$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft File: I_gUu0fVw67dUQPzb124opvj1x0.mft (raw, json) Hash identifier: 2j6taRTHjl0yNkTGYmzs6st7V8AhjbbkZWzVnYStY2w= Subject key identifier: C9:91:E7:75:BD:13:A0:ED:E4:F7:C9:05:98:55:AD:54:01:68:05:65 Authority key identifier: 23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D Certificate issuer: /CN=F36D9B5BAF/serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D Certificate serial: 0EB2 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft Manifest number: 0E9B Signing time: Wed 04 Jun 2025 00:51:24 +0000 Manifest this update: Wed 04 Jun 2025 00:51:23 +0000 Manifest next update: Fri 06 Jun 2025 00:51:23 +0000 Files and hashes: 1: I_gUu0fVw67dUQPzb124opvj1x0.crl (hash: PD3DV3wpxbhr8fDkcf6zOLfwNRyQYGxqoSC6pZT24Cs=) 2: 86606974028F11E98C883E0FF8AEA228.roa (hash: IsZ6cJV4+0zN9ms5jaDsieqPGhductkQxgMv7qyHTNI=) 3: 9BC8C8C001EA11EDB08796BAF1222468.roa (hash: i8+aHPPl6uhvn/Jq2NkUn53HTH09DtjcbJOz9MgQ1co=) 4: 48577586FE1C11E8BD980782F8AEA228.roa (hash: H3dWHGNGyzufXdXyAcUTICFJNlUoK78HWc23kkq1F/s=) 5: 5F34A6C2DE7D11EBBAC31B64F8AEA228.roa (hash: MWk8EFTOF3/10HYUuFgbnJ/fqlc/s+3SXXavsJ4h6cE=) 6: 3D3E31C6498E11EFBB02DB76762E951A.roa (hash: u0Z0y5U3GM/VfkEEbg/zEJIp4QkqBJm1umtwXpHXzsE=) 7: 132EAD18DE7D11EB86A3C563F8AEA228.roa (hash: iZGBXlM3XPYurzi9+dHJxzDxI/7/keWoCIvY/ASFKFI=) 8: B7C01426FED211E89B120309F8AEA228.roa (hash: Cu6wxRaLD5ODNZaYGqU1rGwfd0FTt/GsL/H9WnzG7Vs=) 9: 36E8B606FE1D11E88DCDCE82F8AEA228.roa (hash: SvO8wCmqFCCs7pvZRw0lkVxnGHmag+waEJa8/soA19E=) 10: 9C9A7614DE7C11EBB1191063F8AEA228.roa (hash: syinLKpAl//f2BEe6KYX31IZj04lDHjk0Tp/mellwQo=) 11: 5BA2465E037F11EDB5F8F0C0F1222468.roa (hash: TV0mQqI15fCBzn5VfeVjormHM3HjavPeVewlRIBDw4I=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 06 Jun 2025 00:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3762 (0xeb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36D9B5BAF, serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D Validity Not Before: Jun 4 00:51:23 2025 GMT Not After : Jun 6 00:51:23 2025 GMT Subject: CN=683f988c-6ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a6:1a:74:32:87:a7:b4:87:33:c6:6f:7a:e2: 7e:59:ae:e1:c9:38:e2:d6:cc:c6:12:24:9a:11:9a: e1:8a:37:d7:22:87:1f:cb:2d:b7:65:ea:d4:f7:bc: 74:25:73:58:6a:3a:75:21:c5:fc:51:b1:b4:2f:fc: fb:83:69:a4:81:26:a2:73:a0:d9:7a:06:47:b8:34: fa:73:4f:4e:63:93:06:64:27:65:7b:8a:97:15:0f: 8a:b9:d0:6b:27:7b:3c:18:df:88:9a:42:e5:56:0e: 55:c4:5c:16:0f:a5:d9:de:85:2c:43:43:6a:13:5d: 56:ea:5e:cc:80:f1:cd:5a:cc:21:c4:b7:2e:3f:3d: 81:fc:df:98:ce:65:50:fb:62:86:13:31:ad:af:25: df:39:47:28:ce:99:e2:50:c4:94:fc:04:ed:d3:6f: 38:22:c1:e0:5d:a1:53:7e:d0:de:59:f0:f1:cb:9e: 7e:2b:95:53:5d:6e:7f:ba:73:b4:62:0a:b7:11:9a: 0e:a1:1e:4c:cd:4e:da:aa:17:44:c0:1f:ca:a0:91: 