$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft File: KnzueRgruFkbsTXdv7vulMHfQIc.mft (raw, json) Hash identifier: ZALjBrSPoM92Y4NTRXJQLOUAn0MQM5YZNck/QY6IKmM= Subject key identifier: 0D:E0:F4:5B:54:86:AC:8D:86:1B:B6:6B:E6:7E:F1:3B:37:5A:74:67 Authority key identifier: 2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87 Certificate issuer: /CN=F366CE6FAF/serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087 Certificate serial: 029E Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft Manifest number: 0295 Signing time: Wed 02 Jul 2025 04:04:59 +0000 Manifest this update: Wed 02 Jul 2025 04:04:58 +0000 Manifest next update: Fri 04 Jul 2025 04:04:58 +0000 Files and hashes: 1: KnzueRgruFkbsTXdv7vulMHfQIc.crl (hash: YeKNvCVq0O16OKNih4Mzg1iaftkgotB6FHHQby3QGYY=) 2: 1A85425E69BB11EEBF5E904C4AD9E6FC.roa (hash: Kx/Y8dEbUYeqoToY5LpNSdsXIlBKib23+2DqdNa43/Y=) 3: FD189F0E69BA11EEBE81314C4AD9E6FC.roa (hash: UK6i2dFbIWYL9h4T/dpZ4yF8qA519gysmxncwqhjDNc=) 4: E44337C869BA11EE88CB094C4AD9E6FC.roa (hash: 1d8FtYAZsHDPTXDngJ49htpRva8POmc7nirQyWgiDXo=) 5: 3BB28D0269BA11EEABA4ED494AD9E6FC.roa (hash: Q1XgZ9ZmDeVtE4gxia+GOYWXfxLUPO9DALH0Nrtl+eg=) 6: B8B5DACA69BA11EEBD303C4B4AD9E6FC.roa (hash: uoqftiTs2TQ3rEVnLUYDWPuBL54Tw5Qh6vFz0fe7JV4=) 7: 98FDCD4669BA11EE95130C4B4AD9E6FC.roa (hash: V8tXop4xNSLK7NTMuObTNFw9mcHKdpwbwIJqeSi9teo=) 8: 6399788A69BA11EE9D71534A4AD9E6FC.roa (hash: kaAHuzndBPzeMjc2nNN3ZcTB7Ew41AHipGqkh1wKLvg=) 9: C7D92E1869B911EE953F70484AD9E6FC.roa (hash: SdAbuipwR7EHxw/Hbwbw2PDVH2wv4MuQ83A/IxBI9GQ=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 04 Jul 2025 04:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F366CE6FAF, serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087 Validity Not Before: Jul 2 04:04:58 2025 GMT Not After : Jul 4 04:04:58 2025 GMT Subject: CN=6864afeb-d5a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d8:05:ec:bc:1b:db:6f:87:c8:d6:6c:54:6c: fe:32:a3:5e:5b:55:4c:fb:a3:a4:58:80:8c:32:c4: ca:93:76:25:2a:eb:8f:10:e8:7c:52:f7:57:85:f8: d7:99:90:c9:ff:ed:59:81:82:fb:dc:fb:60:b1:a5: 91:63:23:07:98:2a:2a:4a:e2:f0:92:b8:4d:9c:f5: 47:81:e8:c6:04:79:ea:8e:b9:7f:d9:e9:b5:1a:1d: d1:ec:d2:5b:27:02:b5:ae:7a:0f:33:43:71:a6:06: 50:b1:3a:07:a7:f1:85:67:92:28:b9:0e:7f:06:4a: 07:09:a0:7d:47:e5:d0:46:e3:42:2f:c6:4e:69:3e: dc:95:d0:e2:91:b2:92:e5:1c:26:c6:4f:46:45:7e: f9:0a:40:03:d2:17:10:38:0f:58:fe:52:0c:3b:26: 10:73:1a:27:7d:5c:14:6c:54:97:ee:b3:3d:05:02: 35:20:b7:b9:5b:0a:8a:f4:f2:af:52:33:20:46:bd: 97:f2:c6:d7:3c:96:f9:52:a0:9b:9a:2c:28:d3:1a: a2:df:b7:63:f6:13:75:3d:87:87:40:b1:8d:d7:25: 4b:4d:e2:f5:b9:cc:72:85:c0:fb:55:bf:e9:9e:fa: e6:78:5b:c0:a6:21:fd:d4:39:9f:8f:f5:1b:c9:01: 36:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E0:F4:5B:54:86:AC:8D:86:1B:B6:6B:E6:7E:F1:3B:37:5A:74:67 X509v3 Authority Key Identifier: keyid:2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3c:48:95:db:b6:fc:be:b8:c1:23:c2:b0:21:bd:02:4c:31: 35:c7:98:9a:35:1b:a2:68:2b:9d:82:c5:e2:b8:8e:bf:b4:c1: 63:fd:f4:ba:6f:21:8e:58:7d:4f:a6:28:ee:28:20:e8:8e:c1: a0:fe:30:62:66:d1:02:f9:4f:62:43:f0:b8:39:6f:19:60:42: f0:59:e5:58:be:6a:2b:28:18:28:7b:f5:11:cf:40:9d:32:f3: e3:0f:f5:75:b7:46:66:f9:1d:a5:d6:d0:b7:80:b2:24:af:ea: 38:6f:cd:3c:2f:34:63:e8:31:db:63:f8:17:d1:9f:ca:d1:79: 2a:94:ac:12:ea:02:17:10:a1:df:53:ba:03:df:ae:34:1f:8e: 00:f5:bf:b4:c8:19:7c:ad:5b:a6:c7:7e:5d:88:40:c5:8f:9f: 2f:9c:b2:25:27:40:67:4a:32:f5:50:f3:85:98:d6:a0:74:21: 37:34:8b:b6:c2:fb:a6:a5:71:f3:a2:27:56:64:fc:03:96:b8: 2f:6e:34:dd:59:a1:9b:c2:0d:d3:4e:3c:d7:a2:34:3b:64:1e: 22:1f:26:90:cd:24:40:6d:f8:4c:dc:a5:c2:5b:c4:df:42:cb: e7:a3:2c:4a:24:41:39:df:e1:25:ae:bb:05:31:5e:1c:a2:21: d8:2c:55:ad -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NkNFNkZBRjExMC8GA1UEBRMoMkE3Q0VFNzkxODJCQjg1OTFCQjEzNUREQkZCQkVF OTRDMURGNDA4NzAeFw0yNTA3MDIwNDA0NThaFw0yNTA3MDQwNDA0NThaMBgxFjAU BgNVBAMTDTY4NjRhZmViLWQ1YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDq2AXsvBvbb4fI1mxUbP4yo15bVUz7o6RYgIwyxMqTdiUq648Q6HxS91eF +NeZkMn/7VmBgvvc+2CxpZFjIweYKipK4vCSuE2c9UeB6MYEeeqOuX/Z6bUaHdHs 0lsnArWueg8zQ3GmBlCxOgen8YVnkii5Dn8GSgcJoH1H5dBG40Ivxk5pPtyV0OKR spLlHCbGT0ZFfvkKQAPSFxA4D1j+Ugw7JhBzGid9XBRsVJfusz0FAjUgt7lbCor0 8q9SMyBGvZfyxtc8lvlSoJuaLCjTGqLft2P2E3U9h4dAsY3XJUtN4vW5zHKFwPtV v+me+uZ4W8CmIf3UOZ+P9RvJATZxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUDeD0 W1SGrI2GG7Zr5n7xOzdadGcwHwYDVR0jBBgwFoAUKnzueRgruFkbsTXdv7vulMHf QIcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjZDRTZGL0Q5QTQ2NzZDNjk5QTExRUVCQ0M1RkI2NzRBRDlFNkZDL0tuenVl UmdydUZrYnNUWGR2N3Z1bE1IZlFJYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0tuenVlUmdydUZrYnNUWGR2N3Z1bE1IZlFJYy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NkNFNkYvRDlBNDY3NkM2OTlBMTFFRUJDQzVGQjY3NEFE OUU2RkMvS256dWVSZ3J1Rmtic1RYZHY3dnVsTUhmUUljLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7PEiV27b8vrjBI8KwIb0CTDE1x5ia NRuiaCudgsXiuI6/tMFj/fS6byGOWH1PpijuKCDojsGg/jBiZtEC+U9iQ/C4OW8Z YELwWeVYvmorKBgoe/URz0CdMvPjD/V1t0Zm+R2l1tC3gLIkr+o4b808LzRj6DHb Y/gX0Z/K0XkqlKwS6gIXEKHfU7oD3640H44A9b+0yBl8rVumx35diEDFj58vnLIl J0BnSjL1UPOFmNagdCE3NIu2wvumpXHzoidWZPwDlrgvbjTdWaGbwg3TTjzXojQ7 ZB4iHyaQzSRAbfhM3KXCW8TfQsvnoyxKJEE53+ElrrsFMV4coiHYLFWt -----END CERTIFICATE-----Generated at Wed Jul 2 14:24:13 2025 by rpki-client