$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft File: hv7S7RnCBnpIIiG2RdYMRaTVap0.mft (raw, json) Hash identifier: mTxXFFsvQoHQT6ptEKYa0qViN+jWGPgoORzfHR8GBts= Subject key identifier: D1:B7:DC:67:C5:E6:0A:9E:2F:0D:CB:41:B3:21:CA:C8:0E:B6:A3:1C Authority key identifier: 86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D Certificate issuer: /CN=F36472E5AF/serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D Certificate serial: 0CB2 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft Manifest number: 0CA1 Signing time: Sun 28 Apr 2024 00:38:47 +0000 Manifest this update: Sun 28 Apr 2024 00:38:46 +0000 Manifest next update: Tue 30 Apr 2024 00:38:46 +0000 Files and hashes: 1: hv7S7RnCBnpIIiG2RdYMRaTVap0.crl (hash: XeP5MrmBNsNV2Bjl4cmWAsW2cGn2xVw7OE3/Sz0gl5E=) 2: 2B358C9ACA5411E9AB56C482F8AEA228.roa (hash: 542MHTZAg9mxUFxY3zCZ7p5fwSnjIWtxUnE6kTXmKMs=) 3: 75BB83CECAEE11E9B8750B77F8AEA228.roa (hash: LHVz9xioiQqgDCsiihzIIq+BrjcIvxLKI5LrrXrO3Io=) 4: FC54DD08571F11EC90429C41D8A014CE.roa (hash: TM156CRwR/2Jif+4HOy6chTdvP7fT1UGWA7gKZC9RKY=) 5: 0C8F23AAD00B11EB81D5EE07F8AEA228.roa (hash: jPkO7ExSp17mzBRpa2Il9WdyzpVikW5rrHroeK/bJGI=) 6: A584C0ACCAEE11E98C9F3777F8AEA228.roa (hash: COm4IJeTkrJL34O4UJLzMLGNyExGXZ/i492sB/CX0wc=) 7: A9E94F06CAED11E980367876F8AEA228.roa (hash: VrJL3SQd6C3FUUbw0uhJehHrmjG9Xx4v9iS8CcKGSXY=) 8: CEB8F1B0CAED11E988A78B76F8AEA228.roa (hash: jDtuwq3j8HQc76mLF36nBIH2uMggEhhIl6ncNoeaoaY=) 9: 8611EC46CAED11E989D36576F8AEA228.roa (hash: FshGOOOuJbA/9loXNipyvDMsi9pllSp+7FKxuJNVYeU=) 10: 5DC47678CAED11E9859E2C76F8AEA228.roa (hash: +mStn8j1lsfaOcAkA+IpFnx3VVw/ZA+elfj24TZJJoA=) 11: 58D4146ECA5411E9AACFFC82F8AEA228.roa (hash: llqq6mhR2LiQ9Zf86+DgrcW9HILB2CWU6cLF3bhjP9A=) 12: 2EFA614ECAEE11E98511EC76F8AEA228.roa (hash: 2zLMI8rOWrZ63E40k/ceZtOXzw9Rmk5l8voPk4gGNgk=) 13: F543EEE2063511EAB42C3268F8AEA228.roa (hash: 3QGMD7q5cTixEBwueXJXjdG9ZrC8ERLgr72eJ5uOqPU=) 14: 393244FCCAED11E9B99FF875F8AEA228.roa (hash: 4xNbES12DfxpVPkV3v2uKcMGkgu9iGiVU5CNykYBjGs=) 15: 8B76B110CD5B11E982F62408F8AEA228.roa (hash: /cWu2nL6HSrRP3knTHp+eSDgxNpMwgwnD7k3nWXKasE=) 16: 0475EE6856D811E5B0E8AA60F8AEA228.roa (hash: rnfvCe8zm7FPtXxrLAwPlwPmid5ucEEvHSHMH0qNarY=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 30 Apr 2024 00:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3250 (0xcb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36472E5AF/serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D Validity Not Before: Apr 28 00:38:46 2024 GMT Not After : Apr 30 00:38:46 2024 GMT Subject: CN=662d9a97-3103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:24:c0:9f:b5:e5:0f:16:ff:6e:ea:4c:24:d2: 6e:9b:d0:53:cf:67:36:90:6c:a7:85:3e:fa:19:15: 73:4c:68:80:47:88:69:15:0e:5d:f7:87:5a:88:b1: 86:a6:2a:f7:ae:d1:de:1b:97:f1:c8:d9:e1:60:b3: 0c:1f:a5:37:66:51:f5:04:69:f2:ba:ea:d7:ab:8a: 82:59:45:d2:c3:d5:f2:f5:d0:15:c5:c4:c4:6a:fd: 09:7e:03:60:ff:7d:19:a6:a9:43:93:ca:ae:70:dd: 2f:b8:45:6c:69:39:96:f2:d6:eb:76:db:ee:5c:ce: 6c:f4:c1:21:01:a6:f3:eb:57:44:b5:ce:50:06:58: