$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft File: aMXkutXc1WSiVidTyay2Mr0ky1A.mft (raw, json) Hash identifier: hW97Qnyzyx5/yx5OgnQKVO5m6SjrExzPhU6cKubAOYU= Subject key identifier: 92:C7:4D:F8:EC:16:B0:32:4D:AF:5E:BF:53:F9:9F:34:97:F5:98:E9 Authority key identifier: 68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50 Certificate issuer: /CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50 Certificate serial: 08AD Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft Manifest number: 089C Signing time: Tue 01 Jul 2025 01:41:31 +0000 Manifest this update: Tue 01 Jul 2025 01:41:31 +0000 Manifest next update: Thu 03 Jul 2025 01:41:31 +0000 Files and hashes: 1: aMXkutXc1WSiVidTyay2Mr0ky1A.crl (hash: tVo06DpM0GH2d/tVcRxlzHpDnCce3sEyMKSPkYWyKkw=) 2: 67CF4D4AC47A11EBAC1DCB2EF8AEA228.roa (hash: itFkoyhCFbkxoKe/6GZZJKhOYtJVGG20wDDeoMWtUpQ=) 3: 51DD5CFA362311EC86345D40D8A014CE.roa (hash: ZOjl1c6p5MEg7MhRsQboW+KWuk6lGFrNRsr8eT5zSuA=) 4: 2E3A1228F14211EB95363E26D8A014CE.roa (hash: vD5KpjCW2oLjrazeJW7vuUKZt8XTsZHweUUc6bDl3m8=) 5: 0668CDBA8ECF11EA92325F27F8AEA228.roa (hash: obmP99ZP4gHqQi9QCtzWh7Wc0rtLRTLbw4IjE5aS9HE=) 6: 7F90265C003411EC9AEFCB7BD8A014CE.roa (hash: Us9bdbPalZ+yx1ibe5L/RTGvBCGXXo3x0b9dZX+Z/FM=) 7: 2A0AF02ED8D711EB93E56C7BF8AEA228.roa (hash: ZQ6oLNCOYoaY+3u19bx5mMnPdr11GM9m4rQK5cGUyGQ=) 8: 5E0FF05A1C8811EC996FCB76D8A014CE.roa (hash: Vk5ASQFgQjjsZEjyJ+X43+pLR30VafAKoJRgMFTM8vk=) 9: 59AB9F46ACB311EA94FB7A5CF8AEA228.roa (hash: M7zBdV0WcI6PFd9tLd94yJGWhV8lnlP02DcFXSG5pCM=) 10: 77F17762ACB511EAB011A45EF8AEA228.roa (hash: 1/STozfAIpnz6GETEBd4lb3u077CE2WkxWA/E9NUlaI=) 11: 83CC39468F0011EA98508558F8AEA228.roa (hash: L5ieRjYiG1OFGX8hr9WtcOwJsazJ2sf4i+jmqBumzYY=) 12: 4D5B7DFA9A9911EAB460C75DF8AEA228.roa (hash: 08HHiOipKJGcq74gZtGxaBA7hKxLZk9ttDnVaGPnEtA=) 13: DA956AF2E91F11EB8EE78B08D8A014CE.roa (hash: yi/kGe9K7bgzzNjuJJ9WkvYPrz9NLiez9H+X0/yDZ1o=) 14: 4F75903E8F9B11EAB3F92A79F8AEA228.roa (hash: 4DXiHxGSCbsyOMNhnwXSRwIzqtdpPeRGAU+Vq8d2Sbo=) 15: BC497164BFC211EB9C90B47DF8AEA228.roa (hash: vShLouUDMlMysq5av2KQKsWgiT2JaBcuHkhVOPxBIWk=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 03 Jul 2025 00:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36DE46FAF, serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50 Validity Not Before: Jul 1 01:41:31 2025 GMT Not After : Jul 3 01:41:31 2025 GMT Subject: CN=68633ccb-030c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f4:87:fc:49:86:ad:d3:d2:17:9e:23:9a:67: 9d:bb:cd:d8:28:8e:07:55:f9:4f:ef:36:96:81:03: 27:58:63:8a:89:32:39:71:46:92:0a:71:82:91:3f: 89:74:d0:d3:ab:a5:27:e5:e3:a7:f7:96:89:66:16: 32:31:09:6d:fe:90:8b:12:95:a8:32:09:d6:00:49: 6d:2e:62:53:fb:de:21:2e:04:8e:86:f5:d0:cc:41: 9a:2e:31:04:4c:80:3e:2e:80:63:13:cb:15:ec:40: 05:c9:30:9d:17:ec:e5:9f:56:09:a9:ec:3b:cc:64: 1c:3f:c1:82:f4:0b:6e:f9:5d:e8:29:ce:2c:7c:ab: 1e:b5:7a:26:1c:fc:c4:16:12:18:a5:2c:ee:c2:19: 