$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft File: qO-WBRTjNkRNPN43sktm3DnUPRs.mft (raw, json) Hash identifier: PoIRp90lVh+KlyJwTnyUpNETg7eXDVyeQTkgRGN3Ov0= Subject key identifier: CF:A3:39:F4:B7:3B:FB:6D:CA:08:0D:F8:A4:93:0D:B4:EF:15:F2:E5 Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Certificate serial: 02BD Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft Manifest number: 02A9 Signing time: Sun 11 May 2025 03:55:13 +0000 Manifest this update: Sun 11 May 2025 03:55:12 +0000 Manifest next update: Tue 13 May 2025 03:55:12 +0000 Files and hashes: 1: qO-WBRTjNkRNPN43sktm3DnUPRs.crl (hash: 2VtPkwA7W+38o2VrUMOZ9sLeYOVb9SEgebVlCeFoBLc=) 2: C64BDF325B8611EE8F5917154AD9E6FC.roa (hash: lOfMw6yYmupoBGzZG06JxE7nkGYN0SjR1YBL+6yU110=) 3: 221DE36C5B7F11EEBAA0307C4AD9E6FC.roa (hash: akgSyzvUhBZdD/Jo/1snS9zDQnQhIY/z4b5eUssk1L4=) 4: 3FC126045B7F11EE91B3797C4AD9E6FC.roa (hash: B4Jxb4zuiNxx8ARYO+8FuXUu5CFHZJCjPVqFobOB2EU=) 5: F592AE225B7E11EEAAD8A37B4AD9E6FC.roa (hash: H2+/hMWhZrQQ/v+xp+P99me7GUvAhaEZLEIOvuDJ8+o=) 6: 9389DEB25B7E11EE85FB5A794AD9E6FC.roa (hash: saW9gDDU1fU/ss5E5QByOp+7T1wbc1vVgpJ7XS+gk+s=) 7: 39E85D245B7F11EE90195D7C4AD9E6FC.roa (hash: eHbXQ/7kild+PjHeBFmSGxlAnlG3pi2uyC9o63m5Mio=) 8: 44122BBE5B7E11EEA5C359784AD9E6FC.roa (hash: dlLpBI0Us25zgjOKkdJouRreKgFknaWvSBpHKXaHN4Q=) 9: 0DDE14645B8711EEBE2DF3154AD9E6FC.roa (hash: OVYm5oOpe8XlJOHUYg0R0oIytfPmlhVRgGeohPVoeGg=) 10: E29E1C625B7D11EEAFF513774AD9E6FC.roa (hash: cL6yXVTdN5LFRK/8lI56JvUwQ8huIMxP3ArtUJsfAsg=) 11: 0DB547A45B7E11EE95F5E0774AD9E6FC.roa (hash: sgLUjm9KT8NBSGsfPuF7zb59LXdnTNhjWZlBuJluY4o=) 12: 82BE0D345B8711EE8AF170174AD9E6FC.roa (hash: du0kSdCk2tSzKNVUZIxuV5z/5Bcr0/T6HJ/NasAIv4s=) 13: 673167545B7E11EE98EEBD784AD9E6FC.roa (hash: adqbPWSj3qJmhRpUh3DUEWmWfDKPs4YfwC9ZlFS5ias=) 14: A97AA9E05B7E11EEAD5E8F794AD9E6FC.roa (hash: 3NkJ+hNEcmyOZzaQCsy/+Ozh2yGmiiWLNtnnqsmfG2I=) 15: EFB2EA005B8611EEB1C27E154AD9E6FC.roa (hash: ArKkYMPjrZ4ijgIQyF9Kcy4ua9ozHX8IBDIWFIk7DdU=) 16: BBA7D8A05B8711EEA5880E184AD9E6FC.roa (hash: NwbjXk0kj8eY+sbmyk9mA7z7P4Od2Lqrhnl5SE+949A=) 17: 7D84FCC85B7E11EE930F05794AD9E6FC.roa (hash: LbVSQZqmCHBXF80jfRgZ632p1CiqtMRJRyKOIJ1fwIY=) 18: 5A3685F85B7D11EEB4B9A0754AD9E6FC.roa (hash: hua4m2v20w0RdcluLq3SvMVi3aYeRg47OfgA9wTRs3E=) 19: D6AA10E05B7E11EE9B32467A4AD9E6FC.roa (hash: RAafA0ML5VlgZ60Y1uxp4EowWyBnwvs0LOD/pOddd5E=) 20: 9FF8CF2E5B8711EE9F40A5174AD9E6FC.roa (hash: lG9MW9PGMEKdmiEYPlQxLtvMK2I/+bgWEhfhck5fvqA=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 13 May 2025 00:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 701 (0x2bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3668CFEAF, serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Validity Not Before: May 11 03:55:12 2025 GMT Not After : May 13 03:55:12 2025 GMT Subject: CN=68201fa1-32ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:79:f4:e8:5e:3b:1c:81:c7:4d:3d:f5:9c:45: 29:63:fe:84:02:26:3c:fd:82:84:61:29:c2:ab:83: 5e:1e:c8:62:3f:32:5c:53:59:f8:ad:dc:a3:f2:b5: 31:8d:4a:50:1a:4e:62:8c:f7:c7:df:77:28:c5:2d: ef:63:af:37:ad:8d:f6:b9:41:d9:c3:94:3d:3a:2b: 6c:62:8c:cc:e5:85:fe:56:9c:1a:f8:55:02:d0:a1: 