$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft File: qO-WBRTjNkRNPN43sktm3DnUPRs.mft (raw, json) Hash identifier: +tSnAmv4cEJnCFVRwZctdnRQANnU9Og1iPDI8vJKGVo= Subject key identifier: A1:80:00:68:CD:F9:B2:83:FA:CB:93:DD:96:2C:33:AC:14:12:28:8A Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Certificate serial: 0296 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft Manifest number: 0282 Signing time: Thu 03 Apr 2025 02:36:13 +0000 Manifest this update: Thu 03 Apr 2025 02:36:12 +0000 Manifest next update: Sat 05 Apr 2025 02:36:12 +0000 Files and hashes: 1: qO-WBRTjNkRNPN43sktm3DnUPRs.crl (hash: IoQP2WQmn9SxSec+2I4citdhg2wlkSYuXsuBH2N7rLg=) 2: C64BDF325B8611EE8F5917154AD9E6FC.roa (hash: lOfMw6yYmupoBGzZG06JxE7nkGYN0SjR1YBL+6yU110=) 3: 221DE36C5B7F11EEBAA0307C4AD9E6FC.roa (hash: akgSyzvUhBZdD/Jo/1snS9zDQnQhIY/z4b5eUssk1L4=) 4: 3FC126045B7F11EE91B3797C4AD9E6FC.roa (hash: B4Jxb4zuiNxx8ARYO+8FuXUu5CFHZJCjPVqFobOB2EU=) 5: F592AE225B7E11EEAAD8A37B4AD9E6FC.roa (hash: H2+/hMWhZrQQ/v+xp+P99me7GUvAhaEZLEIOvuDJ8+o=) 6: 9389DEB25B7E11EE85FB5A794AD9E6FC.roa (hash: saW9gDDU1fU/ss5E5QByOp+7T1wbc1vVgpJ7XS+gk+s=) 7: 39E85D245B7F11EE90195D7C4AD9E6FC.roa (hash: eHbXQ/7kild+PjHeBFmSGxlAnlG3pi2uyC9o63m5Mio=) 8: 44122BBE5B7E11EEA5C359784AD9E6FC.roa (hash: dlLpBI0Us25zgjOKkdJouRreKgFknaWvSBpHKXaHN4Q=) 9: 0DDE14645B8711EEBE2DF3154AD9E6FC.roa (hash: OVYm5oOpe8XlJOHUYg0R0oIytfPmlhVRgGeohPVoeGg=) 10: E29E1C625B7D11EEAFF513774AD9E6FC.roa (hash: cL6yXVTdN5LFRK/8lI56JvUwQ8huIMxP3ArtUJsfAsg=) 11: 0DB547A45B7E11EE95F5E0774AD9E6FC.roa (hash: sgLUjm9KT8NBSGsfPuF7zb59LXdnTNhjWZlBuJluY4o=) 12: 82BE0D345B8711EE8AF170174AD9E6FC.roa (hash: du0kSdCk2tSzKNVUZIxuV5z/5Bcr0/T6HJ/NasAIv4s=) 13: 673167545B7E11EE98EEBD784AD9E6FC.roa (hash: adqbPWSj3qJmhRpUh3DUEWmWfDKPs4YfwC9ZlFS5ias=) 14: A97AA9E05B7E11EEAD5E8F794AD9E6FC.roa (hash: 3NkJ+hNEcmyOZzaQCsy/+Ozh2yGmiiWLNtnnqsmfG2I=) 15: EFB2EA005B8611EEB1C27E154AD9E6FC.roa (hash: ArKkYMPjrZ4ijgIQyF9Kcy4ua9ozHX8IBDIWFIk7DdU=) 16: BBA7D8A05B8711EEA5880E184AD9E6FC.roa (hash: NwbjXk0kj8eY+sbmyk9mA7z7P4Od2Lqrhnl5SE+949A=) 17: 7D84FCC85B7E11EE930F05794AD9E6FC.roa (hash: LbVSQZqmCHBXF80jfRgZ632p1CiqtMRJRyKOIJ1fwIY=) 18: 5A3685F85B7D11EEB4B9A0754AD9E6FC.roa (hash: hua4m2v20w0RdcluLq3SvMVi3aYeRg47OfgA9wTRs3E=) 19: D6AA10E05B7E11EE9B32467A4AD9E6FC.roa (hash: RAafA0ML5VlgZ60Y1uxp4EowWyBnwvs0LOD/pOddd5E=) 20: 9FF8CF2E5B8711EE9F40A5174AD9E6FC.roa (hash: lG9MW9PGMEKdmiEYPlQxLtvMK2I/+bgWEhfhck5fvqA=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 05 Apr 2025 00:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3668CFEAF Validity Not Before: Apr 3 02:36:12 2025 GMT Not After : Apr 5 02:36:12 2025 GMT Subject: CN=67edf41d-f7f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:bd:f4:51:33:63:29:e8:18:09:16:6e:88:26: 17:1a:5c:9d:83:52:44:63:a7:7e:e9:ea:eb:28:f5: 3d:2a:68:3d:ab:03:bf:84:86:44:7b:cb:55:6e:41: 46:cb:43:0a:90:fe:77:a1:2c:12:cc:3b:ee:07:dd: 0e:31:21:e7:f4:75:70:a5:a6:c9:18:4b:a4:b3:64: c3:97:7c:06:71:54:10:22:40:d9:4b:75:3b:01:1c: 89:57:48:d2:ea:c8:c7:9f:4f:1c:72:7c:6e:cf:67: 