55:8f:74:6a:e8:e8:3d:a9:b9:cb:9d:2f:96:87:b5: d6:06:df:3e:1a:ec:30:46:1a:c6:49:c6:45:35:e9: a0:38:fc:29:d5:05:31:52:1d:92:a5:ea:91:56:4f: 77:3b:d3:20:a7:b4:a8:cf:34:de:02:ad:2f:90:57: 6d:cd:0d:7a:ed:67:40:00:e6:bc:b7:9c:88:56:af: 85:b3:fc:c0:f7:43:09:7e:1f:ad:f8:2f:3e:05:30: a5:83:fa:5a:e7:8d:32:19:6e:4e:25:28:f1:3b:fa: f0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C7:4D:F8:EC:16:B0:32:4D:AF:5E:BF:53:F9:9F:34:97:F5:98:E9 X509v3 Authority Key Identifier: keyid:68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:15:8c:19:7a:46:0d:20:c0:08:6f:d7:3e:3f:ff:67:88:ea: fe:f8:f4:db:89:8a:64:8b:0d:bd:7f:32:08:fc:f4:e5:2d:0c: 14:12:36:e0:06:cf:40:31:3d:c2:a0:26:0d:7e:d0:ad:e2:b8: 22:16:4e:a1:d0:5b:25:0f:a5:b1:dd:d8:16:4f:61:87:c6:5e: 84:8b:fd:92:8b:17:a2:ae:d6:b5:d1:7d:ea:2b:17:cc:55:93: 4e:7d:bd:fe:f6:3f:8b:75:19:73:a3:f7:05:bb:1c:46:ff:3f: a5:df:d3:5d:8a:b7:55:5a:37:bf:7d:07:63:4b:f4:fd:48:84: ff:eb:c8:4b:0a:0e:90:19:a7:9b:af:24:75:16:8a:31:7e:b9: 98:3b:c0:70:88:a7:02:f0:6d:fa:c0:e3:ad:27:c8:d0:74:9a: 7f:cf:1c:aa:e8:0f:25:51:84:21:b4:3f:fe:64:ba:19:d9:de: 95:3d:76:de:4b:23:8a:b7:c4:9f:a2:21:b5:99:32:e4:55:0f: a1:8f:79:d8:c5:da:cc:8d:a1:0d:65:75:1d:b6:a6:22:30:5b: cd:f4:3d:69:79:67:c8:45:a8:7a:09:0d:60:13:84:eb:e9:6f: 01:47:6d:1e:6a:5d:e8:e1:66:18:09:47:c7:74:86:f5:bc:03: dd:3b:dc:08 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 REU0NkZBRjExMC8GA1UEBRMoNjhDNUU0QkFENURDRDU2NEEyNTYyNzUzQzlBQ0I2 MzJCRDI0Q0I1MDAeFw0yNTA3MDEwMTQxMzFaFw0yNTA3MDMwMTQxMzFaMBgxFjAU BgNVBAMTDTY4NjMzY2NiLTAzMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCk9If8SYat09IXniOaZ527zdgojgdV+U/vNpaBAydYY4qJMjlxRpIKcYKR P4l00NOrpSfl46f3lolmFjIxCW3+kIsSlagyCdYASW0uYlP73iEuBI6G9dDMQZou MQRMgD4ugGMTyxXsQAXJMJ0X7OWfVgmp7DvMZBw/wYL0C275Xegpzix8qx61eiYc /MQWEhilLO7CGVWPdGro6D2pucudL5aHtdYG3z4a7DBGGsZJxkU16aA4/CnVBTFS HZKl6pFWT3c70yCntKjPNN4CrS+QV23NDXrtZ0AA5ry3nIhWr4Wz/MD3Qwl+H634 Lz4FMKWD+lrnjTIZbk4lKPE7+vAxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUksdN +OwWsDJNr16/U/mfNJf1mOkwHwYDVR0jBBgwFoAUaMXkutXc1WSiVidTyay2Mr0k y1AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkRFNDZGL0VCNDkzNENDRDVGRTExRTk5NTI4MTkzQkY4QUVBMjI4L2FNWGt1 dFhjMVdTaVZpZFR5YXkyTXIwa3kxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2FNWGt1dFhjMVdTaVZpZFR5YXkyTXIwa3kxQS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2REU0NkYvRUI0OTM0Q0NENUZFMTFFOTk1MjgxOTNCRjhB RUEyMjgvYU1Ya3V0WGMxV1NpVmlkVHlheTJNcjBreTFBLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9FYwZekYNIMAIb9c+P/9niOr++PTb iYpkiw29fzII/PTlLQwUEjbgBs9AMT3CoCYNftCt4rgiFk6h0FslD6Wx3dgWT2GH xl6Ei/2Sixeirta10X3qKxfMVZNOfb3+9j+LdRlzo/cFuxxG/z+l39NdirdVWje/ fQdjS/T9SIT/68hLCg6QGaebryR1FooxfrmYO8BwiKcC8G36wOOtJ8jQdJp/zxyq 6A8lUYQhtD/+ZLoZ2d6VPXbeSyOKt8SfoiG1mTLkVQ+hj3nYxdrMjaENZXUdtqYi MFvN9D1peWfIRah6CQ1gE4Tr6W8BR20eal3o4WYYCUfHdIb1vAPdO9wI -----END CERTIFICATE-----Generated at Tue Jul 1 07:38:26 2025 by rpki-client