$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft File: qO-WBRTjNkRNPN43sktm3DnUPRs.mft (raw, json) Hash identifier: GkyIyLvGWXU76sBgUO6Mq3ZSHYM6kz2hdmicCniCVfg= Subject key identifier: AF:9E:8E:29:E0:08:D9:DE:90:3C:C1:C2:04:2C:73:05:F6:B2:E8:65 Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Certificate serial: 020C Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft Manifest number: 01F8 Signing time: Thu 21 Nov 2024 02:22:35 +0000 Manifest this update: Thu 21 Nov 2024 02:22:35 +0000 Manifest next update: Sat 23 Nov 2024 02:22:35 +0000 Files and hashes: 1: qO-WBRTjNkRNPN43sktm3DnUPRs.crl (hash: ZoS+Jobc9r8Qchxrjy93PtcRvI4v34C0uuOwu//8Cug=) 2: C64BDF325B8611EE8F5917154AD9E6FC.roa (hash: lOfMw6yYmupoBGzZG06JxE7nkGYN0SjR1YBL+6yU110=) 3: 221DE36C5B7F11EEBAA0307C4AD9E6FC.roa (hash: akgSyzvUhBZdD/Jo/1snS9zDQnQhIY/z4b5eUssk1L4=) 4: 3FC126045B7F11EE91B3797C4AD9E6FC.roa (hash: B4Jxb4zuiNxx8ARYO+8FuXUu5CFHZJCjPVqFobOB2EU=) 5: F592AE225B7E11EEAAD8A37B4AD9E6FC.roa (hash: H2+/hMWhZrQQ/v+xp+P99me7GUvAhaEZLEIOvuDJ8+o=) 6: 9389DEB25B7E11EE85FB5A794AD9E6FC.roa (hash: saW9gDDU1fU/ss5E5QByOp+7T1wbc1vVgpJ7XS+gk+s=) 7: 39E85D245B7F11EE90195D7C4AD9E6FC.roa (hash: eHbXQ/7kild+PjHeBFmSGxlAnlG3pi2uyC9o63m5Mio=) 8: 44122BBE5B7E11EEA5C359784AD9E6FC.roa (hash: dlLpBI0Us25zgjOKkdJouRreKgFknaWvSBpHKXaHN4Q=) 9: 0DDE14645B8711EEBE2DF3154AD9E6FC.roa (hash: OVYm5oOpe8XlJOHUYg0R0oIytfPmlhVRgGeohPVoeGg=) 10: E29E1C625B7D11EEAFF513774AD9E6FC.roa (hash: cL6yXVTdN5LFRK/8lI56JvUwQ8huIMxP3ArtUJsfAsg=) 11: 0DB547A45B7E11EE95F5E0774AD9E6FC.roa (hash: sgLUjm9KT8NBSGsfPuF7zb59LXdnTNhjWZlBuJluY4o=) 12: 82BE0D345B8711EE8AF170174AD9E6FC.roa (hash: du0kSdCk2tSzKNVUZIxuV5z/5Bcr0/T6HJ/NasAIv4s=) 13: 673167545B7E11EE98EEBD784AD9E6FC.roa (hash: adqbPWSj3qJmhRpUh3DUEWmWfDKPs4YfwC9ZlFS5ias=) 14: A97AA9E05B7E11EEAD5E8F794AD9E6FC.roa (hash: 3NkJ+hNEcmyOZzaQCsy/+Ozh2yGmiiWLNtnnqsmfG2I=) 15: EFB2EA005B8611EEB1C27E154AD9E6FC.roa (hash: ArKkYMPjrZ4ijgIQyF9Kcy4ua9ozHX8IBDIWFIk7DdU=) 16: BBA7D8A05B8711EEA5880E184AD9E6FC.roa (hash: NwbjXk0kj8eY+sbmyk9mA7z7P4Od2Lqrhnl5SE+949A=) 17: 7D84FCC85B7E11EE930F05794AD9E6FC.roa (hash: LbVSQZqmCHBXF80jfRgZ632p1CiqtMRJRyKOIJ1fwIY=) 18: 5A3685F85B7D11EEB4B9A0754AD9E6FC.roa (hash: hua4m2v20w0RdcluLq3SvMVi3aYeRg47OfgA9wTRs3E=) 19: D6AA10E05B7E11EE9B32467A4AD9E6FC.roa (hash: RAafA0ML5VlgZ60Y1uxp4EowWyBnwvs0LOD/pOddd5E=) 20: 9FF8CF2E5B8711EE9F40A5174AD9E6FC.roa (hash: lG9MW9PGMEKdmiEYPlQxLtvMK2I/+bgWEhfhck5fvqA=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 23 Nov 2024 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B Validity Not Before: Nov 21 02:22:35 2024 GMT Not After : Nov 23 02:22:35 2024 GMT Subject: CN=673e996b-3169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d5:03:b2:06:77:dc:f0:1f:6e:74:ba:8a:58: 1e:6d:0d:4f:85:75:34:ac:cc:8a:74:99:ca:67:15: 38:f0:e7:ed:e8:f0:f1:50:ad:5b:b7:00:4b:90:51: cc:ef:9f:d9:34:d6:65:87:3c:c7:68:e0:a7:b0:f9: 16:ec:cc:1d:d2:62:d8:b4:10:1d:f5:13:79:a1:2c: d0:8b:a7:37:5d:38:4e:ba:45:a5:2e:68:41:fb:17: f0:ad:cd:56:c7:1f:81:41:cd:5a:c1:68:0a:f1:e8: 