$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft File: aMXkutXc1WSiVidTyay2Mr0ky1A.mft (raw, json) Hash identifier: +7DhYJJoAsWYWViPACRAg4+RJC59BZ79GI+xp1gOgXA= Subject key identifier: 76:7F:CD:6A:5B:64:1C:9F:1E:E4:63:31:D6:DC:50:A4:D7:90:67:02 Authority key identifier: 68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50 Certificate issuer: /CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50 Certificate serial: 0893 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft Manifest number: 0882 Signing time: Fri 06 Jun 2025 01:40:52 +0000 Manifest this update: Fri 06 Jun 2025 01:40:51 +0000 Manifest next update: Sun 08 Jun 2025 01:40:51 +0000 Files and hashes: 1: aMXkutXc1WSiVidTyay2Mr0ky1A.crl (hash: i6xLoodxVkQ09vfJdyguwCmuM75DMMWqk8BRvOTWgaI=) 2: 67CF4D4AC47A11EBAC1DCB2EF8AEA228.roa (hash: itFkoyhCFbkxoKe/6GZZJKhOYtJVGG20wDDeoMWtUpQ=) 3: 51DD5CFA362311EC86345D40D8A014CE.roa (hash: ZOjl1c6p5MEg7MhRsQboW+KWuk6lGFrNRsr8eT5zSuA=) 4: 2E3A1228F14211EB95363E26D8A014CE.roa (hash: vD5KpjCW2oLjrazeJW7vuUKZt8XTsZHweUUc6bDl3m8=) 5: 0668CDBA8ECF11EA92325F27F8AEA228.roa (hash: obmP99ZP4gHqQi9QCtzWh7Wc0rtLRTLbw4IjE5aS9HE=) 6: 7F90265C003411EC9AEFCB7BD8A014CE.roa (hash: Us9bdbPalZ+yx1ibe5L/RTGvBCGXXo3x0b9dZX+Z/FM=) 7: 2A0AF02ED8D711EB93E56C7BF8AEA228.roa (hash: ZQ6oLNCOYoaY+3u19bx5mMnPdr11GM9m4rQK5cGUyGQ=) 8: 5E0FF05A1C8811EC996FCB76D8A014CE.roa (hash: Vk5ASQFgQjjsZEjyJ+X43+pLR30VafAKoJRgMFTM8vk=) 9: 59AB9F46ACB311EA94FB7A5CF8AEA228.roa (hash: M7zBdV0WcI6PFd9tLd94yJGWhV8lnlP02DcFXSG5pCM=) 10: 77F17762ACB511EAB011A45EF8AEA228.roa (hash: 1/STozfAIpnz6GETEBd4lb3u077CE2WkxWA/E9NUlaI=) 11: 83CC39468F0011EA98508558F8AEA228.roa (hash: L5ieRjYiG1OFGX8hr9WtcOwJsazJ2sf4i+jmqBumzYY=) 12: 4D5B7DFA9A9911EAB460C75DF8AEA228.roa (hash: 08HHiOipKJGcq74gZtGxaBA7hKxLZk9ttDnVaGPnEtA=) 13: DA956AF2E91F11EB8EE78B08D8A014CE.roa (hash: yi/kGe9K7bgzzNjuJJ9WkvYPrz9NLiez9H+X0/yDZ1o=) 14: 4F75903E8F9B11EAB3F92A79F8AEA228.roa (hash: 4DXiHxGSCbsyOMNhnwXSRwIzqtdpPeRGAU+Vq8d2Sbo=) 15: BC497164BFC211EB9C90B47DF8AEA228.roa (hash: vShLouUDMlMysq5av2KQKsWgiT2JaBcuHkhVOPxBIWk=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 08 Jun 2025 00:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2195 (0x893) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36DE46FAF, serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50 Validity Not Before: Jun 6 01:40:51 2025 GMT Not After : Jun 8 01:40:51 2025 GMT Subject: CN=68424724-8599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c2:d3:8b:47:7d:dd:1d:e9:a2:a0:f7:aa:fe: 1f:b5:e3:46:d2:d2:a1:9e:13:7d:f9:da:0a:6b:e4: 7f:8e:1f:b6:2e:16:34:f7:1f:09:82:a4:d0:34:2c: aa:b1:3f:e1:ae:05:6c:a5:57:98:e9:11:31:ec:c9: 34:9e:bc:f7:57:d7:72:56:2a:6c:b0:39:15:a3:f2: 05:18:8f:06:66:ca:67:5d:6f:ad:ee:dd:92:99:8b: 55:f9:f7:80:4c:22:cd:32:b4:ec:11:4c:1d:05:8e: 6e:59:0c:23:47:f3:ad:cf:cf:ad:e7:14:f9:d7:56: 26:3a:59:68:33:66:15:f4:f7:9c:6e:5e:22:45:27: 7b:f2:ee:22:7c:df:32:d8:b1:1f:52:82:7e:9f:a1: