$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft File: wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft (raw, json) Hash identifier: VDm8x6fRadUuf/yZpxoYbD2HOucfjVThC3lPuYzjhJA= Subject key identifier: 33:68:29:B1:EA:F3:1A:B4:D7:DA:DA:5C:50:75:BD:AF:0D:C0:D5:1F Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34 Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934 Certificate serial: 02AA Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft Manifest number: 0298 Signing time: Thu 21 Nov 2024 02:11:22 +0000 Manifest this update: Thu 21 Nov 2024 02:11:21 +0000 Manifest next update: Sat 23 Nov 2024 02:11:21 +0000 Files and hashes: 1: wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl (hash: B50PcKqpNM85RortDWSFDGnKm9u5Hl9DPEF3ejHTvj8=) 2: B6E64FA46D8E11EEBD3D23814AD9E6FC.roa (hash: wHxuyQF4+uvgcTMqcLwiE3OPhD9sKRldqLMBbm9GZAk=) 3: 755C3946726011EE93489E6F4AD9E6FC.roa (hash: I/IXDJdydOXsHxPlVBdH54iLozFOHgSirildHRHX6us=) 4: 1FE2B490676B11EE89F68D6C4AD9E6FC.roa (hash: VkyUxkKXn7LwkNtssSbTSgdVTqQDeGhmPVIGCEo/UYw=) 5: 1FAC5C58642B11EEB88178264AD9E6FC.roa (hash: ue0lR9LPzTbHOKn7vlKdSh3YCZxWA6gtEHdH+8CALYY=) 6: 126EAE268F4E11EEAECC1E62D25BE465.roa (hash: RVoLCOu04kDM3ma5697yf0ycFSMBgw51El1f03RGHNo=) 7: 0E14878A676F11EEA3B081784AD9E6FC.roa (hash: ilcPf1Q17dtn++BbRqyZZTuMiIFeb1JyNCjewhQwPU4=) 8: 32C8A6C66D9411EEBBCFC1144AD9E6FC.roa (hash: 2OF/T6bI2e1KDH7oQ4Ng7a72JfGOZwUFWH9xARUOcWY=) 9: 996CFC786D9011EEB96C32874AD9E6FC.roa (hash: x0DJySpGUWaPqSlP65+H7jaIDC8V3UYDd/FdjU9E7rA=) 10: B1B22C14798311EEA5C954334AD9E6FC.roa (hash: Pe3W5d67FeDOdg0O6CjHDs+dvLUaa9BBxTbqB+4ADZM=) 11: 64F50FBC740C11EE99EADC474AD9E6FC.roa (hash: W0IpuC6GX4xRD5RgHmpflT28ws+r3XoBXlaHP+TeZBA=) 12: ADCC819C6F1C11EEA6EDF2894AD9E6FC.roa (hash: 0EsFQL/056qkK52lVV1RuJFjZ4sGqQwRLakj5+kuntc=) 13: 0908078845A711EEAB5673554AD9E6FC.roa (hash: tqO3uk+osFvKeD1dMRNKDu46qC2fHNV6k3SbxzfnOnA=) 14: C91D0582676C11EE817092714AD9E6FC.roa (hash: n7bFFRK6/BBB0upK0yKjNtW7e2v1lvPct030rOjwGHg=) 15: 505CFBCA6E4C11EEA61CB55E4AD9E6FC.roa (hash: haaJ8RNEFPNeNXKfBocGoCPP48/FPRgVDNeOKZS8HPQ=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 23 Nov 2024 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934 Validity Not Before: Nov 21 02:11:21 2024 GMT Not After : Nov 23 02:11:21 2024 GMT Subject: CN=673e96ca-6082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3b:1f:97:5b:a7:22:c8:b8:d3:24:e2:00:74: d6:d8:25:c1:37:7f:bc:99:50:2c:d5:62:ba:5f:a7: ac:cb:47:44:f3:8c:48:83:62:b6:76:cc:80:39:fb: 0b:a8:99:32:a6:34:50:24:f4:7d:e6:6b:0e:ae:c2: 2e:80:9b:db:aa:30:67:6a:ed:29:f9:69:ee:d2:62: ba:b4:b8:e3:c7:a3:a0:28:84:3c:d0:3c:1b:6f:27: a4:e5:00:39:58:c1:11:1b:12:20:b0:03:78:fd:bb: 9c:27:3e:25:98:f1:a5:bf:19:2f:15:62:cb:ab:e3: 93:5f:bf:fd:89:e2:c2:55:06:29:06:90:1f:45:12: 29:60:42:88:c0:4b:53:de:49:f1:22:73:16:15:24: 53:36:3b:c8:e7:63:c3:42:cf:87:fe:a4:d9:f8:8e: d3:fc:28:3e:69:b8:d4:3a:74:c9:14:d2:36:6c:ce: ad:28:09:37:e0:46:2b:22:78:ba:2c:d4:37:23:22: 4a:d3:b0:b2:55:e2:12:50:22:a3:99:6f:ec:78:76: 67:45:fc:0e:37:93:f4:53:cf:ad:07:c5:37:27:f6: d9:f6:19:fd:86:93:1c:b8:46:b5:bb:e3:00:20:79: e1:85:9f:e8:99:7e:8f:92:e2:85:28:69:40:ce:7f: 20:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:68:29:B1:EA:F3:1A:B4:D7:DA:DA:5C:50:75:BD:AF:0D:C0:D5:1F X509v3 Authority Key Identifier: keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:65:07:3f:3f:fb:bb:a0:47:f2:00:8b:bb:21:2c:82:88:47: 1a:2c:d9:01:7d:53:5d:21:39:e8:21:b8:da:34:4b:00:e4:4f: 30:83:57:db:d6:61:e6:6a:9f:cc:ad:ef:27:5d:76:5d:4b:81: 1d:4a:9f:0f:2c:bf:73:a7:c5:0a:85:6a:b9:bc:05:82:cf:b5: 83:8c:53:9a:7a:29:5e:8c:36:d4:33:1a:63:88:ca:d7:40:1f: 2b:a6:5a:82:a1:82:1c:c5:08:bf:d9:69:4a:d0:72:49:80:91: e1:11:7d:a8:b6:75:11:38:82:95:5b:34:4e:37:02:de:c7:c5: 4f:ee:af:9a:03:68:c7:fe:ca:2b:72:ea:c5:c9:d2:b7:d4:80: b0:bb:48:be:62:6f:ba:60:45:39:e3:a5:57:af:75:e3:25:5d: 1c:70:35:ab:5f:5b:84:3b:60:02:d5:0b:77:05:a2:0d:96:02: a3:9c:37:15:20:c7:f0:5e:39:12:e0:7c:5d:b7:bc:92:94:8c: 7d:4c:8c:cb:bf:8f:ee:a2:f6:0d:e0:73:fb:e1:49:b8:2e:be: 4d:eb:5e:65:25:ce:8f:f4:28:59:e3:93:bc:0a:c9:e6:da:ab: 9a:1a:91:6e:bc:fe:3d:b3:43:c9:03:e3:1f:f2:a3:76:89:95: a4:5d:e3:ed -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAqowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 OTU5MUNBRjExMC8GA1UEBRMoQzEwOTBEMzdEQTlGRkVFRTFBOUMyMjlCQUZGMTE5 MEJEMjJFODkzNDAeFw0yNDExMjEwMjExMjFaFw0yNDExMjMwMjExMjFaMBgxFjAU BgNVBAMTDTY3M2U5NmNhLTYwODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDeOx+XW6ciyLjTJOIAdNbYJcE3f7yZUCzVYrpfp6zLR0TzjEiDYrZ2zIA5 +wuomTKmNFAk9H3maw6uwi6Am9uqMGdq7Sn5ae7SYrq0uOPHo6AohDzQPBtvJ6Tl ADlYwREbEiCwA3j9u5wnPiWY8aW/GS8VYsur45Nfv/2J4sJVBikGkB9FEilgQojA S1PeSfEicxYVJFM2O8jnY8NCz4f+pNn4jtP8KD5puNQ6dMkU0jZszq0oCTfgRisi eLos1DcjIkrTsLJV4hJQIqOZb+x4dmdF/A43k/RTz60HxTcn9tn2Gf2Gkxy4RrW7 4wAgeeGFn+iZfo+S4oUoaUDOfyC3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUM2gp serzGrTX2tpcUHW9rw3A1R8wHwYDVR0jBBgwFoAUwQkNN9qf/u4anCKbr/EZC9Iu iTQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjk1OTFDLzM0NzQwMzJFQzI0NzExRURBRkE2Qzc5RkYxMjIyNDY4L3dRa05O OXFmX3U0YW5DS2JyX0VaQzlJdWlUUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL3dRa05OOXFmX3U0YW5DS2JyX0VaQzlJdWlUUS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2OTU5MUMvMzQ3NDAzMkVDMjQ3MTFFREFGQTZDNzlGRjEy MjI0Njgvd1FrTk45cWZfdTRhbkNLYnJfRVpDOUl1aVRRLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQATZQc/P/u7oEfyAIu7ISyCiEcaLNkB fVNdITnoIbjaNEsA5E8wg1fb1mHmap/Mre8nXXZdS4EdSp8PLL9zp8UKhWq5vAWC z7WDjFOaeilejDbUMxpjiMrXQB8rplqCoYIcxQi/2WlK0HJJgJHhEX2otnUROIKV WzRONwLex8VP7q+aA2jH/sorcurFydK31ICwu0i+Ym+6YEU546VXr3XjJV0ccDWr X1uEO2AC1Qt3BaINlgKjnDcVIMfwXjkS4Hxdt7ySlIx9TIzLv4/uovYN4HP74Um4 Lr5N615lJc6P9ChZ45O8Csnm2quaGpFuvP49s0PJA+Mf8qN2iZWkXePt -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:15 2024 by rpki-client on console-ams.rpki-client.org