![](/console.gif)
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
File: XozUASYISPXWb0DSj9l3F6nw8mo.mft (raw, json)
Hash identifier: jARPUk+aDtLxjNnirMUFTiSkkYhq6WIM6GPkbQVjj7k=
Subject key identifier: 46:21:9D:31:C2:4C:1B:4F:65:7E:B0:66:49:37:27:EF:1A:0B:25:59
Authority key identifier: 5E:8C:D4:01:26:08:48:F5:D6:6F:40:D2:8F:D9:77:17:A9:F0:F2:6A
Certificate issuer: /CN=F36D8D30AR/serialNumber=5E8CD401260848F5D66F40D28FD97717A9F0F26A
Certificate serial: 0301
Authority info access: rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
Manifest number: 0300
Signing time: Sun 16 Feb 2025 02:23:44 +0000
Manifest this update: Sun 16 Feb 2025 02:23:44 +0000
Manifest next update: Tue 18 Feb 2025 02:23:44 +0000
Files and hashes: 1: XozUASYISPXWb0DSj9l3F6nw8mo.crl (hash: 6K7efTR4+CxENm5QsTVF2dPTe/mrQzte1rYY3gW1omU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 769 (0x301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8D30AR
Validity
Not Before: Feb 16 02:23:44 2025 GMT
Not After : Feb 18 02:23:44 2025 GMT
Subject: CN=67b14c30-5e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:b5:22:38:f4:34:f8:d1:b4:b9:e7:dd:bf:
5e:0d:c8:2c:bd:99:0d:eb:9a:13:82:2f:77:58:4d:
d6:d8:f3:49:5e:3d:ee:32:0d:e7:9c:dc:91:c2:7c:
6d:c8:1a:36:61:76:4b:01:14:80:e9:33:03:18:73:
a5:dd:dd:5f:bb:e4:ff:7c:69:eb:e1:b0:16:04:ed:
0c:cf:bb:cc:31:f2:26:e6:3b:4a:21:d3:35:01:89:
e2:fa:7c:9d:03:2e:d1:42:47:8d:24:0a:2a:8f:a4:
c7:55:67:46:08:77:fb:e0:3e:56:db:6a:80:cd:eb:
94:5b:27:d2:b5:36:c0:e5:aa:29:79:07:88:8f:de:
5d:a1:f2:7f:50:a7:db:aa:aa:ec:23:73:3c:48:c1:
c3:09:2c:d4:c8:e1:95:da:7f:50:5e:2c:b4:ad:81:
a4:d1:19:ae:37:e3:c3:6e:5b:85:55:22:da:e1:f3:
eb:2e:c2:67:e1:50:42:2f:2a:61:a0:53:53:ae:39:
e4:7b:86:e1:49:6c:2e:1e:49:ee:50:2a:c8:ba:64:
a6:dd:f9:ab:11:84:0b:40:4b:99:e4:ec:f6:5c:e9:
f8:b3:e3:bf:85:08:aa:65:ad:15:52:64:b0:93:01:
f7:7b:f2:79:4a:43:ee:f4:17:08:5d:e4:b5:bf:d2:
ae:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:21:9D:31:C2:4C:1B:4F:65:7E:B0:66:49:37:27:EF:1A:0B:25:59
X509v3 Authority Key Identifier:
keyid:5E:8C:D4:01:26:08:48:F5:D6:6F:40:D2:8F:D9:77:17:A9:F0:F2:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:44:67:79:70:8f:bb:86:a1:4b:d5:63:f1:7e:1d:81:ed:7c:
f9:de:e9:e1:bc:76:0c:a1:3c:f8:0a:01:a8:20:9b:5b:2d:8e:
38:37:a3:03:39:49:16:d3:52:7d:8e:5f:49:fb:79:70:01:99:
fc:c8:d1:10:9d:cc:35:05:aa:b1:df:70:5d:ab:62:37:cd:7b:
80:35:9d:d6:ce:09:9d:c2:2b:0e:2f:c3:fb:64:b4:4c:d0:39:
ec:39:8c:24:e6:aa:56:eb:8d:6e:d7:01:da:61:6d:b9:9a:75:
82:e4:30:93:f4:6b:b2:ae:c0:e0:56:d0:98:7c:74:6d:a9:7f:
2d:0d:9a:d1:9c:ce:fd:5c:c8:d3:48:8a:1a:0d:fd:8f:cb:79:
cc:f0:93:66:8d:8b:a7:bc:31:36:48:92:fb:b0:3e:cd:11:9b:
39:aa:3c:9a:60:86:d2:0a:70:23:58:0d:23:c7:72:34:3b:16:
f1:51:10:b4:75:d7:9f:10:84:72:6f:ef:1c:51:f1:29:6e:0a:
87:d5:01:c1:30:60:9f:9f:d3:fc:04:d2:dc:0c:fe:e0:6c:53:
fe:69:45:15:2d:f6:26:2f:42:7b:48:01:a6:8b:60:f2:c9:7a:
98:5c:e3:b4:b0:90:b1:e8:a9:2b:c1:30:e2:3a:6f:c2:d5:1f:
48:d5:98:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:33 2025 by rpki-client