$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft File: ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft (raw, json) Hash identifier: a02fY2NU+oOo6h+ak4RFqogWnfAmgjSgndAxtSi0SpA= Subject key identifier: BE:FE:47:DF:A2:86:2C:E6:45:4B:E2:F7:0F:C1:98:B0:BA:B6:59:9D Authority key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2 Certificate issuer: /CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2 Certificate serial: 0228 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft Manifest number: 0217 Signing time: Thu 03 Apr 2025 02:44:22 +0000 Manifest this update: Thu 03 Apr 2025 02:44:22 +0000 Manifest next update: Sat 05 Apr 2025 02:44:22 +0000 Files and hashes: 1: ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl (hash: stgckwL0fimLWPpGj43rFnQCGCeqisL6ETIpCfE2KCY=) 2: 4EA7D32E53E611EF9B5BE56C762E951A.roa (hash: NtlpVvP6+zWzB8RFTth6ghNvN5nR/THSHfhDD9x2bP8=) 3: C1A1DD34BE5E11EE99164ABD775412E6.roa (hash: wvW9kZ5/AUNQWgKaGpjvpIVPHuqxftH9YadONSy7YnM=) 4: 757D2A34887711EE836A404E4AD9E6FC.roa (hash: +ZI3X/alavjG8hd5TUGXudmlVMdSEsoVpfbaqPGHQKA=) 5: A1BBDFB45BDA11EFA2803F75762E951A.roa (hash: B+/DOrNgATDNRMYx/JLMgJNXWHAPifjl6iw4sXJYoDA=) 6: D2F9CEC4BE4B11EE8D656598775412E6.roa (hash: Cxpb4VpHsS5nAkYLG5LF8Ro6WmVM8kJPPNxJ4wnGbyc=) 7: 75479C3CBE5711EEA57807B1775412E6.roa (hash: KJ78VQh/EaM4VrWU0qtdFJzJqdOESws+8hhBj0+/JkQ=) 8: 8804A9420EF611EF90E9CB4F017001B1.roa (hash: Ah/gC+WFiWi7Jlp6m9g/RNWVwD4e/UvuFekwBmptqnY=) 9: A8121FD29CFC11EF91E12A85762E951A.roa (hash: 40tq9RUAvjkX3eq2QoBMj2ZOuP4wwcDT4oeJUrXPD54=) 10: EC1D132E0D2A11EFB8F87A2D017001B1.roa (hash: Ly9LZH0Fh6E4ZtDar/abB8C31gGCVwPrBo7kMnb8boM=) 11: 0EF37AD45BDA11EF9E5BF670762E951A.roa (hash: 51koAiGBT4Qlz96Il2OYaGj869PU6MSFeqlPyjHqg1Q=) 12: 518CAA929CFC11EF95640782762E951A.roa (hash: OyktAYCtLdWaRz8aqABUtVcVPRFArgA2QV1t66oDcS8=) 13: 23292B7612C311EFB9087350017001B1.roa (hash: ljEIXCzMDkNC6MsSv3Wx80qJCOfaflJx6GdHSwJRefU=) 14: D265FEDE0BCA11EF917FA0F3007001B1.roa (hash: JnlsXUtJ6yRPF3xH5RBfKSof1yPWn25dJe2aCkd3Tug=) 15: 7F5635A2887511EEBFD443484AD9E6FC.roa (hash: ocQwdIyiszloWpRuczWxhp841V/qq4mP8+w57e47R8w=) 16: 3B419B887CAB11EFB49DDE4D762E951A.roa (hash: IQzn2Mmxf3299kc5c2KxlM3LEdiHGEsho1HI4seozUE=) 17: 88C005FAE86F11EEA0289955775412E6.roa (hash: 2xUGL17bO3ah/ni1p+4Y+DjG347crU5mRkFs3eTev0U=) 18: 566CE01C0BD011EF922BB41F017001B1.roa (hash: NJoaiPoqCsvM8uTcCsGcl3CIrYSjToxekiedssQBL9U=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 05 Apr 2025 00:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36E4B69AF Validity Not Before: Apr 3 02:44:22 2025 GMT Not After : Apr 5 02:44:22 2025 GMT Subject: CN=67edf606-a732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3e:73:4e:56:e0:9e:0b:f0:74:20:cc:7a:5a: 52:54:3c:22:3e:af:e5:f2:2d:fe:85:bd:f4:ce:13: b7:bf:cd:6d:93:96:a7:79:c8:43:53:05:22:45:fd: 1e:d9:b4:82:a1:ee:e5:cd:e3:d4:ad:5d:f5:67:e0: 4e:a2:1c:86:a8:40:6d:6a:9b:0d:47:78:ab:5c:0a: 9a:e7:fa:ba:3f:09:94:ea:9d:e9:ad:4e:03:a1:d7: 99:8d:f5:5c:79:76:5d:c1:2f:1f:e4:3b:be:b4:84: 54:62:ad:f3:33:c7:0c:ef:f4:81:6b:69:19:4f:6a: 