$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft File: pfCiu4t57dbTfAd63-oIJRTAQg8.mft (raw, json) Hash identifier: SyUF+MRGhRGYouRvEwGk+QQS4p2gi2vMqEKEfxDFskI= Subject key identifier: 78:19:FC:06:1F:C9:99:AC:83:FF:0B:DA:7F:60:02:7C:1F:96:67:0E Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F Certificate issuer: /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Certificate serial: 01B7 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft Manifest number: 01AC Signing time: Mon 12 May 2025 04:28:09 +0000 Manifest this update: Mon 12 May 2025 04:28:08 +0000 Manifest next update: Wed 14 May 2025 04:28:08 +0000 Files and hashes: 1: pfCiu4t57dbTfAd63-oIJRTAQg8.crl (hash: W5ror/XuQwb3BjBze/aEWhe45kI9cNGeHfWEhaEetU0=) 2: 245B6D34FBED11EE8128962C017001B1.roa (hash: TrN9lcQpNeQiZwKFjsOsULheFfvRBy2GwIMFcOXP5rY=) 3: 60986EC6F10E11EEA398F1C8775412E6.roa (hash: UeXyeJMDi2GVx9uEPU+PiWuthmCddMz69n4V0SdxUZY=) 4: 4A3BF0B6E9F711EFB363B759762E951A.roa (hash: qnWjHMa6krZFafky4BYIbSFj8GVyr5kF/yN3x6ht2sE=) 5: 8C5EBF98B18D11EF93764599762E951A.roa (hash: LMCVfxRKPtEUcD+l4fHRZWVAaU9InzZT+jXi3ynNqyQ=) 6: 624DB26AFC1411EEA32C1066017001B1.roa (hash: SAKc0hgZ+mEboWzvP3K7DMfU8rpiR8UT+kWecca89NE=) 7: 9BF619A8FCDC11EE8DA40146017001B1.roa (hash: po7czQ/bhDV7w3+Oz4IVCSJosx6dgGFsaZotpFYiUzU=) 8: ACB83E6242B211EFAFCCE28B762E951A.roa (hash: K3ivQ3+n4zlKylliwe/zTuRovNdpcW712O8vioTYjFg=) 9: A1B5AEEC442811EFA24AB347762E951A.roa (hash: WU/tv+bio89mYf5sL7OB/fhjHoVOLu5YlrkO6ttjHNQ=) 10: 7AFAA29E1F6111EFB0C39B397DDC24C2.roa (hash: e2WypnmRsaISjVRYfT/t99mLnGdtDrlVSL5Ti5URVMc=) 11: 6644E6CC4FE811EFBAAC404B762E951A.roa (hash: 48MYw/CHm3JnjY68hLvq+27NMpxBkJcznllBwP1oCwg=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 14 May 2025 00:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Validity Not Before: May 12 04:28:08 2025 GMT Not After : May 14 04:28:08 2025 GMT Subject: CN=682178d9-d5c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:62:e6:5e:90:f6:3e:19:a9:18:bf:34:23: 67:49:90:f8:03:27:7b:55:02:63:5b:58:4b:30:e1: ab:f5:fd:df:e1:7d:2c:0b:e6:66:47:07:1a:45:94: 07:c1:f8:b8:ee:14:17:ed:33:e1:02:36:21:62:24: 4e:b5:30:2a:3a:e9:d8:79:b8:4f:e2:cd:ce:01:76: 6e:4c:04:5e:de:cb:b2:12:e9:4c:a3:db:09:07:07: 9b:2f:b3:57:51:99:45:f4:f4:8f:3f:ca:d9:a1:e8: 8a:38:f7:09:3d:38:ef:f4:06:63:6a:f4:45:32:36: 53:7c:0e:69:86:0b:da:88:95:f1:57:05:98:af:13: 7c:e3:5c:5b:ed:88:27:e0:73:77:87:6a:83:a7:1f: 12:cd:fe:a8:99:43:f2:c7:59:83:76:a4:e5:c1:fa: 98:34:4b:a1:25:31:65:57:d8:97:75:f4:eb:c8:ad: d1:2e:bb:1d:33:7d:2e:8a:9a:1b:e3:8c:3f:65:76: ac:30:80:c1:d0:76:ae:6c:00:de:3e:72:df:0d:10: 6b:4f:6b:09:bc:e4:d3:26:64:e5:4a:35:97:eb:98: 