$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft File: mCHIciHScLQv-d2CYEi5ksDg4_g.mft (raw, json) Hash identifier: ykZcDdXFHEUGTCd9BQWeokk3w0AyIueRksgm/0vyxJw= Subject key identifier: 4C:7B:21:A9:71:EE:22:B7:9A:FA:4E:18:DE:2A:CE:E8:F0:04:F9:4F Authority key identifier: 98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8 Certificate issuer: /CN=F36B9F4BAF/serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8 Certificate serial: 08E4 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft Manifest number: 08CD Signing time: Thu 15 May 2025 01:33:36 +0000 Manifest this update: Thu 15 May 2025 01:33:35 +0000 Manifest next update: Sat 17 May 2025 01:33:35 +0000 Files and hashes: 1: mCHIciHScLQv-d2CYEi5ksDg4_g.crl (hash: G7zLIXrhO3tESTvwIE+qs1X6155dxsnLRlGi065tVnU=) 2: 69F6F72E183911EFBF341D4D017001B1.roa (hash: DuMThKY6xBymEy/33KKiiuYHPeaPmPt6u+DXp7D5WjQ=) 3: 20E37D84181E11EF884D5670017001B1.roa (hash: r4JXcPcpV3yHS4MSrJyqmzyEIPekoajFMK2etOSwSmw=) 4: 1B0A9C8E193C11EFA964BD07017001B1.roa (hash: NAP2HUgvz/UnL9IaRYi5mpgMbBqnI4I0duHhEgFfKiU=) 5: F17735F8193B11EFBB9B5707017001B1.roa (hash: rP8+XOS2i6Wv+uX+uRO8DnePWvJsxmp6m/QIOOMttEU=) 6: 01C465AC09B211EDA2B591F4F1222468.roa (hash: 2EpB7RaoJ24NXvT5qfIYQLCMWI8szsFSjFsm/RP0908=) 7: CB4AFBFAFC5311EC9724A380F1222468.roa (hash: 2sFMoTvQJl4L9hfB3Yyl+kk4dzHhxa7IIdirIWzz6+4=) 8: 0D3699EA182011EFB0665C02017001B1.roa (hash: ffLj8neZ8zF5YH02WG3kYbtHmn8I2gcOMC6IWbrZsZ4=) 9: 441AF75E193C11EF8B2A4608017001B1.roa (hash: LBmATIjlAFyVvWTju4PJRcrTlmU1BoTbZcCfdVCkOpk=) 10: 8474E3C0193511EFBBDCF64F017001B1.roa (hash: lD46K/SWIIlyy7r0WqwsbOFMFHdgeEoplVoIisW1eKI=) 11: 2D6EC9D0182F11EF9D7EC8FD007001B1.roa (hash: mZJR8/8heetzC1ByMuN1CwCkJrHPUy6Xi1M3Cz7urKE=) 12: 32C3FF14184C11EFBABCB663017001B1.roa (hash: jVOSrPy6rBmNjgBvmjlpyANo+SgMJVoT9LMIbEspZNM=) 13: 3EC80414193B11EFA814C401017001B1.roa (hash: RwdDWn+rCeNIP2TaM9FNS+HHzJKG99nTcmVTo1KCVzY=) 14: 671080BE182C11EF929AE265017001B1.roa (hash: 26vGSbnaEjAjV9LkmHmC7Z8/mZ5rYbu0rYbbhsdjxk0=) 15: CB965B0C193B11EFBA223A03017001B1.roa (hash: sMbPGMNRNs/HWlVnJHU38gLkDR93KstBJHkGXN3mkos=) 16: 04046444181E11EFAEE9FC6F017001B1.roa (hash: Bmr9RFUMYwMluDn47Xr62rRvVuIPy+J/XTHta98qV6w=) 17: B82002D4F14811ECAF1C02E4F1222468.roa (hash: duitgh3EHDUh0aFzVM+neWLovcHHsxs9PP1LAq5U0+w=) 18: A38114EA193B11EFBFE3D102017001B1.roa (hash: 3OVDDFhyULj89NUgF6NVKjGcWXCi7Vh0V5m2G3pIkUE=) 19: 75F8ADB6193C11EF939DBA08017001B1.roa (hash: 2AwJdyG/BsOF6Nkf1Pa3H+rtG00IJDTE6LVwear3MT0=) 20: AAAD458A09B211EDB6D79EF6F1222468.roa (hash: BidB951Ppl4rHIlEUl9v6erDQdFD3uYk8SZSKLKiU14=) 21: 839545FC193B11EFACD26F02017001B1.roa (hash: czlg8CfEAltZYLywfxFoeA7yscJbiONGYvSH2E6y30A=) 22: 601EE27C193B11EFA08C1D02017001B1.roa (hash: ntBI0CCcAp11C7pv36CUdwbbK/+TRzaLEh5A3QLQq80=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.crl rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 17 May 2025 00:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2276 (0x8e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36B9F4BAF, serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8 Validity Not Before: May 15 01:33:35 2025 GMT Not After : May 17 01:33:35 2025 GMT Subject: CN=68254470-b53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4c:3e:07:b9:bf:bd:d4:6e:e4:ba:41:1c:19: 90:6e:ad:e0:ce:c7:69:74:c0:14:66:25:02:d0:15: