$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft File: oTaOi_yA9OpasJcW0lchGTYYKFE.mft (raw, json) Hash identifier: e6lAfqLK1FOKp19opHQ/vT6GMvklAzNQdUaCG86c6wo= Subject key identifier: C4:DA:C1:39:FF:1F:48:A9:39:28:8E:53:A0:C8:66:96:30:75:DC:C8 Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51 Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851 Certificate serial: 0D12 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft Manifest number: 0CE2 Signing time: Thu 15 May 2025 01:06:04 +0000 Manifest this update: Thu 15 May 2025 01:06:03 +0000 Manifest next update: Sat 17 May 2025 01:06:03 +0000 Files and hashes: 1: oTaOi_yA9OpasJcW0lchGTYYKFE.crl (hash: eq9uO2Ens7OzR4bXuY2WsH+BTs9D3IeGCzugCiQMBPk=) 2: 688FF63C70EA11EBB58E686CF8AEA228.roa (hash: mnhwlEYLBW14RTC3favyxPOzROufnwHo5mG4Z0mXmcE=) 3: 717250DC0B1F11F0979AD09D762E951A.roa (hash: EIY2uiwrUgRTGGH5CKTX60VMZhCwzhDQZwIzPuQyzLk=) 4: FF8AE3A2D27511EBA434AC13F8AEA228.roa (hash: 5+HC4jv4qZLLiwXnjuwHxqCdddSlDf0nEOGWfUV5PQQ=) 5: 316A8CAAEAD711EBBF227926D8A014CE.roa (hash: yxveE6pApv0ntB+dr/mwCV5WzRHfetSEdQFEmXgoicI=) 6: 2A0F92DAF65311EABA5EBE2FF8AEA228.roa (hash: THMJd5DgFhWv0Jk+1OcRnImey6Na8xQ3AsnqGvmdW70=) 7: 7454200CCAC611EB8443867EF8AEA228.roa (hash: hzz/vJ+aqnVoQNL7Q9fjlul0hrPt6hbCLM46iL+BL7I=) 8: C0A9CF84CAC511EBAD8F747DF8AEA228.roa (hash: 32bh8lnMpMvqyS9cax+2bQBhBK15D7Xt6pmKKyWGT1I=) 9: 48EF3A4CCAC511EBA25AC67CF8AEA228.roa (hash: akzUSGdVFPvN0ulPbNTi4W3s+HlY+6W8WohYYTP53AQ=) 10: 8E9FB58ACAC511EB9B981F7DF8AEA228.roa (hash: i2XbNZNySL6bjfPeeqcwKUmZc1PB1OXmHSBcuRJ9wok=) 11: 0B623002CAC611EBA5FDE97DF8AEA228.roa (hash: 7vqWPa/FVhwLVFvDKi4nljJ6iFh6Jfsi7spX+XnzJ70=) 12: 4E58D686CAC611EB9365587EF8AEA228.roa (hash: 4ThPqE6/bQdWLeN6MKhRWORK90ZVKeZ9eefEc7xOcFU=) 13: 89672DF86D9011EEB83415874AD9E6FC.roa (hash: GCv1qnJWw7EowPAn9i0uz0mqCeC5AHRLSdr3MuuzS/U=) 14: 97B6F442464111ECBD1F4A20D8A014CE.roa (hash: WFh81Czx23ss3LjWPFRZ0ox6H/FOzyhXrzAkY9AMcyE=) 15: FBDC85FE280211EFA2470CDD7CDC24C2.roa (hash: N2LzgJndLmvz3cDIsfFkVtUTemoZkwL0xxlWsp4hwb0=) 16: 6023B6466D9011EEB59691864AD9E6FC.roa (hash: 8Vfkb/3Ajxlzq/FEl75zlD6gPZ0n60l+v2tc/Wmueqg=) 17: 3730DFCE0B1F11F08F24969D762E951A.roa (hash: M4evIqnQ83xbCnZoy0k3D9VPp29Fp6WHTYW6UjV2Hb8=) 18: F2BA97A6CAC511EBB828B97DF8AEA228.roa (hash: MND7CmipLpfeKz1+bS7srpKpnj7/a7fnv2q2oc1dXDk=) 19: 6EE63CF0CAC511EBB74A097DF8AEA228.roa (hash: WPe/RcweAEsw7x1mmDsXfOpYOObfldXDxTckbMWoLT4=) 20: 9474CF86ED9E11EA9B405A41F8AEA228.roa (hash: 1ODaBYEbZc5lz2DA8RW3VSuCv0cfBzMfZN9Q4vPucaM=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 17 May 2025 01:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3346 (0xd12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851 Validity Not Before: May 15 01:06:03 2025 GMT Not After : May 17 01:06:03 2025 GMT Subject: CN=68253dfc-b458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6e:af:1b:3c:32:e4:0d:53:f5:85:7d:a2:f6: 65:60:12:a9:7f:a1:3e:76:2e:35:f1:06:c3:3c:65: 44:dc:71:c8:ce:d0:09:7b:b2:46:f9:1d:96:10:07: e6:12:79:95:ee:de:4b:b8:71:03:7a:0b:e4:d2:e1: 9a:ec:ab:fc:f7:bc:27:db:3f:41:f7:6e:24:d2:bc: 