![](/console.gif)
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
File: MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft (raw, json)
Hash identifier: h0wVBC1G/1r3uwvDWp9DsG19yUg3jLCsBPRlrlvKFQY=
Subject key identifier: 57:53:87:89:1B:28:58:BE:48:D9:FF:AC:1E:B1:40:7F:24:D8:D5:30
Authority key identifier: 33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74
Certificate issuer: /CN=F3691854AR/serialNumber=33084FAF933C724D32E6DFA79F15CD16F3D82E74
Certificate serial: 01F6
Authority info access: rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
Manifest number: 01F5
Signing time: Sun 16 Feb 2025 02:45:19 +0000
Manifest this update: Sun 16 Feb 2025 02:45:19 +0000
Manifest next update: Tue 18 Feb 2025 02:45:19 +0000
Files and hashes: 1: MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl (hash: O3Qm6S6UxmZoOfvSAziST6nwSisugeYLybcX0YQSTaM=)
2: 2BBC033C71AE11EEA2D2E5354AD9E6FC.roa (hash: 2uI0q3ii9m0usdGfquktABEqM6p1z0wsDQZ+3pXcYh4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3691854AR
Validity
Not Before: Feb 16 02:45:19 2025 GMT
Not After : Feb 18 02:45:19 2025 GMT
Subject: CN=67b1513f-bbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:f8:65:36:73:d8:3f:ad:d5:de:5f:81:79:
c6:f8:86:cf:1a:23:d1:1f:57:1a:45:7e:73:02:91:
c4:c2:b6:d4:f1:14:bc:f0:0c:e9:ee:34:3f:36:74:
86:fb:6b:ca:ad:8c:ee:d7:bd:ec:1e:92:2a:75:56:
91:d8:6b:9b:66:ce:26:73:a0:d8:dc:9b:87:ac:28:
e9:e8:96:1b:c1:ee:8b:1a:57:07:3c:9e:2c:ac:e0:
e2:b1:18:fa:94:c9:61:43:65:d4:72:e8:58:98:32:
0d:67:4b:c3:1a:51:e8:e2:bc:a1:8d:e6:5e:43:67:
b4:df:77:97:d3:03:c0:43:9b:f2:13:28:f3:cb:d3:
d1:e3:3c:32:ef:53:c8:d4:f3:b1:02:09:bf:c9:d8:
62:48:ce:e0:66:c6:ee:13:fd:0f:a6:90:b0:39:3c:
ae:b2:30:39:85:f9:12:77:15:d0:f6:85:fb:42:fd:
04:a3:d5:5b:72:a8:36:4e:e7:13:21:9f:e7:ad:a9:
07:b7:d2:cf:9c:e6:f4:12:45:66:d4:a9:d1:db:a7:
89:6f:77:7a:cd:1c:6e:cf:00:0e:93:b8:33:12:17:
98:50:65:52:4e:7d:1d:55:74:eb:6f:ab:62:d9:fe:
93:88:69:3a:37:6b:b0:8f:87:a7:88:f2:b4:c6:57:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:53:87:89:1B:28:58:BE:48:D9:FF:AC:1E:B1:40:7F:24:D8:D5:30
X509v3 Authority Key Identifier:
keyid:33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:12:38:41:6b:85:6b:2e:e2:cc:43:53:80:8a:d5:9d:c5:b5:
0b:dc:49:d6:b7:a6:15:a5:87:0e:7c:88:77:33:8d:20:c0:29:
df:2a:f6:04:ec:15:99:31:b7:e8:2d:35:be:2c:7b:82:53:2a:
0a:bf:c8:5c:2b:ef:6c:d7:b0:44:51:f8:c3:c9:8e:22:8f:d3:
ed:02:6a:85:ec:aa:db:ee:b9:41:0d:39:6e:cf:da:a7:5e:ba:
7d:a7:45:24:02:61:44:32:09:0e:79:ec:3c:6c:7d:65:7b:c5:
46:d1:9b:a7:71:b9:41:90:44:88:78:3a:8a:55:88:a7:7d:73:
6c:d4:ca:c0:f2:32:d8:f1:ec:a5:fb:72:d6:95:32:c4:c6:0c:
71:fe:4f:e2:d9:c1:5d:7a:63:73:8f:29:7e:ff:b7:eb:b8:30:
68:8f:48:27:07:75:01:cc:4a:d9:c9:6c:f0:b1:a2:7a:d2:68:
e0:6e:8e:87:9b:a9:97:e4:bc:d7:8c:5a:69:0e:86:f9:f9:31:
fd:52:0b:b2:a0:06:be:f5:42:5c:dd:7b:43:cb:d2:58:72:7c:
37:53:21:62:84:e1:c4:fc:d8:5d:ce:9c:71:b5:bc:5e:ad:0c:
0a:a3:67:32:27:a6:68:f2:68:57:04:26:4d:ee:8d:33:d4:64:
f9:4a:29:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:37 2025 by rpki-client