8f:bb:b4:72:80:3f:70:eb:be:72:27:c4:46:73:63: 43:03:2a:84:a9:20:04:07:7e:59:25:96:74:ed:d2: 70:ab:f8:2a:d3:3d:47:68:36:de:f8:c7:f4:75:d8: d8:f0:07:96:cc:58:b7:8c:d3:5e:ba:3c:26:f9:7b: ee:42:de:02:64:00:26:bd:a7:52:e2:f8:06:84:0b: 13:67:c7:66:04:39:7c:21:78:c9:49:1c:d3:b2:d5: 79:ba:54:23:c6:4f:1f:d3:80:1f:60:60:0a:ae:25: 75:5a:36:db:b2:1a:92:77:a0:e1:1d:97:b3:f4:eb: 3e:cd:c7:d1:76:16:ef:49:22:14:6c:50:ce:9c:61: 7a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FE:47:DF:A2:86:2C:E6:45:4B:E2:F7:0F:C1:98:B0:BA:B6:59:9D X509v3 Authority Key Identifier: keyid:CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:a7:c4:f7:ad:6d:50:bf:5f:ba:64:05:1c:d2:6a:1c:89:66: 7a:bc:e6:ef:94:81:4b:bf:c7:ee:51:46:f7:e2:74:b5:ab:c8: 1d:d5:ab:6a:8b:6e:44:50:f6:0c:52:40:43:06:f2:45:20:9f: f7:c5:52:c1:f5:9d:37:aa:05:2d:d5:04:24:e7:63:8f:d3:9e: ab:5a:cd:12:48:ca:bd:18:d5:19:6a:2c:d0:58:c7:7f:76:20: 85:db:1b:1d:52:2b:93:29:c3:dd:45:e6:df:95:8f:c0:7f:00: 6e:ee:91:d4:f5:f0:d4:b8:7c:99:b6:91:4c:8d:19:45:b4:e1: 82:6e:62:73:bc:c8:11:b6:27:de:3c:91:57:2e:e2:da:82:37: e3:ce:13:2f:11:88:50:06:22:d8:37:b1:f9:28:12:2c:cb:96: 24:6e:06:3e:fa:6f:c9:cb:d0:72:35:1d:a1:88:f2:f0:d9:58: ff:6f:9d:45:9b:75:7b:8b:fe:92:24:61:10:57:91:b8:b3:e0: cf:a7:fd:c3:2e:2b:30:d5:a7:45:f9:aa:2b:53:02:b0:07:44: 89:99:26:aa:17:08:6d:ec:fc:66:28:67:eb:97:0c:63:37:7d: 63:9e:be:46:0a:24:59:ff:e3:02:c3:57:f8:b3:ac:3d:86:2e: e1:85:d1:31 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAigwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RTRCNjlBRjExMC8GA1UEBRMoQ0E2NjQyRUE5QUZDQzczQUEyNEFBNDA0NzU0NEIx N0MyNjAzQ0JEMjAeFw0yNTA0MDMwMjQ0MjJaFw0yNTA0MDUwMjQ0MjJaMBgxFjAU BgNVBAMTDTY3ZWRmNjA2LWE3MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDaPnNOVuCeC/B0IMx6WlJUPCI+r+XyLf6FvfTOE7e/zW2Tlqd5yENTBSJF /R7ZtIKh7uXN49StXfVn4E6iHIaoQG1qmw1HeKtcCprn+ro/CZTqnemtTgOh15mN 9Vx5dl3BLx/kO760hFRirfMzxwzv9IFraRlPao+7tHKAP3DrvnInxEZzY0MDKoSp IAQHflkllnTt0nCr+CrTPUdoNt74x/R12NjwB5bMWLeM0166PCb5e+5C3gJkACa9 p1Li+AaECxNnx2YEOXwheMlJHNOy1Xm6VCPGTx/TgB9gYAquJXVaNtuyGpJ3oOEd l7P06z7Nx9F2Fu9JIhRsUM6cYXojAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUvv5H 36KGLOZFS+L3D8GYsLq2WZ0wHwYDVR0jBBgwFoAUymZC6pr8xzqiSqQEdUSxfCYD y9IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkU0QjY5L0RFMTQ3NzBFODg3MzExRUU4OUI4MTE0MzRBRDlFNkZDL3ltWkM2 cHI4eHpxaVNxUUVkVVN4ZkNZRHk5SS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3ltWkM2cHI4eHpxaVNxUUVkVVN4ZkNZRHk5SS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RTRCNjkvREUxNDc3MEU4ODczMTFFRTg5QjgxMTQzNEFE OUU2RkMveW1aQzZwcjh4enFpU3FRRWRVU3hmQ1lEeTlJLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1p8T3rW1Qv1+6ZAUc0mociWZ6vObv lIFLv8fuUUb34nS1q8gd1atqi25EUPYMUkBDBvJFIJ/3xVLB9Z03qgUt1QQk52OP 056rWs0SSMq9GNUZaizQWMd/diCF2xsdUiuTKcPdRebflY/AfwBu7pHU9fDUuHyZ tpFMjRlFtOGCbmJzvMgRtifePJFXLuLagjfjzhMvEYhQBiLYN7H5KBIsy5YkbgY+ +m/Jy9ByNR2hiPLw2Vj/b51Fm3V7i/6SJGEQV5G4s+DPp/3DLisw1adF+aorUwKw B0SJmSaqFwht7PxmKGfrlwxjN31jnr5GCiRZ/+MCw1f4s6w9hi7hhdEx -----END CERTIFICATE-----Generated at Thu Apr 3 11:23:54 2025 by rpki-client