$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft File: 1ijkyWq6nPsSRHeGe73xpENfD1s.mft (raw, json) Hash identifier: LrU9ow0e08+XVT5cNsQLfWdFVZKnuMtjIm/M26om5Qc= Subject key identifier: A1:4D:E1:6F:74:03:69:03:6D:CB:6A:E4:4D:0E:65:0D:41:4E:56:E1 Authority key identifier: D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B Certificate issuer: /CN=F362412EAF/serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B Certificate serial: 024D Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft Manifest number: 0244 Signing time: Sun 11 May 2025 04:07:08 +0000 Manifest this update: Sun 11 May 2025 04:07:07 +0000 Manifest next update: Tue 13 May 2025 04:07:07 +0000 Files and hashes: 1: 1ijkyWq6nPsSRHeGe73xpENfD1s.crl (hash: 93RsUaEKxVfLPlNocjVptzs0xSUtEM01hDO2D3W0GLo=) 2: ED02D88AE81A11EE8623BCC5775412E6.roa (hash: mvHTVhODmwdELfP/e2cG297ECeboGj2BsOL9AUtxSak=) 3: D9673B327E3811EEA513EB3B4AD9E6FC.roa (hash: UqaCdDOXPbSropYSiVv8/KHGfuPJpE0IwMmtg9u2HE0=) 4: AD4DC7B2E81B11EE9D0AAC4C775412E6.roa (hash: Rg0rPDoDCNsPvE5jk03o2oztgTr1S1Uz/K+MpVZVO/k=) 5: 413308947E3A11EE832D2F404AD9E6FC.roa (hash: Eb0obFXe3E6DORP4MxW4QBN2bM/zRSA3RlnaOBqHUN0=) 6: A9A46126E81A11EEAA8ECCC1775412E6.roa (hash: wd/nf2EuVpjl0YLy2l9YBPgNolj8qZpz1sk3ozhlrnw=) 7: EA19B9687E3911EE8853E63E4AD9E6FC.roa (hash: O86LwkUf5r8SNUYChgmFxO/FC3RubzrEdUN/7g3zOxM=) 8: 1970B130E81B11EEACE154C6775412E6.roa (hash: 5vNOWkuS5OOw6HL2Agkgo+3kaWgHGPZi7TRSlYZvPNs=) 9: 48AE0434E81B11EE876ADDC6775412E6.roa (hash: wJr/eaxq68q6pHClMi9x3b4zYhBKBXGZVN5loE10NCg=) 10: 63F96FF2BEB411EE9F8AD251775412E6.roa (hash: ndpKTdXcDoxXSkEuWmu2k8nfK/ZfndTlZeUQ+gODKm4=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 13 May 2025 00:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F362412EAF, serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B Validity Not Before: May 11 04:07:07 2025 GMT Not After : May 13 04:07:07 2025 GMT Subject: CN=6820226c-102e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:37:64:86:0f:bb:18:83:9b:13:fe:42:5e:08: c3:2b:b8:c7:a3:46:19:56:a2:94:74:32:9c:a3:bd: 5e:df:24:d5:2a:6f:ea:bb:56:78:80:f8:9f:9a:dc: 12:2a:d5:f2:92:fd:63:21:02:08:ea:2c:f9:1e:1e: 5c:48:20:90:18:3b:72:cf:f1:0b:b0:2e:4b:4c:c0: ea:e1:4d:8e:e6:60:6d:6c:8c:fa:e6:78:91:af:6e: ea:d7:26:db:53:7b:06:1d:61:a5:59:47:f6:af:ac: 16:95:91:7b:20:17:89:0d:78:52:1c:42:bd:54:4e: 23:c1:fe:a3:0b:fc:d9:f0:bf:cd:55:53:0f:df:1c: e9:2d:bd:4a:e1:73:21:c4:44:7a:cf:df:77:2a:70: ed:c2:e0:a2:d7:f9:74:9f:bb:36:b2:eb:34:7a:28: 15:99:a1:cd:e0:8a:a4:52:29:50:c7:4d:19:b8:59: ab:a6:18:27:a6:8f:1f:41:77:5b:67:b8:45:a0:24: 89:02:0d:b1:c7:46:d6:0d:23:88:f2:33:5c:cb:83: fe:47:7e:f7:21:55:56:56:ec:14:fe:02:02:3b:f5: b1:a3:ab:26:c5:95:ef:40:25:96:ca:b2:38:00:79: d7:a2:2b:7b:a5:04:ab:76:b5:a9:84:e2:0a:96:98: f2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4D:E1:6F:74:03:69:03:6D:CB:6A:E4:4D:0E:65:0D:41:4E:56:E1 X509v3 Authority Key Identifier: keyid:D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:57:cf:bc:78:62:e6:13:bf:de:a4:84:81:5e:8c:7b:72:77: 39:7b:1e:bc:01:94:ab:18:9e:a9:d3:f9:e0:c3:94:d0:e3:23: 25:cb:09:f4:fa:61:9e:a3:0d:af:3a:25:f4:32:05:6a:d8:90: b8:4c:62:4d:30:3b:64:35:93:c1:10:90:c1:df:0e:30:c8:89: 8f:fb:e9:e6:72:eb:93:de:2f:b5:e8:b5:76:3a:3f:4d:d0:bc: a7:0e:3e:6b:d5:4b:82:9b:06:7f:09:0c:49:c1:a0:a1:7f:52: 92:eb:43:60:0d:7d:ee:2e:6c:24:3d:f1:37:00:51:fc:69:a4: 4d:ab:32:c4:86:15:0e:3b:41:68:76:2e:da:ea:ca:2a:df:09: 4a:5b:e9:31:95:e5:2d:cf:09:2b:ea:c2:c1:70:0b:38:5b:f2: bc:be:c6:26:41:51:68:71:42:ea:ee:b0:4a:46:27:82:4b:d2: 36:45:80:14:37:56:d0:5b:41:90:c5:bd:51:d0:d5:c0:b8:6a: 51:61:eb:10:58:d2:38:32:c2:08:d6:19:6c:99:69:ec:6c:8a: 61:4c:f2:e4:b3:9e:70:59:d9:1f:58:14:71:7f:0a:da:0d:6d: 65:bd:87:d9:5f:48:5a:21:ab:dc:5c:f1:ae:9d:1f:f1:12:e8: 6d:33:6c:ae -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MjQxMkVBRjExMC8GA1UEBRMoRDYyOEU0Qzk2QUJBOUNGQjEyNDQ3Nzg2N0JCREYx QTQ0MzVGMEY1QjAeFw0yNTA1MTEwNDA3MDdaFw0yNTA1MTMwNDA3MDdaMBgxFjAU BgNVBAMTDTY4MjAyMjZjLTEwMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCeN2SGD7sYg5sT/kJeCMMruMejRhlWopR0MpyjvV7fJNUqb+q7VniA+J+a 3BIq1fKS/WMhAgjqLPkeHlxIIJAYO3LP8QuwLktMwOrhTY7mYG1sjPrmeJGvburX JttTewYdYaVZR/avrBaVkXsgF4kNeFIcQr1UTiPB/qML/Nnwv81VUw/fHOktvUrh cyHERHrP33cqcO3C4KLX+XSfuzay6zR6KBWZoc3giqRSKVDHTRm4WaumGCemjx9B d1tnuEWgJIkCDbHHRtYNI4jyM1zLg/5HfvchVVZW7BT+AgI79bGjqybFle9AJZbK sjgAedeiK3ulBKt2tamE4gqWmPKhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUoU3h b3QDaQNty2rkTQ5lDUFOVuEwHwYDVR0jBBgwFoAU1ijkyWq6nPsSRHeGe73xpENf D1swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjI0MTJFLzNBMjM5QTIwN0UzODExRUU4NTRFRTQzOTRBRDlFNkZDLzFpamt5 V3E2blBzU1JIZUdlNzN4cEVOZkQxcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLzFpamt5V3E2blBzU1JIZUdlNzN4cEVOZkQxcy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MjQxMkUvM0EyMzlBMjA3RTM4MTFFRTg1NEVFNDM5NEFE OUU2RkMvMWlqa3lXcTZuUHNTUkhlR2U3M3hwRU5mRDFzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAxV8+8eGLmE7/epISBXox7cnc5ex68 AZSrGJ6p0/ngw5TQ4yMlywn0+mGeow2vOiX0MgVq2JC4TGJNMDtkNZPBEJDB3w4w yImP++nmcuuT3i+16LV2Oj9N0LynDj5r1UuCmwZ/CQxJwaChf1KS60NgDX3uLmwk PfE3AFH8aaRNqzLEhhUOO0Fodi7a6soq3wlKW+kxleUtzwkr6sLBcAs4W/K8vsYm QVFocULq7rBKRieCS9I2RYAUN1bQW0GQxb1R0NXAuGpRYesQWNI4MsII1hlsmWns bIphTPLks55wWdkfWBRxfwraDW1lvYfZX0haIavcXPGunR/xEuhtM2yu -----END CERTIFICATE-----Generated at Sun May 11 19:01:51 2025 by rpki-client