$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft File: YKDl0axmyK47fJ5qjvW8BLi7uI4.mft (raw, json) Hash identifier: paJPAB6irO0EMsmtoUQ7wcHMpfsOyG5C14Rde8FxwMM= Subject key identifier: 28:E2:AA:C9:B5:92:C6:34:AD:CA:8B:4C:91:82:74:4C:B8:54:99:18 Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E Certificate serial: 0673 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft Manifest number: 05E1 Signing time: Tue 13 May 2025 02:50:51 +0000 Manifest this update: Tue 13 May 2025 02:50:50 +0000 Manifest next update: Thu 15 May 2025 02:50:50 +0000 Files and hashes: 1: YKDl0axmyK47fJ5qjvW8BLi7uI4.crl (hash: q4gRm8eBmgQrb/erPM6J1wwKz4HIIMPnZwSZ8z7/WXI=) 2: 0091161A144C11F0801A51F76DB8BCC6.roa (hash: 9oNkMM3GJvaxowbYxronZzBOKB5XFOoDP/A6k15+A4M=) 3: 488D3EB060B211EF87A97782762E951A.roa (hash: MVYbN3+gCL8uNH5R81Zu9Ge2lQxWhVsfh/rM4ZRyn/w=) 4: 9D00E53A042411F0AE942178762E951A.roa (hash: 3lO4ySirvSBJZhZS0yYuZYZ1ZoMcdgb1UxXC64iMMus=) 5: CBF2E4B829EC11F0A80400EBDAE4EC9C.roa (hash: JxQxoQO5e0xyVP8JrZC6HNTSh2BQxTdpde2yD+5NMPI=) 6: 293DA02E0E9411EFB4C6A635017001B1.roa (hash: 3+KIiU4tfg4VsfxzRAEbpE5pkr5DnXevqMRkIzk01FM=) 7: 6C7ACBF26E0A11EFAC0C4258762E951A.roa (hash: 4grD6nGcP4ytHOjXft0LrvgGLuVL2rG269xNQf6k+eI=) 8: 372AC08C8CB511EF9888555B762E951A.roa (hash: etRxaBFYkDrFKylBsUD/HBMJSKuCjzex1c6EZ66GzPQ=) 9: 3D55B2F0C43211EF8166C3BD762E951A.roa (hash: Af+fAJ8B4YCQU1OF1pDiIpmVk8a59qwsOLlr9TGYlBo=) 10: 94B69FC84F1B11EFBF7CDAAE762E951A.roa (hash: KbxuO2uDPTezjLzyouQUc4XGgC1J865f/dnmoPHmv0Q=) 11: 31F31826606411EF89390EA0762E951A.roa (hash: XJE5bowMijOEb0dwq2uI3QNwKZq01TfKw2I/yEETF+o=) 12: 0C083320B24F11EF80B52F71762E951A.roa (hash: swBYnhkImW9LhM0qswhHNCFqzYvKajWSuD7zcbFshH8=) 13: 373D29E4095511F096A41CBE762E951A.roa (hash: myBILke2RQ0OYPU057gGO3OXC3ByHG2noie9RgjT7qM=) 14: 467A6B4248DF11EFA203A954762E951A.roa (hash: j6LGYpvEwxNC35muXut5alaxgRUMQT87ILx6kToC8Qs=) 15: E2FD811CBC6511EF9197B567762E951A.roa (hash: EXiNgxy7d0tjLX1SpsLd379Zi3cAwKIMh7UFB0zyfF0=) 16: 666FD3D82EEA11EFBC63294B762E951A.roa (hash: MTXkIou//Guz3KRl/9YKtpj6n9ZVBkXEGaijhN0evTk=) 17: 646F613C003311F0A1A285B3762E951A.roa (hash: bJ1ILmkYuUC3NN3I2YJ1a0bc80c543GbkB4NCNMhrPc=) 18: A8566A94136C11EF9A119E33017001B1.roa (hash: 8n6hGcHTkYJois2LH442hMoRDS4eG3DkPDkUW4heEZ8=) 19: BC5D3D90032D11F09ED36D5F762E951A.roa (hash: fZkSIZKqHjYLVMmlSF8FT38HnKjU0BqJ7lEBUixZVJ0=) 20: 509B5B80154B11EFAAF66569017001B1.roa (hash: XKlm75kmISAu8xaI2z4uwQrQDSSx5mypluivOS+f5kk=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 15 May 2025 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1651 (0x673) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E Validity Not Before: May 13 02:50:50 2025 GMT Not After : May 15 02:50:50 2025 GMT Subject: CN=6822b38b-4027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:43:47:e4:c9:76:de:2e:4e:f2:c2:6a:8c:49: 5d:08:bc:52:a3:9c:27:a1:e6:fc:33:f2:9b:ad:6a: f0:3e:3d:ef:1f:6d:fe:8b:e3:bb:ef:90:36:5a:a6: 