$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft File: 3zdkgNzweht60WTeZKPqIV8kdUE.mft (raw, json) Hash identifier: wjrYws6asJsxHF+RzyVu5yxm/GCBWu8q3CpMQStsHWM= Subject key identifier: 98:C1:BF:78:15:04:B1:84:6A:88:7D:54:D0:81:3E:CE:0E:F0:D4:4A Authority key identifier: DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41 Certificate issuer: /CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541 Certificate serial: 0639 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft Manifest number: 0623 Signing time: Mon 05 May 2025 02:14:11 +0000 Manifest this update: Mon 05 May 2025 02:14:10 +0000 Manifest next update: Wed 07 May 2025 02:14:10 +0000 Files and hashes: 1: 3zdkgNzweht60WTeZKPqIV8kdUE.crl (hash: GQy5uqH29zWn7QgRn//9uCVp2nfrj1UeHv5WMdP6I+s=) 2: A3EC97C49EAA11EB9431AE42F8AEA228.roa (hash: ITdou6CBdoyIdGztCF0641fr0nfnRn3rDhTSbOWklSg=) 3: BD35823837EA11ED900673C9F1222468.roa (hash: K3b0R/z4frBDGrfF/mCTN3o21drYDHR1MM4314IVJ6A=) 4: 0982C456E24C11ECBCE3B3CEF1222468.roa (hash: rkWlw7/JbGs5TriVgLgAZr85y9glD0YVL8m1Iff/Uxs=) 5: A355EDC8A0DB11EB87F2FC7DF8AEA228.roa (hash: P3+HhN3YnB8DQjtTMhjEMHdHESBMFxFQZlU9EI7263k=) 6: 98E14F269EA711EBBE0A593EF8AEA228.roa (hash: FZ26ySvv3oron31W1iao0hhqAh46EM14zvc7xYlbQnc=) 7: 6E9310449EAA11EBB4E64442F8AEA228.roa (hash: Hv+jSs3D/YdVMnFhqJVvMuYCEdqqrHrk+9Aqx/UNgKo=) 8: C7ECC700714111ED8827C5E0F1222468.roa (hash: W6gLMNJRZ7K5rBGmlnWlV3y7BTYUlYaagswgafcBbHM=) 9: B0A72E82BFAD11ECBB31F3D65A40D577.roa (hash: vPmLIix5cxvVmhxpbkYB4/qDa0zKQvjG6CoH3d5Eq74=) 10: EC17DAD29EA911EBA0639941F8AEA228.roa (hash: tmy+9p0VWiMmZWA0QRZ2fgoauFE3Y6jS2hlQpUun5VU=) 11: 806F60A68EA811EEB351189F7D84E21B.roa (hash: NJlx9u+oJuJrEXnYDPQ5xdPQwiaXnmhnYC8axpDUM3s=) 12: 1B0C20009EAA11EB9740C941F8AEA228.roa (hash: 3XWadNjbvuaIh9S98dtVe+4vXm4B+aC8LiE6ycenb00=) 13: 09618552624A11EC8BFCB8A85A40D577.roa (hash: FIOUTy5cy2KzouDMbv2WtQevYzQleIp785GheY40Njk=) 14: 3FC1A89C791111EC8AF442855A40D577.roa (hash: KTULHI880xtCGIU0AMDedXoG0QU7sh0kYIcf5dcFCks=) 15: 884C0C72D2BD11ED8DC9AFA4F1222468.roa (hash: 2tRYYZYXesgnA4Rq+EJeXLYkWIBNCFi1xtzvwofm52c=) 16: 8BDFF64E9EAA11EB9E498842F8AEA228.roa (hash: zV3obduva5V+wbQ0DLEaMrifvrDZUFDKELgGrlIfqWQ=) 17: 32F7F2FC9EAA11EB97EBF441F8AEA228.roa (hash: TOFg8z8/QllUB8rjCBN0BMuQMzI8dKWFP0PwxmRO42c=) 18: 50E626B29EAA11EB86172E42F8AEA228.roa (hash: mLDh441cHpoJvemUeR9tMVJFEiDMnH7uLyDeQGJi6ek=) 19: 365C8E5857FA11ECA60EBEB35A40D577.roa (hash: wOGfAQ9Pv53mToR0ZnCKbUzeq4qbARxxk+1x7WlPnk8=) 20: 3D415C420CC911EDBA4FEBC8F1222468.roa (hash: h2cyYPdvqsKecbOgrvnDc2rdhf3n2mu1oU/CKpdb2TY=) 21: BB6D0B4EA15111EDB90237D8F1222468.roa (hash: RXFTH7COLNat1EWyJGa03bPPYwNChNlTVBL4I7XF06A=) 22: 3BA89F7EC74511EFB913F8BC762E951A.roa (hash: r31DEOOcMxqWuyYxSuL7E+LyMqbWwnDCqF5E4HURob4=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 07 May 2025 02:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1593 (0x639) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F362B8A8AF, serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541 Validity Not Before: May 5 02:14:10 2025 GMT Not After : May 7 02:14:10 2025 GMT Subject: CN=68181ef3-d028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b1:5c:9b:58:09:c9:59:43:32:d3:cc:cf:cd: 66:11:b2:a4:ab:07:70:32:de:5c:02:b2:88:1b:1e: 