.crl (hash: A8H69mSh/PQ2Tim3TSzJChnv6CKdNuaAllziidPIu5k=) 2: 04AE355E412711F0A7E4287CDAE4EC9C.roa (hash: ENLeza9xray0l264BMW02TQidzUw/ZtvZxWMod5FZ6s=) 3: C37DC01C412711F08A72D080DAE4EC9C.roa (hash: qs6TE4JP060hv/0pYpvsSx8iQ0sA281FwGL4dlEI/3w=) 4: C562E1227FE511EFA4266193762E951A.roa (hash: MeKHI1JwEO0dNY503adBbALC+TfZ50BQKRjHS6uYj7k=) 5: E1E725E27FE511EF94A66F93762E951A.roa (hash: kXVFpXwBX0moo6oFgHbW2bzPwFLvjsGItQkg+knk97g=) 6: 36D17E507FE511EF8E9D278F762E951A.roa (hash: isW05Vri1NVUUzw8M3SoRzzmQ8K529eo9pAlq8XeeUQ=) 7: 11E302C07FE611EF881E5295762E951A.roa (hash: 145rdnt1Cxjywczq9gDypBeUgWkI++ibIUuOEMfQqyk=) 8: 7A8C97107FE511EFB8E44791762E951A.roa (hash: AH8DtFHeq8MnXy0oZ85/RX+mX+FZ7sL97pcuKDpfLIU=) 9: FA5E14007FE511EFBDA17893762E951A.roa (hash: HOWJLbvAbWrETIKjPES8sLpxeGRDhtV+tpL6Pi7P71U=) 10: 1A60E94A7FE511EFBEBA208F762E951A.roa (hash: A/mV4GlRLg3sT0E/c0AS8I1cypmKjG6MSwcDjeLas4Y=) 11: 517885647FE511EF83F2F690762E951A.roa (hash: NesjbwqdXYim8sduEYg7XmsPKVahYOQE+QARTRAVXQc=) 12: 455EACFA7FE411EF9A858F8A762E951A.roa (hash: FAEa1S962bIhXo4SwmCRjWz4N6IRQhTzTWTA+es1RJY=) 13: A97B972E7FE511EF83081793762E951A.roa (hash: mN6sdorObjWRjdE+T1AUWFBe0BDnfK2FWZtt0dewwa0=) 14: 93EF9424412711F09F2CC980DAE4EC9C.roa (hash: oONnRnrDfB0ZG1UHPPGQ0dp5NPJf1dST08ulaRQGOC0=) 15: 5C73A576412711F08AAAB37EDAE4EC9C.roa (hash: jjxXl0x/+co3gFlsdpdDQTKqw1d56AFQuCJMO0O5h0U=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 06 Jun 2025 00:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36337E5AF, serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C Validity Not Before: Jun 4 09:39:15 2025 GMT Not After : Jun 6 09:39:15 2025 GMT Subject: CN=68401443-0e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ff:00:53:c9:47:56:d9:c3:6a:3c:59:bf:49: 46:09:d1:2d:42:09:6b:0a:12:56:c7:94:3a:bf:54: 1b:b4:e1:d1:b6:7b:36:d7:c5:44:c6:1c:cc:0e:4d: 12:39:c7:ca:c1:b3:c3:da:d7:d1:a9:6f:49:e9:02: 42:dd:66:7d:ef:a3:75:5a:75:bf:23:ac:74:d0:73: 0d:57:70:80:ac:c7:51:ff:81:8f:ed:24:33:2f:0a: da:f2:f9:39:37:ba:6a:d1:97:ab:e0:68:ed:73:f4: a1:8a:e2:29:cf:2a:b1:22:05:6a:bd:0f:f9:37:12: 5c:8d:12:6f:c0:09:c1:21:ba:90:d8:85:d3:2b:e2: d6:e4:69:be:f8:3f:05:d0:5a:9e:af:37:45:65:fb: 05:22:f6:c2:f7:83:98:8f:73:9a:23:61:93:5a:08: a4:3d:b0:f4:d4:cd:69:33:62:91:10:f7:ec:b8:51: 24:90:36:8c:7f:4c:20:8d:cb:2d:47:4a:98:3f:e2: b7:9f:96:60:bd:d8:3f:63:34:d2:20:9e:3a:e7:00: 60:e1:c2:45:9f:12:3e:d4:26:5f:63:cc:77:04:b9: f5:72:b6:59:62:71:cf:02:81:92:bc:25:b5:38:45: 6d:34:ae:c4:40:ee:71:53:58:7a:b5:92:0c:62:40: 0a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0B:78:91:B1:01:8D:EC:3F:1C:63:37:F3:55:DF:D9:DC:57:96:5A