3e:9d:f2:bd:69:ef:24:1e:c6:58:8a:53:80:85:95: cd:a2:57:47:cb:d3:0f:9c:28:bc:a9:9f:68:85:ec: 46:a1:67:30:c2:53:55:c0:d4:53:bd:eb:eb:1c:04: 1d:f9:9f:13:57:75:9b:f7:66:fe:76:bb:1d:e1:6a: 76:f3:d8:87:c7:71:f5:e6:28:53:99:1d:21:ca:00: 74:60:21:98:85:d1:1b:4e:4d:bb:41:e2:fa:d4:3c: b8:20:1b:bb:df:22:8c:5d:d1:97:5f:06:a6:5c:38: ce:fa:0f:65:5f:e4:ee:05:9e:5d:93:f4:43:5d:b6: c6:6d:46:e2:79:0e:e1:de:25:cc:11:e5:f2:6f:8b: f4:ef:1d:55:59:b9:55:33:a5:4f:91:e6:1e:fb:ee: 2d:71:e1:18:5d:51:7c:8d:da:83:62:ee:a2:4f:ab: 81:44:4b:bb:55:84:5a:01:cd:95:5f:c9:42:51:ee: ab:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DA:C1:39:FF:1F:48:A9:39:28:8E:53:A0:C8:66:96:30:75:DC:C8 X509v3 Authority Key Identifier: keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:d6:0e:f4:79:2c:79:26:e2:6d:99:ff:24:22:25:65:f4:5b: 70:a2:2c:4e:92:de:f5:73:a9:49:7e:b5:81:22:4c:0e:82:7e: 0b:a4:2f:35:cd:e1:aa:4a:19:97:ce:2a:7a:e4:e0:8d:2d:bf: bc:b3:f1:33:2d:fc:7c:bc:1d:09:63:86:c6:8c:3b:dc:71:0a: 35:e8:8c:d3:19:5b:35:be:b8:88:a6:28:d9:45:4d:bc:38:39: 09:c3:cf:fb:7c:5a:e9:39:46:8c:0f:d2:60:3e:7a:ba:ab:0d: b2:08:16:38:3d:fa:16:58:29:5d:31:22:a7:30:38:98:aa:23: db:88:73:be:c1:d0:7e:2a:47:d7:3e:c1:e4:9d:e5:b2:21:ee: 89:e7:db:4e:e0:af:5f:82:d8:e1:cb:69:0f:f9:e6:c4:61:dc: 33:1f:86:15:52:e2:23:5b:d3:f2:d7:67:bd:35:c3:29:a9:9e: 78:22:ac:fa:fd:4f:f4:4c:00:eb:f1:62:04:51:c2:8c:75:96: 97:1c:d4:c1:43:7d:55:5f:22:35:51:19:19:30:49:7b:65:b1: b6:b5:98:ec:6a:a9:a9:da:2d:e4:97:0c:7c:54:ea:53:5f:bb: 71:d0:cb:32:68:33:70:07:92:d7:bf:a6:df:e1:81:bb:45:fc: 16:d3:d0:ec -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDRIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MkUzOUVBRjExMC8GA1UEBRMoQTEzNjhFOEJGQzgwRjRFQTVBQjA5NzE2RDI1NzIx MTkzNjE4Mjg1MTAeFw0yNTA1MTUwMTA2MDNaFw0yNTA1MTcwMTA2MDNaMBgxFjAU BgNVBAMTDTY4MjUzZGZjLWI0NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCpbq8bPDLkDVP1hX2i9mVgEql/oT52LjXxBsM8ZUTcccjO0Al7skb5HZYQ B+YSeZXu3ku4cQN6C+TS4Zrsq/z3vCfbP0H3biTSvD6d8r1p7yQexliKU4CFlc2i V0fL0w+cKLypn2iF7EahZzDCU1XA1FO96+scBB35nxNXdZv3Zv52ux3hanbz2IfH cfXmKFOZHSHKAHRgIZiF0RtOTbtB4vrUPLggG7vfIoxd0ZdfBqZcOM76D2Vf5O4F nl2T9ENdtsZtRuJ5DuHeJcwR5fJvi/TvHVVZuVUzpU+R5h777i1x4RhdUXyN2oNi 7qJPq4FES7tVhFoBzZVfyUJR7qsXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUxNrB Of8fSKk5KI5ToMhmljB13MgwHwYDVR0jBBgwFoAUoTaOi/yA9OpasJcW0lchGTYY KFEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4QUVBMjI4L29UYU9p X3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL29UYU9pX3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MkUzOUUvMjAwMTkxODQ4MEFCMTFFNkExMTdBRTYzRjhB RUEyMjgvb1RhT2lfeUE5T3Bhc0pjVzBsY2hHVFlZS0ZFLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCX1g70eSx5JuJtmf8kIiVl9FtwoixO kt71c6lJfrWBIkwOgn4LpC81zeGqShmXzip65OCNLb+8s/EzLfx8vB0JY4bGjDvc cQo16IzTGVs1vriIpijZRU28ODkJw8/7fFrpOUaMD9JgPnq6qw2yCBY4PfoWWCld MSKnMDiYqiPbiHO+wdB+KkfXPsHkneWyIe6J59tO4K9fgtjhy2kP+ebEYdwzH4YV UuIjW9Py12e9NcMpqZ54Iqz6/U/0TADr8WIEUcKMdZaXHNTBQ31VXyI1URkZMEl7 ZbG2tZjsaqmp2i3klwx8VOpTX7tx0MsyaDNwB5LXv6bf4YG7RfwW09Ds -----END CERTIFICATE-----Generated at Thu May 15 13:32:04 2025 by rpki-client