$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft File: I_gUu0fVw67dUQPzb124opvj1x0.mft (raw, json) Hash identifier: nx2bXOL+tdI24+8ujy1agNdQdMgUkrOVpGEizcIn8dg= Subject key identifier: C4:C5:DC:65:A8:FF:E2:38:D9:88:49:1B:13:25:87:FF:77:F6:4B:58 Authority key identifier: 23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D Certificate issuer: /CN=F36D9B5BAF/serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D Certificate serial: 0E9D Authority info access: rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft Manifest number: 0E86 Signing time: Wed 14 May 2025 00:51:25 +0000 Manifest this update: Wed 14 May 2025 00:51:25 +0000 Manifest next update: Fri 16 May 2025 00:51:25 +0000 Files and hashes: 1: I_gUu0fVw67dUQPzb124opvj1x0.crl (hash: p3Pa8R1SGuRNUBN66H81sqtJqyE9E5MVFo7pQYsUaPA=) 2: 86606974028F11E98C883E0FF8AEA228.roa (hash: IsZ6cJV4+0zN9ms5jaDsieqPGhductkQxgMv7qyHTNI=) 3: 9BC8C8C001EA11EDB08796BAF1222468.roa (hash: i8+aHPPl6uhvn/Jq2NkUn53HTH09DtjcbJOz9MgQ1co=) 4: 48577586FE1C11E8BD980782F8AEA228.roa (hash: H3dWHGNGyzufXdXyAcUTICFJNlUoK78HWc23kkq1F/s=) 5: 5F34A6C2DE7D11EBBAC31B64F8AEA228.roa (hash: MWk8EFTOF3/10HYUuFgbnJ/fqlc/s+3SXXavsJ4h6cE=) 6: 3D3E31C6498E11EFBB02DB76762E951A.roa (hash: u0Z0y5U3GM/VfkEEbg/zEJIp4QkqBJm1umtwXpHXzsE=) 7: 132EAD18DE7D11EB86A3C563F8AEA228.roa (hash: iZGBXlM3XPYurzi9+dHJxzDxI/7/keWoCIvY/ASFKFI=) 8: B7C01426FED211E89B120309F8AEA228.roa (hash: Cu6wxRaLD5ODNZaYGqU1rGwfd0FTt/GsL/H9WnzG7Vs=) 9: 36E8B606FE1D11E88DCDCE82F8AEA228.roa (hash: SvO8wCmqFCCs7pvZRw0lkVxnGHmag+waEJa8/soA19E=) 10: 9C9A7614DE7C11EBB1191063F8AEA228.roa (hash: syinLKpAl//f2BEe6KYX31IZj04lDHjk0Tp/mellwQo=) 11: 5BA2465E037F11EDB5F8F0C0F1222468.roa (hash: TV0mQqI15fCBzn5VfeVjormHM3HjavPeVewlRIBDw4I=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 16 May 2025 00:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3741 (0xe9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36D9B5BAF, serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D Validity Not Before: May 14 00:51:25 2025 GMT Not After : May 16 00:51:25 2025 GMT Subject: CN=6823e90d-e2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e3:98:81:b8:e7:7c:91:82:4c:2f:0a:03:e9: 00:ef:44:ee:a8:56:69:2f:c5:f5:cf:30:60:20:40: 70:df:e8:34:b0:de:07:af:c9:73:77:12:1c:aa:ab: ed:f1:2e:af:04:ba:6b:98:f8:8a:7b:9d:be:41:33: d9:c3:da:d7:c6:80:9f:89:05:6c:18:2e:0c:d8:02: aa:b4:39:c5:a3:c0:9a:1e:4c:cc:e3:97:ec:dc:ae: 55:b9:e6:83:f9:f1:83:7c:e3:26:20:5c:0a:58:ac: 48:41:b1:89:d2:33:51:36:11:98:ea:7b:34:9a:d3: 5b:2d:c8:df:23:33:d8:85:71:98:b3:c0:6d:00:cc: d3:88:a5:6c:7b:8d:ed:e8:6f:91:6f:7a:2e:fd:b4: 79:fb:b5:7d:78:ad:6e:0b:a8:e3:72:a6:b9:94:71: a7:32:a7:22:c2:69:60:6a:03:68:b7:86:d0:3a:b0: 98:9f:85:71:5a:e8:9a:54:0d:be:da:67:6a:e7:a7: 4c:1b:18:b6:75:e9:ee:b3:15:a8:eb:41:2f:3f:57: