$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft File: H025rGtjEIoZvc2-7P9EmELI1qA.mft (raw, json) Hash identifier: 2k3dcOixszMQdjkNRKYtdWUdfM/6kiGv8LiWUJ0Tub0= Subject key identifier: 76:76:BE:2D:28:DA:E4:09:99:A8:32:BF:17:EF:09:5C:CC:E3:FF:00 Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0 Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0 Certificate serial: 0600 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft Manifest number: 05E8 Signing time: Wed 02 Jul 2025 02:26:03 +0000 Manifest this update: Wed 02 Jul 2025 02:26:02 +0000 Manifest next update: Fri 04 Jul 2025 02:26:02 +0000 Files and hashes: 1: H025rGtjEIoZvc2-7P9EmELI1qA.crl (hash: 5xDows9bSRdS7qcp5hbJvLj0MrrxgERVGTXGfJszYUo=) 2: 147022E0FF7811EF8AD31A7F762E951A.roa (hash: qYTfJITsVD5T5eimpEou1GQGKMzGQHZktsprbHqNuAg=) 3: 97E5095A63C011EF90B900AC762E951A.roa (hash: CHhNHwLMIMRB1HS45x0TZaQ8HwPIwiq6phsmJWqlNls=) 4: A4A1D2764B2511EF8EF8344D762E951A.roa (hash: 1LENRmO0LraUT6L3MliWDe3/LJksiV6Jf6oYUUqLkKg=) 5: 37B83E60FFEE11EFABEA6E81762E951A.roa (hash: gsvCvW76OaOtF8689d8WlWC5LaBRhvA+SlkfDprHioM=) 6: E631AAE263E211EFB8CD0280762E951A.roa (hash: XSoqhxLLsPMFAUnlaR/flj6HqH5kA2geBpaO4zUAc7M=) 7: 78DBB3A8509111EE8C794A224AD9E6FC.roa (hash: SDX6NV8iUbdSzDkDOEULuuCRJop7B8rmcDLu1uSO9fs=) 8: DB5852DAF85D11EC930D6BE8F1222468.roa (hash: 24EK8b+p2r7qpQuA2QKiuCsydz+C8t9Qpt7D1suQdos=) 9: 0EB33C3E515B11ED8AE4D0AAF1222468.roa (hash: eiq5eNdm8hOD/A+aOoYrfS2hurAaCz5anYykVp73ybM=) 10: 873E69A426D411EE808251234AD9E6FC.roa (hash: aoo+0TPZ+18QyH80oIAYV8B61S0zAuLxyHBVzKd8FOQ=) 11: 0323315A4EB811F084FC41D3DAE4EC9C.roa (hash: cPuBysMNDw4xZiHYj3lZqWAcLVHha62uoIAKd7pImOg=) 12: 455DB88A63C011EF901665A8762E951A.roa (hash: pGHG04rI1V24GpX027/GUmlPC9Q173BRWV0hc0ib0ko=) 13: DBFE937C426511EEBE348D774AD9E6FC.roa (hash: QIaZqhKkN8RZ2TMX3IFJAuphOSd06o9Ok298FA+iNs4=) 14: BBDB457C50B211ED936AB1EFF1222468.roa (hash: Ic3/YAN//xfDApEXJkLHl3ajCQB8DF7eTF+JzdLiPrw=) 15: CBA17CF8509111EEB65831234AD9E6FC.roa (hash: wP6aKsEiYvGLq91LUKac5Hf0WJB6D/C/9SQUe8eJUqs=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 04 Jul 2025 02:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1536 (0x600) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36960E7AF, serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0 Validity Not Before: Jul 2 02:26:02 2025 GMT Not After : Jul 4 02:26:02 2025 GMT Subject: CN=686498bb-2cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:76:4c:34:94:aa:ee:89:37:3d:6f:fd:73:96: 75:5a:d9:4b:d3:35:bc:e2:52:a5:40:6a:d6:de:73: ba:58:64:69:5f:c4:85:ff:05:66:70:e6:49:6e:0c: 9d:7f:b1:4a:78:1d:51:f7:8a:24:6a:f1:9b:b8:7f: 77:2c:51:21:4b:70:3e:ee:86:d1:b0:f0:df:a4:7d: bd:ce:eb:6f:f9:81:3a:8c:cb:6a:a9:f3:c3:1e:1c: 68:73:0f:a4:40:4f:d6:3b:78:c7:c1:4a:16:25:0b: 51:57:f3:1e:e1:62:d2:52:b5:64:76:b6:ee:e4:27: 44:10:e1:75:1f:dc:d5:ac:b9:d8:08:0e:ef:b6:52: 51:97:e4:38:b3:50:13:b4:80:ab:90:10:25:4f:e1: 