$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft File: l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json) Hash identifier: +fO/rsq1EImtuWAFFE8oeSBApTaBLf28tE0ClzxsTnQ= Subject key identifier: AD:58:D3:7C:93:CA:6F:82:46:6A:67:07:CA:BC:95:24:8E:3E:75:08 Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39 Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139 Certificate serial: 06B2 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft Manifest number: 064B Signing time: Thu 03 Apr 2025 01:37:22 +0000 Manifest this update: Thu 03 Apr 2025 01:37:21 +0000 Manifest next update: Sat 05 Apr 2025 01:37:21 +0000 Files and hashes: 1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: 1mlbM5CqpnLGlWhX7jiDxvsuHmgC2KOq81oafBpXsuU=) 2: 88CC23B4E20911EFAA4FEA71762E951A.roa (hash: qKFGTwFhsiiCCXBqchw56kIQ8Z0gTmXSHl71yzG85Xg=) 3: 02EF1DC60BAA11F09DB9FB71762E951A.roa (hash: inZXUhfqreSJFiRhNzpeSLsmYXgoI2B/ekZfVg0es18=) 4: 2E2091E20BA911F0903B616A762E951A.roa (hash: kAAlUk1Ht2EDuuPnLeJgiVrkjrnO7CIX3KOmhiu4udw=) 5: B03C5936136B11EF9CB7442D017001B1.roa (hash: 8cn480ct0RO7vc/yrd/vQq31HhnmkbbbxOW5UAR4BoE=) 6: 61E6EBC23A2911EF83088748762E951A.roa (hash: iFBYzRfE/E2YvLoXLa2uiVHfBVaThKSU03QGnik9L4A=) 7: D08D8404E20911EFB7BBBB72762E951A.roa (hash: mxpQNEEt8eO1xH/mH0CzmPJl+5Qf8WdLQzu0l8F+kl0=) 8: B8419F060BA911F0AE291B6E762E951A.roa (hash: m8Bb8NoO1D+xiWKOmt0v+8wQGL39FsFRi5rMWWAs3Nk=) 9: CBA3C1846B7011EFAF3FE084762E951A.roa (hash: pFDrtn8wEhtxFNlu2wmcpGpG41xK4cr84A6LU6JiqYg=) 10: CEA072D8776A11EEA49F007D4AD9E6FC.roa (hash: oG1ErKkSbYpP5X6eq2VOONQIy8u5lFGEO9d6IZTGw04=) 11: 4A2CDC6C136E11EFAB971344017001B1.roa (hash: Yvjer7KtxWxGzWdW3Ny93IhyKw3XTQbcNgpr6u6fzl8=) 12: 12A476563A2911EFA2721E48762E951A.roa (hash: e3V5AAsj+AntU1+tap+GSIMt0rdBfXlp80uPXMWrRDA=) 13: D45146480BA811F0965DEC69762E951A.roa (hash: /38gf9L/lK+aNxVRmRr+WwErxz1SgWT4QmXDrhoLlwc=) 14: 44B107BE0BBA11F0B7AF8852762E951A.roa (hash: 2lsgDetOxz2tEA/haKTe5N+JmsqBvMbXnhGs3La4Rys=) 15: 7C4F95340BA911F0B72BFF6D762E951A.roa (hash: wQsXfcY17ALNj3m3NpLuAW/uC5x5FHlFx/tv0frZ2aQ=) 16: 279BA0540BB911F085E0CF4A762E951A.roa (hash: 3QesGyp4tYRipz4vg5BH5ybWDB9xF/Y66SZRiVKu4rA=) 17: 985B73F86B7011EFBCFBD082762E951A.roa (hash: rvpp6Kns5e/Pwe/rzVTNBx4KVxZUF1C0Dh+LLpfr9DM=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 05 Apr 2025 00:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1714 (0x6b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F367DFA4AF Validity Not Before: Apr 3 01:37:21 2025 GMT Not After : Apr 5 01:37:21 2025 GMT Subject: CN=67ede652-bb45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ca:5a:5a:f2:b2:4f:bf:5f:89:11:d4:ee:57: d2:ed:f7:95:bb:28:ca:72:89:7e:1d:d3:22:9f:7a: 2c:52:76:f8:f3:28:cb:bc:d1:e6:c6:18:38:89:3c: 72:78:7c:53:a8:40:6a:e2:18:7d:d2:b4:89:84:ff: bf:55:bb:3b:9e:1c:e9:05:91:b0:08:e4:04:e4:64: 