![](/console.gif)
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
File: -Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft (raw, json)
Hash identifier: /zIKA2LioD306RGFAIfJjSZ/aoJ61//CS4OXrJE4QFA=
Subject key identifier: 83:8B:48:2B:26:18:2F:D6:57:A2:78:0D:AA:A6:F4:E8:23:F7:26:8D
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 085C
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
Manifest number: 085B
Signing time: Sun 16 Feb 2025 01:15:31 +0000
Manifest this update: Sun 16 Feb 2025 01:15:30 +0000
Manifest next update: Tue 18 Feb 2025 01:15:30 +0000
Files and hashes: 1: -Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl (hash: XZ4wsFMMSj8Jyg4G3+hVAGLTrVGWnrjE8wwjKKx1Hoo=)
2: CC310B4E890C11E9A4E3BF61F8AEA228.roa (hash: ihADbR6U+GfVQt9LE7QygTkif7rJadS5w63IsgC6psc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2140 (0x85c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR
Validity
Not Before: Feb 16 01:15:30 2025 GMT
Not After : Feb 18 01:15:30 2025 GMT
Subject: CN=67b13c32-c4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:a7:8c:51:4c:3b:4d:bf:28:ee:80:62:db:
3c:42:40:89:03:3f:25:52:73:7a:77:8c:17:90:3e:
f2:06:8f:ce:56:0a:5d:2a:43:75:02:bb:30:d9:40:
ba:ae:16:9c:c0:c5:9a:9a:da:58:58:c1:cc:85:df:
d9:75:1a:14:21:59:14:33:c4:c6:f8:2c:4b:bd:e6:
c2:07:b9:66:31:b1:25:93:d4:a4:c9:3b:be:b3:f4:
5e:4b:49:2e:aa:e1:35:34:9d:06:37:36:99:af:b7:
85:cb:b5:8f:df:fc:e3:7a:ca:40:28:81:85:bd:89:
5d:1f:bc:8a:f3:60:ef:e2:7e:8a:ae:62:6d:81:5f:
f4:21:9a:c9:f4:6f:eb:ec:83:51:1d:dd:15:d6:37:
52:6d:ef:1f:d2:b9:7e:91:d7:24:6d:4a:7b:f6:db:
0c:f1:b5:d9:06:ce:14:72:e6:52:06:80:27:ce:cb:
f4:d6:16:71:ab:e6:d9:30:03:12:8a:98:8e:13:94:
a4:a4:ba:3b:36:7c:4d:b2:f4:bb:89:21:b3:76:92:
cc:2d:66:8f:2b:90:81:97:ab:42:9c:f3:ce:1d:45:
6e:ef:22:a7:07:38:b8:fe:d0:c4:f0:d3:77:17:f0:
1b:5a:de:ab:65:c8:e3:91:25:60:90:96:5c:36:1a:
9b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8B:48:2B:26:18:2F:D6:57:A2:78:0D:AA:A6:F4:E8:23:F7:26:8D
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:28:ee:a6:7d:03:5c:80:ba:ce:5b:e6:6c:8e:d3:d3:e3:f6:
cd:7f:07:e7:f2:df:83:3e:86:ec:dd:7f:d5:28:97:57:53:b4:
21:8d:7d:82:53:0c:da:26:71:f2:84:3d:07:27:44:f7:9c:df:
15:94:c3:99:11:9a:14:03:09:51:5b:73:ff:49:b9:fc:b2:f2:
61:6a:7e:a1:cc:57:3a:9e:c8:db:0f:77:15:04:8f:67:08:b5:
f7:20:42:ce:fa:7a:57:60:b7:66:0c:9a:d9:8e:d0:1d:e9:58:
a6:cb:cc:5e:71:c5:63:65:ac:dd:d6:9c:c4:22:49:d7:7e:b0:
08:46:ef:62:d6:91:16:68:00:10:08:ff:50:75:ec:c3:2a:95:
ff:32:cd:22:e3:37:eb:b9:28:d1:86:8b:1b:ec:be:b4:75:b9:
a8:ae:cd:b6:40:9c:99:ba:64:4a:5f:d7:da:e8:56:da:f0:b9:
ae:89:13:f1:18:c7:1f:92:f7:67:87:df:89:0c:91:64:9f:68:
ba:87:1f:7a:e0:0a:11:f8:07:27:2a:3a:0b:b2:c4:9f:4f:b9:
d7:14:7a:37:dd:2e:67:80:b9:a7:04:d5:5b:3b:2c:f1:80:29:
7b:4b:5e:0d:ee:02:ab:e8:de:05:b8:e9:8b:4e:a3:80:01:71:
94:15:1a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:19 2025 by rpki-client