$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft File: pfCiu4t57dbTfAd63-oIJRTAQg8.mft (raw, json) Hash identifier: Y3tOfnLbLNyHVzo+TUVRwjhNNIkNwZiG2mR+ZZS12mY= Subject key identifier: 26:9D:3E:D5:98:B3:16:96:61:2A:15:3E:C4:E3:22:99:C9:91:76:86 Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F Certificate issuer: /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Certificate serial: 01F3 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft Manifest number: 01E4 Signing time: Wed 02 Jul 2025 04:28:06 +0000 Manifest this update: Wed 02 Jul 2025 04:28:05 +0000 Manifest next update: Fri 04 Jul 2025 04:28:05 +0000 Files and hashes: 1: pfCiu4t57dbTfAd63-oIJRTAQg8.crl (hash: 6m7wbz4ZhWeMfD9jLnqtECQ+eaum/Pz1TQD91cizXj4=) 2: 245B6D34FBED11EE8128962C017001B1.roa (hash: TrN9lcQpNeQiZwKFjsOsULheFfvRBy2GwIMFcOXP5rY=) 3: 60986EC6F10E11EEA398F1C8775412E6.roa (hash: UeXyeJMDi2GVx9uEPU+PiWuthmCddMz69n4V0SdxUZY=) 4: 22518D92508411F0826E3AF4DAE4EC9C.roa (hash: EF6bTXfWBzzaClQqi7lC/mW1TWW3PpSaQ+RMKUgfCww=) 5: 4A3BF0B6E9F711EFB363B759762E951A.roa (hash: qnWjHMa6krZFafky4BYIbSFj8GVyr5kF/yN3x6ht2sE=) 6: 8C5EBF98B18D11EF93764599762E951A.roa (hash: LMCVfxRKPtEUcD+l4fHRZWVAaU9InzZT+jXi3ynNqyQ=) 7: 624DB26AFC1411EEA32C1066017001B1.roa (hash: SAKc0hgZ+mEboWzvP3K7DMfU8rpiR8UT+kWecca89NE=) 8: 767E76B2405F11F0B14520EADAE4EC9C.roa (hash: Psp54N8Zwbl9ziN2Vbyl63/0vnVM4zrW11s0ypx3pl8=) 9: 9BF619A8FCDC11EE8DA40146017001B1.roa (hash: po7czQ/bhDV7w3+Oz4IVCSJosx6dgGFsaZotpFYiUzU=) 10: 0C6B2666405B11F09F43C8CCDAE4EC9C.roa (hash: /9Ds38E/Nlm7VcSD/FOkPtqxtWfZMJuAf/6Y8lnD5JQ=) 11: ACB83E6242B211EFAFCCE28B762E951A.roa (hash: K3ivQ3+n4zlKylliwe/zTuRovNdpcW712O8vioTYjFg=) 12: A1B5AEEC442811EFA24AB347762E951A.roa (hash: WU/tv+bio89mYf5sL7OB/fhjHoVOLu5YlrkO6ttjHNQ=) 13: 7AFAA29E1F6111EFB0C39B397DDC24C2.roa (hash: e2WypnmRsaISjVRYfT/t99mLnGdtDrlVSL5Ti5URVMc=) 14: 6644E6CC4FE811EFBAAC404B762E951A.roa (hash: 48MYw/CHm3JnjY68hLvq+27NMpxBkJcznllBwP1oCwg=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 04 Jul 2025 04:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F Validity Not Before: Jul 2 04:28:05 2025 GMT Not After : Jul 4 04:28:05 2025 GMT Subject: CN=6864b556-6004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9f:8d:66:ea:b9:23:03:13:db:cf:61:3a:f4: 92:71:45:94:88:a2:4a:f7:7b:31:ae:ce:ee:f9:58: 60:79:b9:ee:87:cb:1e:63:2a:ad:91:26:0b:5a:42: 40:c2:96:5a:5f:dc:7a:86:f3:16:3c:05:44:b4:0e: 29:60:b3:17:2b:7a:2c:77:f3:8d:8b:f6:d5:c0:91: e9:82:de:bf:e8:c3:50:a5:88:28:5b:e6:05:4b:f7: b7:52:be:69:e0:ee:a5:3a:1c:89:4c:f8:bc:ed:f5: 7f:e0:17:62:2c:fa:43:f2:4c:32:c3:41:bb:ae:b8: 62:75:e1:43:15:60:10:98:d4:37:63:75:ee:7f:87: 08:ea:30:cf:e3:74:34:f1:31:9b:35:c1:cf:fa:9c: 9e:d1:2c:f4:52:c9:30:34:c4:00:22:9a:d4:8e:34: 14:b0:bf:4e:9d:58:d6:b8:33:51:94:91:4d:0b:bd: 