$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft File: _Y4EWISxZp69QwrlZnIdl0BKbOg.mft (raw, json) Hash identifier: UeyxxDgGoVpjY/gWlv9srTBdYF8w3jyNR/eU/N50/1c= Subject key identifier: BF:D0:38:30:85:CE:FE:B5:E6:FE:99:1F:07:6C:B9:E2:B5:8A:55:58 Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8 Certificate issuer: /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8 Certificate serial: 0840 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft Manifest number: 0824 Signing time: Fri 22 Nov 2024 01:03:10 +0000 Manifest this update: Fri 22 Nov 2024 01:03:10 +0000 Manifest next update: Sun 24 Nov 2024 01:03:10 +0000 Files and hashes: 1: _Y4EWISxZp69QwrlZnIdl0BKbOg.crl (hash: TL5QkmIvlNsFSMcYGgoMObRsBE7jDFOAHDGv+gs3uj8=) 2: 72FDA95EBED111EBB1E95938F8AEA228.roa (hash: BFwqjnvA7M7iOe8MrvjQVzzYtcahDaV6kGy9p/HlFzg=) 3: 8CFF0D3452E011EEB9E2557C4AD9E6FC.roa (hash: AjdT4e8a6WXfxGEzOMU2Ejz3vHkEPA/+xC+T83HmsUY=) 4: 7E2AA4AC953C11ECB825FCA95A40D577.roa (hash: V0xEm03mcnP/23ED2cL/AoR2czYuEnqqGtBl0cqLVJY=) 5: 771B25DAC1DC11EBAFF27A22F8AEA228.roa (hash: hB7LK5vkWRJBikNKLrZykTmcN1gbhqGJuoapPw28t74=) 6: 487A092ADA8611ED9609AEE52F6D8C1D.roa (hash: D/BuyKELkA6Kinn/ZmmBBy28n4BcPuuOdNb0VMO9tSc=) 7: EBFDEB1CDA8511EDAD8DC8E42F6D8C1D.roa (hash: T0K4k+0IgpuVi35+ZPDqnwWPZANeAHrt4BvXYlWbXMI=) 8: 417B7412681D11EABAE8A23BF8AEA228.roa (hash: EcSboq3Auo5ZSfF9dSrc6D9TXAo4UTRY5/uzWoCkLSY=) 9: A0A710B2C1DC11EBBC70BD22F8AEA228.roa (hash: nWisPdHBij3RvecNt34Yu238DLfWQU7kpk3sAXEBWpo=) 10: 9132C716F59111E9AF6CD33BF8AEA228.roa (hash: rXypH2zp9nVVHeDRCTVV4b8eCSlSkXxt3YUitRlyOEk=) 11: 9364DF78BED111EBB8FF9938F8AEA228.roa (hash: NRhe7qbaq8yZpi9FGOqJZVS+hbrFKmeWDZsrvab3+uA=) 12: 7F0A8334DA8611ED854699E62F6D8C1D.roa (hash: GP3NdP5uExbY2GZHQJ+RZAHZhDY8bRc/dyrY/rF4P6I=) 13: 238CE30A681D11EA8E2A7D3BF8AEA228.roa (hash: ydKx4ungEUC7wspHHxXIcDKz2U1m9S6af+pOZ0cF1vY=) 14: D7EB2302681D11EA9D36683CF8AEA228.roa (hash: AgNVSSf6L6GA3IHpXql3JWZ8L6ROJY9bnjmSjQeMQnU=) 15: F251F7A2681D11EA847A8F3CF8AEA228.roa (hash: CH6IVgy5lqquXIo/aSkiaRuN6dDR9B17P94pxUuhf4w=) 16: AF1ED052BED111EBAE20BD38F8AEA228.roa (hash: 4XRclk/yI8EJN8d2ChhuI+DM9Txu0zUGc/TXnREwp8M=) 17: A6F9E6BC52E711EEA98697134AD9E6FC.roa (hash: 522xUbFyDNAfNVyOqkEJj/kgs5vlVi6RihMtJZxJPIA=) 18: 51E7667A198311EDA6FEC5BFF1222468.roa (hash: 5AYXvFdqlcLtOaW600VeglJz5MATpO6Rt2/LbZme/P8=) 19: DBFF1E3C43DD11ED95883DBCF1222468.roa (hash: Y8zoZUQnQqpVoToxLOumwxqYjQxD2d4+Fg81697ZwlM=) 20: 60E94C82DA8611EDB9B5F0E52F6D8C1D.roa (hash: uN0Q1zV+VPkcLgC9gryjBgSon2OLOyHeE5NbuOjD/vU=) 21: 14FC84CEDA8611EDAD5B23E52F6D8C1D.roa (hash: S6+GPt3mMdOMUzMxpxdXeFeENM7hq23EiAhTHkvC6fQ=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 24 Nov 2024 00:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2112 (0x840) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8 Validity Not Before: Nov 22 01:03:10 2024 GMT Not After : Nov 24 01:03:10 2024 GMT Subject: CN=673fd84e-2cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2c:71:f9:57:9c:70:f0:4a:7e:83:b4:bf:0e: b6:2b:cc:89:63:4d:7e:dd:02:5a:a8:46:b9:cc:da: 9e:bd:0d:9d:0c:f4:b9:2e:5b:91:e0:6f:64:02:17: e4:80:24:e1:8d:da:16:b6:bf:f3:a5:c9:d5:86:73: 43:e4:c8:2a:25:43:a7:19:75:b3:1c:4f:56:4a:41: