$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft File: qO-WBRTjNkRNPN43sktm3DnUPRs.mft (raw, json) Hash identifier: 8gkF20+Lx+xzMMSkyPEag8YdNttANf6g2J84BAEvMWM= Subject key identifier: 27:6B:FE:E8:07:62:07:98:49:45:5E:C3:0D:78:5E:5A:D7:28:3E:A8 Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Certificate serial: 02D5 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft Manifest number: 02C1 Signing time: Wed 04 Jun 2025 03:55:56 +0000 Manifest this update: Wed 04 Jun 2025 03:55:55 +0000 Manifest next update: Fri 06 Jun 2025 03:55:55 +0000 Files and hashes: 1: qO-WBRTjNkRNPN43sktm3DnUPRs.crl (hash: th2bUOFT9YtWkvDdli9IB8Q8hAn0tVkYw6/wyhUg1x4=) 2: C64BDF325B8611EE8F5917154AD9E6FC.roa (hash: lOfMw6yYmupoBGzZG06JxE7nkGYN0SjR1YBL+6yU110=) 3: 221DE36C5B7F11EEBAA0307C4AD9E6FC.roa (hash: akgSyzvUhBZdD/Jo/1snS9zDQnQhIY/z4b5eUssk1L4=) 4: 3FC126045B7F11EE91B3797C4AD9E6FC.roa (hash: B4Jxb4zuiNxx8ARYO+8FuXUu5CFHZJCjPVqFobOB2EU=) 5: F592AE225B7E11EEAAD8A37B4AD9E6FC.roa (hash: H2+/hMWhZrQQ/v+xp+P99me7GUvAhaEZLEIOvuDJ8+o=) 6: 9389DEB25B7E11EE85FB5A794AD9E6FC.roa (hash: saW9gDDU1fU/ss5E5QByOp+7T1wbc1vVgpJ7XS+gk+s=) 7: 39E85D245B7F11EE90195D7C4AD9E6FC.roa (hash: eHbXQ/7kild+PjHeBFmSGxlAnlG3pi2uyC9o63m5Mio=) 8: 44122BBE5B7E11EEA5C359784AD9E6FC.roa (hash: dlLpBI0Us25zgjOKkdJouRreKgFknaWvSBpHKXaHN4Q=) 9: 0DDE14645B8711EEBE2DF3154AD9E6FC.roa (hash: OVYm5oOpe8XlJOHUYg0R0oIytfPmlhVRgGeohPVoeGg=) 10: E29E1C625B7D11EEAFF513774AD9E6FC.roa (hash: cL6yXVTdN5LFRK/8lI56JvUwQ8huIMxP3ArtUJsfAsg=) 11: 0DB547A45B7E11EE95F5E0774AD9E6FC.roa (hash: sgLUjm9KT8NBSGsfPuF7zb59LXdnTNhjWZlBuJluY4o=) 12: 82BE0D345B8711EE8AF170174AD9E6FC.roa (hash: du0kSdCk2tSzKNVUZIxuV5z/5Bcr0/T6HJ/NasAIv4s=) 13: 673167545B7E11EE98EEBD784AD9E6FC.roa (hash: adqbPWSj3qJmhRpUh3DUEWmWfDKPs4YfwC9ZlFS5ias=) 14: A97AA9E05B7E11EEAD5E8F794AD9E6FC.roa (hash: 3NkJ+hNEcmyOZzaQCsy/+Ozh2yGmiiWLNtnnqsmfG2I=) 15: EFB2EA005B8611EEB1C27E154AD9E6FC.roa (hash: ArKkYMPjrZ4ijgIQyF9Kcy4ua9ozHX8IBDIWFIk7DdU=) 16: BBA7D8A05B8711EEA5880E184AD9E6FC.roa (hash: NwbjXk0kj8eY+sbmyk9mA7z7P4Od2Lqrhnl5SE+949A=) 17: 7D84FCC85B7E11EE930F05794AD9E6FC.roa (hash: LbVSQZqmCHBXF80jfRgZ632p1CiqtMRJRyKOIJ1fwIY=) 18: 5A3685F85B7D11EEB4B9A0754AD9E6FC.roa (hash: hua4m2v20w0RdcluLq3SvMVi3aYeRg47OfgA9wTRs3E=) 19: D6AA10E05B7E11EE9B32467A4AD9E6FC.roa (hash: RAafA0ML5VlgZ60Y1uxp4EowWyBnwvs0LOD/pOddd5E=) 20: 9FF8CF2E5B8711EE9F40A5174AD9E6FC.roa (hash: lG9MW9PGMEKdmiEYPlQxLtvMK2I/+bgWEhfhck5fvqA=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 06 Jun 2025 00:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 725 (0x2d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3668CFEAF, serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Validity Not Before: Jun 4 03:55:55 2025 GMT Not After : Jun 6 03:55:55 2025 GMT Subject: CN=683fc3cc-f490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:f0:6c:f4:ea:3a:05:e4:68:11:88:92:be: 50:77:cf:56:19:d6:c2:78:36:a0:a6:7d:ec:7a:c4: b0:1b:aa:43:af:2d:fa:14:e9:88:ba:3b:6e:6c:b3: 92:3b:b7:b1:e5:bc:1e:58:a8:2e:3f:64:6c:05:0e: bc:a1:3f:4e:01:b6:83:ef:0d:3e:90:44:f6:00:cd: 7f:bd:ea:99:77:39:bf:82:8c:4d:f6:6f:f1:7c:f4: 