$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft File: 3zdkgNzweht60WTeZKPqIV8kdUE.mft (raw, json) Hash identifier: XURxg4Mf46bldLgA8btpXz9kIBzNur7aa61nnO3WA1c= Subject key identifier: EC:6E:ED:23:AD:F1:F5:C8:7B:2C:5A:0C:BD:65:7D:50:B5:59:8F:3C Authority key identifier: DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41 Certificate issuer: /CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541 Certificate serial: 04B7 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft Manifest number: 04A2 Signing time: Sun 28 Apr 2024 01:23:52 +0000 Manifest this update: Sun 28 Apr 2024 01:23:52 +0000 Manifest next update: Tue 30 Apr 2024 01:23:52 +0000 Files and hashes: 1: 3zdkgNzweht60WTeZKPqIV8kdUE.crl (hash: zUU5PHshyi2fwNyQ41bA4hv6jlnmhqN1mUP77RAikTo=) 2: A3EC97C49EAA11EB9431AE42F8AEA228.roa (hash: ITdou6CBdoyIdGztCF0641fr0nfnRn3rDhTSbOWklSg=) 3: BD35823837EA11ED900673C9F1222468.roa (hash: K3b0R/z4frBDGrfF/mCTN3o21drYDHR1MM4314IVJ6A=) 4: 0982C456E24C11ECBCE3B3CEF1222468.roa (hash: rkWlw7/JbGs5TriVgLgAZr85y9glD0YVL8m1Iff/Uxs=) 5: A355EDC8A0DB11EB87F2FC7DF8AEA228.roa (hash: P3+HhN3YnB8DQjtTMhjEMHdHESBMFxFQZlU9EI7263k=) 6: 98E14F269EA711EBBE0A593EF8AEA228.roa (hash: FZ26ySvv3oron31W1iao0hhqAh46EM14zvc7xYlbQnc=) 7: 6E9310449EAA11EBB4E64442F8AEA228.roa (hash: Hv+jSs3D/YdVMnFhqJVvMuYCEdqqrHrk+9Aqx/UNgKo=) 8: C7ECC700714111ED8827C5E0F1222468.roa (hash: W6gLMNJRZ7K5rBGmlnWlV3y7BTYUlYaagswgafcBbHM=) 9: B0A72E82BFAD11ECBB31F3D65A40D577.roa (hash: vPmLIix5cxvVmhxpbkYB4/qDa0zKQvjG6CoH3d5Eq74=) 10: EC17DAD29EA911EBA0639941F8AEA228.roa (hash: tmy+9p0VWiMmZWA0QRZ2fgoauFE3Y6jS2hlQpUun5VU=) 11: 806F60A68EA811EEB351189F7D84E21B.roa (hash: NJlx9u+oJuJrEXnYDPQ5xdPQwiaXnmhnYC8axpDUM3s=) 12: 1B0C20009EAA11EB9740C941F8AEA228.roa (hash: 3XWadNjbvuaIh9S98dtVe+4vXm4B+aC8LiE6ycenb00=) 13: 09618552624A11EC8BFCB8A85A40D577.roa (hash: FIOUTy5cy2KzouDMbv2WtQevYzQleIp785GheY40Njk=) 14: 3FC1A89C791111EC8AF442855A40D577.roa (hash: KTULHI880xtCGIU0AMDedXoG0QU7sh0kYIcf5dcFCks=) 15: 884C0C72D2BD11ED8DC9AFA4F1222468.roa (hash: 2tRYYZYXesgnA4Rq+EJeXLYkWIBNCFi1xtzvwofm52c=) 16: 8BDFF64E9EAA11EB9E498842F8AEA228.roa (hash: zV3obduva5V+wbQ0DLEaMrifvrDZUFDKELgGrlIfqWQ=) 17: 32F7F2FC9EAA11EB97EBF441F8AEA228.roa (hash: TOFg8z8/QllUB8rjCBN0BMuQMzI8dKWFP0PwxmRO42c=) 18: 50E626B29EAA11EB86172E42F8AEA228.roa (hash: mLDh441cHpoJvemUeR9tMVJFEiDMnH7uLyDeQGJi6ek=) 19: 365C8E5857FA11ECA60EBEB35A40D577.roa (hash: wOGfAQ9Pv53mToR0ZnCKbUzeq4qbARxxk+1x7WlPnk8=) 20: 3D415C420CC911EDBA4FEBC8F1222468.roa (hash: h2cyYPdvqsKecbOgrvnDc2rdhf3n2mu1oU/CKpdb2TY=) 21: BB6D0B4EA15111EDB90237D8F1222468.roa (hash: RXFTH7COLNat1EWyJGa03bPPYwNChNlTVBL4I7XF06A=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 30 Apr 2024 00:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1207 (0x4b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541 Validity Not Before: Apr 28 01:23:52 2024 GMT Not After : Apr 30 01:23:52 2024 GMT Subject: CN=662da528-e1c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:31:27:23:d0:86:3a:5d:42:4f:db:14:4f: f9:2b:2d:d1:c2:26:64:29:65:b4:c4:b4:99:84:96: b9:df:24:0f:29:3e:e1:af:88:f6:a2:2e:6a:48:fa: ef:f7:6f:f7:a0:9c:07:25:ad:f4:00:cc:3c:d2:cc: ed:56:35:0d:54:ae:9d:5b:79:cc:e1:74:0a:f6:5d: 