61:44:8c:3d:26:02:6f:db:77:7a:d4:02:b5:6a:75: 2f:b5:6a:6a:28:04:de:31:2c:af:97:97:8c:5c:b0: 63:42:c9:e8:c1:10:2d:49:b6:48:16:8b:b5:29:3a: c9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:91:E7:75:BD:13:A0:ED:E4:F7:C9:05:98:55:AD:54:01:68:05:65 X509v3 Authority Key Identifier: keyid:23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:72:58:27:5a:d9:2b:c5:f3:35:1e:c8:27:04:dc:96:b6:cd: b6:69:fc:4e:90:1c:1c:98:ac:14:10:b5:e0:6e:a6:6b:6e:84: 8c:77:dd:fe:92:83:96:4a:36:2e:d3:ca:1b:ed:49:33:1e:70: f4:dd:48:0d:d3:32:47:57:d0:47:00:26:eb:2d:ae:03:15:98: 07:b1:10:7b:09:19:b3:bc:9b:87:5e:81:6a:98:44:fe:49:78: 33:7f:e9:5f:b8:1f:56:cc:96:a6:67:5c:d3:ed:aa:24:b6:fb: c9:a0:0f:ea:93:4c:9e:41:d1:70:16:dd:67:e9:ea:89:67:35: f5:01:93:f9:b9:01:51:19:34:69:ce:a4:8e:0d:3c:3f:08:99: 19:cd:18:c6:08:ff:d8:ec:67:ec:16:e7:ee:99:c1:bf:73:db: e7:ba:a5:d4:62:a3:de:2a:54:ce:9c:18:e3:2c:e9:8d:a6:ed: e8:c8:8b:06:c0:5b:2d:ae:c6:6e:57:7a:fe:e9:6c:12:ab:a9: ce:00:b0:2b:ae:71:28:a1:7a:10:9a:3b:ea:27:ce:9b:0d:88: d4:a3:a2:63:06:c0:d3:bf:51:7e:cd:5f:d3:b0:c1:b6:47:1a: fc:a8:52:cd:ea:52:92:31:e8:30:43:be:05:c7:70:30:75:5c: 95:b2:62:06 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDrIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RDlCNUJBRjExMC8GA1UEBRMoMjNGODE0QkI0N0Q1QzNBRURENTEwM0YzNkY1REI4 QTI5QkUzRDcxRDAeFw0yNTA2MDQwMDUxMjNaFw0yNTA2MDYwMDUxMjNaMBgxFjAU BgNVBAMTDTY4M2Y5ODhjLTZmZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDAphp0MoentIczxm964n5ZruHJOOLWzMYSJJoRmuGKN9cihx/LLbdl6tT3 vHQlc1hqOnUhxfxRsbQv/PuDaaSBJqJzoNl6Bke4NPpzT05jkwZkJ2V7ipcVD4q5 0GsnezwY34iaQuVWDlXEXBYPpdnehSxDQ2oTXVbqXsyA8c1azCHEty4/PYH835jO ZVD7YoYTMa2vJd85RyjOmeJQxJT8BO3TbzgiweBdoVN+0N5Z8PHLnn4rlVNdbn+6 c7RiCrcRmg6hHkzNTtqqF0TAH8qgkWFEjD0mAm/bd3rUArVqdS+1amooBN4xLK+X l4xcsGNCyejBEC1JtkgWi7UpOsnrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUyZHn db0ToO3k98kFmFWtVAFoBWUwHwYDVR0jBBgwFoAUI/gUu0fVw67dUQPzb124opvj 1x0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkQ5QjVCLzlFMUJEMzc4MTM1QTExRTVCNjhENDI4NkY4QUVBMjI4L0lfZ1V1 MGZWdzY3ZFVRUHpiMTI0b3B2ajF4MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0lfZ1V1MGZWdzY3ZFVRUHpiMTI0b3B2ajF4MC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RDlCNUIvOUUxQkQzNzgxMzVBMTFFNUI2OEQ0Mjg2RjhB RUEyMjgvSV9nVXUwZlZ3NjdkVVFQemIxMjRvcHZqMXgwLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAuclgnWtkrxfM1HsgnBNyWts22afxO kBwcmKwUELXgbqZrboSMd93+koOWSjYu08ob7UkzHnD03UgN0zJHV9BHACbrLa4D FZgHsRB7CRmzvJuHXoFqmET+SXgzf+lfuB9WzJamZ1zT7aoktvvJoA/qk0yeQdFw Ft1n6eqJZzX1AZP5uQFRGTRpzqSODTw/CJkZzRjGCP/Y7GfsFufumcG/c9vnuqXU YqPeKlTOnBjjLOmNpu3oyIsGwFstrsZuV3r+6WwSq6nOALArrnEooXoQmjvqJ86b DYjUo6JjBsDTv1F+zV/TsMG2Rxr8qFLN6lKSMegwQ74Fx3AwdVyVsmIG -----END CERTIFICATE-----Generated at Wed Jun 4 12:21:53 2025 by rpki-client