29:4b:f2:9a:46:66:d4:8b:be:43:32:bc:76:eb:f3: 76:88:fc:3c:fb:0d:ad:aa:0c:9c:14:dc:03:a2:e7: 6c:09:cd:a3:23:ce:e1:b9:17:8d:fe:ee:28:37:47: 80:dd:65:aa:e8:ea:79:14:ea:86:d4:4a:dc:5d:13: 2d:eb:7a:96:9c:26:ec:33:fb:c2:03:b2:76:a5:9a: 04:cd:3a:f7:0f:e0:5c:70:67:9b:6e:8a:74:8c:fd: d3:4c:73:d5:d4:99:0c:83:bd:d9:43:22:fe:ff:00: 24:fe:1d:13:82:73:e8:a6:87:7c:b3:7f:19:38:ee: 4e:ff:a8:84:a2:b1:92:2d:43:ae:f3:5d:90:fa:e2: f0:bf:2f:3d:9b:9a:1b:8b:f0:25:f7:d4:45:d6:b5: 17:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9E:8E:29:E0:08:D9:DE:90:3C:C1:C2:04:2C:73:05:F6:B2:E8:65 X509v3 Authority Key Identifier: keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:24:7c:ed:e9:7e:65:b6:8f:9d:92:df:23:b0:6d:07:b3:e3: 63:84:de:b6:72:38:be:d5:e6:3a:21:bd:e9:f1:d7:37:2f:40: 84:8e:30:67:ac:90:dc:e6:95:d8:07:af:c6:89:02:5d:89:c6: 39:61:f2:58:17:c5:c2:2e:5e:d7:aa:07:f1:d2:75:0a:c9:a8: 48:c8:64:6b:6b:eb:7f:ed:2c:2e:15:bf:38:a4:e2:32:1d:86: f8:e5:55:71:58:5a:ef:09:f9:ed:3c:c7:f1:ea:b2:73:f9:6f: f7:0a:cd:20:e7:22:83:bf:af:b4:4f:84:10:2d:71:bd:22:46: 60:c5:45:05:7e:bf:51:3d:11:76:8e:a9:3d:a8:f8:dd:3c:4e: 41:2b:b8:e6:37:31:1d:b4:67:4a:39:29:8f:79:37:c7:49:09: 30:a1:48:b8:8c:e7:f6:96:82:9a:8d:e3:ab:55:6e:da:73:62: 1d:47:1a:05:0e:dd:d8:42:86:e8:61:48:69:22:3c:c6:bd:b1: cc:10:3b:f3:cc:e7:56:80:53:34:cf:97:d5:a4:38:e0:92:b5: 4c:41:06:c9:7f:27:d8:c9:f0:e8:ae:ca:0d:e6:6f:5d:96:1e: d8:07:cd:25:55:04:a3:ee:aa:4b:36:b7:08:c1:72:a5:a8:88: 70:9f:bf:e2 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NjhDRkVBRjExMC8GA1UEBRMoQThFRjk2MDUxNEUzMzY0NDREM0NERTM3QjI0QjY2 REMzOUQ0M0QxQjAeFw0yNDExMjEwMjIyMzVaFw0yNDExMjMwMjIyMzVaMBgxFjAU BgNVBAMTDTY3M2U5OTZiLTMxNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDU1QOyBnfc8B9udLqKWB5tDU+FdTSszIp0mcpnFTjw5+3o8PFQrVu3AEuQ Uczvn9k01mWHPMdo4Kew+RbszB3SYti0EB31E3mhLNCLpzddOE66RaUuaEH7F/Ct zVbHH4FBzVrBaArx6ClL8ppGZtSLvkMyvHbr83aI/Dz7Da2qDJwU3AOi52wJzaMj zuG5F43+7ig3R4DdZaro6nkU6obUStxdEy3repacJuwz+8IDsnalmgTNOvcP4Fxw Z5tuinSM/dNMc9XUmQyDvdlDIv7/ACT+HROCc+imh3yzfxk47k7/qISisZItQ67z XZD64vC/Lz2bmhuL8CX31EXWtRcPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUr56O KeAI2d6QPMHCBCxzBfay6GUwHwYDVR0jBBgwFoAUqO+WBRTjNkRNPN43sktm3DnU PRswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjY4Q0ZFLzk1RUZENzRDMzc1NzExRUVCQjE0MzIxODRBRDlFNkZDL3FPLVdC UlRqTmtSTlBONDNza3RtM0RuVVBScy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3FPLVdCUlRqTmtSTlBONDNza3RtM0RuVVBScy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2NjhDRkUvOTVFRkQ3NEMzNzU3MTFFRUJCMTQzMjE4NEFE OUU2RkMvcU8tV0JSVGpOa1JOUE40M3NrdG0zRG5VUFJzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCfJHzt6X5lto+dkt8jsG0Hs+NjhN62 cji+1eY6Ib3p8dc3L0CEjjBnrJDc5pXYB6/GiQJdicY5YfJYF8XCLl7Xqgfx0nUK yahIyGRra+t/7SwuFb84pOIyHYb45VVxWFrvCfntPMfx6rJz+W/3Cs0g5yKDv6+0 T4QQLXG9IkZgxUUFfr9RPRF2jqk9qPjdPE5BK7jmNzEdtGdKOSmPeTfHSQkwoUi4 jOf2loKajeOrVW7ac2IdRxoFDt3YQoboYUhpIjzGvbHMEDvzzOdWgFM0z5fVpDjg krVMQQbJfyfYyfDorsoN5m9dlh7YB80lVQSj7qpLNrcIwXKlqIhwn7/i -----END CERTIFICATE-----Generated at Thu Nov 21 03:19:41 2024 by rpki-client on console-ams.rpki-client.org