![](/console.gif)
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.mft
File: bBegDOel7ptwctoLjNYoITB00AE.mft (raw, json)
Hash identifier: x8fRxKx1t0MVSFm+ltrPgDZInqFWmm5++0LOruDqH2g=
Subject key identifier: B0:DA:0C:03:3F:50:38:30:3F:20:68:17:A5:F6:C9:A3:10:A5:E8:C1
Authority key identifier: 6C:17:A0:0C:E7:A5:EE:9B:70:72:DA:0B:8C:D6:28:21:30:74:D0:01
Certificate issuer: /CN=F367D0C5AR/serialNumber=6C17A00CE7A5EE9B7072DA0B8CD628213074D001
Certificate serial: 030B
Authority info access: rsync://rpki.afrinic.net/repository/arin/bBegDOel7ptwctoLjNYoITB00AE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.mft
Manifest number: 0309
Signing time: Sun 16 Feb 2025 02:23:14 +0000
Manifest this update: Sun 16 Feb 2025 02:23:14 +0000
Manifest next update: Tue 18 Feb 2025 02:23:13 +0000
Files and hashes: 1: bBegDOel7ptwctoLjNYoITB00AE.crl (hash: Llokur8zlXkPFDYaHx9Dxs2mNaLuRukWh6HvncTLxeE=)
2: 0C8DE5D04FC511EE980D7F164AD9E6FC.roa (hash: sboLQWOdsfngWR3FIp/k7CaTYwMhhstu8x5+Uywb2Lw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.crl
rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.mft
rsync://rpki.afrinic.net/repository/arin/bBegDOel7ptwctoLjNYoITB00AE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 779 (0x30b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367D0C5AR
Validity
Not Before: Feb 16 02:23:14 2025 GMT
Not After : Feb 18 02:23:13 2025 GMT
Subject: CN=67b14c12-89f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9b:2b:d3:b3:46:14:4e:31:b4:78:7d:05:d0:
1f:bd:33:c2:e6:0f:94:2c:f0:fe:30:30:97:37:e1:
a8:b8:9b:5e:5b:6f:96:06:0b:2b:fd:65:81:e1:e5:
62:6f:58:97:b0:ce:ef:e2:bc:96:34:e0:45:64:23:
c9:d7:b8:b1:06:74:c3:09:f2:95:70:9e:31:2b:ad:
41:a1:3e:18:06:f2:4f:51:02:0a:a7:81:22:bf:22:
59:5e:27:97:63:d2:b0:83:5e:af:22:f0:0d:fa:41:
ec:b6:44:1f:04:dd:e3:93:49:fd:88:dc:56:e3:fa:
e7:66:8f:6b:56:ad:94:c1:76:77:05:de:71:02:c0:
29:a8:96:2a:90:c8:52:e7:8e:f8:dc:01:e9:82:ef:
74:71:f8:1a:1e:89:21:9e:11:77:9f:2e:1d:9b:ce:
eb:96:dc:80:4a:2f:ef:e8:c0:c6:83:e8:b9:08:56:
1a:9b:3b:30:3b:fd:ed:16:ed:47:76:15:03:50:9d:
90:bb:20:95:5d:e5:9d:40:93:94:25:e6:18:79:15:
c8:38:6f:2a:04:a8:a0:3e:c5:56:60:ec:de:01:d9:
f3:66:b6:a2:a8:e7:1e:3f:99:0c:83:e1:85:d7:0a:
14:f5:e7:08:a6:74:7c:89:33:91:c5:dd:70:d0:20:
e5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DA:0C:03:3F:50:38:30:3F:20:68:17:A5:F6:C9:A3:10:A5:E8:C1
X509v3 Authority Key Identifier:
keyid:6C:17:A0:0C:E7:A5:EE:9B:70:72:DA:0B:8C:D6:28:21:30:74:D0:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bBegDOel7ptwctoLjNYoITB00AE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:17:8b:ba:62:f6:a2:83:08:e4:b0:a7:5b:32:7c:3e:e5:0d:
9a:9b:66:e4:05:84:48:7f:5e:47:2d:d3:b6:1c:b7:ab:d5:e6:
ee:06:7e:87:ee:82:5f:84:58:e3:f0:b1:b1:90:49:da:ed:6b:
16:91:2a:5b:4e:42:3f:10:c6:e1:e5:1f:73:fd:6d:da:10:67:
6d:23:24:4e:61:9f:0d:12:b8:19:81:9b:af:64:fb:fe:4e:a3:
a7:22:39:5a:f4:cf:4e:76:81:32:64:84:c9:f7:bc:5e:6e:7f:
70:93:e3:a2:03:86:ed:2c:7e:f8:f0:4d:71:74:3b:50:28:1e:
e8:4e:0d:a4:d5:85:06:dc:a5:87:94:a9:3b:e2:66:5f:87:ed:
34:6f:b7:8c:ca:33:9b:74:64:fb:92:a9:6a:b1:b7:76:b4:4b:
78:80:8f:59:f6:7c:79:72:a9:1b:1a:6b:76:f7:9f:a6:67:6e:
86:3a:2c:d7:a7:c8:a9:83:2d:c3:7f:c9:cf:71:19:f8:f5:d3:
8d:ac:b9:8d:15:e2:3b:2c:4b:64:de:8d:a9:ff:a7:ba:11:f9:
87:ba:40:23:ad:38:c1:6f:78:ef:a8:15:f8:3a:92:e4:ee:3b:
3c:57:f2:65:84:30:47:80:9e:f1:53:0e:da:9e:73:ed:6d:63:
ad:2a:ea:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:25 2025 by rpki-client