$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft File: kz9w25gXuEj4wIYagksQEX3FGSw.mft (raw, json) Hash identifier: 3RzBSSu/OKcWnnNkHMA9vPHfC6d2MsfdFWpwNJiWuJQ= Subject key identifier: 9B:F4:D1:66:62:87:9C:C3:D3:96:29:DF:67:8E:45:32:16:33:DB:A9 Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Certificate serial: 0359 Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft Manifest number: 0349 Signing time: Tue 13 May 2025 03:38:30 +0000 Manifest this update: Tue 13 May 2025 03:38:30 +0000 Manifest next update: Thu 15 May 2025 03:38:29 +0000 Files and hashes: 1: kz9w25gXuEj4wIYagksQEX3FGSw.crl (hash: f/lunv8x17IIJr5dSTg6v6AExguGJ/Vl+hfWiDjB2pE=) 2: B104EE44D53311EE8BE4F36C775412E6.roa (hash: RqxwUBj2Bc+OGaTDdk4x7to8RcdRWFqstSwOVMh1no8=) 3: 1E005EBCD53811EEA636DE73775412E6.roa (hash: NZukzj3sWyjYLO9ToCsVsgQAC/kq2Oo6mzyBtHQWmD8=) 4: 8ED6BADCD53311EEB2A2C36C775412E6.roa (hash: 4/E5JqKYHi82tnNDpVDrDiMaVaUcTpYsZcy/yA05uhA=) 5: 0DEEF6F0D53311EEB556F46B775412E6.roa (hash: P5ibcWLG9H1Kur9SCsMbIiX3jBWNN4xNF46xx72YQHI=) 6: A5A2959EDD3D11EEBAF174B7775412E6.roa (hash: ODN6UQwLRLuCmMW2LaPD2vWq9D+bquTGny4/1fInMQE=) 7: E5662DD4A17A11EEAB16F955D25BE465.roa (hash: nQB8uEKFdXSZvidfMMlhgfBX43bi5bFfOgAaXmAWfUM=) 8: 64C2AA52D53411EEB69B076E775412E6.roa (hash: ApnKXgX4qtwCc4Ec2u4PHGuX3hUujQ6rhZ5C7rafC04=) 9: 6DD19D16D53311EE8136926C775412E6.roa (hash: v2hwM/LETMN1QLgipB8E8B+3kZLiPan/2yTGEjfAszc=) 10: 4FFFB85ED53311EE9E536E6C775412E6.roa (hash: D+tEjQwBXIivLTAaXT7TthK1xPvy3VJOqpaVsbM3hVk=) 11: 3F0DCC84D53811EE9F160874775412E6.roa (hash: ZQcO3DmU3Brb6BRvD6IVWLlf8rwN0CI8i4MNTEzPGK0=) 12: BCD1ADAAD53511EEA3B22470775412E6.roa (hash: d12Kr2qwAhbDBscwoutPKxlu3aElunyjg9Yu2LBeVsw=) 13: E4B0AF5CDD3B11EE8C72BDB4775412E6.roa (hash: 0arozNRt9JTjzBkDd/i9r9NcNES2kthw5/x77T8UhJo=) 14: DF52896AD53711EE84074A73775412E6.roa (hash: uIa+9vsGlaMu/Injc/vzOUtcnqp2BVTquSWUrb4Yn00=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 15 May 2025 03:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 857 (0x359) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F364321AAR, serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Validity Not Before: May 13 03:38:30 2025 GMT Not After : May 15 03:38:29 2025 GMT Subject: CN=6822beb6-c87b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:c9:59:1d:64:bb:7f:09:b3:b3:32:fd:c9: b4:d4:18:e9:e8:6b:d5:91:cf:7d:76:f8:a2:15:ce: 7f:93:85:ff:79:58:fe:29:3b:db:3f:35:80:07:ec: 3b:fa:7a:d2:c2:bc:e7:01:3f:5a:65:34:d5:95:ed: 09:51:43:3f:35:97:68:16:f2:38:a4:e9:00:17:62: a0:5b:d1:2d:31:4a:b1:31:a9:a5:88:70:ed:76:e2: 03:fd:0a:e3:3c:10:c2:59:ac:3b:a3:3c:ed:0a:ad: 98:7e:bb:81:b4:90:0d:38:2d:5c:7d:13:dc:70:4c: 86:44:4b:ab:ed:d7:93:20:ac:a1:e5:6d:39:af:4c: b7:7d:3b:42:5e:3f:f7:f1:9b:f8:af:a7:12:05:dd: d2:15:38:8a:e4:9b:12:51:1d:9b:f3:83:ff:3b:28: 06:3d:55:77:14:e5:0c:8d:06:fb:70:85:1e:90:f3: 