7d:20:fa:67:0b:06:ee:c7:59:3b:de:3f:97:58:80: 08:8d:5f:89:91:78:17:6f:9a:46:8f:7e:11:56:bc: 98:1d:77:9c:6d:a3:26:24:e2:87:d2:dc:47:c6:ca: 62:50:2b:64:ed:27:b2:0f:16:20:87:ee:73:97:e9: 96:95:0e:0d:fc:d9:c8:6b:86:e4:78:08:09:53:fb: 58:62:8f:12:59:25:31:4d:71:ee:84:2f:d8:c3:eb: 41:bc:07:86:a1:0a:96:93:d4:78:0e:f8:23:56:2b: ed:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:76:BE:2D:28:DA:E4:09:99:A8:32:BF:17:EF:09:5C:CC:E3:FF:00 X509v3 Authority Key Identifier: keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:c5:8a:e4:33:95:36:c3:0d:9e:09:65:10:36:47:96:ff:a6: e8:75:4a:5b:ff:1d:b1:0e:3f:1f:f3:01:f2:72:3f:4c:84:6f: 05:6b:f9:e8:a5:f1:28:85:b8:a7:52:90:13:d2:4c:27:94:c1: 85:82:e1:d2:19:6f:17:f5:fb:9a:f6:26:08:c9:09:6a:c4:42: f0:ec:2a:9c:a9:50:6c:6d:f0:9d:bb:f2:ae:fe:cb:da:5f:58: 76:09:3e:aa:d4:7b:46:bb:f4:fc:45:71:a2:94:1f:56:18:c7: 83:83:29:1d:56:4f:51:d7:d2:d7:4e:0f:e0:da:10:41:4f:02: 71:87:0a:f7:4a:04:99:e0:70:ab:f6:cc:72:a5:18:41:c3:0d: c3:17:4c:ae:42:33:50:cd:2f:7b:70:e1:38:ef:1d:d8:18:20: 67:5f:a0:9f:d8:6e:26:7f:e2:af:d9:f5:4b:a6:9b:87:61:00: 7d:5e:8b:11:af:9c:54:d1:f3:a6:63:0c:7e:08:56:1d:84:63: 7d:8a:56:dd:28:27:fa:64:25:1b:3e:da:8e:ae:fc:77:74:fc: 07:ab:ff:dc:76:25:a8:75:87:5e:85:74:14:d6:02:cf:17:fa: f9:bd:25:19:be:cf:72:7a:77:a9:8d:91:8f:43:af:9d:46:26: 9a:dd:ae:55 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBgAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 OTYwRTdBRjExMC8GA1UEBRMoMUY0REI5QUM2QjYzMTA4QTE5QkRDREJFRUNGRjQ0 OTg0MkM4RDZBMDAeFw0yNTA3MDIwMjI2MDJaFw0yNTA3MDQwMjI2MDJaMBgxFjAU BgNVBAMTDTY4NjQ5OGJiLTJjZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDJdkw0lKruiTc9b/1zlnVa2UvTNbziUqVAatbec7pYZGlfxIX/BWZw5klu DJ1/sUp4HVH3iiRq8Zu4f3csUSFLcD7uhtGw8N+kfb3O62/5gTqMy2qp88MeHGhz D6RAT9Y7eMfBShYlC1FX8x7hYtJStWR2tu7kJ0QQ4XUf3NWsudgIDu+2UlGX5Diz UBO0gKuQECVP4X0g+mcLBu7HWTveP5dYgAiNX4mReBdvmkaPfhFWvJgdd5xtoyYk 4ofS3EfGymJQK2TtJ7IPFiCH7nOX6ZaVDg382chrhuR4CAlT+1hijxJZJTFNce6E L9jD60G8B4ahCpaT1HgO+CNWK+2NAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUdna+ LSja5AmZqDK/F+8JXMzj/wAwHwYDVR0jBBgwFoAUH025rGtjEIoZvc2+7P9EmELI 1qAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjk2MEU3LzFDMEFFNjNFRUI3NzExRUI4MERFN0MxRUQ4QTAxNENFL0gwMjVy R3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0gwMjVyR3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2OTYwRTcvMUMwQUU2M0VFQjc3MTFFQjgwREU3QzFFRDhB MDE0Q0UvSDAyNXJHdGpFSW9admMyLTdQOUVtRUxJMXFBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxxYrkM5U2ww2eCWUQNkeW/6bodUpb /x2xDj8f8wHycj9MhG8Fa/nopfEohbinUpAT0kwnlMGFguHSGW8X9fua9iYIyQlq xELw7CqcqVBsbfCdu/Ku/svaX1h2CT6q1HtGu/T8RXGilB9WGMeDgykdVk9R19LX Tg/g2hBBTwJxhwr3SgSZ4HCr9sxypRhBww3DF0yuQjNQzS97cOE47x3YGCBnX6Cf 2G4mf+Kv2fVLppuHYQB9XosRr5xU0fOmYwx+CFYdhGN9ilbdKCf6ZCUbPtqOrvx3 dPwHq//cdiWodYdehXQU1gLPF/r5vSUZvs9yenepjZGPQ6+dRiaa3a5V -----END CERTIFICATE-----Generated at Thu Jul 3 00:49:18 2025 by rpki-client