$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft File: wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft (raw, json) Hash identifier: 8l+zIRRQyPfCCkZBma3Q6I4S6B+4q8YdRBwCL3ap/Pc= Subject key identifier: 11:85:E2:26:52:1D:F3:5D:D0:38:79:11:BF:23:B0:67:8B:4F:F1:9F Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34 Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934 Certificate serial: 0334 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft Manifest number: 0322 Signing time: Thu 03 Apr 2025 02:24:47 +0000 Manifest this update: Thu 03 Apr 2025 02:24:46 +0000 Manifest next update: Sat 05 Apr 2025 02:24:46 +0000 Files and hashes: 1: wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl (hash: rd+3pvmY6zuEjLYtO7CnAnRoQ5HlHCmkIkudooMWOmk=) 2: B6E64FA46D8E11EEBD3D23814AD9E6FC.roa (hash: wHxuyQF4+uvgcTMqcLwiE3OPhD9sKRldqLMBbm9GZAk=) 3: 755C3946726011EE93489E6F4AD9E6FC.roa (hash: I/IXDJdydOXsHxPlVBdH54iLozFOHgSirildHRHX6us=) 4: 1FE2B490676B11EE89F68D6C4AD9E6FC.roa (hash: VkyUxkKXn7LwkNtssSbTSgdVTqQDeGhmPVIGCEo/UYw=) 5: 1FAC5C58642B11EEB88178264AD9E6FC.roa (hash: ue0lR9LPzTbHOKn7vlKdSh3YCZxWA6gtEHdH+8CALYY=) 6: 126EAE268F4E11EEAECC1E62D25BE465.roa (hash: RVoLCOu04kDM3ma5697yf0ycFSMBgw51El1f03RGHNo=) 7: 0E14878A676F11EEA3B081784AD9E6FC.roa (hash: ilcPf1Q17dtn++BbRqyZZTuMiIFeb1JyNCjewhQwPU4=) 8: 32C8A6C66D9411EEBBCFC1144AD9E6FC.roa (hash: 2OF/T6bI2e1KDH7oQ4Ng7a72JfGOZwUFWH9xARUOcWY=) 9: 996CFC786D9011EEB96C32874AD9E6FC.roa (hash: x0DJySpGUWaPqSlP65+H7jaIDC8V3UYDd/FdjU9E7rA=) 10: B1B22C14798311EEA5C954334AD9E6FC.roa (hash: Pe3W5d67FeDOdg0O6CjHDs+dvLUaa9BBxTbqB+4ADZM=) 11: 64F50FBC740C11EE99EADC474AD9E6FC.roa (hash: W0IpuC6GX4xRD5RgHmpflT28ws+r3XoBXlaHP+TeZBA=) 12: ADCC819C6F1C11EEA6EDF2894AD9E6FC.roa (hash: 0EsFQL/056qkK52lVV1RuJFjZ4sGqQwRLakj5+kuntc=) 13: 0908078845A711EEAB5673554AD9E6FC.roa (hash: tqO3uk+osFvKeD1dMRNKDu46qC2fHNV6k3SbxzfnOnA=) 14: C91D0582676C11EE817092714AD9E6FC.roa (hash: n7bFFRK6/BBB0upK0yKjNtW7e2v1lvPct030rOjwGHg=) 15: 505CFBCA6E4C11EEA61CB55E4AD9E6FC.roa (hash: haaJ8RNEFPNeNXKfBocGoCPP48/FPRgVDNeOKZS8HPQ=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 05 Apr 2025 00:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F369591CAF Validity Not Before: Apr 3 02:24:46 2025 GMT Not After : Apr 5 02:24:46 2025 GMT Subject: CN=67edf16f-d278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f2:c2:6a:0d:93:75:d9:9c:3b:48:4c:bc:86: 1e:b1:28:60:bd:44:4c:97:94:cb:7f:99:92:d0:1b: 6a:71:f1:7e:9a:d9:64:23:27:ff:18:f0:d7:38:0e: 5f:db:60:b6:09:7c:dc:7e:08:e0:ab:6c:96:a5:e0: 34:06:41:00:90:21:42:d7:7d:a0:43:19:13:dc:dd: 23:7c:02:66:0b:41:28:3a:b7:c6:6c:67:79:7a:b0: 78:63:b9:f2:06:a9:ec:8d:03:b8:8e:9b:db:79:57: 5e:48:1b:5c:73:f1:1e:6b:8c:ce:bc:fd:6d:c5:d0: ed:35:6f:b8:8c:c2:57:0a:dd:12:58:75:26:67:5b: aa:64:a0:be:04:56:66:18:92:33:48:f2:b6:96:3c: 65:e5:aa:5a:c6:b3:47:cc:5e:e2:97:77:99:9e:dc: