$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft File: jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft (raw, json) Hash identifier: RKczwEssTTJa9CBRlwU5VZD90Xj/gfmM89Tbz2A8G58= Subject key identifier: C1:E4:D4:B1:6B:47:36:C6:5D:A0:05:6B:E2:D2:BA:72:2D:AA:B1:96 Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64 Certificate issuer: /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664 Certificate serial: 04CF Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft Manifest number: 04B1 Signing time: Wed 02 Jul 2025 02:58:39 +0000 Manifest this update: Wed 02 Jul 2025 02:58:39 +0000 Manifest next update: Fri 04 Jul 2025 02:58:39 +0000 Files and hashes: 1: jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl (hash: SjJqe8ze5oPwoqVSBa4vd0NAqx0QM87Q4onzyeMQLiE=) 2: 7510A490FBDA11EFA602538E762E951A.roa (hash: K8eoOxbyDzKOVr27RbOhGjO0ujSDpgusioRxfBEGdeg=) 3: 6C4F7098FFA911EF80A256B8762E951A.roa (hash: nLVSz/e6y8EyahDhz46G+ddHGy6xFQEmZ+lSlLJOj1k=) 4: 14D0DD48FCAC11EF8F606291762E951A.roa (hash: We9A0b1twQQd49MjYQiHevJV7RGbH0zGgiiv0BmjU4w=) 5: 34F044FE336D11F0A6FE177FDAE4EC9C.roa (hash: yhXToE/ivhLm4HgJKr6OrdpT7iNJJtMwXlhtqU/6qu4=) 6: 332A33CAFFA911EF84F40CB6762E951A.roa (hash: nAe7SVEbrFBsJsSB2QjjEXejvC3k+OkB22lneTxOJs4=) 7: E9B17964E76511ECB6B242F6F1222468.roa (hash: QX79+PCfVXxj+OGB6vFI/wIK/0K3qU3aoir40/gZdAI=) 8: 565A309AAA4411EE82EC719A775412E6.roa (hash: w+NXlL7WYD4hkFC1Zg/6oqPBSnT10uVKTO9QtVy5wAw=) 9: BEB0D28EFCAA11EF97EC4A88762E951A.roa (hash: jZflyQkEOdvyH7cORlNM6RzxEc6T6GfFgEfB6W779Ik=) 10: E67C4F66FD2A11EFAFF97E57762E951A.roa (hash: 0KEac1L9NXZHhaATxDUbvggLHQuqEfxaMAc1BKGdXv0=) 11: 83013456FCAD11EF87CD979A762E951A.roa (hash: mbSp9RiZ25UX/mkuzNaTIeKIdEAGi8iGWvP9NDqM15M=) 12: FBD8F91C315911ED857E3ED8F1222468.roa (hash: F3tjPa1GVDjVxl63DkFUkmny30YoZBaG3q0D655v1oc=) 13: 6C20E300FCAB11EFA301CF8C762E951A.roa (hash: OvsUXNSmfjEutAwyrB9JnPffvmOpMIjkA04wcKDLKRY=) 14: F0DCA42CFCAA11EF9CB0AF88762E951A.roa (hash: BzJmdF2Js2FoOGSwDan1wfPrzdWX29V5MPNuA8XkzBM=) 15: 731820EAFD6B11EFA5FAAE9C762E951A.roa (hash: WBg3iidspfXKbYNsCa9+4QR22QeQEUUkOPouJHSY0gU=) 16: 84D63AD4FCAC11EFBDC66892762E951A.roa (hash: eiarFVPH9xcpuLJ9GJbS6IkBNStXLIhNVgC/u2KChdQ=) 17: D4C1004CFCAC11EF87CD1196762E951A.roa (hash: fLCcmeTVgTEV53OJny1Gldrpxh7k8xccoM8fDP287hI=) 18: 5673440CFCAC11EF9614E491762E951A.roa (hash: 6r9fkhk67fd1QL6JR1kRn7YKpBT/BIiBUWKwgxbcGDI=) 19: A7A6264AFCAD11EF8068089B762E951A.roa (hash: rW7LzojMuUG5spBMNnlWIM3kxFSqz8o4h8U+vR8ivoI=) 20: 03A4356EFCAD11EF82317896762E951A.roa (hash: qhNGvd3D7vHMLKqczxc5ocVwafHWZgDyr7UqLit5iMA=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 04 Jul 2025 02:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1231 (0x4cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36BC80AAF, serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664 Validity Not Before: Jul 2 02:58:39 2025 GMT Not After : Jul 4 02:58:39 2025 GMT Subject: CN=6864a05f-53f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:67:dc:64:7d:f9:ce:a1:d4:4d:93:3c:7d: 8e:f1:16:9c:26:63:2d:1d:bc:e4:c9:83:f2:51:be: 8c:1c:9d:98:08:af:1e:f9:39:57:34:4f:c6:26:73: 66:c8:f4:10:60:e5:00:e5:6f:02:d6:36:f0:f7:c0: da:3c:8b:05:ad:af:3c:9f:93:28:17:73:ce:5d:dd: d3:fc:67:f9:0e:6a:3c:05:a8:6f:81:fe:7a:cf:4e: 86:52:7e:29:67:0d:83:bf:3f:a3:69:f0:94:ee:68: e9:f7:19:a7:e5:76:86:c9:a3:bb:f7:4b:5a:71:35: 66:da:96:77:ab:b7:2b:8f:b6:38:d8:56:d6:3c:cb: bd:37:a3:d5:6e:07:ef:99:05:b3:c8:37:c2:30:16: b4:bb:d7:0d:35:e4:8b:c7:79:65:51:1b:d0:ff:32: bf:3b:20:c7:a7:28:48:b0:eb:60:5d:df:27:a9:9e: 73:e8:1f:b9:15:bc:80:c7:fc:b1:16:42:d6:1c:cf: 42:75:bd:ab:43:9f:c2:78:26:19:08:8a:93:06:cc: 74:82:55:3e:4c:c3:59:30:1c:40:a1:70:26:4d:0c: 13:d5:7a:88:f2:03:39:3b:17:a7:b2:63:3f:ce:29: 08:74:88:d5:00:ec:ea:48:c7:df:76:c9:3b:00:0a: 1e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E4:D4:B1:6B:47:36:C6:5D:A0:05:6B:E2:D2:BA:72:2D:AA:B1:96 X509v3 Authority Key Identifier: keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e3:f9:ca:95:e8:4d:66:39:53:8f:7c:e9:d4:f1:a9:e0:31: bf:ec:bd:3f:36:05:e5:2d:4b:7c:94:a2:37:69:d1:91:d4:c3: 07:4b:6e:c8:97:be:75:cb:8e:b1:20:f5:32:07:fb:0a:c8:d5: 4f:e1:7e:f9:a5:84:75:f7:7d:3a:06:b3:82:03:dd:d2:12:aa: 76:ad:ad:85:68:ec:ba:b0:0e:2c:fe:35:58:e5:16:d9:e2:91: a2:71:57:58:72:d9:4a:1b:54:20:a6:aa:78:17:d7:1d:3d:70: cf:8b:af:c9:93:b1:d4:0c:62:af:8c:eb:d0:0d:ef:08:5c:a5: 54:8a:b9:99:5f:62:b1:54:ae:55:8c:05:08:2a:bf:df:fb:0f: 6f:dc:4f:1b:14:4e:ca:81:62:89:45:15:0d:a0:0c:ea:9a:5e: a1:56:d8:de:5b:2a:53:cd:86:5b:92:a7:09:6b:86:31:98:46: 7a:c0:8a:7b:2a:12:5d:07:c6:97:26:cf:7b:fa:f8:00:3e:49: 74:5e:12:fd:74:9f:22:80:c3:1e:4f:ef:a7:19:1b:82:b3:60: 6e:40:b3:48:20:33:4c:60:d8:39:de:fb:f1:4c:2e:9c:fa:3b: 0d:42:51:c3:d7:50:7a:b6:e4:8c:b0:14:24:09:af:48:b7:33: 75:63:8a:ee -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBM8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QkM4MEFBRjExMC8GA1UEBRMoOEM4RjhDRTJBRDU1QjkzNjZCRUM2RURGNDkyQ0Q5 QzE0OThFMDY2NDAeFw0yNTA3MDIwMjU4MzlaFw0yNTA3MDQwMjU4MzlaMBgxFjAU BgNVBAMTDTY4NjRhMDVmLTUzZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCpI2fcZH35zqHUTZM8fY7xFpwmYy0dvOTJg/JRvowcnZgIrx75OVc0T8Ym c2bI9BBg5QDlbwLWNvD3wNo8iwWtrzyfkygXc85d3dP8Z/kOajwFqG+B/nrPToZS filnDYO/P6Np8JTuaOn3GafldobJo7v3S1pxNWbalnertyuPtjjYVtY8y703o9Vu B++ZBbPIN8IwFrS71w015IvHeWVRG9D/Mr87IMenKEiw62Bd3yepnnPoH7kVvIDH /LEWQtYcz0J1vatDn8J4JhkIipMGzHSCVT5Mw1kwHEChcCZNDBPVeojyAzk7F6ey Yz/OKQh0iNUA7OpIx992yTsACh6LAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUweTU sWtHNsZdoAVr4tK6ci2qsZYwHwYDVR0jBBgwFoAUjI+M4q1VuTZr7G7fSSzZwUmO BmQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkJDODBBLzQ3MkVGNUIyRTc1QzExRUM5RDdGOTBEOEYxMjIyNDY4L2pJLU00 cTFWdVRacjdHN2ZTU3pad1VtT0JtUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2pJLU00cTFWdVRacjdHN2ZTU3pad1VtT0JtUS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2QkM4MEEvNDcyRUY1QjJFNzVDMTFFQzlEN0Y5MEQ4RjEy MjI0NjgvakktTTRxMVZ1VFpyN0c3ZlNTelp3VW1PQm1RLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAa4/nKlehNZjlTj3zp1PGp4DG/7L0/ NgXlLUt8lKI3adGR1MMHS27Il751y46xIPUyB/sKyNVP4X75pYR19306BrOCA93S Eqp2ra2FaOy6sA4s/jVY5RbZ4pGicVdYctlKG1Qgpqp4F9cdPXDPi6/Jk7HUDGKv jOvQDe8IXKVUirmZX2KxVK5VjAUIKr/f+w9v3E8bFE7KgWKJRRUNoAzqml6hVtje WypTzYZbkqcJa4YxmEZ6wIp7KhJdB8aXJs97+vgAPkl0XhL9dJ8igMMeT++nGRuC s2BuQLNIIDNMYNg53vvxTC6c+jsNQlHD11B6tuSMsBQkCa9ItzN1Y4ru -----END CERTIFICATE-----Generated at Wed Jul 2 21:53:26 2025 by rpki-client