d0:41:13:31:1b:ec:21:ec:2c:5e:53:e3:6f:10:18: fc:ab:63:5c:61:ae:31:a7:04:93:27:0d:70:50:e7: 14:fd:45:8e:9f:d2:82:2c:07:f0:9b:84:65:c0:68: 6c:96:58:a2:bc:6b:75:05:a8:e8:d3:d3:34:f7:68: db:f8:32:35:86:b1:41:a0:4e:d3:0a:f3:3d:0f:8c: 49:19:9f:5e:e6:bc:52:f9:72:43:15:56:f8:f8:b9: b7:49:34:e6:04:f9:e9:7b:db:b1:7f:bd:a0:99:6f: e4:51:c5:1e:55:4e:87:b5:3f:d7:b9:54:bf:c6:63: 53:41:8d:6e:e4:61:3b:b8:02:83:56:c5:4f:13:5e: 31:3a:21:2b:78:b4:ca:2a:5f:f8:e9:43:af:26:01: e5:fd:fa:18:7b:bd:90:10:f7:83:11:a4:fc:18:8b: fc:f0:81:78:a1:4d:f3:c0:a9:07:d9:4e:82:b9:16: 49:b0:85:ff:a8:94:7b:0a:ea:ae:fc:28:d5:5d:0c: 5a:ac:81:44:14:e4:2e:3e:68:1c:f3:b4:f4:22:e0: e7:20:9e:a1:72:fd:67:d2:09:4a:00:d8:a9:42:38: 4c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7B:21:A9:71:EE:22:B7:9A:FA:4E:18:DE:2A:CE:E8:F0:04:F9:4F X509v3 Authority Key Identifier: keyid:98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:13:41:d3:54:39:89:ce:23:e1:3b:b5:79:0e:1d:6a:f0:49: 30:41:4b:4b:83:08:14:9d:a4:dc:97:14:4c:c8:0f:06:0a:ce: 58:6c:db:a4:29:31:23:3f:f1:f6:0f:37:a0:7c:3e:80:06:ba: 78:d0:35:89:4b:c9:ce:0f:04:4f:3a:c2:b2:5e:f0:9e:58:26: cb:74:f8:04:40:38:b4:4b:2c:75:58:a7:0d:85:88:9f:7d:b3: 01:69:36:ba:53:2e:43:e8:d0:1e:03:a8:2a:9d:b9:6a:6d:3c: e9:c0:26:da:56:b0:7a:9a:1a:05:bc:b9:66:e6:0f:b8:ac:e8: f0:d0:85:88:2e:78:fd:90:28:c2:ae:a8:7b:4c:34:bd:19:10: c3:b7:a6:ff:96:01:f8:60:34:91:ba:98:bb:f9:81:a8:12:9b: 6a:25:a4:1c:63:dd:96:b3:57:a6:bf:ec:49:6c:fc:0a:47:8d: a6:e8:f9:f3:b5:8c:67:61:9c:2a:fc:af:6b:61:4e:f5:89:bd: 33:72:6c:76:ee:9f:61:d4:8f:43:a0:5f:39:fa:23:0d:17:73: b6:8b:53:61:c0:d8:90:cf:82:0c:ce:2e:0d:2a:87:cc:95:e6: 2a:fc:4e:b5:c6:14:78:f3:66:48:48:28:10:f0:54:2d:52:c3: 5a:0a:89:8b -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCOQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QjlGNEJBRjExMC8GA1UEBRMoOTgyMUM4NzIyMUQyNzBCNDJGRjlERDgyNjA0OEI5 OTJDMEUwRTNGODAeFw0yNTA1MTUwMTMzMzVaFw0yNTA1MTcwMTMzMzVaMBgxFjAU BgNVBAMTDTY4MjU0NDcwLWI1M2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDlTD4Hub+91G7kukEcGZBureDOx2l0wBRmJQLQFdBBEzEb7CHsLF5T428Q GPyrY1xhrjGnBJMnDXBQ5xT9RY6f0oIsB/CbhGXAaGyWWKK8a3UFqOjT0zT3aNv4 MjWGsUGgTtMK8z0PjEkZn17mvFL5ckMVVvj4ubdJNOYE+el727F/vaCZb+RRxR5V Toe1P9e5VL/GY1NBjW7kYTu4AoNWxU8TXjE6ISt4tMoqX/jpQ68mAeX9+hh7vZAQ 94MRpPwYi/zwgXihTfPAqQfZToK5Fkmwhf+olHsK6q78KNVdDFqsgUQU5C4+aBzz tPQi4OcgnqFy/WfSCUoA2KlCOEzTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUTHsh qXHuIrea+k4Y3irO6PAE+U8wHwYDVR0jBBgwFoAUmCHIciHScLQv+d2CYEi5ksDg 4/gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkI5RjRCLzYxQTJFMUEyOERFMDExRTlBQzE0RjYzMkY4QUVBMjI4L21DSElj aUhTY0xRdi1kMkNZRWk1a3NEZzRfZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL21DSEljaUhTY0xRdi1kMkNZRWk1a3NEZzRfZy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QjlGNEIvNjFBMkUxQTI4REUwMTFFOUFDMTRGNjMyRjhB RUEyMjgvbUNISWNpSFNjTFF2LWQyQ1lFaTVrc0RnNF9nLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAlE0HTVDmJziPhO7V5Dh1q8EkwQUtL gwgUnaTclxRMyA8GCs5YbNukKTEjP/H2DzegfD6ABrp40DWJS8nODwRPOsKyXvCe WCbLdPgEQDi0Syx1WKcNhYiffbMBaTa6Uy5D6NAeA6gqnblqbTzpwCbaVrB6mhoF vLlm5g+4rOjw0IWILnj9kCjCrqh7TDS9GRDDt6b/lgH4YDSRupi7+YGoEptqJaQc Y92Ws1emv+xJbPwKR42m6PnztYxnYZwq/K9rYU71ib0zcmx27p9h1I9DoF85+iMN F3O2i1NhwNiQz4IMzi4NKofMleYq/E61xhR482ZISCgQ8FQtUsNaComL -----END CERTIFICATE-----Generated at Thu May 15 10:13:12 2025 by rpki-client