$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft File: ycEp-8PIJzpGKVWpUo4KrC8umCw.mft (raw, json) Hash identifier: 4xomL5G6UMzilDHIEi7Ti4h97ghCR4UdfdbYkQKiCzM= Subject key identifier: D1:1A:0C:44:AC:60:81:B0:F2:51:11:B8:80:A6:7B:51:74:34:2E:33 Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C Certificate issuer: /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C Certificate serial: DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft Manifest number: D2 Signing time: Fri 11 Apr 2025 03:17:52 +0000 Manifest this update: Fri 11 Apr 2025 03:17:51 +0000 Manifest next update: Sun 13 Apr 2025 03:17:51 +0000 Files and hashes: 1: ycEp-8PIJzpGKVWpUo4KrC8umCw.crl (hash: vr8HErWsDfTM9/0C1vX8utbBl7Q6zq0J4lACrm6XyHU=) 2: C562E1227FE511EFA4266193762E951A.roa (hash: MeKHI1JwEO0dNY503adBbALC+TfZ50BQKRjHS6uYj7k=) 3: E1E725E27FE511EF94A66F93762E951A.roa (hash: kXVFpXwBX0moo6oFgHbW2bzPwFLvjsGItQkg+knk97g=) 4: 36D17E507FE511EF8E9D278F762E951A.roa (hash: isW05Vri1NVUUzw8M3SoRzzmQ8K529eo9pAlq8XeeUQ=) 5: 11E302C07FE611EF881E5295762E951A.roa (hash: 145rdnt1Cxjywczq9gDypBeUgWkI++ibIUuOEMfQqyk=) 6: 7A8C97107FE511EFB8E44791762E951A.roa (hash: AH8DtFHeq8MnXy0oZ85/RX+mX+FZ7sL97pcuKDpfLIU=) 7: FA5E14007FE511EFBDA17893762E951A.roa (hash: HOWJLbvAbWrETIKjPES8sLpxeGRDhtV+tpL6Pi7P71U=) 8: 1A60E94A7FE511EFBEBA208F762E951A.roa (hash: A/mV4GlRLg3sT0E/c0AS8I1cypmKjG6MSwcDjeLas4Y=) 9: 517885647FE511EF83F2F690762E951A.roa (hash: NesjbwqdXYim8sduEYg7XmsPKVahYOQE+QARTRAVXQc=) 10: 455EACFA7FE411EF9A858F8A762E951A.roa (hash: FAEa1S962bIhXo4SwmCRjWz4N6IRQhTzTWTA+es1RJY=) 11: A97B972E7FE511EF83081793762E951A.roa (hash: mN6sdorObjWRjdE+T1AUWFBe0BDnfK2FWZtt0dewwa0=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 13 Apr 2025 00:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36337E5AF Validity Not Before: Apr 11 03:17:51 2025 GMT Not After : Apr 13 03:17:51 2025 GMT Subject: CN=67f889df-c23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ab:ac:cb:44:a9:4a:d8:75:88:29:cd:b3:49: ba:05:88:85:20:62:48:9b:36:df:4e:ce:df:6a:66: e9:4a:c0:d3:9d:f8:a5:6a:04:70:d3:f8:b5:70:bc: f7:b5:30:04:1b:5b:cf:8e:25:ce:71:94:68:d2:78: a6:60:4f:db:25:f8:17:d0:36:d5:c3:1d:d7:da:6b: c4:38:b9:b1:84:df:db:6b:5a:d0:79:80:23:0d:d6: ea:42:86:4e:7b:70:2e:fc:0b:13:43:24:40:ee:34: c3:48:a2:cf:d3:ea:45:d7:40:ac:49:b3:f7:fe:9b: 0b:74:ad:62:e7:6f:4d:d1:54:c1:7c:95:29:df:30: 03:5d:f6:8b:7a:b8:b9:35:1d:05:ef:ba:6c:ea:47: 0b:e8:94:13:40:27:92:fd:f6:1b:1b:2b:6d:79:77: 8a:a4:cd:b7:18:15:49:e6:57:b8:1c:74:1c:93:e1: c5:74:ee:f7:39:13:5d:e1:88:e3:29:9a:1f:53:ab: 5f:08:0f:24:71:4c:44:e4:17:11:09:78:dd:68:46: c9:d0:1a:03:b1:f5:d7:42:e0:89:d4:88:6e:d6:4e: 5a:7f:ad:04:04:43:df:c1:3d:2e:86:d4:b8:70:66: 