![](/console.gif)
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
File: Ic9mCQ8NCPeTru46mq74zw9BMAs.mft (raw, json)
Hash identifier: 7/JD33xCYwoR7kT6wN3sot0GzRWwTCAzJJ7wf3QBVJk=
Subject key identifier: D6:8C:7C:47:8B:29:41:12:83:D9:8B:FE:30:6C:5F:8C:A8:0F:CD:77
Authority key identifier: 21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B
Certificate issuer: /CN=F36818C8AF/serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B
Certificate serial: 0530
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
Manifest number: 052E
Signing time: Sun 16 Feb 2025 01:45:43 +0000
Manifest this update: Sun 16 Feb 2025 01:45:42 +0000
Manifest next update: Tue 18 Feb 2025 01:45:42 +0000
Files and hashes: 1: Ic9mCQ8NCPeTru46mq74zw9BMAs.crl (hash: NRc8zb+xVg5JAMUdIuGAow5xzLixAy2kfRM4d/MHlvQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1328 (0x530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36818C8AF
Validity
Not Before: Feb 16 01:45:42 2025 GMT
Not After : Feb 18 01:45:42 2025 GMT
Subject: CN=67b14347-4690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e0:29:4d:de:fd:1f:dd:30:b7:5e:ae:72:1c:
54:da:96:b5:a2:b9:b9:4c:86:8b:f3:5c:38:9c:84:
31:9d:a6:a0:aa:98:fa:5e:3e:48:27:09:6c:42:4a:
17:e2:b5:cd:e2:80:fd:ae:8c:e6:c0:3f:b7:70:c2:
85:ba:84:2e:b6:7f:27:1a:48:88:c8:6d:fe:54:31:
63:98:9b:a8:53:51:4d:a8:89:43:3e:a6:b0:dd:2a:
7d:0c:51:9c:cb:22:4b:0f:09:bc:4b:a5:7a:73:0c:
cd:0a:ac:05:f0:52:4b:d8:0a:25:f6:32:36:c9:1e:
d3:d3:72:df:b0:18:08:50:1b:d5:9d:94:9b:e1:e6:
da:1e:70:01:1f:da:eb:fd:32:30:12:be:cd:8a:cc:
ad:ca:0c:ce:84:fc:0d:01:62:0c:e4:68:ad:38:ff:
39:87:fd:9a:8b:22:f7:a1:3a:73:bd:c4:bc:b7:26:
e6:88:64:2f:62:67:76:12:00:15:1f:dd:b3:ff:bc:
72:40:9c:98:b3:0e:8b:bf:ee:7b:07:61:cc:20:77:
b2:8f:cf:db:cb:0e:fe:28:5c:fb:e5:e5:33:af:0a:
d8:ac:c2:d8:81:97:c1:88:8d:30:22:6d:25:96:7d:
9e:4d:73:09:73:fc:8e:ae:60:75:a5:28:4a:f0:9c:
3c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8C:7C:47:8B:29:41:12:83:D9:8B:FE:30:6C:5F:8C:A8:0F:CD:77
X509v3 Authority Key Identifier:
keyid:21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:55:3b:58:0e:c0:58:c5:9c:05:c8:e0:10:fa:b5:37:34:63:
52:97:71:95:1e:ff:31:14:9d:83:dd:3d:d4:ea:8b:22:16:dc:
da:9e:98:7a:1b:4d:04:c2:c9:a3:cb:b9:64:cb:4e:32:4b:fd:
6b:6b:b8:53:4c:ac:3e:5a:5b:e6:87:22:62:f7:4e:fd:e0:b6:
79:58:75:ef:a5:97:0f:49:27:e1:dd:7c:c2:2d:a4:49:3f:9a:
3b:74:b4:7a:87:38:86:f1:cc:75:58:c9:c9:f0:4e:e7:33:d9:
03:06:17:0b:55:3d:90:90:7e:e7:62:4c:59:da:17:04:cc:26:
55:43:dc:43:35:e7:a4:ca:3b:42:9a:15:4c:eb:e2:d5:ed:16:
9e:a1:09:dc:dd:c9:00:73:56:af:28:4b:78:a3:98:ef:79:71:
78:9d:7c:81:a4:cd:a6:7d:c4:34:db:b4:a1:70:9d:48:07:cf:
b7:51:c4:fc:69:d4:dd:b2:05:65:70:59:b3:c2:02:ca:90:48:
91:68:91:b6:1e:97:af:27:fe:89:4f:9d:51:9b:52:d9:c0:9d:
f0:0b:96:47:85:b4:84:35:98:07:18:5a:af:64:86:4d:b6:67:
d0:08:c1:07:4a:ed:1f:c0:79:76:ad:9e:fa:00:b9:ee:3b:15:
40:4b:51:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:00 2025 by rpki-client