6e:f1:c7:d5:6a:f6:ba:20:ad:be:6a:90:e6:cc:59: 6f:47:fc:30:b3:4e:88:06:3d:43:eb:39:13:e1:06: 65:6b:90:c0:64:56:1b:98:fc:4e:3c:a9:8c:e5:10: 27:d6:93:0d:1e:bd:32:ce:b1:42:5b:30:8f:b9:7c: e3:c6:98:5e:a6:34:ef:a0:25:64:58:94:43:0f:23: cd:58:4f:c3:fd:08:33:98:20:df:26:f5:a9:d8:03: 78:8b:bd:23:7e:48:31:4a:91:c2:90:97:35:a2:d6: 1b:2b:99:b3:0a:0d:6c:d2:7b:5f:07:2b:75:b0:73: 81:b7:cf:53:79:bf:83:f7:43:e6:b0:c0:c7:9c:fd: 1f:a7:f4:e9:f0:b9:a1:91:98:a4:e1:ac:59:44:24: e4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:80:00:68:CD:F9:B2:83:FA:CB:93:DD:96:2C:33:AC:14:12:28:8A X509v3 Authority Key Identifier: keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:2e:16:11:c7:58:50:c9:49:7f:68:ab:f7:dc:8f:84:c4:57: 07:13:64:69:b7:e0:7f:de:aa:c3:5e:af:75:1f:d1:5e:8e:9d: 72:d1:03:d3:87:33:ad:0e:8e:54:d0:7e:45:c6:b2:be:96:7a: e3:7e:95:bc:5b:3b:7b:62:ec:07:23:e2:7b:2c:24:43:1f:fb: 65:e6:71:2d:63:8e:5c:68:45:c0:d3:67:2e:f6:0f:f2:2e:98: 1f:18:c9:7c:af:43:80:51:09:28:eb:d5:cf:39:26:4c:c3:0c: 1e:95:4d:11:be:85:a9:84:e5:c7:ea:4a:d0:d8:7e:48:33:69: 5b:73:7e:78:04:c8:58:d5:bb:57:da:9a:84:57:28:85:24:24: d8:05:16:3e:2a:f9:de:38:73:89:b5:b2:eb:86:21:2d:65:bf: 6d:7c:ef:70:33:d6:b8:34:0e:c5:07:9e:e5:cd:24:96:fb:7d: 18:f8:d8:24:85:45:ad:0c:7c:95:b0:28:93:3d:4b:ab:c8:2a: c6:9c:06:62:3f:ab:73:42:9a:9c:2b:92:08:4c:38:f3:9f:78: 61:41:b1:8c:91:4c:4c:f8:81:20:5c:b3:6f:4a:44:8d:6a:53: 13:19:db:e6:64:a3:f0:a4:e2:25:1b:8b:03:e7:5b:69:e1:e6: b9:83:7b:93 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICApYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NjhDRkVBRjExMC8GA1UEBRMoQThFRjk2MDUxNEUzMzY0NDREM0NERTM3QjI0QjY2 REMzOUQ0M0QxQjAeFw0yNTA0MDMwMjM2MTJaFw0yNTA0MDUwMjM2MTJaMBgxFjAU BgNVBAMTDTY3ZWRmNDFkLWY3ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDsvfRRM2Mp6BgJFm6IJhcaXJ2DUkRjp37p6uso9T0qaD2rA7+EhkR7y1Vu QUbLQwqQ/nehLBLMO+4H3Q4xIef0dXClpskYS6SzZMOXfAZxVBAiQNlLdTsBHIlX SNLqyMefTxxyfG7PZ27xx9Vq9rogrb5qkObMWW9H/DCzTogGPUPrORPhBmVrkMBk VhuY/E48qYzlECfWkw0evTLOsUJbMI+5fOPGmF6mNO+gJWRYlEMPI81YT8P9CDOY IN8m9anYA3iLvSN+SDFKkcKQlzWi1hsrmbMKDWzSe18HK3Wwc4G3z1N5v4P3Q+aw wMec/R+n9OnwuaGRmKThrFlEJOQ7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUoYAA aM35soP6y5PdliwzrBQSKIowHwYDVR0jBBgwFoAUqO+WBRTjNkRNPN43sktm3DnU PRswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjY4Q0ZFLzk1RUZENzRDMzc1NzExRUVCQjE0MzIxODRBRDlFNkZDL3FPLVdC UlRqTmtSTlBONDNza3RtM0RuVVBScy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3FPLVdCUlRqTmtSTlBONDNza3RtM0RuVVBScy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NjhDRkUvOTVFRkQ3NEMzNzU3MTFFRUJCMTQzMjE4NEFE OUU2RkMvcU8tV0JSVGpOa1JOUE40M3NrdG0zRG5VUFJzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzLhYRx1hQyUl/aKv33I+ExFcHE2Rp t+B/3qrDXq91H9Fejp1y0QPThzOtDo5U0H5FxrK+lnrjfpW8Wzt7YuwHI+J7LCRD H/tl5nEtY45caEXA02cu9g/yLpgfGMl8r0OAUQko69XPOSZMwwwelU0RvoWphOXH 6krQ2H5IM2lbc354BMhY1btX2pqEVyiFJCTYBRY+KvneOHOJtbLrhiEtZb9tfO9w M9a4NA7FB57lzSSW+30Y+NgkhUWtDHyVsCiTPUuryCrGnAZiP6tzQpqcK5IITDjz n3hhQbGMkUxM+IEgXLNvSkSNalMTGdvmZKPwpOIlG4sD51tp4ea5g3uT -----END CERTIFICATE-----Generated at Thu Apr 3 07:43:22 2025 by rpki-client