$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft File: qO-WBRTjNkRNPN43sktm3DnUPRs.mft (raw, json) Hash identifier: v4nxCif0Io/EtXpb/KU27eAjFhRSzW53gL05H4MjDS0= Subject key identifier: 8F:E5:2F:D0:8E:DD:83:76:D2:0F:E6:ED:39:CA:E7:0B:31:ED:30:36 Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Certificate serial: 02AE Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft Manifest number: 029A Signing time: Sat 26 Apr 2025 03:56:18 +0000 Manifest this update: Sat 26 Apr 2025 03:56:17 +0000 Manifest next update: Mon 28 Apr 2025 03:56:17 +0000 Files and hashes: 1: qO-WBRTjNkRNPN43sktm3DnUPRs.crl (hash: DnrhI79iJJgcSv3ZZfqHMGxq1xXRHEpE081D47FfGuQ=) 2: C64BDF325B8611EE8F5917154AD9E6FC.roa (hash: lOfMw6yYmupoBGzZG06JxE7nkGYN0SjR1YBL+6yU110=) 3: 221DE36C5B7F11EEBAA0307C4AD9E6FC.roa (hash: akgSyzvUhBZdD/Jo/1snS9zDQnQhIY/z4b5eUssk1L4=) 4: 3FC126045B7F11EE91B3797C4AD9E6FC.roa (hash: B4Jxb4zuiNxx8ARYO+8FuXUu5CFHZJCjPVqFobOB2EU=) 5: F592AE225B7E11EEAAD8A37B4AD9E6FC.roa (hash: H2+/hMWhZrQQ/v+xp+P99me7GUvAhaEZLEIOvuDJ8+o=) 6: 9389DEB25B7E11EE85FB5A794AD9E6FC.roa (hash: saW9gDDU1fU/ss5E5QByOp+7T1wbc1vVgpJ7XS+gk+s=) 7: 39E85D245B7F11EE90195D7C4AD9E6FC.roa (hash: eHbXQ/7kild+PjHeBFmSGxlAnlG3pi2uyC9o63m5Mio=) 8: 44122BBE5B7E11EEA5C359784AD9E6FC.roa (hash: dlLpBI0Us25zgjOKkdJouRreKgFknaWvSBpHKXaHN4Q=) 9: 0DDE14645B8711EEBE2DF3154AD9E6FC.roa (hash: OVYm5oOpe8XlJOHUYg0R0oIytfPmlhVRgGeohPVoeGg=) 10: E29E1C625B7D11EEAFF513774AD9E6FC.roa (hash: cL6yXVTdN5LFRK/8lI56JvUwQ8huIMxP3ArtUJsfAsg=) 11: 0DB547A45B7E11EE95F5E0774AD9E6FC.roa (hash: sgLUjm9KT8NBSGsfPuF7zb59LXdnTNhjWZlBuJluY4o=) 12: 82BE0D345B8711EE8AF170174AD9E6FC.roa (hash: du0kSdCk2tSzKNVUZIxuV5z/5Bcr0/T6HJ/NasAIv4s=) 13: 673167545B7E11EE98EEBD784AD9E6FC.roa (hash: adqbPWSj3qJmhRpUh3DUEWmWfDKPs4YfwC9ZlFS5ias=) 14: A97AA9E05B7E11EEAD5E8F794AD9E6FC.roa (hash: 3NkJ+hNEcmyOZzaQCsy/+Ozh2yGmiiWLNtnnqsmfG2I=) 15: EFB2EA005B8611EEB1C27E154AD9E6FC.roa (hash: ArKkYMPjrZ4ijgIQyF9Kcy4ua9ozHX8IBDIWFIk7DdU=) 16: BBA7D8A05B8711EEA5880E184AD9E6FC.roa (hash: NwbjXk0kj8eY+sbmyk9mA7z7P4Od2Lqrhnl5SE+949A=) 17: 7D84FCC85B7E11EE930F05794AD9E6FC.roa (hash: LbVSQZqmCHBXF80jfRgZ632p1CiqtMRJRyKOIJ1fwIY=) 18: 5A3685F85B7D11EEB4B9A0754AD9E6FC.roa (hash: hua4m2v20w0RdcluLq3SvMVi3aYeRg47OfgA9wTRs3E=) 19: D6AA10E05B7E11EE9B32467A4AD9E6FC.roa (hash: RAafA0ML5VlgZ60Y1uxp4EowWyBnwvs0LOD/pOddd5E=) 20: 9FF8CF2E5B8711EE9F40A5174AD9E6FC.roa (hash: lG9MW9PGMEKdmiEYPlQxLtvMK2I/+bgWEhfhck5fvqA=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 28 Apr 2025 00:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3668CFEAF, serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Validity Not Before: Apr 26 03:56:17 2025 GMT Not After : Apr 28 03:56:17 2025 GMT Subject: CN=680c5962-4686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b9:cd:93:e7:5a:b4:48:73:ba:5f:e5:4e:c2: e1:00:69:0e:cb:fb:ac:be:8d:0b:b3:77:14:c7:f8: 0f:70:3c:ca:6d:bb:91:e7:1c:ef:45:30:ed:3b:0c: 55:42:f4:3e:75:d9:be:5d:e6:11:37:69:05:38:4a: a2:06:67:c6:65:25:19:fc:5b:a7:95:6a:86:0d:0b: 18:dc:55:7b:5e:85:2c:5c:3c:ad:0b:42:ab:c6:db: 