![](/console.gif)
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
File: IMgTB9QVShV5wAQJACMAaCWVvTU.mft (raw, json)
Hash identifier: Izj46BTioEZW3o/BYTZjP4QGi5GG9eZCVLyyZeoh/5o=
Subject key identifier: 6E:73:7C:BD:F7:AF:3D:7A:91:3F:6B:FA:99:5A:78:C9:6C:09:C4:E2
Authority key identifier: 20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
Certificate issuer: /CN=F36DD00FAF/serialNumber=20C81307D4154A1579C00409002300682595BD35
Certificate serial: 02C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
Manifest number: 02C5
Signing time: Sun 16 Feb 2025 02:28:51 +0000
Manifest this update: Sun 16 Feb 2025 02:28:51 +0000
Manifest next update: Tue 18 Feb 2025 02:28:51 +0000
Files and hashes: 1: IMgTB9QVShV5wAQJACMAaCWVvTU.crl (hash: ufMysOFhWaVVl52I5H0xn1UijPlvFJIIkmphasD1eaU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 711 (0x2c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DD00FAF
Validity
Not Before: Feb 16 02:28:51 2025 GMT
Not After : Feb 18 02:28:51 2025 GMT
Subject: CN=67b14d63-f239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:f1:01:94:74:40:99:3f:17:25:58:f3:6e:
ba:82:fb:e9:ce:ec:2b:09:e5:e5:1d:04:12:61:60:
74:e6:82:db:d4:ed:86:7e:fa:e4:89:59:8c:1a:fc:
c2:d0:a7:71:18:21:ac:57:5e:17:af:74:85:c1:e9:
ca:08:d1:65:c4:71:a1:9c:55:36:8a:47:69:c2:e0:
72:30:4f:7c:eb:fe:29:dc:de:e7:13:33:54:27:d6:
44:16:d1:48:3e:50:f1:45:99:bd:ff:a6:a9:cb:f8:
4c:1f:61:59:c4:66:36:24:ba:5e:ff:dc:0f:33:9f:
63:70:cf:d4:58:b5:34:4b:9e:2d:ea:0b:57:8f:72:
e8:b2:dc:6c:09:1b:14:2e:6b:d6:17:87:ff:b8:e6:
9e:c3:d7:ca:db:8b:45:b9:3b:4c:41:a9:76:ae:58:
65:9a:ef:1d:36:13:f6:76:0c:00:93:5d:ed:6f:0a:
9a:04:89:1a:ad:d3:2c:35:c0:27:04:3c:db:84:32:
db:79:41:a5:79:c9:07:73:eb:52:33:02:a6:37:69:
e4:ca:52:7f:52:cc:09:a7:61:12:35:4c:2e:ea:c8:
88:b3:9b:39:63:8f:a3:48:0a:73:f3:30:19:88:9e:
cb:6e:6d:42:b1:94:14:97:81:f8:35:f7:27:cd:4f:
27:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:73:7C:BD:F7:AF:3D:7A:91:3F:6B:FA:99:5A:78:C9:6C:09:C4:E2
X509v3 Authority Key Identifier:
keyid:20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:69:ab:31:66:94:95:b1:92:6d:7a:7a:8a:c6:8d:b6:99:dc:
99:4c:d5:b9:e6:ee:8e:66:b8:f9:e1:1a:21:38:8b:96:ca:f7:
27:e3:f6:1a:0a:b8:72:e6:ce:3a:78:c5:d9:14:54:15:db:f8:
5f:e9:02:b8:9d:34:67:31:1a:46:0d:5c:d8:c4:82:11:ac:c7:
75:4f:1a:ea:df:55:0e:6c:a3:c0:60:fe:64:40:95:38:37:ff:
76:b7:37:d3:9e:c3:75:db:f6:55:f9:79:7c:06:ba:3d:5e:84:
7c:45:27:0a:47:e1:0a:b4:c8:3f:1c:2c:e6:4a:79:74:2d:b5:
71:23:a5:56:67:9f:d2:af:95:d7:3f:7e:fa:a4:b9:79:21:7d:
80:04:94:5d:11:c8:b5:b0:58:33:93:30:47:99:52:e0:a6:9a:
a7:12:1b:f2:2d:b3:b0:a4:11:d2:12:6b:c2:ce:1d:58:97:68:
a0:0a:8c:52:6e:57:3a:75:d3:97:90:b2:ef:34:d0:63:c8:b6:
18:63:f5:7f:26:8b:55:95:81:ea:77:ed:83:8d:f3:f3:2f:9f:
51:c5:9d:32:3c:b6:fa:ab:14:20:56:d1:19:7b:63:c7:f5:a8:
d3:ba:85:8b:53:fd:44:71:68:2b:5c:e9:3f:35:5f:1e:cb:c8:
37:46:7e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:02:28 2025 by rpki-client