$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft File: l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json) Hash identifier: gqD3xKJ0MCrlcvnAkkJlCbp1+5JYk+rQdyAdLIYAMHY= Subject key identifier: 87:43:40:EB:31:50:EE:21:59:E1:02:FF:63:57:03:25:1B:45:EA:AC Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39 Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139 Certificate serial: 04EC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft Manifest number: 04BB Signing time: Thu 02 May 2024 01:22:46 +0000 Manifest this update: Thu 02 May 2024 01:22:45 +0000 Manifest next update: Sat 04 May 2024 01:22:45 +0000 Files and hashes: 1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: U/VtfSDGhhKpdzuG2WZPJHWheCC44O80/nGulH18U8g=) 2: AE7DC49E6F5711EE93867B414AD9E6FC.roa (hash: KetMXFehYh9ieirePgumt2erwanH4CFHckFZlw1pHC0=) 3: CEA072D8776A11EEA49F007D4AD9E6FC.roa (hash: oG1ErKkSbYpP5X6eq2VOONQIy8u5lFGEO9d6IZTGw04=) 4: AB8709D8776A11EEAA4DA77C4AD9E6FC.roa (hash: OjX8uJ+ABNT4DUBU6lytMh4nPK90i9veD0YAxN/KxA4=) 5: B0B6FA1A6F8311EE9F3612494AD9E6FC.roa (hash: CiMhitQZUWlPwStMytrKqZTfucIYtYhCNc4Xt1uYyqo=) 6: 26E431402FB411EE8CD30B7C4AD9E6FC.roa (hash: GOeP1peaU2pIph0Q6sKQc3s1SfCP8SDrcX6/KOCPcqM=) 7: AD4AD8CE2FB411EEB2C0C47E4AD9E6FC.roa (hash: vi/rPJP+Q2LNos2FsKX+kP3U6WtvEixNsoNMCMq13DI=) 8: C6E753346F4C11EE9E4B86204AD9E6FC.roa (hash: zhnEqvV+kYIO+8HyCpeWbHUmTTdKiNnFQ4zC/IQrU6M=) 9: 19BD96F826D811EE9E85112D4AD9E6FC.roa (hash: pEi58Ihu//kzfScZirM7iOZDagtLlBljaEd+eHaBKcc=) 10: 54C156926F4C11EEAD81E01E4AD9E6FC.roa (hash: EgjQaf/3lRobro/Po88a6c5RBJdwOC8y8IpVl12xDS8=) 11: 912F27086F4C11EEB861E31F4AD9E6FC.roa (hash: bn06IATwXQ28gv7VE9wxobeunyD6tiXCI3QQfB87D0c=) 12: FE3219F06F8311EE9CFDEF494AD9E6FC.roa (hash: x8rcZYCQO6VkKh3g7Rs360ZYiJBa03ddfX8b9F27Kcg=) 13: 8EC70D902D5D11EE9C8690624AD9E6FC.roa (hash: fcO+qbox370SztZPlNWelsf0zNaMnVRYCq4Ec3zyFzk=) 14: 82D8B7282FB411EE9EA5397E4AD9E6FC.roa (hash: sgnbdRWwq4QY4fdFo3d0e69cth49fQ8T5xlIdhVY+S8=) 15: 1FE635723E6A11EE9DD8E6514AD9E6FC.roa (hash: C2bU/2NH3taMsaeUs9Jpk9+T2BM94By8pwlixgpa/pk=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 04 May 2024 00:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1260 (0x4ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139 Validity Not Before: May 2 01:22:45 2024 GMT Not After : May 4 01:22:45 2024 GMT Subject: CN=6632eae5-b907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:cc:05:87:f5:7c:6b:0b:ce:d8:39:23:7c:a4: cb:04:75:2a:c4:10:fb:91:c3:d3:2a:6b:c7:48:92: b6:0a:79:73:f2:73:5b:26:5f:f9:23:ed:70:56:d1: 89:5d:eb:6f:6b:1c:24:c7:af:44:a3:55:0d:27:b7: 7b:e4:75:ce:73:2e:c3:c6:95:32:84:d7:35:18:3e: f0:28:e6:92:4e:0b:0c:bb:32:a8:18:c0:78:d2:c8: 1d:8c:48:66:30:01:da:c2:ac:6f:34:8b:e4:f8:e9: 6f:a1:4f:34:45:c9:b2:df:ac:87:a8:3d:e3:80:ae: e9:88:95:20:20:99:8d:e5:05:db:08:ab:6d:5d:5f: 41:90:2d:61:f5:c1:22:a9:38:f2:44:f8:1d:9e:0e: 95:c3:ef:b0:2c:c5:45:f9:7a:12:a6:41:f2:89:4a: c8:e2:0c:99:bc:d0:f5:c0:43:d8:0c:b9:68:d3:b8: 50:92:3e:8a:ab:8e:db:89:f9:07:d2:83:bd:bb:fd: f6:05:a3:65:34:ca:55:d4:c2:dd:a1:61:38:f8:90: 17:1c:42:61:3c:de:5c:dc:53:30:df:ba:11:99:13: 22:10:27:56:34:9a:e5:49:de:2d:dc:26:5e:f1:8a: 0c:92:90:f8:f2:38:96:59:4e:62:99:2e:9c:e0:6d: 54:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:43:40:EB:31:50:EE:21:59:E1:02:FF:63:57:03:25:1B:45:EA:AC X509v3 Authority Key Identifier: keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:01:15:2f:92:f1:e3:51:19:22:7d:5e:8b:e1:28:2d:4e:16: 60:08:c9:e2:48:95:96:35:d2:a1:17:ac:c5:8c:28:f2:9b:cd: dc:a4:3e:62:54:90:ba:40:f2:fb:2c:2d:22:50:63:4a:d2:69: 98:bf:3c:88:f9:5c:f5:77:9e:1f:34:5a:63:b2:64:7a:95:d0: 0a:4d:fb:77:d3:f6:48:04:b8:67:49:99:dc:3a:07:05:5f:33: 7b:93:28:c6:f9:c5:4e:ed:a9:f8:ae:7c:d0:9c:26:c0:71:42: ba:3d:e2:75:33:b1:cc:2f:b3:89:b0:04:e5:4c:e3:12:a8:49: a5:7b:56:ab:91:a2:0a:63:16:a9:be:d0:ee:11:05:29:2b:93: e6:f8:83:3b:7d:63:9b:9e:70:a6:76:8a:dc:94:7d:5e:90:43: 89:6c:04:ac:65:e3:01:47:7f:b4:e1:9d:96:59:04:b7:41:ef: 9d:69:4a:81:04:cf:7a:c6:14:d2:ae:5b:d7:10:f0:3c:40:71: 1c:69:a4:49:ed:ee:56:79:0b:62:1e:12:48:e2:cf:87:2d:03: 1b:22:cd:81:0f:c2:c9:21:a3:36:a8:16:9f:87:77:df:cf:65: 5a:f2:0f:6e:ad:35:32:32:5d:bb:93:94:6b:79:3c:8c:d5:c9: e5:7a:a6:60 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBOwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx QkE4MTJGQTEzOTAeFw0yNDA1MDIwMTIyNDVaFw0yNDA1MDQwMTIyNDVaMBgxFjAU BgNVBAMTDTY2MzJlYWU1LWI5MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQD5zAWH9XxrC87YOSN8pMsEdSrEEPuRw9Mqa8dIkrYKeXPyc1smX/kj7XBW 0Yld629rHCTHr0SjVQ0nt3vkdc5zLsPGlTKE1zUYPvAo5pJOCwy7MqgYwHjSyB2M SGYwAdrCrG80i+T46W+hTzRFybLfrIeoPeOArumIlSAgmY3lBdsIq21dX0GQLWH1 wSKpOPJE+B2eDpXD77AsxUX5ehKmQfKJSsjiDJm80PXAQ9gMuWjTuFCSPoqrjtuJ +QfSg727/fYFo2U0ylXUwt2hYTj4kBccQmE83lzcUzDfuhGZEyIQJ1Y0muVJ3i3c Jl7xigySkPjyOJZZTmKZLpzgbVTRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUh0NA 6zFQ7iFZ4QL/Y1cDJRtF6qwwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2N0RGQTQvMDhCOEQ4MjA5M0FDMTFFQkIxRDJBODMyRjhB RUEyMjgvbDhrT0pTRXRpSHo1NGQ1djNmVlJ1b0V2b1RrLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAARUvkvHjURkifV6L4SgtThZgCMni SJWWNdKhF6zFjCjym83cpD5iVJC6QPL7LC0iUGNK0mmYvzyI+Vz1d54fNFpjsmR6 ldAKTft30/ZIBLhnSZncOgcFXzN7kyjG+cVO7an4rnzQnCbAcUK6PeJ1M7HML7OJ sATlTOMSqEmle1arkaIKYxapvtDuEQUpK5Pm+IM7fWObnnCmdorclH1ekEOJbASs ZeMBR3+04Z2WWQS3Qe+daUqBBM96xhTSrlvXEPA8QHEcaaRJ7e5WeQtiHhJI4s+H LQMbIs2BD8LJIaM2qBafh3ffz2Va8g9urTUyMl27k5RreTyM1cnleqZg -----END CERTIFICATE-----Generated at Thu May 2 04:03:43 2024 by rpki-client on console-fra.rpki-client.org