89:13:ac:4b:8e:bb:9a:89:48:d7:43:74:62:4b:c8: 16:bb:07:44:65:d9:ed:e5:01:ef:0f:70:cd:c6:5d: 3b:14:e7:47:08:80:3c:19:7c:34:aa:6a:df:07:a6: 59:77:0e:67:f8:0e:48:56:3a:cf:95:5d:fe:ae:6a: 15:bd:43:4b:ea:0d:b4:9f:c3:ae:f7:33:e4:cd:48: 40:a1:03:ff:15:b8:3f:ea:79:5d:9a:52:f9:38:de: e6:89:50:df:74:78:8b:92:a3:76:0c:31:60:0c:0f: aa:e8:1a:ff:fc:bb:2c:80:ca:a6:d0:e1:73:8e:65: 20:fd:ff:21:53:f2:40:1a:9d:eb:33:e7:fd:be:3e: 4e:6b:09:67:e4:fb:32:43:37:c2:b9:7d:3c:a4:54: 09:ad:db:89:bc:c0:db:88:72:e5:ff:a1:4d:b8:a6: 51:a3:d5:98:e5:f2:60:a7:fd:94:f1:8d:be:d6:86: ac:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6E:ED:23:AD:F1:F5:C8:7B:2C:5A:0C:BD:65:7D:50:B5:59:8F:3C X509v3 Authority Key Identifier: keyid:DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:58:0a:6e:7a:97:bc:22:f4:f6:8b:36:24:8c:be:f5:f8:94: 37:1b:f3:87:eb:4a:ba:94:d5:db:6e:ff:0c:9c:4c:bc:09:f0: e2:59:c8:e5:90:9c:51:00:77:b6:06:43:ea:a0:25:5f:30:4f: 08:0c:40:9b:5b:02:05:9b:30:9f:5c:d0:da:87:6b:b8:2f:97: 22:bb:8a:eb:38:ad:81:c6:62:22:4b:27:ef:2d:c8:3c:45:ee: 41:db:50:be:f5:18:c5:52:c1:5c:72:2f:80:6d:1b:77:82:dc: d2:f4:2a:79:fc:55:63:bb:2e:35:94:1f:69:e7:bd:4e:52:65: 98:10:e8:32:d5:c9:9b:9c:4d:99:f4:c6:62:58:98:3b:0a:f7: 95:1c:fc:08:2b:6e:93:5d:f1:32:09:cc:2d:7f:8f:18:ed:68: a6:62:c4:8b:83:76:3f:76:db:8d:79:bd:37:7b:77:c1:88:f3: 73:32:04:3b:e2:ce:07:94:af:04:6a:d3:8a:d4:9b:cd:05:2e: d5:30:22:55:62:bf:db:f5:7f:fe:6d:7c:6a:29:2c:59:50:01: 30:90:a0:10:65:56:4a:12:e9:d1:7d:1e:1d:c2:67:05:69:d2: d7:cb:4b:98:4a:29:be:80:84:42:96:5b:8f:b4:8e:8f:7f:a9: b9:63:bb:93 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBLcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MkI4QThBRjExMC8GA1UEBRMoREYzNzY0ODBEQ0YwN0ExQjdBRDE2NERFNjRBM0VB MjE1RjI0NzU0MTAeFw0yNDA0MjgwMTIzNTJaFw0yNDA0MzAwMTIzNTJaMBgxFjAU BgNVBAMTDTY2MmRhNTI4LWUxYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC7dDEnI9CGOl1CT9sUT/krLdHCJmQpZbTEtJmElrnfJA8pPuGviPaiLmpI +u/3b/egnAclrfQAzDzSzO1WNQ1Urp1beczhdAr2XYkTrEuOu5qJSNdDdGJLyBa7 B0Rl2e3lAe8PcM3GXTsU50cIgDwZfDSqat8Hpll3Dmf4DkhWOs+VXf6uahW9Q0vq DbSfw673M+TNSEChA/8VuD/qeV2aUvk43uaJUN90eIuSo3YMMWAMD6roGv/8uyyA yqbQ4XOOZSD9/yFT8kAanesz5/2+Pk5rCWfk+zJDN8K5fTykVAmt24m8wNuIcuX/ oU24plGj1Zjl8mCn/ZTxjb7WhqwDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU7G7t I63x9ch7LFoMvWV9ULVZjzwwHwYDVR0jBBgwFoAU3zdkgNzweht60WTeZKPqIV8k dUEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjJCOEE4L0I1Qzk0RTRDOUMyNTExRUJBRDc4RkY1M0Y4QUVBMjI4LzN6ZGtn Tnp3ZWh0NjBXVGVaS1BxSVY4a2RVRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLzN6ZGtnTnp3ZWh0NjBXVGVaS1BxSVY4a2RVRS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MkI4QTgvQjVDOTRFNEM5QzI1MTFFQkFENzhGRjUzRjhB RUEyMjgvM3pka2dOendlaHQ2MFdUZVpLUHFJVjhrZFVFLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0WApuepe8IvT2izYkjL71+JQ3G/OH 60q6lNXbbv8MnEy8CfDiWcjlkJxRAHe2BkPqoCVfME8IDECbWwIFmzCfXNDah2u4 L5ciu4rrOK2BxmIiSyfvLcg8Re5B21C+9RjFUsFcci+AbRt3gtzS9Cp5/FVjuy41 lB9p571OUmWYEOgy1cmbnE2Z9MZiWJg7CveVHPwIK26TXfEyCcwtf48Y7WimYsSL g3Y/dtuNeb03e3fBiPNzMgQ74s4HlK8EatOK1JvNBS7VMCJVYr/b9X/+bXxqKSxZ UAEwkKAQZVZKEunRfR4dwmcFadLXy0uYSim+gIRClluPtI6Pf6m5Y7uT -----END CERTIFICATE-----Generated at Sun Apr 28 03:10:29 2024 by rpki-client on console-ams.rpki-client.org