72:2e:f9:09:67:13:ed:75:aa:68:13:95:98:26:ac: 11:9d:68:ac:07:9a:a5:f0:ba:1b:54:3e:16:27:55: 1c:ea:96:83:8f:9e:07:2e:1e:05:23:f9:d4:2e:c4: 4e:d5:de:0e:2d:d1:a3:22:81:5a:78:5e:8e:52:23: 3b:a9:39:9a:e5:3e:7f:f0:b5:4a:a4:cb:a4:df:93: 28:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9D:3E:D5:98:B3:16:96:61:2A:15:3E:C4:E3:22:99:C9:91:76:86 X509v3 Authority Key Identifier: keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d6:31:49:5d:15:1f:e3:be:b4:03:44:46:ea:35:17:b1:32: 0a:27:11:a2:3d:5b:c4:ab:32:f4:04:31:29:ac:9f:a9:ed:4e: a4:bf:d8:f4:9d:6f:5b:d1:9f:a0:45:e6:b3:53:8d:32:fd:d1: 80:17:a3:4e:5e:4b:d9:dc:d9:30:bf:e7:79:38:1e:66:78:bb: b0:b6:65:6f:f2:82:ee:2f:dc:7e:8a:87:bc:8e:cd:e0:69:5c: 53:ea:4b:79:64:51:1b:da:07:f2:cf:73:7d:43:69:e5:9b:89: cb:97:3b:b4:40:5c:31:e9:da:88:ef:f4:60:4a:15:1e:14:11: ee:5b:29:7e:8f:86:6d:fc:b3:dd:08:f0:7c:03:03:ad:ed:56: 5e:13:34:66:e9:fe:89:2c:06:95:ee:d0:c4:49:80:ba:bf:d3: 7d:40:59:6b:3a:a7:7e:0f:3a:52:2a:3f:8f:1d:41:3f:de:af: 89:28:6d:38:43:18:00:ea:82:27:c9:29:65:c2:1b:e9:6a:dd: 4e:20:7f:db:00:53:bd:88:73:e9:a2:9b:57:4c:03:43:da:16: 5c:a8:e3:94:3a:de:f9:36:b5:75:71:8a:1a:4c:f1:6d:e9:1e: 4f:7b:89:4d:c1:54:bf:41:06:7f:b1:b4:b5:e2:48:21:12:f4: 5a:ec:6e:37 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 Q0IxQkVBRjExMC8GA1UEBRMoQTVGMEEyQkI4Qjc5RURENkQzN0MwNzdBREZFQTA4 MjUxNEMwNDIwRjAeFw0yNTA3MDIwNDI4MDVaFw0yNTA3MDQwNDI4MDVaMBgxFjAU BgNVBAMTDTY4NjRiNTU2LTYwMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQChn41m6rkjAxPbz2E69JJxRZSIokr3ezGuzu75WGB5ue6Hyx5jKq2RJgta QkDCllpf3HqG8xY8BUS0Dilgsxcreix3842L9tXAkemC3r/ow1CliChb5gVL97dS vmng7qU6HIlM+Lzt9X/gF2Is+kPyTDLDQbuuuGJ14UMVYBCY1Ddjde5/hwjqMM/j dDTxMZs1wc/6nJ7RLPRSyTA0xAAimtSONBSwv06dWNa4M1GUkU0LvXIu+QlnE+11 qmgTlZgmrBGdaKwHmqXwuhtUPhYnVRzqloOPngcuHgUj+dQuxE7V3g4t0aMigVp4 Xo5SIzupOZrlPn/wtUqky6Tfkyh7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUJp0+ 1ZizFpZhKhU+xOMimcmRdoYwHwYDVR0jBBgwFoAUpfCiu4t57dbTfAd63+oIJRTA Qg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkNCMUJFL0YzMjI4RTg2RjBFRTExRUVBM0JFMEY1ODc3NTQxMkU2L3BmQ2l1 NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3BmQ2l1NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2Q0IxQkUvRjMyMjhFODZGMEVFMTFFRUEzQkUwRjU4Nzc1 NDEyRTYvcGZDaXU0dDU3ZGJUZkFkNjMtb0lKUlRBUWc4Lm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCd1jFJXRUf4760A0RG6jUXsTIKJxGi PVvEqzL0BDEprJ+p7U6kv9j0nW9b0Z+gReazU40y/dGAF6NOXkvZ3Nkwv+d5OB5m eLuwtmVv8oLuL9x+ioe8js3gaVxT6kt5ZFEb2gfyz3N9Q2nlm4nLlzu0QFwx6dqI 7/RgShUeFBHuWyl+j4Zt/LPdCPB8AwOt7VZeEzRm6f6JLAaV7tDESYC6v9N9QFlr Oqd+DzpSKj+PHUE/3q+JKG04QxgA6oInySllwhvpat1OIH/bAFO9iHPpoptXTAND 2hZcqOOUOt75NrV1cYoaTPFt6R5Pe4lNwVS/QQZ/sbS14kghEvRa7G43 -----END CERTIFICATE-----Generated at Thu Jul 3 01:07:27 2025 by rpki-client