64:be:ab:4c:ee:e4:60:14:51:54:f9:aa:d7:e5:7a: 65:3c:ec:25:b6:c1:9a:70:24:8a:be:8a:f1:d5:6e: 74:7b:35:77:36:a1:c3:18:db:b2:ff:fe:d9:d6:03: 12:5a:d0:f6:6e:91:b8:03:db:28:18:2e:d0:12:ce: 26:d2:c9:88:75:53:83:42:90:6b:14:aa:64:72:a6: e2:41:ad:0a:34:df:cf:48:ad:a6:57:ac:d8:b9:28: 58:75:d3:b8:c1:31:6e:45:2f:2f:ec:76:d4:c2:46: a6:61:e8:49:8e:2a:0c:5b:ad:8e:09:26:c3:67:ab: 0e:a6:59:42:cd:24:1c:4f:98:9a:b1:5a:d3:ed:9d: c1:bf:c7:9a:46:e4:59:c2:2a:dc:cc:ab:d8:f1:13: 97:76:2b:c5:c3:07:5c:a0:d3:b9:8a:fa:2a:a3:93: 4f:ca:8c:ea:91:08:a6:18:21:83:86:ad:9e:bb:73: d6:06:de:72:04:03:4e:fd:41:7d:11:a0:b6:8f:fa: 64:dc:3b:17:14:c5:f0:1e:39:4b:6c:ef:4f:0d:12: 89:3a:a7:3b:f6:51:02:fc:27:c3:a5:03:a1:30:51: a8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C1:BF:78:15:04:B1:84:6A:88:7D:54:D0:81:3E:CE:0E:F0:D4:4A X509v3 Authority Key Identifier: keyid:DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:3f:b1:2f:20:5d:1d:e7:4d:cd:a7:3d:6b:04:70:14:14:ab: fe:ad:d5:ce:fd:05:de:b2:db:bc:50:0b:ce:33:21:91:ab:80: 2c:94:f3:bf:b9:d0:03:56:91:cb:e5:31:b8:55:1d:30:70:d7: 0a:f6:48:9f:bd:df:33:47:a8:ec:c2:d1:bf:18:39:eb:6f:1e: f5:51:11:5c:58:d7:c7:f2:b0:23:33:1c:7f:50:7d:99:5b:c0: b0:eb:f9:a2:f4:45:0d:ec:32:64:04:38:30:81:c4:8f:32:7f: 54:d6:6e:c7:42:48:47:53:46:b6:a5:8d:91:46:16:d1:85:6c: eb:46:2a:9d:31:64:00:46:3d:10:38:71:06:fe:fd:ef:30:11: 7a:b9:3c:9c:39:32:41:c5:7d:91:97:f2:29:32:5a:a0:eb:1b: 7c:1c:ba:7d:2e:04:04:50:4f:00:fb:40:fc:ea:49:43:67:6c: 85:e2:76:17:82:4b:10:3a:67:56:47:f9:bb:a9:44:8e:b6:87: bd:c7:aa:46:4b:74:21:a8:6f:6e:e9:06:a3:56:e7:fe:c6:57: 77:e1:61:e6:90:78:ce:70:65:13:ef:6a:a7:1d:e8:07:9e:2b: 7a:44:d9:0d:b7:1f:e3:81:cf:a5:40:04:27:e3:a0:ca:21:a8: f8:1f:29:09 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MkI4QThBRjExMC8GA1UEBRMoREYzNzY0ODBEQ0YwN0ExQjdBRDE2NERFNjRBM0VB MjE1RjI0NzU0MTAeFw0yNTA1MDUwMjE0MTBaFw0yNTA1MDcwMjE0MTBaMBgxFjAU BgNVBAMTDTY4MTgxZWYzLWQwMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC7sVybWAnJWUMy08zPzWYRsqSrB3Ay3lwCsogbHmS+q0zu5GAUUVT5qtfl emU87CW2wZpwJIq+ivHVbnR7NXc2ocMY27L//tnWAxJa0PZukbgD2ygYLtASzibS yYh1U4NCkGsUqmRypuJBrQo0389IraZXrNi5KFh107jBMW5FLy/sdtTCRqZh6EmO KgxbrY4JJsNnqw6mWULNJBxPmJqxWtPtncG/x5pG5FnCKtzMq9jxE5d2K8XDB1yg 07mK+iqjk0/KjOqRCKYYIYOGrZ67c9YG3nIEA079QX0RoLaP+mTcOxcUxfAeOUts 708NEok6pzv2UQL8J8OlA6EwUagxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUmMG/ eBUEsYRqiH1U0IE+zg7w1EowHwYDVR0jBBgwFoAU3zdkgNzweht60WTeZKPqIV8k dUEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjJCOEE4L0I1Qzk0RTRDOUMyNTExRUJBRDc4RkY1M0Y4QUVBMjI4LzN6ZGtn Tnp3ZWh0NjBXVGVaS1BxSVY4a2RVRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLzN6ZGtnTnp3ZWh0NjBXVGVaS1BxSVY4a2RVRS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MkI4QTgvQjVDOTRFNEM5QzI1MTFFQkFENzhGRjUzRjhB RUEyMjgvM3pka2dOendlaHQ2MFdUZVpLUHFJVjhrZFVFLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQP7EvIF0d503Npz1rBHAUFKv+rdXO /QXestu8UAvOMyGRq4AslPO/udADVpHL5TG4VR0wcNcK9kifvd8zR6jswtG/GDnr bx71URFcWNfH8rAjMxx/UH2ZW8Cw6/mi9EUN7DJkBDgwgcSPMn9U1m7HQkhHU0a2 pY2RRhbRhWzrRiqdMWQARj0QOHEG/v3vMBF6uTycOTJBxX2Rl/IpMlqg6xt8HLp9 LgQEUE8A+0D86klDZ2yF4nYXgksQOmdWR/m7qUSOtoe9x6pGS3QhqG9u6QajVuf+ xld34WHmkHjOcGUT72qnHegHnit6RNkNtx/jgc+lQAQn46DKIaj4HykJ -----END CERTIFICATE-----Generated at Mon May 5 10:50:43 2025 by rpki-client