$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft File: l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json) Hash identifier: 1GG6coOqi8NVa9Dk4y6V1BgYu4Mjh+K/aPxHg5Lr9AA= Subject key identifier: 17:91:EF:3C:96:CC:FA:9D:90:26:D0:25:AE:83:EA:40:42:73:47:F1 Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39 Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139 Certificate serial: 06D5 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft Manifest number: 066E Signing time: Wed 07 May 2025 02:12:22 +0000 Manifest this update: Wed 07 May 2025 02:12:21 +0000 Manifest next update: Fri 09 May 2025 02:12:21 +0000 Files and hashes: 1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: n1RpDmcVHMfSyJPjtajwWQhQJKsUdyF/N7i4pQ71O/c=) 2: D08D8404E20911EFB7BBBB72762E951A.roa (hash: mxpQNEEt8eO1xH/mH0CzmPJl+5Qf8WdLQzu0l8F+kl0=) 3: 61E6EBC23A2911EF83088748762E951A.roa (hash: iFBYzRfE/E2YvLoXLa2uiVHfBVaThKSU03QGnik9L4A=) 4: CBA3C1846B7011EFAF3FE084762E951A.roa (hash: pFDrtn8wEhtxFNlu2wmcpGpG41xK4cr84A6LU6JiqYg=) 5: CEA072D8776A11EEA49F007D4AD9E6FC.roa (hash: oG1ErKkSbYpP5X6eq2VOONQIy8u5lFGEO9d6IZTGw04=) 6: 88CC23B4E20911EFAA4FEA71762E951A.roa (hash: qKFGTwFhsiiCCXBqchw56kIQ8Z0gTmXSHl71yzG85Xg=) 7: 12A476563A2911EFA2721E48762E951A.roa (hash: e3V5AAsj+AntU1+tap+GSIMt0rdBfXlp80uPXMWrRDA=) 8: 44B107BE0BBA11F0B7AF8852762E951A.roa (hash: 2lsgDetOxz2tEA/haKTe5N+JmsqBvMbXnhGs3La4Rys=) 9: 985B73F86B7011EFBCFBD082762E951A.roa (hash: rvpp6Kns5e/Pwe/rzVTNBx4KVxZUF1C0Dh+LLpfr9DM=) 10: B03C5936136B11EF9CB7442D017001B1.roa (hash: 8cn480ct0RO7vc/yrd/vQq31HhnmkbbbxOW5UAR4BoE=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 09 May 2025 00:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1749 (0x6d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139 Validity Not Before: May 7 02:12:21 2025 GMT Not After : May 9 02:12:21 2025 GMT Subject: CN=681ac186-0d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:91:e4:e9:1f:02:40:8b:42:df:71:ea:eb:6c: 5b:de:f7:90:12:20:0d:ef:ab:dd:20:b7:45:71:b5: 4f:a7:e3:27:03:fb:6a:8d:a5:a7:80:1c:5b:d4:f8: 39:07:ff:4d:27:31:0d:0a:10:16:56:ba:17:ad:a8: 90:6b:aa:02:fc:0f:dc:b1:26:e9:c4:a9:5d:53:9f: c3:6d:6f:a2:3a:7f:84:80:32:b8:e1:79:c8:bb:d9: 88:15:49:1f:fd:6a:ba:92:07:5f:6d:9f:bd:7f:fa: ca:9c:db:c1:83:fe:e3:25:af:cd:48:fd:d1:2a:ac: 6d:33:4f:1d:6e:11:63:49:7a:4e:0d:37:74:d1:00: 93:41:1d:3e:2b:1f:83:96:01:2a:4a:b6:45:bb:95: ee:7a:ec:0f:13:91:17:6a:3b:77:45:91:58:58:64: 75:97:0e:bf:f0:03:5f:c6:4f:d5:aa:db:1a:6c:bb: 