$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft File: qO-WBRTjNkRNPN43sktm3DnUPRs.mft (raw, json) Hash identifier: S/MBSxtU88hIJMQPSr47hNQUNv2d/BaCyRgJ+Fmmo1o= Subject key identifier: 01:DF:59:01:20:07:00:3D:40:A9:D2:57:76:B1:1B:D0:26:F6:31:E7 Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Certificate serial: 02F1 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft Manifest number: 02DD Signing time: Tue 01 Jul 2025 03:57:49 +0000 Manifest this update: Tue 01 Jul 2025 03:57:48 +0000 Manifest next update: Thu 03 Jul 2025 03:57:48 +0000 Files and hashes: 1: qO-WBRTjNkRNPN43sktm3DnUPRs.crl (hash: fzNnR2saGZeUpB5WL3J3grZu7MTEOxSmBuV6q2gz18c=) 2: C64BDF325B8611EE8F5917154AD9E6FC.roa (hash: lOfMw6yYmupoBGzZG06JxE7nkGYN0SjR1YBL+6yU110=) 3: 221DE36C5B7F11EEBAA0307C4AD9E6FC.roa (hash: akgSyzvUhBZdD/Jo/1snS9zDQnQhIY/z4b5eUssk1L4=) 4: 3FC126045B7F11EE91B3797C4AD9E6FC.roa (hash: B4Jxb4zuiNxx8ARYO+8FuXUu5CFHZJCjPVqFobOB2EU=) 5: F592AE225B7E11EEAAD8A37B4AD9E6FC.roa (hash: H2+/hMWhZrQQ/v+xp+P99me7GUvAhaEZLEIOvuDJ8+o=) 6: 9389DEB25B7E11EE85FB5A794AD9E6FC.roa (hash: saW9gDDU1fU/ss5E5QByOp+7T1wbc1vVgpJ7XS+gk+s=) 7: 39E85D245B7F11EE90195D7C4AD9E6FC.roa (hash: eHbXQ/7kild+PjHeBFmSGxlAnlG3pi2uyC9o63m5Mio=) 8: 44122BBE5B7E11EEA5C359784AD9E6FC.roa (hash: dlLpBI0Us25zgjOKkdJouRreKgFknaWvSBpHKXaHN4Q=) 9: 0DDE14645B8711EEBE2DF3154AD9E6FC.roa (hash: OVYm5oOpe8XlJOHUYg0R0oIytfPmlhVRgGeohPVoeGg=) 10: E29E1C625B7D11EEAFF513774AD9E6FC.roa (hash: cL6yXVTdN5LFRK/8lI56JvUwQ8huIMxP3ArtUJsfAsg=) 11: 0DB547A45B7E11EE95F5E0774AD9E6FC.roa (hash: sgLUjm9KT8NBSGsfPuF7zb59LXdnTNhjWZlBuJluY4o=) 12: 82BE0D345B8711EE8AF170174AD9E6FC.roa (hash: du0kSdCk2tSzKNVUZIxuV5z/5Bcr0/T6HJ/NasAIv4s=) 13: 673167545B7E11EE98EEBD784AD9E6FC.roa (hash: adqbPWSj3qJmhRpUh3DUEWmWfDKPs4YfwC9ZlFS5ias=) 14: A97AA9E05B7E11EEAD5E8F794AD9E6FC.roa (hash: 3NkJ+hNEcmyOZzaQCsy/+Ozh2yGmiiWLNtnnqsmfG2I=) 15: EFB2EA005B8611EEB1C27E154AD9E6FC.roa (hash: ArKkYMPjrZ4ijgIQyF9Kcy4ua9ozHX8IBDIWFIk7DdU=) 16: BBA7D8A05B8711EEA5880E184AD9E6FC.roa (hash: NwbjXk0kj8eY+sbmyk9mA7z7P4Od2Lqrhnl5SE+949A=) 17: 7D84FCC85B7E11EE930F05794AD9E6FC.roa (hash: LbVSQZqmCHBXF80jfRgZ632p1CiqtMRJRyKOIJ1fwIY=) 18: 5A3685F85B7D11EEB4B9A0754AD9E6FC.roa (hash: hua4m2v20w0RdcluLq3SvMVi3aYeRg47OfgA9wTRs3E=) 19: D6AA10E05B7E11EE9B32467A4AD9E6FC.roa (hash: RAafA0ML5VlgZ60Y1uxp4EowWyBnwvs0LOD/pOddd5E=) 20: 9FF8CF2E5B8711EE9F40A5174AD9E6FC.roa (hash: lG9MW9PGMEKdmiEYPlQxLtvMK2I/+bgWEhfhck5fvqA=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 03 Jul 2025 03:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3668CFEAF, serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Validity Not Before: Jul 1 03:57:48 2025 GMT Not After : Jul 3 03:57:48 2025 GMT Subject: CN=68635cbd-b480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:55:7d:7f:74:fc:68:7f:81:52:1e:c5:d1:ce: 88:99:65:e3:d6:2e:cd:95:a5:e7:42:b2:10:c7:bb: 83:74:44:ff:45:4d:64:7f:2f:49:13:cf:07:2f:88: fc:37:ff:f5:02:d1:0c:51:17:1c:50:3f:95:ba:5e: 11:47:ea:e3:91:da:31:5d:70:15:21:a9:cb:81:ef: bf:bb:5f:de:3f:70:25:ec:2a:58:62:8f:24:83:16: 