a1:4f:af:dd:46:db:09:ef:e6:50:45:fc:15:7e:fa: 75:34:ac:bd:d2:2d:f7:b9:6a:48:c6:9d:43:fd:c9: d2:cf:25:1a:8e:04:c3:58:7b:09:01:35:62:86:37: de:8e:bb:5d:42:65:43:12:c0:94:af:83:77:5e:2c: f9:17:05:d7:4e:ac:1a:65:9d:fc:11:28:2d:df:6d: e9:2f:02:d8:2e:fb:85:b9:89:3c:a7:a7:14:29:73: a3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:85:E2:26:52:1D:F3:5D:D0:38:79:11:BF:23:B0:67:8B:4F:F1:9F X509v3 Authority Key Identifier: keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:9c:f5:b1:9a:5b:06:e0:96:c9:a9:ea:ce:19:ec:70:5d:2d: 6c:c2:4a:92:dc:a9:b4:f1:65:14:d0:c6:2d:d7:50:30:3d:56: fa:79:af:10:26:91:b9:e1:fa:71:38:18:ca:72:43:76:a8:e1: 88:34:8c:d1:fa:67:ed:72:7f:8f:39:b3:27:57:08:bb:c6:ee: 17:e8:5f:5c:5d:0b:4b:59:65:21:26:12:c1:47:09:79:59:dc: 69:0e:34:d1:05:66:cd:32:ad:40:13:19:17:6a:cb:f7:5c:ec: 12:22:4f:e6:01:c0:83:66:ee:43:aa:f6:46:c4:6b:d4:83:3b: 69:cf:ba:6f:c3:92:d1:c4:7d:6c:8b:5c:ba:d5:75:47:77:eb: 7b:f5:f5:56:79:e4:38:46:07:66:69:00:64:62:67:3d:52:75: d6:61:ee:1e:e3:ef:e2:72:15:0f:ae:61:e1:1f:43:de:2f:99: 35:00:e7:38:64:c5:32:aa:b8:a0:46:68:8b:83:88:47:87:49: e0:da:71:9e:44:e5:e2:56:0c:0a:e8:d0:50:57:24:7a:7c:d5: 04:b0:91:ac:c5:30:8c:0e:bd:30:ce:64:f4:b0:f5:2c:80:30: 6a:8d:ac:bc:0c:5f:1d:8f:d3:4b:0b:af:8d:8b:c3:ef:f8:4b: 8a:3b:da:84 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 OTU5MUNBRjExMC8GA1UEBRMoQzEwOTBEMzdEQTlGRkVFRTFBOUMyMjlCQUZGMTE5 MEJEMjJFODkzNDAeFw0yNTA0MDMwMjI0NDZaFw0yNTA0MDUwMjI0NDZaMBgxFjAU BgNVBAMTDTY3ZWRmMTZmLWQyNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDI8sJqDZN12Zw7SEy8hh6xKGC9REyXlMt/mZLQG2px8X6a2WQjJ/8Y8Nc4 Dl/bYLYJfNx+COCrbJal4DQGQQCQIULXfaBDGRPc3SN8AmYLQSg6t8ZsZ3l6sHhj ufIGqeyNA7iOm9t5V15IG1xz8R5rjM68/W3F0O01b7iMwlcK3RJYdSZnW6pkoL4E VmYYkjNI8raWPGXlqlrGs0fMXuKXd5me3KFPr91G2wnv5lBF/BV++nU0rL3SLfe5 akjGnUP9ydLPJRqOBMNYewkBNWKGN96Ou11CZUMSwJSvg3deLPkXBddOrBplnfwR KC3fbekvAtgu+4W5iTynpxQpc6OJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUEYXi JlId813QOHkRvyOwZ4tP8Z8wHwYDVR0jBBgwFoAUwQkNN9qf/u4anCKbr/EZC9Iu iTQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjk1OTFDLzM0NzQwMzJFQzI0NzExRURBRkE2Qzc5RkYxMjIyNDY4L3dRa05O OXFmX3U0YW5DS2JyX0VaQzlJdWlUUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3dRa05OOXFmX3U0YW5DS2JyX0VaQzlJdWlUUS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2OTU5MUMvMzQ3NDAzMkVDMjQ3MTFFREFGQTZDNzlGRjEy MjI0Njgvd1FrTk45cWZfdTRhbkNLYnJfRVpDOUl1aVRRLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMnPWxmlsG4JbJqerOGexwXS1swkqS 3Km08WUU0MYt11AwPVb6ea8QJpG54fpxOBjKckN2qOGINIzR+mftcn+PObMnVwi7 xu4X6F9cXQtLWWUhJhLBRwl5WdxpDjTRBWbNMq1AExkXasv3XOwSIk/mAcCDZu5D qvZGxGvUgztpz7pvw5LRxH1si1y61XVHd+t79fVWeeQ4RgdmaQBkYmc9UnXWYe4e 4+/ichUPrmHhH0PeL5k1AOc4ZMUyqrigRmiLg4hHh0ng2nGeROXiVgwK6NBQVyR6 fNUEsJGsxTCMDr0wzmT0sPUsgDBqjay8DF8dj9NLC6+Ni8Pv+EuKO9qE -----END CERTIFICATE-----Generated at Thu Apr 3 07:44:40 2025 by rpki-client