![](/console.gif)
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
File: 0uDwPq7oAqkBwlcRKP55pj80aSw.mft (raw, json)
Hash identifier: 4anRR/d0PsUmrFp6eeeVm8eeAQx/H1qV8jmiH6ZUPoE=
Subject key identifier: 5E:18:BF:A4:BD:53:F0:15:8B:C0:6E:4C:AC:03:D3:1C:A2:51:BF:9E
Authority key identifier: D2:E0:F0:3E:AE:E8:02:A9:01:C2:57:11:28:FE:79:A6:3F:34:69:2C
Certificate issuer: /CN=F36858D5AF/serialNumber=D2E0F03EAEE802A901C2571128FE79A63F34692C
Certificate serial: 0236
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
Manifest number: 0235
Signing time: Sun 16 Feb 2025 02:41:05 +0000
Manifest this update: Sun 16 Feb 2025 02:41:05 +0000
Manifest next update: Tue 18 Feb 2025 02:41:05 +0000
Files and hashes: 1: 0uDwPq7oAqkBwlcRKP55pj80aSw.crl (hash: iUPO2rlhfgHfSoK8aZPnGu/RFQL8MxjWcdu8Rbnc0b0=)
2: 6C083968730911EEB676D5174AD9E6FC.roa (hash: GPazHsxOeA8iw549I//PnsuiDjidxxug1DVogvWrQ6I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 566 (0x236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36858D5AF
Validity
Not Before: Feb 16 02:41:05 2025 GMT
Not After : Feb 18 02:41:05 2025 GMT
Subject: CN=67b15041-de1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:73:73:68:42:c0:62:48:fa:c6:c1:c7:bd:85:
93:c0:1c:fc:bd:1d:6d:13:f6:aa:9a:ee:50:8b:d9:
21:47:93:73:f2:29:da:c9:8c:ab:94:84:ea:47:f9:
8d:e6:60:b4:a4:83:61:ba:80:02:81:df:78:96:57:
0d:ae:5f:98:83:46:51:60:09:ad:d8:90:e5:d0:f8:
f5:ce:5e:7c:e4:1a:56:17:ff:3f:78:ae:93:f9:96:
a8:92:63:08:ae:80:97:a1:25:38:b1:bf:8d:cc:d7:
8f:97:ce:a2:f5:64:5d:98:c0:93:19:7d:d9:6a:90:
47:fd:08:39:db:e7:85:3e:da:65:71:1e:71:62:80:
67:2c:09:cd:9a:f7:81:d1:17:2c:83:43:8c:59:26:
a9:07:aa:c7:40:8e:61:43:38:36:62:54:b6:3f:74:
f9:17:4c:41:fc:70:4e:6a:70:2d:0c:d1:36:dc:65:
4a:ed:45:af:b8:8e:cc:99:d1:70:a3:09:d6:cc:b2:
b6:16:f4:70:39:e5:c9:ec:b8:44:fe:a4:28:6b:bc:
b5:ec:b7:54:0f:ac:63:b1:ad:7a:22:a0:5e:15:98:
44:ec:a7:50:f5:b2:de:31:cd:29:24:47:55:ed:9c:
3c:84:d7:55:2d:1d:fe:7e:81:42:af:e8:59:2d:ef:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:18:BF:A4:BD:53:F0:15:8B:C0:6E:4C:AC:03:D3:1C:A2:51:BF:9E
X509v3 Authority Key Identifier:
keyid:D2:E0:F0:3E:AE:E8:02:A9:01:C2:57:11:28:FE:79:A6:3F:34:69:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:8e:bd:d9:03:f6:ad:1b:a1:2d:9d:ab:f0:6a:d8:40:96:9e:
47:0a:c8:a5:a4:32:f0:0c:2f:85:ef:dc:1f:6b:29:bd:b9:69:
8a:ce:74:3d:22:09:63:c1:5b:39:8b:f5:ff:0b:57:87:7d:c2:
b0:e5:6a:7e:dd:b2:9a:33:b0:fd:ca:00:0d:f2:1c:6e:55:10:
95:db:08:a8:19:90:5f:4a:03:ba:5f:c7:30:3b:38:e1:14:a5:
bd:c7:cd:9e:ca:5e:f5:d2:1b:0e:41:44:d3:29:da:aa:57:aa:
e1:8b:d5:d2:b3:66:35:a9:4a:a6:9b:59:aa:4c:fd:24:e7:57:
36:8f:af:25:f5:44:23:df:92:72:99:e0:2d:a0:ea:76:5c:ea:
e9:d8:7d:74:7d:29:1c:50:71:75:d9:2f:9e:23:03:c2:47:59:
29:7b:1c:21:2d:b8:8a:42:5a:73:2a:6e:7e:c7:b3:24:7e:f3:
eb:6a:a9:d7:ab:da:59:02:15:3d:28:bb:93:95:25:22:62:2b:
1d:29:3f:4c:b2:9b:2d:ad:d8:b7:63:a1:ed:a2:2c:8f:16:b2:
2e:86:da:59:6a:c7:3e:fd:55:4c:e2:1f:b6:a5:9e:8a:63:7f:
a9:5b:95:dc:54:03:52:c9:b5:29:52:b6:61:c1:94:d2:55:8c:
5c:fe:f1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:39 2025 by rpki-client