a3:59:3d:7b:d0:f2:7b:09:c6:65:5f:86:af:9e:3e: 30:a1:f9:1e:19:c1:e5:56:c9:e7:cb:44:f8:9e:3d: ff:ab:b6:4b:7e:17:bf:84:24:70:c6:3d:5a:b6:a8: 3f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C5:DC:65:A8:FF:E2:38:D9:88:49:1B:13:25:87:FF:77:F6:4B:58 X509v3 Authority Key Identifier: keyid:23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9b:cd:63:0e:ef:cf:a3:b7:8d:05:92:09:70:4a:c4:59:41: 5f:aa:09:f7:86:6b:2f:ce:56:5d:a7:4e:7b:6b:14:0c:5d:e0: 2c:9d:ce:11:79:99:e2:71:7b:c2:97:99:3b:9f:e7:f7:a9:e6: 21:fd:b1:93:ee:e7:6c:1e:ff:70:72:51:c6:bb:7e:3e:7e:c5: 6e:16:9a:0d:f5:31:70:ea:96:73:71:09:a8:46:71:36:96:cc: f5:11:99:4d:4e:93:70:4a:50:ec:61:fe:af:98:34:95:54:16: 99:99:eb:cb:7a:02:9e:ea:e3:4d:53:ec:43:92:0e:4e:c7:82: 63:60:cf:6a:67:69:b2:0d:c0:e8:be:f6:d2:2e:c7:15:20:84: 34:bb:1a:47:fc:6a:cb:c9:e0:fd:6c:d7:a3:da:b0:21:50:05: d3:f9:6f:29:9a:cf:54:26:f6:f6:7e:84:77:c4:35:7e:27:05: 3e:6e:f0:7d:9b:e5:5d:5f:fd:26:20:cd:57:4c:84:7f:c6:40: c2:93:4a:17:c2:30:a5:4d:2f:1f:f9:c6:d4:12:27:b9:d9:6b: a1:b9:96:da:41:c1:f3:06:2c:ea:51:c9:36:77:86:df:3d:2e: 29:0e:c1:2f:46:c3:6d:71:d4:24:aa:5e:1e:33:6a:c8:5c:7c: 71:b3:21:d5 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDp0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RDlCNUJBRjExMC8GA1UEBRMoMjNGODE0QkI0N0Q1QzNBRURENTEwM0YzNkY1REI4 QTI5QkUzRDcxRDAeFw0yNTA1MTQwMDUxMjVaFw0yNTA1MTYwMDUxMjVaMBgxFjAU BgNVBAMTDTY4MjNlOTBkLWUyZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDT45iBuOd8kYJMLwoD6QDvRO6oVmkvxfXPMGAgQHDf6DSw3gevyXN3Ehyq q+3xLq8EumuY+Ip7nb5BM9nD2tfGgJ+JBWwYLgzYAqq0OcWjwJoeTMzjl+zcrlW5 5oP58YN84yYgXApYrEhBsYnSM1E2EZjqezSa01styN8jM9iFcZizwG0AzNOIpWx7 je3ob5Fvei79tHn7tX14rW4LqONyprmUcacypyLCaWBqA2i3htA6sJifhXFa6JpU Db7aZ2rnp0wbGLZ16e6zFajrQS8/V6NZPXvQ8nsJxmVfhq+ePjCh+R4ZweVWyefL RPiePf+rtkt+F7+EJHDGPVq2qD9lAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUxMXc Zaj/4jjZiEkbEyWH/3f2S1gwHwYDVR0jBBgwFoAUI/gUu0fVw67dUQPzb124opvj 1x0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkQ5QjVCLzlFMUJEMzc4MTM1QTExRTVCNjhENDI4NkY4QUVBMjI4L0lfZ1V1 MGZWdzY3ZFVRUHpiMTI0b3B2ajF4MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0lfZ1V1MGZWdzY3ZFVRUHpiMTI0b3B2ajF4MC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RDlCNUIvOUUxQkQzNzgxMzVBMTFFNUI2OEQ0Mjg2RjhB RUEyMjgvSV9nVXUwZlZ3NjdkVVFQemIxMjRvcHZqMXgwLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+m81jDu/Po7eNBZIJcErEWUFfqgn3 hmsvzlZdp057axQMXeAsnc4ReZnicXvCl5k7n+f3qeYh/bGT7udsHv9wclHGu34+ fsVuFpoN9TFw6pZzcQmoRnE2lsz1EZlNTpNwSlDsYf6vmDSVVBaZmevLegKe6uNN U+xDkg5Ox4JjYM9qZ2myDcDovvbSLscVIIQ0uxpH/GrLyeD9bNej2rAhUAXT+W8p ms9UJvb2foR3xDV+JwU+bvB9m+VdX/0mIM1XTIR/xkDCk0oXwjClTS8f+cbUEie5 2WuhuZbaQcHzBizqUck2d4bfPS4pDsEvRsNtcdQkql4eM2rIXHxxsyHV -----END CERTIFICATE-----Generated at Wed May 14 11:18:55 2025 by rpki-client