3c:b1:5f:bd:dd:a9:e9:26:69:e6:34:38:8a:80:02: 68:18:80:d7:92:b4:73:90:22:be:e5:ca:49:be:0c: 67:ed:ac:cd:0a:16:45:2d:b8:0d:54:fd:97:21:5e: 73:12:d5:6e:e5:a9:66:1d:0c:39:10:e8:2f:d4:2e: dd:d9:78:13:7d:3d:2a:69:01:cf:fb:61:8e:b6:9d: c2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:91:EF:3C:96:CC:FA:9D:90:26:D0:25:AE:83:EA:40:42:73:47:F1 X509v3 Authority Key Identifier: keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:7f:35:0f:04:58:97:af:e3:b7:44:d1:ac:24:e4:6e:3c:b1: 12:91:83:19:a5:7e:70:02:5a:1d:e0:10:03:74:d7:55:4b:d3: 58:99:37:f5:20:bb:a3:76:8c:51:7c:dc:2b:9a:6d:22:ea:2b: 73:68:b3:dd:3e:23:46:77:69:3e:34:73:35:c9:ee:49:73:f9: 51:01:21:f0:28:ae:86:9a:17:bf:07:c6:f2:09:7b:11:c0:96: 87:67:df:54:22:3e:07:34:69:3c:d0:db:07:c2:df:b4:d6:78: d2:f3:d2:cb:fc:4a:55:ff:03:09:a4:ee:3a:d2:f7:8f:db:a6: 19:f9:db:0e:cd:d6:16:11:19:c4:78:79:30:15:92:c7:2f:28: f9:7c:42:0a:14:c8:bd:34:f0:3d:7e:5b:ea:c3:86:bd:65:6c: d1:60:df:02:f5:e8:da:ea:95:3b:7f:3f:6b:da:cf:89:35:13: 88:8f:ec:de:85:e4:6c:b9:17:33:d9:a0:6d:eb:82:6a:94:2d: 35:13:6b:a9:d1:86:c2:b6:aa:ee:dc:73:dc:1b:4d:16:8a:9d: 7d:bd:40:25:09:23:2f:ed:c8:69:6f:da:22:60:1f:9a:4a:da: 90:53:c6:d3:4f:8f:af:f1:bc:47:9d:d1:84:97:8c:54:03:41: d8:8e:ad:81 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx QkE4MTJGQTEzOTAeFw0yNTA1MDcwMjEyMjFaFw0yNTA1MDkwMjEyMjFaMBgxFjAU BgNVBAMTDTY4MWFjMTg2LTBkMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDDkeTpHwJAi0LfcerrbFve95ASIA3vq90gt0VxtU+n4ycD+2qNpaeAHFvU +DkH/00nMQ0KEBZWuhetqJBrqgL8D9yxJunEqV1Tn8Ntb6I6f4SAMrjheci72YgV SR/9arqSB19tn71/+sqc28GD/uMlr81I/dEqrG0zTx1uEWNJek4NN3TRAJNBHT4r H4OWASpKtkW7le567A8TkRdqO3dFkVhYZHWXDr/wA1/GT9Wq2xpsuzyxX73dqekm aeY0OIqAAmgYgNeStHOQIr7lykm+DGftrM0KFkUtuA1U/ZchXnMS1W7lqWYdDDkQ 6C/ULt3ZeBN9PSppAc/7YY62ncI1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUF5Hv PJbM+p2QJtAlroPqQEJzR/EwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2N0RGQTQvMDhCOEQ4MjA5M0FDMTFFQkIxRDJBODMyRjhB RUEyMjgvbDhrT0pTRXRpSHo1NGQ1djNmVlJ1b0V2b1RrLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASfzUPBFiXr+O3RNGsJORuPLESkYMZ pX5wAlod4BADdNdVS9NYmTf1ILujdoxRfNwrmm0i6itzaLPdPiNGd2k+NHM1ye5J c/lRASHwKK6Gmhe/B8byCXsRwJaHZ99UIj4HNGk80NsHwt+01njS89LL/EpV/wMJ pO460veP26YZ+dsOzdYWERnEeHkwFZLHLyj5fEIKFMi9NPA9flvqw4a9ZWzRYN8C 9eja6pU7fz9r2s+JNROIj+zeheRsuRcz2aBt64JqlC01E2up0YbCtqru3HPcG00W ip19vUAlCSMv7chpb9oiYB+aStqQU8bTT4+v8bxHndGEl4xUA0HYjq2B -----END CERTIFICATE-----Generated at Wed May 7 04:19:13 2025 by rpki-client