17:f2:79:0d:5d:66:9d:3a:80:d7:6e:c8:be:18:6c: 02:a3:71:99:ae:fc:97:c1:dc:cf:a0:b4:e1:6a:d8: c0:d7:23:5a:32:5e:4a:e8:76:ec:dc:b1:78:57:7b: 56:46:85:71:d1:56:3e:dc:37:a2:a2:e2:51:59:6b: ab:88:63:df:90:3d:b4:06:ff:cf:d8:f9:22:a0:a0: c9:48:49:ad:73:7c:1c:b0:94:80:1f:d5:d2:54:93: 53:cc:0c:4f:3f:95:49:8f:e0:5d:46:bf:a4:6c:3a: de:ff:a9:36:2c:ca:3b:be:61:5b:f3:2a:93:5f:00: b9:f9:1c:74:c4:e0:e9:d9:ed:d8:bb:e4:c7:53:70: 74:e2:fc:60:9c:96:0a:2c:90:f2:86:90:36:69:99: 88:6d:32:2b:06:51:c8:30:33:d1:1a:c7:68:b1:6d: c8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E5:2F:D0:8E:DD:83:76:D2:0F:E6:ED:39:CA:E7:0B:31:ED:30:36 X509v3 Authority Key Identifier: keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:63:f4:16:43:fb:d2:65:51:56:62:1b:b8:37:5e:b7:29:f3: 68:97:a3:fa:63:40:90:f5:e6:12:c4:53:c3:d0:38:ae:87:82: c1:5d:03:01:6a:a7:7f:de:aa:24:72:bb:27:dc:c1:e5:f7:c7: 9d:03:96:55:8c:ce:26:e2:b8:77:34:27:21:28:42:ff:e3:ea: 8b:b1:71:13:d7:17:ac:41:27:7b:fe:10:e0:01:fe:5a:c2:0f: 14:49:99:c7:75:74:70:8b:d0:45:fd:4b:0b:ea:5b:3b:cc:29: 28:ba:f7:10:8d:4a:df:0f:bf:37:99:20:19:7f:57:f9:75:64: 97:54:93:21:18:e1:08:a2:f2:91:71:51:db:df:a7:5e:76:69: 09:2a:08:ce:28:1e:cd:43:21:66:ec:af:a5:98:78:5b:18:d7: 5a:f7:2a:ab:69:3a:7e:3b:af:69:30:d1:ab:23:1c:96:4c:5a: c3:81:3d:27:82:5f:fc:57:d0:1c:db:1f:e0:c9:25:ea:47:e7: cb:71:96:f3:94:63:1e:b4:49:d1:a7:af:83:69:de:9b:81:31: ae:92:a6:9a:80:49:31:bd:f5:6d:3d:20:16:af:1e:fa:9e:a5: 0a:69:4e:96:d8:ef:47:98:bf:24:57:b3:e2:88:7d:1e:48:1d: da:e4:93:ef -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NjhDRkVBRjExMC8GA1UEBRMoQThFRjk2MDUxNEUzMzY0NDREM0NERTM3QjI0QjY2 REMzOUQ0M0QxQjAeFw0yNTA0MjYwMzU2MTdaFw0yNTA0MjgwMzU2MTdaMBgxFjAU BgNVBAMTDTY4MGM1OTYyLTQ2ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDJuc2T51q0SHO6X+VOwuEAaQ7L+6y+jQuzdxTH+A9wPMptu5HnHO9FMO07 DFVC9D512b5d5hE3aQU4SqIGZ8ZlJRn8W6eVaoYNCxjcVXtehSxcPK0LQqvG2xfy eQ1dZp06gNduyL4YbAKjcZmu/JfB3M+gtOFq2MDXI1oyXkroduzcsXhXe1ZGhXHR Vj7cN6Ki4lFZa6uIY9+QPbQG/8/Y+SKgoMlISa1zfBywlIAf1dJUk1PMDE8/lUmP 4F1Gv6RsOt7/qTYsyju+YVvzKpNfALn5HHTE4OnZ7di75MdTcHTi/GCclgoskPKG kDZpmYhtMisGUcgwM9Eax2ixbcjTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUj+Uv 0I7dg3bSD+btOcrnCzHtMDYwHwYDVR0jBBgwFoAUqO+WBRTjNkRNPN43sktm3DnU PRswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjY4Q0ZFLzk1RUZENzRDMzc1NzExRUVCQjE0MzIxODRBRDlFNkZDL3FPLVdC UlRqTmtSTlBONDNza3RtM0RuVVBScy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3FPLVdCUlRqTmtSTlBONDNza3RtM0RuVVBScy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NjhDRkUvOTVFRkQ3NEMzNzU3MTFFRUJCMTQzMjE4NEFE OUU2RkMvcU8tV0JSVGpOa1JOUE40M3NrdG0zRG5VUFJzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4Y/QWQ/vSZVFWYhu4N163KfNol6P6 Y0CQ9eYSxFPD0Diuh4LBXQMBaqd/3qokcrsn3MHl98edA5ZVjM4m4rh3NCchKEL/ 4+qLsXET1xesQSd7/hDgAf5awg8USZnHdXRwi9BF/UsL6ls7zCkouvcQjUrfD783 mSAZf1f5dWSXVJMhGOEIovKRcVHb36dedmkJKgjOKB7NQyFm7K+lmHhbGNda9yqr aTp+O69pMNGrIxyWTFrDgT0ngl/8V9Ac2x/gySXqR+fLcZbzlGMetEnRp6+Dad6b gTGukqaagEkxvfVtPSAWrx76nqUKaU6W2O9HmL8kV7PiiH0eSB3a5JPv -----END CERTIFICATE-----Generated at Sat Apr 26 06:17:13 2025 by rpki-client on console.sobornost.net