$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft File: kz9w25gXuEj4wIYagksQEX3FGSw.mft (raw, json) Hash identifier: XfxkTYcgZnyYFSkTx/08pIRda1kFi4C6tIww6HUuo20= Subject key identifier: 46:E3:06:01:C0:7F:76:06:48:59:56:A5:82:42:3E:5A:3D:BF:C8:82 Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Certificate serial: 038C Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft Manifest number: 037C Signing time: Wed 02 Jul 2025 03:34:27 +0000 Manifest this update: Wed 02 Jul 2025 03:34:27 +0000 Manifest next update: Fri 04 Jul 2025 03:34:26 +0000 Files and hashes: 1: kz9w25gXuEj4wIYagksQEX3FGSw.crl (hash: XxGh1A28+S8Xsi3iKxZG10JBkTrrVoaHmhXMyCl93tM=) 2: B104EE44D53311EE8BE4F36C775412E6.roa (hash: RqxwUBj2Bc+OGaTDdk4x7to8RcdRWFqstSwOVMh1no8=) 3: 1E005EBCD53811EEA636DE73775412E6.roa (hash: NZukzj3sWyjYLO9ToCsVsgQAC/kq2Oo6mzyBtHQWmD8=) 4: 8ED6BADCD53311EEB2A2C36C775412E6.roa (hash: 4/E5JqKYHi82tnNDpVDrDiMaVaUcTpYsZcy/yA05uhA=) 5: 0DEEF6F0D53311EEB556F46B775412E6.roa (hash: P5ibcWLG9H1Kur9SCsMbIiX3jBWNN4xNF46xx72YQHI=) 6: A5A2959EDD3D11EEBAF174B7775412E6.roa (hash: ODN6UQwLRLuCmMW2LaPD2vWq9D+bquTGny4/1fInMQE=) 7: E5662DD4A17A11EEAB16F955D25BE465.roa (hash: nQB8uEKFdXSZvidfMMlhgfBX43bi5bFfOgAaXmAWfUM=) 8: 64C2AA52D53411EEB69B076E775412E6.roa (hash: ApnKXgX4qtwCc4Ec2u4PHGuX3hUujQ6rhZ5C7rafC04=) 9: 6DD19D16D53311EE8136926C775412E6.roa (hash: v2hwM/LETMN1QLgipB8E8B+3kZLiPan/2yTGEjfAszc=) 10: 4FFFB85ED53311EE9E536E6C775412E6.roa (hash: D+tEjQwBXIivLTAaXT7TthK1xPvy3VJOqpaVsbM3hVk=) 11: 3F0DCC84D53811EE9F160874775412E6.roa (hash: ZQcO3DmU3Brb6BRvD6IVWLlf8rwN0CI8i4MNTEzPGK0=) 12: BCD1ADAAD53511EEA3B22470775412E6.roa (hash: d12Kr2qwAhbDBscwoutPKxlu3aElunyjg9Yu2LBeVsw=) 13: E4B0AF5CDD3B11EE8C72BDB4775412E6.roa (hash: 0arozNRt9JTjzBkDd/i9r9NcNES2kthw5/x77T8UhJo=) 14: DF52896AD53711EE84074A73775412E6.roa (hash: uIa+9vsGlaMu/Injc/vzOUtcnqp2BVTquSWUrb4Yn00=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 04 Jul 2025 00:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 908 (0x38c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F364321AAR, serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C Validity Not Before: Jul 2 03:34:27 2025 GMT Not After : Jul 4 03:34:26 2025 GMT Subject: CN=6864a8c3-a760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:71:e5:b8:a7:22:c6:e6:34:b6:42:e6:d1:d1: 1b:33:63:db:bb:1d:5c:e3:c5:52:cc:35:a2:1d:4b: 1d:72:81:1b:b0:f7:c6:11:3b:80:f9:8b:2f:d5:cb: c6:23:18:c6:40:c1:6a:00:c6:bb:81:1b:05:e0:03: 64:8e:73:0c:73:6f:9f:1e:05:62:22:cb:65:19:5e: df:3a:66:0d:3b:ec:cd:b5:c2:49:be:bb:c5:04:10: ba:cd:34:4c:46:69:de:4f:e3:ff:ff:70:d5:cf:4f: d8:04:ea:03:47:cc:e5:22:2e:f5:27:3a:27:17:29: 6a:8e:32:e3:d1:3e:21:b3:5e:c2:05:4a:61:10:9f: 28:93:ce:10:ab:98:91:9d:d8:54:41:a4:b8:8c:d2: 71:6f:78:eb:91:8d:d9:7d:7b:66:36:f3:a6:33:3f: ad:8c:c2:26:f2:26:ec:41:c9:5b:38:90:f1:93:59: 