7e:3a:d3:69:8b:e1:2d:22:38:a4:ce:03:f4:04:bc: 5b:bc:9b:de:ef:39:ae:99:57:7b:2c:4e:b1:93:3b: 54:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:19:FC:06:1F:C9:99:AC:83:FF:0B:DA:7F:60:02:7C:1F:96:67:0E X509v3 Authority Key Identifier: keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:26:d9:28:b6:f3:28:47:1b:c2:28:fb:ed:57:fa:65:bc:24: 5c:21:cf:43:51:26:4d:b6:fc:1e:5c:5b:7f:89:a3:29:f2:2f: 1f:7b:c0:a4:2a:8b:b0:f7:cd:1f:55:b1:d3:30:4a:8a:ed:d9: 0e:67:d6:06:25:75:51:3d:95:c8:b4:f7:5e:c1:2b:44:32:41: 7d:bc:0f:be:dd:5d:7a:a9:98:cf:1e:4f:21:09:9d:a7:27:fa: 98:6e:4c:96:b6:fd:31:85:d3:fa:c8:cf:7e:2d:1b:c3:09:95: 2e:74:05:2a:d1:79:3c:fd:05:fa:1f:f9:5f:d6:34:f3:58:88: 11:11:2f:3b:58:15:25:5c:36:0f:9c:94:00:9a:97:3d:b6:06: 13:ca:22:b0:70:26:4f:c7:df:76:15:d7:ff:b1:d3:eb:79:fa: 73:06:2d:94:cf:b9:24:68:c5:35:12:8f:de:dd:5d:be:8b:e8: cc:c5:3d:a2:11:0e:93:5e:ef:86:a1:67:c1:71:af:b1:98:fb: 95:b6:5d:c0:4f:9d:c6:37:c8:46:0a:b4:ee:b6:4a:01:52:78: 50:81:f7:2a:5d:d6:bc:1e:f9:1a:14:ca:f1:9b:7a:09:a2:78: 14:b4:b7:3a:8d:a6:7c:e1:34:b1:88:11:00:6d:de:4f:3d:2f: 77:c6:ff:e3 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 Q0IxQkVBRjExMC8GA1UEBRMoQTVGMEEyQkI4Qjc5RURENkQzN0MwNzdBREZFQTA4 MjUxNEMwNDIwRjAeFw0yNTA1MTIwNDI4MDhaFw0yNTA1MTQwNDI4MDhaMBgxFjAU BgNVBAMTDTY4MjE3OGQ5LWQ1YzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDHeWLmXpD2PhmpGL80I2dJkPgDJ3tVAmNbWEsw4av1/d/hfSwL5mZHBxpF lAfB+LjuFBftM+ECNiFiJE61MCo66dh5uE/izc4Bdm5MBF7ey7IS6Uyj2wkHB5sv s1dRmUX09I8/ytmh6Io49wk9OO/0BmNq9EUyNlN8DmmGC9qIlfFXBZivE3zjXFvt iCfgc3eHaoOnHxLN/qiZQ/LHWYN2pOXB+pg0S6ElMWVX2Jd19OvIrdEuux0zfS6K mhvjjD9ldqwwgMHQdq5sAN4+ct8NEGtPawm85NMmZOVKNZfrmH4602mL4S0iOKTO A/QEvFu8m97vOa6ZV3ssTrGTO1SPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUeBn8 Bh/JmayD/wvaf2ACfB+WZw4wHwYDVR0jBBgwFoAUpfCiu4t57dbTfAd63+oIJRTA Qg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkNCMUJFL0YzMjI4RTg2RjBFRTExRUVBM0JFMEY1ODc3NTQxMkU2L3BmQ2l1 NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3BmQ2l1NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2Q0IxQkUvRjMyMjhFODZGMEVFMTFFRUEzQkUwRjU4Nzc1 NDEyRTYvcGZDaXU0dDU3ZGJUZkFkNjMtb0lKUlRBUWc4Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADJtkotvMoRxvCKPvtV/plvCRcIc9D USZNtvweXFt/iaMp8i8fe8CkKouw980fVbHTMEqK7dkOZ9YGJXVRPZXItPdewStE MkF9vA++3V16qZjPHk8hCZ2nJ/qYbkyWtv0xhdP6yM9+LRvDCZUudAUq0Xk8/QX6 H/lf1jTzWIgRES87WBUlXDYPnJQAmpc9tgYTyiKwcCZPx992Fdf/sdPrefpzBi2U z7kkaMU1Eo/e3V2+i+jMxT2iEQ6TXu+GoWfBca+xmPuVtl3AT53GN8hGCrTutkoB UnhQgfcqXda8HvkaFMrxm3oJongUtLc6jaZ84TSxiBEAbd5PPS93xv/j -----END CERTIFICATE-----Generated at Mon May 12 22:47:33 2025 by rpki-client