5d:97:c3:f7:53:84:0c:9d:95:6b:7c:92:29:9c:cb: bc:0a:d0:e1:48:5a:1c:b3:31:6d:47:85:53:97:76: 67:f3:b9:c9:01:38:e4:b5:2a:6e:5b:46:ab:e9:b4: 2d:2e:1a:f8:8d:ab:d6:e9:06:15:33:5b:df:cb:03: 90:9c:06:b9:75:10:fa:70:6c:72:42:39:c6:58:b3: e8:96:b4:27:cb:c7:b0:52:0d:83:81:8d:fe:01:bd: c3:eb:c9:fb:9e:55:6e:17:08:21:36:85:5d:89:db: 12:fc:81:7d:e3:49:f5:a9:02:a5:2e:d6:87:ec:60: 14:37:eb:01:1a:5b:da:e1:15:ac:ed:bb:09:3f:36: 69:f0:a5:eb:14:4c:23:89:ea:cb:c9:14:b2:02:b3: 1f:b9:d8:a2:96:dd:ee:09:bc:26:87:7a:0d:58:b5: b1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6B:FE:E8:07:62:07:98:49:45:5E:C3:0D:78:5E:5A:D7:28:3E:A8 X509v3 Authority Key Identifier: keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:50:d1:cf:5f:43:eb:63:ec:62:b6:c2:ba:75:b8:27:21:a7: 4f:e6:5e:9e:c2:52:48:df:c3:e1:06:22:38:20:bd:c7:eb:24: 5c:66:19:73:84:99:68:f1:77:d5:eb:d5:6d:41:ef:14:e1:51: 66:92:29:ec:a9:a3:f3:8e:24:9d:da:e0:89:5e:ec:29:ef:df: d5:9b:9d:41:53:86:89:67:01:67:03:ce:56:fc:60:04:90:a6: 19:19:87:ca:f4:cb:16:23:22:3a:4f:05:57:36:a7:a1:4a:c7: 83:55:77:e5:61:4a:b2:c1:ee:e0:e5:2e:ba:d3:03:63:a3:a2: c2:68:14:62:18:5d:c1:d8:8d:ba:50:3d:4a:fe:bd:23:e6:52: 11:85:54:24:28:32:33:e3:ef:8c:2e:27:2c:fd:51:bb:48:37: 60:b3:97:48:3a:e0:e9:10:79:56:ee:18:2b:e5:9c:5a:64:c6: 8d:2a:72:97:5b:1c:e4:2a:58:fb:1b:f7:80:98:f2:33:87:00: f7:bf:b6:fa:f9:af:3d:d1:1b:14:6b:6b:06:72:a9:53:43:0b: f4:0e:f7:5e:fe:9b:e2:7b:2a:fc:83:90:7c:5c:2d:68:d7:f0: 1b:dd:77:ed:ee:a8:3a:93:8f:31:ed:ac:52:49:09:47:e9:05: a0:93:b5:0b -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAtUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NjhDRkVBRjExMC8GA1UEBRMoQThFRjk2MDUxNEUzMzY0NDREM0NERTM3QjI0QjY2 REMzOUQ0M0QxQjAeFw0yNTA2MDQwMzU1NTVaFw0yNTA2MDYwMzU1NTVaMBgxFjAU BgNVBAMTDTY4M2ZjM2NjLWY0OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC2XvBs9Oo6BeRoEYiSvlB3z1YZ1sJ4NqCmfex6xLAbqkOvLfoU6Yi6O25s s5I7t7HlvB5YqC4/ZGwFDryhP04BtoPvDT6QRPYAzX+96pl3Ob+CjE32b/F89F2X w/dThAydlWt8kimcy7wK0OFIWhyzMW1HhVOXdmfzuckBOOS1Km5bRqvptC0uGviN q9bpBhUzW9/LA5CcBrl1EPpwbHJCOcZYs+iWtCfLx7BSDYOBjf4BvcPryfueVW4X CCE2hV2J2xL8gX3jSfWpAqUu1ofsYBQ36wEaW9rhFaztuwk/NmnwpesUTCOJ6svJ FLICsx+52KKW3e4JvCaHeg1YtbH/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUJ2v+ 6AdiB5hJRV7DDXheWtcoPqgwHwYDVR0jBBgwFoAUqO+WBRTjNkRNPN43sktm3DnU PRswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjY4Q0ZFLzk1RUZENzRDMzc1NzExRUVCQjE0MzIxODRBRDlFNkZDL3FPLVdC UlRqTmtSTlBONDNza3RtM0RuVVBScy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3FPLVdCUlRqTmtSTlBONDNza3RtM0RuVVBScy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NjhDRkUvOTVFRkQ3NEMzNzU3MTFFRUJCMTQzMjE4NEFE OUU2RkMvcU8tV0JSVGpOa1JOUE40M3NrdG0zRG5VUFJzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXUNHPX0PrY+xitsK6dbgnIadP5l6e wlJI38PhBiI4IL3H6yRcZhlzhJlo8XfV69VtQe8U4VFmkinsqaPzjiSd2uCJXuwp 79/Vm51BU4aJZwFnA85W/GAEkKYZGYfK9MsWIyI6TwVXNqehSseDVXflYUqywe7g 5S660wNjo6LCaBRiGF3B2I26UD1K/r0j5lIRhVQkKDIz4++MLics/VG7SDdgs5dI OuDpEHlW7hgr5ZxaZMaNKnKXWxzkKlj7G/eAmPIzhwD3v7b6+a890RsUa2sGcqlT Qwv0Dvde/pvieyr8g5B8XC1o1/Ab3Xft7qg6k48x7axSSQlH6QWgk7UL -----END CERTIFICATE-----Generated at Wed Jun 4 12:01:23 2025 by rpki-client