01:62:ca:b7:1c:8b:e3:b9:d2:2a:19:cf:25:4b:6b: 01:1a:8a:99:90:2b:3d:ac:93:f2:32:be:c1:37:f2: a2:90:d4:da:5b:95:02:41:7d:7d:43:48:e6:91:fb: 2a:91:fe:9c:68:f7:5e:29:d4:8a:90:28:d0:4c:64: b9:11:ef:9d:08:6d:aa:39:34:59:4f:d5:ad:90:5f: b6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E3:06:01:C0:7F:76:06:48:59:56:A5:82:42:3E:5A:3D:BF:C8:82 X509v3 Authority Key Identifier: keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:4b:f6:67:d5:70:f1:2e:d0:a3:a4:8c:76:05:7e:8f:11:f7: 1e:08:3b:6a:b5:a1:e7:17:87:d4:ee:ac:11:94:fd:11:2d:84: 2a:00:4d:57:9b:48:97:07:b5:37:4d:6c:76:48:a6:fb:5d:0d: 03:59:70:04:a8:ec:a7:ba:f4:3a:7a:57:bb:4a:ec:9e:82:17: 26:27:b5:aa:cf:42:df:b6:5e:43:6b:73:25:31:68:05:0c:c0: f6:5e:20:2b:1d:b5:48:41:d3:95:25:a8:20:b2:a5:17:61:8b: b9:61:9e:e4:da:9d:f2:e2:22:e0:a7:d1:4d:68:89:80:20:08: 81:aa:e4:8f:73:b4:25:34:dd:0b:59:ce:41:f4:d6:f1:b9:d0: 83:6f:13:03:6d:8f:e6:45:1c:dc:d6:48:35:eb:93:26:30:8e: d3:94:18:1e:68:eb:21:d3:3b:60:2a:90:02:0f:af:6c:9a:be: 9c:63:ba:a4:93:e4:2b:79:84:c8:11:66:89:c4:fa:5c:bf:2e: fc:a6:79:4c:a3:67:dc:e3:52:ed:90:11:be:51:17:c9:15:9a: 43:2e:29:2f:29:38:70:12:d5:4e:d5:55:92:89:38:79:d1:35: 6d:e6:50:2e:6f:c1:01:8a:4b:c0:6e:46:f6:aa:c4:8d:13:00: b5:83:f2:cc -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICA4wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDMyMUFBUjExMC8GA1UEBRMoOTMzRjcwREI5ODE3Qjg0OEY4QzA4NjFBODI0QjEw MTE3REM1MTkyQzAeFw0yNTA3MDIwMzM0MjdaFw0yNTA3MDQwMzM0MjZaMBgxFjAU BgNVBAMTDTY4NjRhOGMzLWE3NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDbceW4pyLG5jS2QubR0RszY9u7HVzjxVLMNaIdSx1ygRuw98YRO4D5iy/V y8YjGMZAwWoAxruBGwXgA2SOcwxzb58eBWIiy2UZXt86Zg077M21wkm+u8UEELrN NExGad5P4///cNXPT9gE6gNHzOUiLvUnOicXKWqOMuPRPiGzXsIFSmEQnyiTzhCr mJGd2FRBpLiM0nFveOuRjdl9e2Y286YzP62MwibyJuxByVs4kPGTWQFiyrcci+O5 0ioZzyVLawEaipmQKz2sk/IyvsE38qKQ1NpblQJBfX1DSOaR+yqR/pxo914p1IqQ KNBMZLkR750Ibao5NFlP1a2QX7ZHAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQURuMG AcB/dgZIWValgkI+Wj2/yIIwHwYDVR0jBBgwFoAUkz9w25gXuEj4wIYagksQEX3F GSwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQzMjFBLzQ5M0U0NjJFQkNEQTExRURBMUZCMEZCMEYxMjIyNDY4L2t6OXcy NWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu L2t6OXcyNWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl cG9zaXRvcnkvRjM2NDMyMUEvNDkzRTQ2MkVCQ0RBMTFFREExRkIwRkIwRjEyMjI0 Njgva3o5dzI1Z1h1RWo0d0lZYWdrc1FFWDNGR1N3Lm1mdDA1BggrBgEFBQcwDYYp aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAnS/Zn1XDxLtCjpIx2BX6PEfceCDtqtaHn F4fU7qwRlP0RLYQqAE1Xm0iXB7U3TWx2SKb7XQ0DWXAEqOynuvQ6ele7Suyeghcm J7Wqz0Lftl5Da3MlMWgFDMD2XiArHbVIQdOVJaggsqUXYYu5YZ7k2p3y4iLgp9FN aImAIAiBquSPc7QlNN0LWc5B9NbxudCDbxMDbY/mRRzc1kg165MmMI7TlBgeaOsh 0ztgKpACD69smr6cY7qkk+QreYTIEWaJxPpcvy78pnlMo2fc41LtkBG+URfJFZpD LikvKThwEtVO1VWSiTh50TVt5lAub8EBikvAbkb2qsSNEwC1g/LM -----END CERTIFICATE-----Generated at Wed Jul 2 23:24:55 2025 by rpki-client