ec:db:59:a4:a5:02:95:a6:ad:37:c6:12:c1:1c:c8: 8c:9d:ad:f7:cb:33:05:4c:a6:50:b2:81:69:65:b3: bc:0e:bf:8f:3e:55:c5:25:b5:cd:20:39:9b:d2:0d: 0f:44:bb:83:48:7a:3f:67:94:da:a1:da:f3:ce:8c: cf:73:ed:0d:8e:3d:2c:71:08:10:5b:78:bb:34:64: d0:29:f0:41:6d:a9:88:c6:95:93:eb:5d:b1:c2:91: ad:6f:c9:c7:0f:9a:29:99:d6:cd:d2:8c:4d:4f:81: dc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7F:CD:6A:5B:64:1C:9F:1E:E4:63:31:D6:DC:50:A4:D7:90:67:02 X509v3 Authority Key Identifier: keyid:68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:29:0a:10:70:16:e1:88:15:31:da:b4:39:ec:04:25:0f:d7: fc:cd:79:b1:14:02:3f:43:d5:40:01:6d:53:9a:61:c8:27:2e: 70:1c:c8:5f:6c:9c:95:b3:75:aa:22:cb:e7:d2:20:9b:96:10: fd:29:8d:7d:be:dd:f2:e7:6d:35:0d:69:f5:14:e7:a8:2d:a6: d1:1f:77:fa:35:1b:59:2b:2c:99:59:ff:37:08:94:48:c0:1c: 1b:0e:df:3c:06:6a:d3:cf:f7:f2:7e:66:db:72:89:21:2d:ad: 3b:7a:90:a7:b3:1a:ee:f4:75:71:9e:7c:f8:c5:93:b8:f5:98: 01:2b:93:27:47:4d:b4:bd:1a:77:29:bb:da:1e:dd:8c:7d:97: 46:a5:78:70:3b:09:9a:f3:81:4b:4c:f6:c6:ec:d2:05:0f:02: 54:67:fc:c9:35:82:b6:19:77:63:68:d7:7d:fe:93:ea:37:5f: 4f:7a:04:2d:20:82:8b:7b:13:53:db:ac:df:eb:cd:81:1e:1b: 44:e7:87:67:b1:b7:3b:75:99:3e:90:bc:5e:09:12:82:ee:67: 43:2f:a6:fb:ae:fa:d8:4d:0a:1d:11:77:03:ce:50:f8:ea:fe: c9:19:74:6b:18:d8:9f:7e:18:62:14:bc:61:fa:34:6d:41:8f: b9:a6:99:fd -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCJMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 REU0NkZBRjExMC8GA1UEBRMoNjhDNUU0QkFENURDRDU2NEEyNTYyNzUzQzlBQ0I2 MzJCRDI0Q0I1MDAeFw0yNTA2MDYwMTQwNTFaFw0yNTA2MDgwMTQwNTFaMBgxFjAU BgNVBAMTDTY4NDI0NzI0LTg1OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDswtOLR33dHemioPeq/h+140bS0qGeE3352gpr5H+OH7YuFjT3HwmCpNA0 LKqxP+GuBWylV5jpETHsyTSevPdX13JWKmywORWj8gUYjwZmymddb63u3ZKZi1X5 94BMIs0ytOwRTB0Fjm5ZDCNH863Pz63nFPnXViY6WWgzZhX095xuXiJFJ3vy7iJ8 3zLYsR9Sgn6foezbWaSlApWmrTfGEsEcyIydrffLMwVMplCygWlls7wOv48+VcUl tc0gOZvSDQ9Eu4NIej9nlNqh2vPOjM9z7Q2OPSxxCBBbeLs0ZNAp8EFtqYjGlZPr XbHCka1vyccPmimZ1s3SjE1PgdzpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUdn/N altkHJ8e5GMx1txQpNeQZwIwHwYDVR0jBBgwFoAUaMXkutXc1WSiVidTyay2Mr0k y1AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkRFNDZGL0VCNDkzNENDRDVGRTExRTk5NTI4MTkzQkY4QUVBMjI4L2FNWGt1 dFhjMVdTaVZpZFR5YXkyTXIwa3kxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2FNWGt1dFhjMVdTaVZpZFR5YXkyTXIwa3kxQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2REU0NkYvRUI0OTM0Q0NENUZFMTFFOTk1MjgxOTNCRjhB RUEyMjgvYU1Ya3V0WGMxV1NpVmlkVHlheTJNcjBreTFBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbKQoQcBbhiBUx2rQ57AQlD9f8zXmx FAI/Q9VAAW1TmmHIJy5wHMhfbJyVs3WqIsvn0iCblhD9KY19vt3y5201DWn1FOeo LabRH3f6NRtZKyyZWf83CJRIwBwbDt88BmrTz/fyfmbbcokhLa07epCnsxru9HVx nnz4xZO49ZgBK5MnR020vRp3KbvaHt2MfZdGpXhwOwma84FLTPbG7NIFDwJUZ/zJ NYK2GXdjaNd9/pPqN19PegQtIIKLexNT26zf682BHhtE54dnsbc7dZk+kLxeCRKC 7mdDL6b7rvrYTQodEXcDzlD46v7JGXRrGNiffhhiFLxh+jRtQY+5ppn9 -----END CERTIFICATE-----Generated at Fri Jun 6 05:25:05 2025 by rpki-client