![](/console.gif)
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
File: XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft (raw, json)
Hash identifier: ZdD+qoqiuJ/fkkWL2GnT7ZCwJj2Bvdg+xgbsw9sgyck=
Subject key identifier: B5:90:14:5A:92:28:59:D0:C7:62:B9:D9:DC:89:C5:43:CF:22:F7:25
Authority key identifier: 5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF
Certificate issuer: /CN=F3682615AF/serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
Certificate serial: 03AE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
Manifest number: 03AC
Signing time: Sun 16 Feb 2025 02:11:57 +0000
Manifest this update: Sun 16 Feb 2025 02:11:56 +0000
Manifest next update: Tue 18 Feb 2025 02:11:56 +0000
Files and hashes: 1: XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl (hash: W3xEuHzdR6p+haPfPIClQ9jri2k68PaPbllFvrG5xHY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 942 (0x3ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682615AF
Validity
Not Before: Feb 16 02:11:56 2025 GMT
Not After : Feb 18 02:11:56 2025 GMT
Subject: CN=67b1496c-baff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:ac:7f:d4:41:8c:90:e9:4d:f0:87:72:d8:
a3:0b:fb:7c:1e:0d:dd:9b:2d:c5:b0:da:a0:71:54:
0a:6a:12:33:b2:bf:fd:f5:50:bf:7c:85:7b:a4:fd:
b2:ca:79:d8:99:27:f5:b8:74:42:24:96:e5:01:4f:
75:f7:28:50:19:86:c6:36:85:21:d9:1b:18:19:b8:
2d:22:73:0a:51:63:e9:8d:fd:d9:ba:86:a8:8f:49:
71:60:0f:7c:72:dd:bb:d7:5f:df:b7:0d:31:0e:5a:
73:01:ce:1c:97:5b:d9:49:13:8d:38:d8:f4:f0:71:
ca:82:50:a0:71:94:71:68:51:fb:fe:d2:8e:3d:68:
ee:d2:f2:7a:16:c9:29:28:0a:05:c2:c8:bb:a4:a5:
97:df:73:78:e8:59:e4:c7:8a:46:5a:98:6d:46:31:
ca:7c:6d:d5:57:66:73:1d:91:bd:2e:96:5c:cc:d3:
ec:af:b5:25:27:ae:f0:9c:1d:f3:a9:3a:ac:96:fd:
6e:a3:84:f8:b6:25:87:91:2a:12:dc:20:97:ef:af:
dd:a4:5f:5f:b0:c4:fa:95:28:9e:ac:3e:99:f8:d0:
4c:60:58:10:72:09:0d:6b:0d:53:85:36:1a:b4:9e:
03:93:2f:33:f0:11:df:24:28:10:25:f0:83:8c:c1:
72:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:90:14:5A:92:28:59:D0:C7:62:B9:D9:DC:89:C5:43:CF:22:F7:25
X509v3 Authority Key Identifier:
keyid:5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:f3:bb:bd:9e:27:50:5c:01:5a:b4:94:47:34:91:52:1a:6d:
65:1b:2a:4d:07:48:c7:5a:4e:0a:83:88:5e:5a:81:0a:2a:2e:
ac:1e:53:04:65:6f:6f:76:a9:5b:db:9f:79:32:83:52:21:a1:
eb:38:1f:02:b4:85:96:19:1e:bc:d5:71:d2:39:27:77:12:96:
d9:9c:3c:04:51:ae:6d:56:85:dd:ce:30:82:d7:ac:05:d7:fa:
e3:cd:fc:74:64:83:60:cd:1b:ae:fd:40:01:c2:70:b1:b5:5a:
0d:1d:b6:35:b5:93:eb:1e:c4:89:6a:f6:41:21:35:3a:28:07:
41:45:cc:f8:1a:7f:b5:44:da:ee:45:c5:3e:9d:03:d2:e9:71:
48:8f:43:09:8f:81:c6:57:d7:e3:20:c2:14:46:3c:37:78:33:
9f:fd:b7:6b:68:26:50:56:00:11:f0:c5:f3:62:0c:2f:c5:b5:
a3:ce:af:a7:fd:e1:30:46:5c:cd:90:6e:d6:6b:5c:16:9f:51:
b3:6a:18:7d:c6:01:5e:78:b0:66:ab:a8:41:5d:68:f5:c7:a5:
13:c5:36:4e:75:89:1c:ce:0d:c4:19:7c:ae:aa:fd:d5:d3:a7:
c8:81:4a:0b:4e:f3:0f:b0:fa:8a:1e:aa:ae:be:3b:09:67:81:
9a:2f:aa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:02:25 2025 by rpki-client