![](/console.gif)
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
File: yD3GjOK-QyU6qlUariL5Wh8drSs.mft (raw, json)
Hash identifier: QiSmvrSPB4TPdFcm0FRuaRJo9R0jgpXOhvKuqcjv3tk=
Subject key identifier: 44:D3:36:E7:F0:C7:98:13:52:25:DA:62:47:2A:16:43:E7:82:7C:96
Authority key identifier: C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
Certificate issuer: /CN=F3671DBDAR/serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
Certificate serial: 03C7
Authority info access: rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
Manifest number: 03C5
Signing time: Sun 16 Feb 2025 02:10:35 +0000
Manifest this update: Sun 16 Feb 2025 02:10:35 +0000
Manifest next update: Tue 18 Feb 2025 02:10:35 +0000
Files and hashes: 1: yD3GjOK-QyU6qlUariL5Wh8drSs.crl (hash: mYgIg6mjM8jJtQIwMgVB71E2lT2DbIDrHSoUeRM4coM=)
2: B1BFBFEA278711ED8808E3CDF1222468.roa (hash: Assvrj8OD6s30X7gj/5howMI7VisH2Gq7WxHn9j6+kQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 967 (0x3c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3671DBDAR
Validity
Not Before: Feb 16 02:10:35 2025 GMT
Not After : Feb 18 02:10:35 2025 GMT
Subject: CN=67b1491b-fcc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:82:57:ed:f6:ac:05:c2:44:2b:64:d9:74:19:
d5:75:6f:ba:4f:ee:e1:c2:69:00:30:3b:7e:fb:68:
22:e0:b1:e1:e7:71:97:78:3f:c7:fd:9d:df:07:1e:
f5:85:84:b8:1a:df:0a:06:25:ae:6d:08:69:4e:b9:
85:4e:2c:59:ac:d8:cf:dd:d1:c6:ea:9f:68:1a:cf:
7a:65:3c:41:8a:7e:17:ba:7d:f3:15:40:b3:61:4b:
6f:af:43:38:ed:0e:e6:a0:a6:97:b0:7a:cf:6c:ba:
94:60:aa:f0:f1:f5:33:85:a2:f2:28:7f:72:a3:83:
7f:4f:12:f9:bc:1c:ff:5e:98:10:44:6d:64:b2:2e:
2b:f9:90:6c:47:62:1d:fa:22:b2:c3:63:57:f5:ce:
40:e5:4d:73:18:61:4c:23:7b:5c:41:72:b5:30:de:
50:9d:a4:c5:cf:c6:64:69:0c:b5:a7:e1:b4:7a:be:
1a:f7:b0:9e:87:f6:45:69:69:88:af:fd:f0:13:fb:
39:0a:bf:f0:c1:30:4d:18:0c:bc:ad:7d:d1:6e:95:
22:85:be:d3:09:17:b7:78:16:c6:9a:ca:99:f7:64:
5d:25:ed:5f:8b:f0:c0:86:58:d1:73:d4:0b:12:f0:
52:91:50:b0:de:24:b6:c2:1c:30:46:31:5e:b9:90:
ea:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D3:36:E7:F0:C7:98:13:52:25:DA:62:47:2A:16:43:E7:82:7C:96
X509v3 Authority Key Identifier:
keyid:C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:af:b6:ca:f2:10:37:37:6c:b7:2d:14:ed:99:c9:94:0e:79:
82:25:00:8f:d3:82:2e:f6:e2:e7:52:66:a9:87:b1:6b:c6:6a:
04:bd:60:3e:3e:9e:96:0d:9e:01:2d:ab:1b:36:20:0e:64:fa:
f4:34:be:f9:f1:3e:e2:93:44:39:74:a5:5b:69:84:ea:5e:da:
9e:eb:86:be:83:8b:91:32:6f:f3:31:92:12:b6:b3:4b:9b:41:
14:51:6a:b3:2a:9b:f7:86:c5:4c:45:d9:56:b3:ce:e2:29:aa:
62:60:cc:46:e1:bd:a9:f5:60:05:fa:b6:7d:7c:82:00:d3:2d:
ca:ba:fd:e1:31:c7:33:4e:63:b8:7c:62:f1:14:98:66:2a:af:
06:9e:fb:f2:9e:21:7b:d6:8a:5f:e3:8a:aa:4d:87:96:8b:4c:
4b:6e:20:93:79:bc:b6:bb:9e:96:52:d6:25:25:8e:cf:e1:25:
ca:bc:b2:a2:12:24:6c:6c:43:3d:dc:6c:31:59:47:ed:45:7b:
4b:23:12:48:0f:f5:08:41:f0:e0:e9:39:b4:a7:51:9f:92:ba:
73:36:a9:06:18:b2:a1:59:61:be:ca:a8:65:8d:ac:86:74:76:
f8:95:16:db:f2:ee:89:dd:00:98:c9:e6:14:19:4f:cf:b8:2a:
44:69:0c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:41 2025 by rpki-client