3f:b0:cc:2b:88:78:00:1c:ce:a2:cd:19:9e:53:63: 4d:85:f7:a8:75:47:82:57:fa:77:9d:5a:77:3e:6d: 8f:89:0c:3e:25:96:53:6f:1c:82:3f:5f:ed:0f:85: 86:e4:e3:8a:55:53:b0:4e:d3:ff:28:7e:24:7a:12: 43:b2:70:02:0f:19:e7:4e:97:bd:a0:2d:bf:1a:f4: e3:cd:39:f8:33:71:39:d3:f8:96:4a:4c:b7:8e:dc: 54:89:04:b7:bd:0a:86:a2:e3:99:a5:d3:bf:e8:26: d9:9f:ef:b3:7a:ec:53:de:8a:24:a9:36:52:4c:ba: 7f:9f:db:f7:43:6c:60:65:4a:70:c1:fe:c2:49:af: e5:28:fb:c5:20:d0:13:a5:44:ac:49:16:4e:67:82: b9:c4:69:25:15:23:ea:7d:f5:4d:9a:92:ac:0a:0c: 22:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DF:59:01:20:07:00:3D:40:A9:D2:57:76:B1:1B:D0:26:F6:31:E7 X509v3 Authority Key Identifier: keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f3:7b:38:85:cb:a3:5d:9f:e0:8d:5b:fc:12:76:e5:ed:17: ce:32:df:18:8b:cb:59:21:f9:1f:8e:40:89:40:7a:b3:f5:df: 29:c7:27:e1:4b:1b:f3:c8:bb:d3:31:3d:7a:0e:e2:b6:42:2a: cc:b3:96:67:70:9e:c0:d2:d4:f4:3b:5b:54:d9:af:5d:6f:05: 99:71:8d:b7:ca:80:0e:d8:f8:b9:22:9c:76:7f:b1:bc:02:ae: 33:ef:ff:04:83:2a:d1:ab:87:44:4d:26:64:93:c4:9a:ad:89: d5:87:b4:32:a9:68:e1:50:04:bd:d3:d4:f4:d8:c6:ca:9c:dd: 9b:61:68:4d:47:37:c3:f1:50:9b:58:53:a8:19:cb:48:5b:2a: 77:f0:f3:9a:64:6a:4b:81:41:bc:8c:9d:10:0b:d2:98:7e:70: 34:79:05:9d:17:c5:e4:3f:bf:60:ad:5a:82:44:78:99:f5:61: 67:3a:15:97:1d:23:84:2f:10:ac:e2:fe:94:dd:b3:bf:7b:80: 07:5e:5e:39:50:d7:16:b6:36:c9:b5:1f:79:6a:77:e0:f7:93: c0:bc:94:cd:95:e3:72:08:c9:5a:95:65:5d:ea:a8:b7:d5:c5: 14:bf:3b:ab:3c:71:ea:91:4f:a9:56:48:c9:bc:37:25:b9:78: 74:2c:ff:2d -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NjhDRkVBRjExMC8GA1UEBRMoQThFRjk2MDUxNEUzMzY0NDREM0NERTM3QjI0QjY2 REMzOUQ0M0QxQjAeFw0yNTA3MDEwMzU3NDhaFw0yNTA3MDMwMzU3NDhaMBgxFjAU BgNVBAMTDTY4NjM1Y2JkLWI0ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQClVX1/dPxof4FSHsXRzoiZZePWLs2VpedCshDHu4N0RP9FTWR/L0kTzwcv iPw3//UC0QxRFxxQP5W6XhFH6uOR2jFdcBUhqcuB77+7X94/cCXsKlhijySDFj+w zCuIeAAczqLNGZ5TY02F96h1R4JX+nedWnc+bY+JDD4lllNvHII/X+0PhYbk44pV U7BO0/8ofiR6EkOycAIPGedOl72gLb8a9OPNOfgzcTnT+JZKTLeO3FSJBLe9Coai 45ml07/oJtmf77N67FPeiiSpNlJMun+f2/dDbGBlSnDB/sJJr+Uo+8Ug0BOlRKxJ Fk5ngrnEaSUVI+p99U2akqwKDCJbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUAd9Z ASAHAD1AqdJXdrEb0Cb2MecwHwYDVR0jBBgwFoAUqO+WBRTjNkRNPN43sktm3DnU PRswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjY4Q0ZFLzk1RUZENzRDMzc1NzExRUVCQjE0MzIxODRBRDlFNkZDL3FPLVdC UlRqTmtSTlBONDNza3RtM0RuVVBScy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3FPLVdCUlRqTmtSTlBONDNza3RtM0RuVVBScy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NjhDRkUvOTVFRkQ3NEMzNzU3MTFFRUJCMTQzMjE4NEFE OUU2RkMvcU8tV0JSVGpOa1JOUE40M3NrdG0zRG5VUFJzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA683s4hcujXZ/gjVv8Enbl7RfOMt8Y i8tZIfkfjkCJQHqz9d8pxyfhSxvzyLvTMT16DuK2QirMs5ZncJ7A0tT0O1tU2a9d bwWZcY23yoAO2Pi5Ipx2f7G8Aq4z7/8EgyrRq4dETSZkk8SarYnVh7QyqWjhUAS9 09T02MbKnN2bYWhNRzfD8VCbWFOoGctIWyp38POaZGpLgUG8jJ0QC9KYfnA0eQWd F8XkP79grVqCRHiZ9WFnOhWXHSOELxCs4v6U3bO/e4AHXl45UNcWtjbJtR95anfg 95PAvJTNleNyCMlalWVd6qi31cUUvzurPHHqkU+pVkjJvDcluXh0LP8t -----END CERTIFICATE-----Generated at Wed Jul 2 01:25:28 2025 by rpki-client