69:da:f3:8c:9e:4c:2f:77:2b:ec:2f:d4:0b:a6:4d: b8:fa:55:ef:f8:a9:85:2e:55:3c:7f:42:8a:41:00: 68:8b:23:bd:3d:1f:c1:f4:1d:88:7a:3b:73:04:98: 22:1c:be:0c:8b:a9:4d:d0:17:f7:ac:d5:45:f0:06: e8:30:54:a1:b9:b8:9a:69:73:30:fd:dc:99:ed:40: 00:4d:57:65:fc:c1:2b:f1:1f:13:e3:8c:db:84:85: 30:15:df:f8:7b:87:12:27:8e:e8:25:ee:ba:87:70: d8:45:64:33:98:df:21:59:ae:73:17:65:bd:47:37: 45:cc:a6:ec:74:e9:3f:ba:80:22:f1:59:14:59:df: c7:28:45:20:09:e0:b9:c8:f3:e1:5a:70:7a:70:92: 03:b1:02:f2:bd:89:63:40:48:c0:9f:ba:89:86:3a: af:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A3:39:F4:B7:3B:FB:6D:CA:08:0D:F8:A4:93:0D:B4:EF:15:F2:E5 X509v3 Authority Key Identifier: keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:6c:ea:75:05:8d:4c:a3:71:3a:d5:0a:1f:27:05:48:c1:bf: f0:49:f4:4a:73:80:fc:0d:41:80:61:c6:11:59:1c:67:f1:7a: b1:55:23:13:3a:6b:3f:fe:b4:73:82:5e:41:7b:72:07:7b:64: 73:a6:ec:47:35:f7:9b:54:89:b2:1f:97:96:df:61:1a:8b:15: e6:a4:67:ef:62:a3:b3:ef:5b:fb:d2:e1:be:c2:c6:99:f2:08: fd:88:65:0c:f4:b3:a5:ca:6c:2b:65:ca:32:e7:e7:ec:7e:53: 65:c1:6e:72:b7:ee:7c:fb:66:4b:ca:4d:54:3c:c6:f7:4a:85: d3:b3:ed:1f:bf:9c:7c:18:59:5d:90:32:7a:f3:41:9b:81:8c: c1:7c:75:6f:75:14:0a:4f:03:d8:78:82:a0:d8:3a:75:f9:06: b1:bb:9b:c6:01:6f:68:76:4e:f4:19:17:a4:b8:95:24:b9:79: 26:4a:fd:7e:5b:4d:a1:ed:3d:f8:eb:c3:98:f7:e5:da:74:ad: b8:bf:72:9f:66:3c:6d:8d:2e:f5:0a:c1:02:66:ad:71:6c:76: ee:5b:2a:52:a2:9d:a8:80:07:51:4a:1d:eb:61:9f:a1:2a:4a: 73:8e:4b:e9:0d:c5:fd:10:61:44:6a:24:cc:58:fa:d4:3d:cc: f4:a9:dd:e4 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAr0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NjhDRkVBRjExMC8GA1UEBRMoQThFRjk2MDUxNEUzMzY0NDREM0NERTM3QjI0QjY2 REMzOUQ0M0QxQjAeFw0yNTA1MTEwMzU1MTJaFw0yNTA1MTMwMzU1MTJaMBgxFjAU BgNVBAMTDTY4MjAxZmExLTMyY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQChefToXjscgcdNPfWcRSlj/oQCJjz9goRhKcKrg14eyGI/MlxTWfit3KPy tTGNSlAaTmKM98ffdyjFLe9jrzetjfa5QdnDlD06K2xijMzlhf5WnBr4VQLQoWna 84yeTC93K+wv1AumTbj6Ve/4qYUuVTx/QopBAGiLI709H8H0HYh6O3MEmCIcvgyL qU3QF/es1UXwBugwVKG5uJppczD93JntQABNV2X8wSvxHxPjjNuEhTAV3/h7hxIn jugl7rqHcNhFZDOY3yFZrnMXZb1HN0XMpux06T+6gCLxWRRZ38coRSAJ4LnI8+Fa cHpwkgOxAvK9iWNASMCfuomGOq+9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUz6M5 9Lc7+23KCA34pJMNtO8V8uUwHwYDVR0jBBgwFoAUqO+WBRTjNkRNPN43sktm3DnU PRswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjY4Q0ZFLzk1RUZENzRDMzc1NzExRUVCQjE0MzIxODRBRDlFNkZDL3FPLVdC UlRqTmtSTlBONDNza3RtM0RuVVBScy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3FPLVdCUlRqTmtSTlBONDNza3RtM0RuVVBScy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NjhDRkUvOTVFRkQ3NEMzNzU3MTFFRUJCMTQzMjE4NEFE OUU2RkMvcU8tV0JSVGpOa1JOUE40M3NrdG0zRG5VUFJzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2bOp1BY1Mo3E61QofJwVIwb/wSfRK c4D8DUGAYcYRWRxn8XqxVSMTOms//rRzgl5Be3IHe2RzpuxHNfebVImyH5eW32Ea ixXmpGfvYqOz71v70uG+wsaZ8gj9iGUM9LOlymwrZcoy5+fsflNlwW5yt+58+2ZL yk1UPMb3SoXTs+0fv5x8GFldkDJ680GbgYzBfHVvdRQKTwPYeIKg2Dp1+Qaxu5vG AW9odk70GRekuJUkuXkmSv1+W02h7T3468OY9+XadK24v3KfZjxtjS71CsECZq1x bHbuWypSop2ogAdRSh3rYZ+hKkpzjkvpDcX9EGFEaiTMWPrUPcz0qd3k -----END CERTIFICATE-----Generated at Sun May 11 18:59:24 2025 by rpki-client