d3:c9:e7:86:d3:70:91:18:b5:b7:c6:0a:59:58:1d: 3c:3f:7d:62:3a:76:ad:48:a5:45:34:5a:cf:e4:ae: 18:a2:06:7a:41:85:99:7a:f5:ac:19:d6:a1:11:1d: 59:7e:06:3e:82:d0:88:75:a2:3b:f5:08:08:56:03: 50:c4:e4:97:34:d5:96:a6:4d:8c:2d:e3:b6:9a:f2: 22:e4:2f:39:ac:1b:8d:34:01:cf:ad:ea:87:9e:5c: e8:d5:ce:5c:4f:54:1a:a8:de:1c:02:ee:18:64:d3: 59:bc:75:a4:bd:9f:5b:40:82:48:ff:b4:56:f9:d3: 47:2e:ce:4a:a7:5c:d4:8b:b8:fb:44:e2:a1:68:9a: c9:2f:42:31:fa:51:06:c3:a5:7a:d5:ea:ce:78:29: f1:d7:97:24:35:de:89:8c:85:0f:05:64:92:24:5a: 49:89:7f:e6:62:61:67:3d:4a:66:83:5f:f3:7e:2e: ef:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D0:38:30:85:CE:FE:B5:E6:FE:99:1F:07:6C:B9:E2:B5:8A:55:58 X509v3 Authority Key Identifier: keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:3b:54:2b:7d:64:ac:67:cb:7c:3b:08:d3:e4:55:43:54:55: bf:b7:24:dd:20:de:a6:5e:0a:6c:93:49:a7:f0:b9:f3:18:9a: 6f:5a:a0:87:b6:71:07:2d:56:e0:b3:28:23:da:b0:1a:40:41: 93:61:78:19:85:04:0e:2f:8d:89:52:98:6d:33:ca:5a:cd:d2: bf:5a:f3:7e:8b:c1:6d:94:5b:be:c6:26:9e:4a:2a:69:79:9c: a5:c0:65:e6:76:71:c2:80:73:11:4f:1c:5e:63:98:fc:7b:dd: ef:3a:66:6a:1e:1f:62:6d:51:d0:98:c8:f7:8e:4c:29:ef:8f: 49:43:d5:6e:08:45:e3:cd:02:1e:f0:d9:ad:20:53:8a:07:a0: 00:15:12:18:11:2c:4a:9e:a3:bc:da:66:c7:66:2b:9a:80:67: 49:52:88:5e:01:ea:8d:0d:3f:19:1e:8b:a5:a8:30:f3:0e:7d: 0e:8b:84:c4:58:8b:42:a7:16:ab:22:b3:9a:ce:63:2b:e3:89: 19:2b:c9:0a:3b:b2:32:bb:a7:c8:c0:ee:f8:7b:48:77:70:d4: cb:39:7a:61:3d:4e:f9:b8:d4:cd:2b:99:4b:54:68:96:54:9b: a5:46:aa:e2:95:4f:e9:41:e8:cf:ec:50:75:ec:8a:8f:44:5a: 2c:0f:5f:86 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCEAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RTM3M0RBRjExMC8GA1UEBRMoRkQ4RTA0NTg4NEIxNjY5RUJENDMwQUU1NjY3MjFE OTc0MDRBNkNFODAeFw0yNDExMjIwMTAzMTBaFw0yNDExMjQwMTAzMTBaMBgxFjAU BgNVBAMTDTY3M2ZkODRlLTJjZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC+LHH5V5xw8Ep+g7S/DrYrzIljTX7dAlqoRrnM2p69DZ0M9LkuW5Hgb2QC F+SAJOGN2ha2v/OlydWGc0PkyColQ6cZdbMcT1ZKQdPJ54bTcJEYtbfGCllYHTw/ fWI6dq1IpUU0Ws/krhiiBnpBhZl69awZ1qERHVl+Bj6C0Ih1ojv1CAhWA1DE5Jc0 1ZamTYwt47aa8iLkLzmsG400Ac+t6oeeXOjVzlxPVBqo3hwC7hhk01m8daS9n1tA gkj/tFb500cuzkqnXNSLuPtE4qFomskvQjH6UQbDpXrV6s54KfHXlyQ13omMhQ8F ZJIkWkmJf+ZiYWc9SmaDX/N+Lu93AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUv9A4 MIXO/rXm/pkfB2y54rWKVVgwHwYDVR0jBBgwFoAU/Y4EWISxZp69QwrlZnIdl0BK bOgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkUzNzNELzREMjJBQ0Q2OEI3MzExRTlBNDlBNDM2OEY4QUVBMjI4L19ZNEVX SVN4WnA2OVF3cmxabklkbDBCS2JPZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL19ZNEVXSVN4WnA2OVF3cmxabklkbDBCS2JPZy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RTM3M0QvNEQyMkFDRDY4QjczMTFFOUE0OUE0MzY4RjhB RUEyMjgvX1k0RVdJU3hacDY5UXdybFpuSWRsMEJLYk9nLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCYO1QrfWSsZ8t8OwjT5FVDVFW/tyTd IN6mXgpsk0mn8LnzGJpvWqCHtnEHLVbgsygj2rAaQEGTYXgZhQQOL42JUphtM8pa zdK/WvN+i8FtlFu+xiaeSippeZylwGXmdnHCgHMRTxxeY5j8e93vOmZqHh9ibVHQ mMj3jkwp749JQ9VuCEXjzQIe8NmtIFOKB6AAFRIYESxKnqO82mbHZiuagGdJUohe AeqNDT8ZHoulqDDzDn0Oi4TEWItCpxarIrOazmMr44kZK8kKO7Iyu6fIwO74e0h3 cNTLOXphPU75uNTNK5lLVGiWVJulRqrilU/pQejP7FB17IqPRFosD1+G -----END CERTIFICATE-----Generated at Fri Nov 22 04:05:30 2024 by rpki-client on console-ams.rpki-client.org