c3:24:f1:63:c4:7c:4d:ac:2d:56:58:57:c6:03:12: 19:ee:a1:4c:25:ab:11:49:f5:17:e6:92:ae:f4:fe: ec:c8:77:0d:3a:fc:0a:73:d5:22:2c:2a:6b:2d:40: 85:dd:01:5e:cb:90:d0:8b:01:cc:ca:ce:23:1e:37: 42:99:4d:bd:2a:88:f3:46:b4:8c:64:d1:b3:e6:a4: 3f:82:36:e5:de:74:74:50:18:2a:fc:a6:a5:48:7c: ef:3d:e9:bf:4d:a2:60:a0:8e:fe:ae:92:15:10:c0: ff:9d:45:f0:e1:9c:82:49:2d:07:30:9a:d8:34:e9: 4d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B7:DC:67:C5:E6:0A:9E:2F:0D:CB:41:B3:21:CA:C8:0E:B6:A3:1C X509v3 Authority Key Identifier: keyid:86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:98:78:a7:b2:c0:91:aa:ec:76:a1:4d:4b:f8:95:a6:88:4d: c9:f5:3e:a8:15:86:30:89:1e:67:4e:66:a4:64:31:26:47:e4: 5d:9d:53:89:5d:08:99:30:45:e9:e0:e7:f3:0b:79:f0:e1:47: 6e:9d:6a:07:1f:56:4c:ba:dc:fe:55:3a:c6:dc:63:7c:c0:00: fb:98:58:ec:47:ec:ed:e2:12:49:63:42:ea:f3:04:e5:4b:9f: 0c:90:97:7a:8b:6b:0f:ae:df:43:21:b8:d8:46:5d:73:b3:05: 71:b4:03:d5:e6:d7:9d:15:4a:54:f8:6e:2f:33:6d:a8:31:ed: 8c:82:91:82:38:12:fd:ea:59:c0:5e:9c:a2:14:9c:cb:00:38: 3f:6e:71:6b:21:68:56:37:a4:94:d7:4f:ea:39:28:39:6a:f5: 9e:d9:82:93:0f:27:18:28:4c:48:a0:eb:b4:40:ae:80:94:ef: 1d:d6:88:da:5b:b9:de:b2:22:9e:7c:51:e5:17:96:7a:4a:59: 16:80:fe:c2:2f:1e:cc:b6:95:58:9a:b5:83:8c:9a:a3:a1:47: fa:d1:e8:a8:5b:38:16:98:5b:b5:85:09:42:63:38:1b:f6:f7: 02:76:1a:32:ff:ad:31:99:32:b9:e1:83:84:d2:6b:d6:a8:85: 9a:95:7b:6d -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICDLIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NDcyRTVBRjExMC8GA1UEBRMoODZGRUQyRUQxOUMyMDY3QTQ4MjIyMUI2NDVENjBD NDVBNEQ1NkE5RDAeFw0yNDA0MjgwMDM4NDZaFw0yNDA0MzAwMDM4NDZaMBgxFjAU BgNVBAMTDTY2MmQ5YTk3LTMxMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDXJMCfteUPFv9u6kwk0m6b0FPPZzaQbKeFPvoZFXNMaIBHiGkVDl33h1qI sYamKveu0d4bl/HI2eFgswwfpTdmUfUEafK66terioJZRdLD1fL10BXFxMRq/Ql+ A2D/fRmmqUOTyq5w3S+4RWxpOZby1ut22+5czmz0wSEBpvPrV0S1zlAGWMMk8WPE fE2sLVZYV8YDEhnuoUwlqxFJ9Rfmkq70/uzIdw06/Apz1SIsKmstQIXdAV7LkNCL AczKziMeN0KZTb0qiPNGtIxk0bPmpD+CNuXedHRQGCr8pqVIfO896b9NomCgjv6u khUQwP+dRfDhnIJJLQcwmtg06U05AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0bfc Z8XmCp4vDctBsyHKyA62oxwwHwYDVR0jBBgwFoAUhv7S7RnCBnpIIiG2RdYMRaTV ap0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjQ3MkU1LzhEQjY1NDdBNTZENzExRTU4NTM1NkQ2MEY4QUVBMjI4L2h2N1M3 Um5DQm5wSUlpRzJSZFlNUmFUVmFwMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2h2N1M3Um5DQm5wSUlpRzJSZFlNUmFUVmFwMC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NDcyRTUvOERCNjU0N0E1NkQ3MTFFNTg1MzU2RDYwRjhB RUEyMjgvaHY3UzdSbkNCbnBJSWlHMlJkWU1SYVRWYXAwLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC6mHinssCRqux2oU1L+JWmiE3J9T6o FYYwiR5nTmakZDEmR+RdnVOJXQiZMEXp4OfzC3nw4UdunWoHH1ZMutz+VTrG3GN8 wAD7mFjsR+zt4hJJY0Lq8wTlS58MkJd6i2sPrt9DIbjYRl1zswVxtAPV5tedFUpU +G4vM22oMe2MgpGCOBL96lnAXpyiFJzLADg/bnFrIWhWN6SU10/qOSg5avWe2YKT DycYKExIoOu0QK6AlO8d1ojaW7nesiKefFHlF5Z6SlkWgP7CLx7MtpVYmrWDjJqj oUf60eioWzgWmFu1hQlCYzgb9vcCdhoy/60xmTK54YOE0mvWqIWalXtt -----END CERTIFICATE-----Generated at Sun Apr 28 03:10:30 2024 by rpki-client on console-ams.rpki-client.org