63:b0:ce:5f:3b:9d:6f:f7:8e:8b:da:f5:60:e8:a2: ab:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1A:0C:44:AC:60:81:B0:F2:51:11:B8:80:A6:7B:51:74:34:2E:33 X509v3 Authority Key Identifier: keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e6:48:58:1f:50:c5:81:bd:91:dc:4c:3c:2c:15:08:10:b7: 99:2c:cb:e3:a7:ec:f1:7f:ee:d8:9c:62:0c:22:63:09:7d:f1: b7:72:97:be:a9:aa:53:71:cf:37:32:29:80:71:8a:9d:a6:84: 3b:90:d6:2b:3c:b7:f6:11:c5:9a:5f:45:e7:bb:ce:4c:94:88: 63:df:ff:9f:f0:5a:b5:aa:6b:5f:ad:73:2a:08:cf:b5:7b:0b: c1:0a:fd:72:71:53:2f:64:0b:09:dc:11:a5:9b:cb:e8:49:15: aa:63:72:d6:ca:10:61:0e:75:d5:45:32:fc:41:5c:1f:d9:60: ad:e3:3b:55:6f:3b:dd:02:00:c9:30:2f:3b:09:65:a2:bd:36: f4:f1:5d:dc:fd:5d:2d:25:85:49:5b:d2:48:08:f0:f1:97:98: c2:35:e3:bf:42:3d:69:48:ce:c0:96:20:ce:6e:07:85:84:34: df:7f:81:c9:42:93:f2:40:33:d4:c2:16:f0:0e:c6:93:d9:cd: b8:66:56:03:25:ef:19:f5:f0:67:09:ad:f1:fd:36:1f:d5:91: af:01:68:69:74:af:47:d6:6b:60:06:7e:14:19:f5:8f:e3:11: f2:c8:6d:3a:a1:e4:1c:64:c2:26:b3:46:90:18:24:5e:45:1e: 57:9a:57:a3 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICANwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MzM3RTVBRjExMC8GA1UEBRMoQzlDMTI5RkJDM0M4MjczQTQ2Mjk1NUE5NTI4RTBB QUMyRjJFOTgyQzAeFw0yNTA0MTEwMzE3NTFaFw0yNTA0MTMwMzE3NTFaMBgxFjAU BgNVBAMTDTY3Zjg4OWRmLWMyM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC/q6zLRKlK2HWIKc2zSboFiIUgYkibNt9Ozt9qZulKwNOd+KVqBHDT+LVw vPe1MAQbW8+OJc5xlGjSeKZgT9sl+BfQNtXDHdfaa8Q4ubGE39trWtB5gCMN1upC hk57cC78CxNDJEDuNMNIos/T6kXXQKxJs/f+mwt0rWLnb03RVMF8lSnfMANd9ot6 uLk1HQXvumzqRwvolBNAJ5L99hsbK215d4qkzbcYFUnmV7gcdByT4cV07vc5E13h iOMpmh9Tq18IDyRxTETkFxEJeN1oRsnQGgOx9ddC4InUiG7WTlp/rQQEQ9/BPS6G 1LhwZmOwzl87nW/3jova9WDooqtHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0RoM RKxggbDyURG4gKZ7UXQ0LjMwHwYDVR0jBBgwFoAUycEp+8PIJzpGKVWpUo4KrC8u mCwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjMzN0U1Lzk3OUJBNjQwN0ZFMzExRUY4MzQ3NTU4Njc2MkU5NTFBL3ljRXAt OFBJSnpwR0tWV3BVbzRLckM4dW1Ddy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3ljRXAtOFBJSnpwR0tWV3BVbzRLckM4dW1Ddy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MzM3RTUvOTc5QkE2NDA3RkUzMTFFRjgzNDc1NTg2NzYy RTk1MUEveWNFcC04UElKenBHS1ZXcFVvNEtyQzh1bUN3Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB95khYH1DFgb2R3Ew8LBUIELeZLMvj p+zxf+7YnGIMImMJffG3cpe+qapTcc83MimAcYqdpoQ7kNYrPLf2EcWaX0Xnu85M lIhj3/+f8Fq1qmtfrXMqCM+1ewvBCv1ycVMvZAsJ3BGlm8voSRWqY3LWyhBhDnXV RTL8QVwf2WCt4ztVbzvdAgDJMC87CWWivTb08V3c/V0tJYVJW9JICPDxl5jCNeO/ Qj1pSM7AliDObgeFhDTff4HJQpPyQDPUwhbwDsaT2c24ZlYDJe8Z9fBnCa3x/TYf 1ZGvAWhpdK9H1mtgBn4UGfWP4xHyyG06oeQcZMIms0aQGCReRR5Xmlej -----END CERTIFICATE-----Generated at Fri Apr 11 13:40:04 2025 by rpki-client