X509v3 Authority Key Identifier: keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:41:e5:88:57:6c:bb:d8:fe:6d:8b:34:9d:a4:d4:e6:9b:55: f0:91:5a:4d:5a:b6:ff:54:52:41:cd:a4:64:3c:ff:b9:01:4f: 59:93:02:d6:d1:53:cd:8a:be:55:14:d4:7b:21:4e:32:59:24: ce:c9:58:71:83:18:ec:0d:f9:0e:f4:9c:bf:ce:36:41:6f:70: d7:de:ff:c9:d0:69:59:b9:7e:29:8c:da:d4:28:3b:9b:ac:74: ba:10:2e:3f:d6:32:37:ac:c0:ae:12:fd:01:85:56:1d:9a:9b: bd:2a:a7:18:ba:73:e2:51:75:cf:4d:0b:d0:e2:d5:33:f3:89: 98:e7:38:39:ae:a0:54:b6:4f:a7:b2:ff:66:e1:a6:e4:3c:21: 4f:77:79:12:aa:80:d2:02:3e:f2:a4:24:23:e3:48:6d:eb:bc: f8:90:f8:28:24:e2:16:dc:dd:51:6f:38:73:89:69:05:53:f4: 04:66:de:74:78:0d:df:47:1b:f9:1c:e2:34:ea:8a:51:00:56: a9:b3:5e:42:5b:2f:c7:06:3d:b1:80:0a:6c:2f:b8:af:ae:e3: f2:e4:de:a2:7c:dc:28:e3:65:c9:c4:4f:a3:b2:2f:b6:14:6e: 4b:a1:41:9e:59:e1:fb:90:0c:2b:c1:33:0a:f3:9b:2d:4b:94: d8:71:34:90 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICARswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MzM3RTVBRjExMC8GA1UEBRMoQzlDMTI5RkJDM0M4MjczQTQ2Mjk1NUE5NTI4RTBB QUMyRjJFOTgyQzAeFw0yNTA2MDQwOTM5MTVaFw0yNTA2MDYwOTM5MTVaMBgxFjAU BgNVBAMTDTY4NDAxNDQzLTBlNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDV/wBTyUdW2cNqPFm/SUYJ0S1CCWsKElbHlDq/VBu04dG2ezbXxUTGHMwO TRI5x8rBs8Pa19Gpb0npAkLdZn3vo3Vadb8jrHTQcw1XcICsx1H/gY/tJDMvCtry +Tk3umrRl6vgaO1z9KGK4inPKrEiBWq9D/k3ElyNEm/ACcEhupDYhdMr4tbkab74 PwXQWp6vN0Vl+wUi9sL3g5iPc5ojYZNaCKQ9sPTUzWkzYpEQ9+y4USSQNox/TCCN yy1HSpg/4reflmC92D9jNNIgnjrnAGDhwkWfEj7UJl9jzHcEufVytllicc8CgZK8 JbU4RW00rsRA7nFTWHq1kgxiQApzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU2Qt4 kbEBjew/HGM381Xf2dxXllowHwYDVR0jBBgwFoAUycEp+8PIJzpGKVWpUo4KrC8u mCwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjMzN0U1Lzk3OUJBNjQwN0ZFMzExRUY4MzQ3NTU4Njc2MkU5NTFBL3ljRXAt OFBJSnpwR0tWV3BVbzRLckM4dW1Ddy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3ljRXAtOFBJSnpwR0tWV3BVbzRLckM4dW1Ddy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MzM3RTUvOTc5QkE2NDA3RkUzMTFFRjgzNDc1NTg2NzYy RTk1MUEveWNFcC04UElKenBHS1ZXcFVvNEtyQzh1bUN3Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCUQeWIV2y72P5tizSdpNTmm1XwkVpN Wrb/VFJBzaRkPP+5AU9ZkwLW0VPNir5VFNR7IU4yWSTOyVhxgxjsDfkO9Jy/zjZB b3DX3v/J0GlZuX4pjNrUKDubrHS6EC4/1jI3rMCuEv0BhVYdmpu9KqcYunPiUXXP TQvQ4tUz84mY5zg5rqBUtk+nsv9m4abkPCFPd3kSqoDSAj7ypCQj40ht67z4kPgo JOIW3N1RbzhziWkFU/QEZt50eA3fRxv5HOI06opRAFaps15CWy/HBj2xgApsL7iv ruPy5N6ifNwo42XJxE+jsi+2FG5LoUGeWeH7kAwrwTMK85stS5TYcTSQ -----END CERTIFICATE-----Generated at Wed Jun 4 12:21:20 2025 by rpki-client