8d:47:e5:6b:28:86:93:6c:ad:38:2c:11:22:25:db: 45:a7:35:91:72:bd:54:7e:47:d9:27:75:a5:95:e5: f5:86:db:03:0e:ce:89:44:54:9d:5c:8e:0d:87:a3: f8:ab:89:b8:e9:00:59:21:b3:cf:3b:d3:02:41:88: ef:59:90:1e:7e:03:e4:b0:2d:9b:57:48:08:0c:dd: 76:4a:ea:b0:5d:55:8b:e4:e0:c9:b4:2a:63:e0:9a: d0:75:29:38:26:eb:60:5a:69:2e:6d:88:8f:e9:74: a3:65:15:c0:62:06:10:4f:e4:ae:a0:10:be:43:c7: b0:98:e9:12:2e:7b:49:e0:d9:3a:1c:7d:6f:8d:23: 29:7e:b0:dd:3a:c5:c3:98:67:3e:48:ec:bc:f3:4b: 28:67:03:dc:45:08:43:ae:1b:c2:c2:36:3b:ab:92: d4:eb:4b:25:6c:9d:11:08:7f:9f:6c:50:6d:38:7b: f5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:58:D3:7C:93:CA:6F:82:46:6A:67:07:CA:BC:95:24:8E:3E:75:08 X509v3 Authority Key Identifier: keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:cf:ab:85:06:c3:90:40:c9:be:0f:98:6f:33:b3:0a:87:d3: 60:fc:e7:24:03:21:34:58:9b:99:0b:99:2f:06:38:ef:c6:8e: 6f:be:13:30:16:0d:b0:89:c1:b2:0d:d4:21:5e:6d:6a:2e:0f: 05:a5:2d:4a:44:04:93:ce:7d:29:71:e6:4f:92:1e:92:af:3a: 21:bd:15:7e:3e:b5:58:5e:c9:3d:20:0c:90:02:77:e9:a6:c2: 6b:9f:93:22:d2:d9:18:54:1b:48:91:84:f1:3f:95:d1:66:5c: 90:c1:b0:e6:3d:42:66:96:32:66:39:27:60:7d:17:06:9b:8a: dc:9a:aa:d2:f1:16:13:f0:7c:93:46:65:b9:b9:dd:08:3c:ce: 06:0e:20:f7:9b:8e:d2:34:e5:33:43:68:c6:72:8d:07:47:57: 89:65:cf:e4:11:25:77:49:7f:15:89:ee:48:40:02:8b:05:00: f9:69:12:9a:dd:92:e5:eb:0c:2a:b3:48:d7:fb:92:24:9f:bf: 12:42:83:de:85:1c:10:0d:63:4d:ee:e7:3a:6a:e8:22:7c:07: 5d:e7:e7:14:40:48:f5:b8:4e:91:94:35:60:b2:62:34:b3:b0: 42:9d:8c:d0:c9:a6:ca:34:8f:4a:6f:20:81:26:ab:44:e7:94: 17:27:3e:58 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBrIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx QkE4MTJGQTEzOTAeFw0yNTA0MDMwMTM3MjFaFw0yNTA0MDUwMTM3MjFaMBgxFjAU BgNVBAMTDTY3ZWRlNjUyLWJiNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDBylpa8rJPv1+JEdTuV9Lt95W7KMpyiX4d0yKfeixSdvjzKMu80ebGGDiJ PHJ4fFOoQGriGH3StImE/79VuzueHOkFkbAI5ATkZI1H5WsohpNsrTgsESIl20Wn NZFyvVR+R9kndaWV5fWG2wMOzolEVJ1cjg2Ho/iribjpAFkhs8870wJBiO9ZkB5+ A+SwLZtXSAgM3XZK6rBdVYvk4Mm0KmPgmtB1KTgm62BaaS5tiI/pdKNlFcBiBhBP 5K6gEL5Dx7CY6RIue0ng2TocfW+NIyl+sN06xcOYZz5I7LzzSyhnA9xFCEOuG8LC NjurktTrSyVsnREIf59sUG04e/VdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUrVjT fJPKb4JGamcHyryVJI4+dQgwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2N0RGQTQvMDhCOEQ4MjA5M0FDMTFFQkIxRDJBODMyRjhB RUEyMjgvbDhrT0pTRXRpSHo1NGQ1djNmVlJ1b0V2b1RrLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDYz6uFBsOQQMm+D5hvM7MKh9Ng/Ock AyE0WJuZC5kvBjjvxo5vvhMwFg2wicGyDdQhXm1qLg8FpS1KRASTzn0pceZPkh6S rzohvRV+PrVYXsk9IAyQAnfppsJrn5Mi0tkYVBtIkYTxP5XRZlyQwbDmPUJmljJm OSdgfRcGm4rcmqrS8RYT8HyTRmW5ud0IPM4GDiD3m47SNOUzQ2jGco0HR1eJZc/k ESV3SX8Vie5IQAKLBQD5aRKa3ZLl6wwqs0jX+5Ikn78SQoPehRwQDWNN7uc6augi fAdd5+cUQEj1uE6RlDVgsmI0s7BCnYzQyabKNI9KbyCBJqtE55QXJz5Y -----END CERTIFICATE-----Generated at Thu Apr 3 07:12:34 2025 by rpki-client