64:c5:ea:a1:d2:6d:f7:5f:61:14:3d:c3:bc:03:e7: 9e:f8:7c:54:7e:5a:c0:fa:65:04:eb:6a:d6:9f:d5: c6:de:6f:6a:93:2d:4f:09:df:b8:87:8e:ae:83:2a: 6f:cd:2b:4d:89:7b:bf:36:fd:4d:bf:5f:c9:51:bd: 3a:53:99:8a:ab:e7:bc:57:f6:4d:d6:51:94:23:94: 48:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F4:D1:66:62:87:9C:C3:D3:96:29:DF:67:8E:45:32:16:33:DB:A9 X509v3 Authority Key Identifier: keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:39:1b:91:e1:b1:2a:e3:97:4a:3d:bf:4d:2a:7d:05:6c:6f: b8:e7:87:f7:f4:23:db:87:6a:a8:fc:32:67:eb:b1:74:21:1e: eb:ed:85:b1:b5:6a:16:82:be:5f:80:25:aa:28:91:32:50:41: 08:8c:c7:b9:57:cf:e6:4c:07:8e:58:49:39:e4:cb:f2:0f:49: 86:06:db:65:31:84:c8:65:77:97:a1:09:7a:e7:a9:27:76:c6: b1:50:1b:6a:c4:bf:12:0c:ce:0e:5a:52:08:f2:9a:23:da:be: 3a:65:80:7b:6d:8d:a2:45:8d:e4:2d:e7:b4:79:55:89:bf:4b: dc:5c:db:43:69:6d:30:e1:51:f0:47:5f:42:a4:f1:a7:77:10: ab:a6:ce:94:c0:4d:4d:8a:79:c4:73:f5:96:0d:dd:f6:2f:39: 92:71:dd:8d:a1:26:b5:d4:2b:22:38:9b:e8:99:1d:39:f3:5c: 98:a2:7b:25:93:f8:0a:ff:6a:d7:d9:b1:bb:2c:7f:a2:80:74: 29:57:eb:76:b0:62:dd:98:9e:3f:53:0e:b9:10:a0:72:3b:a6: 74:6a:1b:36:8d:68:29:35:57:2b:25:75:bd:c9:a3:56:55:fb: a8:37:2f:d1:9a:a5:38:c4:06:25:29:72:cb:f4:4c:bd:53:7f: ed:07:46:85 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICA1kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDMyMUFBUjExMC8GA1UEBRMoOTMzRjcwREI5ODE3Qjg0OEY4QzA4NjFBODI0QjEw MTE3REM1MTkyQzAeFw0yNTA1MTMwMzM4MzBaFw0yNTA1MTUwMzM4MjlaMBgxFjAU BgNVBAMTDTY4MjJiZWI2LWM4N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDGt8lZHWS7fwmzszL9ybTUGOnoa9WRz312+KIVzn+Thf95WP4pO9s/NYAH 7Dv6etLCvOcBP1plNNWV7QlRQz81l2gW8jik6QAXYqBb0S0xSrExqaWIcO124gP9 CuM8EMJZrDujPO0KrZh+u4G0kA04LVx9E9xwTIZES6vt15MgrKHlbTmvTLd9O0Je P/fxm/ivpxIF3dIVOIrkmxJRHZvzg/87KAY9VXcU5QyNBvtwhR6Q82TF6qHSbfdf YRQ9w7wD5574fFR+WsD6ZQTrataf1cbeb2qTLU8J37iHjq6DKm/NK02Je782/U2/ X8lRvTpTmYqr57xX9k3WUZQjlEjVAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUm/TR ZmKHnMPTlinfZ45FMhYz26kwHwYDVR0jBBgwFoAUkz9w25gXuEj4wIYagksQEX3F GSwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQzMjFBLzQ5M0U0NjJFQkNEQTExRURBMUZCMEZCMEYxMjIyNDY4L2t6OXcy NWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu L2t6OXcyNWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl cG9zaXRvcnkvRjM2NDMyMUEvNDkzRTQ2MkVCQ0RBMTFFREExRkIwRkIwRjEyMjI0 Njgva3o5dzI1Z1h1RWo0d0lZYWdrc1FFWDNGR1N3Lm1mdDA1BggrBgEFBQcwDYYp aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVORuR4bEq45dKPb9NKn0FbG+454f39CPb h2qo/DJn67F0IR7r7YWxtWoWgr5fgCWqKJEyUEEIjMe5V8/mTAeOWEk55MvyD0mG BttlMYTIZXeXoQl656kndsaxUBtqxL8SDM4OWlII8poj2r46ZYB7bY2iRY3kLee0 eVWJv0vcXNtDaW0w4VHwR19CpPGndxCrps6UwE1NinnEc/WWDd32LzmScd2NoSa1 1CsiOJvomR0581yYonslk/gK/2rX2bG7LH+igHQpV+t2sGLdmJ4/Uw65EKByO6Z0 ahs2jWgpNVcrJXW9yaNWVfuoNy/RmqU4xAYlKXLL9Ey9U3/tB0aF -----END CERTIFICATE-----Generated at Wed May 14 03:47:26 2025 by rpki-client