17:8e:13:bd:ed:b1:cd:df:8c:87:bb:7b:53:50:14: ed:4d:0e:ee:7f:2b:c4:b7:43:a2:3f:ec:86:20:41: 81:cd:ac:3a:e9:2d:eb:9f:c5:d8:80:97:a4:42:76: 4f:4b:0a:7a:40:2f:4b:83:85:06:54:98:be:56:bb: d4:66:4d:32:3b:eb:43:b6:27:0b:c8:e2:74:50:cd: 05:f6:1b:03:d5:40:fa:83:38:29:41:f0:67:6b:61: 2f:7f:ba:e2:d6:c5:52:ac:66:fe:61:5a:d2:24:76: 3e:3d:8b:28:fa:7f:67:34:03:5c:19:24:f1:01:fb: 71:0d:3a:e8:7d:ee:48:0f:4f:6e:59:bc:1e:75:f5: af:17:2e:ba:98:ce:ad:6a:da:ed:42:31:72:30:16: a4:56:e5:59:62:5c:e7:13:78:b4:aa:32:2e:cc:17: f7:b9:ba:80:93:f3:01:41:36:53:ef:25:6b:6c:8d: 09:84:cb:0b:d5:d7:dc:17:a7:96:af:a7:41:9e:80: 42:10:8a:c8:e8:33:6f:cc:9b:ad:22:73:84:73:e9: 10:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E2:AA:C9:B5:92:C6:34:AD:CA:8B:4C:91:82:74:4C:B8:54:99:18 X509v3 Authority Key Identifier: keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3d:0d:80:76:b4:0d:ec:1b:df:8d:2b:53:ad:06:f3:a6:a7: 4c:47:81:9c:d4:5a:9b:4c:75:7a:80:9b:0e:60:2a:7c:b6:58: 23:3d:ce:e9:5e:d1:2f:45:cb:8f:27:28:54:79:31:b8:ab:a9: 10:e7:07:69:67:c9:12:b1:b7:17:9a:e0:c6:f5:0f:05:e6:e6: 9f:2c:71:a0:1e:07:2b:41:5a:25:87:d7:0c:98:c0:79:cf:d9: 37:a3:85:42:f7:5f:57:17:f3:23:7a:7c:46:33:07:60:e8:2e: 7b:d1:be:e1:9f:64:f2:aa:04:3d:21:2a:a4:73:82:ee:59:b3: 37:dd:50:3e:cf:d8:bf:77:0c:24:fc:fe:21:63:98:9d:91:ee: bb:8c:93:d9:17:2a:2b:f3:2c:35:cb:7e:c0:f6:d2:3e:50:8e: b9:06:d0:7e:34:15:47:9f:62:a4:1e:1a:01:e0:b7:f0:37:74: 7a:20:8a:7f:37:a5:5b:b8:31:69:05:c4:ec:32:bf:16:d5:f0: b6:1b:e1:88:85:a4:b8:40:84:15:b5:e6:f3:a2:96:c7:b5:ac: ae:30:cb:00:06:cf:7e:7c:4e:3e:74:e0:cf:a3:7e:5f:3d:e5: 75:f9:ba:f4:b4:c6:e0:3d:68:11:65:89:8b:bc:df:7e:1a:49: f2:52:15:f4 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD MDRCOEJCQjg4RTAeFw0yNTA1MTMwMjUwNTBaFw0yNTA1MTUwMjUwNTBaMBgxFjAU BgNVBAMTDTY4MjJiMzhiLTQwMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDEQ0fkyXbeLk7ywmqMSV0IvFKjnCeh5vwz8putavA+Pe8fbf6L47vvkDZa pheOE73tsc3fjIe7e1NQFO1NDu5/K8S3Q6I/7IYgQYHNrDrpLeufxdiAl6RCdk9L CnpAL0uDhQZUmL5Wu9RmTTI760O2JwvI4nRQzQX2GwPVQPqDOClB8GdrYS9/uuLW xVKsZv5hWtIkdj49iyj6f2c0A1wZJPEB+3ENOuh97kgPT25ZvB519a8XLrqYzq1q 2u1CMXIwFqRW5VliXOcTeLSqMi7MF/e5uoCT8wFBNlPvJWtsjQmEywvV19wXp5av p0GegEIQisjoM2/Mm60ic4Rz6RDrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKOKq ybWSxjStyotMkYJ0TLhUmRgwHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7 uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MTQ2NTkvNjY1NkRFNzQ2REY4MTFFQ0JDQzIxMDc2NUE0 MEQ1NzcvWUtEbDBheG15SzQ3Zko1cWp2VzhCTGk3dUk0Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcPQ2AdrQN7BvfjStTrQbzpqdMR4Gc 1FqbTHV6gJsOYCp8tlgjPc7pXtEvRcuPJyhUeTG4q6kQ5wdpZ8kSsbcXmuDG9Q8F 5uafLHGgHgcrQVolh9cMmMB5z9k3o4VC919XF/MjenxGMwdg6C570b7hn2TyqgQ9 ISqkc4LuWbM33VA+z9i/dwwk/P4hY5idke67jJPZFyor8yw1y37A9tI+UI65BtB+ NBVHn2KkHhoB4LfwN3R6IIp/N6VbuDFpBcTsMr8W1fC2G+GIhaS4QIQVtebzopbH tayuMMsABs9+fE4+dODPo35fPeV1+br0tMbgPWgRZYmLvN9+GknyUhX0 -----END CERTIFICATE-----Generated at Tue May 13 23:09:02 2025 by rpki-client