![](/console.gif)
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
File: xzPtGnZ0IO71PgVhh4EL45NKpSA.mft (raw, json)
Hash identifier: skSDXXdIkbtCCn71TaNgKEIGKoeQhyj7xQw1itaFPDU=
Subject key identifier: 92:47:8B:57:A0:48:F9:93:AA:EE:D0:AF:B0:03:B6:10:C2:C9:9D:A9
Authority key identifier: C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
Certificate issuer: /CN=F36E8BF7AF/serialNumber=C733ED1A767420EEF53E056187810BE3934AA520
Certificate serial: 028F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
Manifest number: 0286
Signing time: Sun 16 Feb 2025 02:33:56 +0000
Manifest this update: Sun 16 Feb 2025 02:33:56 +0000
Manifest next update: Tue 18 Feb 2025 02:33:56 +0000
Files and hashes: 1: xzPtGnZ0IO71PgVhh4EL45NKpSA.crl (hash: tZ43IUa9zND2SymRov6EiXU7XWaF+XbAC/Gb7sHRCjg=)
2: 3B9C0E80353211EF900BF8A1762E951A.roa (hash: MElZ7ONbYF4j1b7yLCYGG8hDaXP7MrOVtbEMu319Jmg=)
3: ABF4D51E353111EFA677899D762E951A.roa (hash: yT0hru8iHgEWTgBifTCuUqU1fmi51TY4WdhFSmOp3EM=)
4: AE6AFD92353011EF959AA994762E951A.roa (hash: vSgA9/geIa/jjYfuxFpaP7EurXT4Nf4QWhe78zClV7I=)
5: E4EAD8C4353011EFBA2CCD98762E951A.roa (hash: Afj2XOaT1THQy02YkhBrihtMAAj3OFu2AXPVcjK91qY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655 (0x28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E8BF7AF
Validity
Not Before: Feb 16 02:33:56 2025 GMT
Not After : Feb 18 02:33:56 2025 GMT
Subject: CN=67b14e94-233c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:bd:19:8d:d8:93:7e:ac:06:3a:e5:d7:8d:
59:25:9d:89:e3:51:7c:89:15:c8:e9:e1:76:62:3f:
25:f4:76:78:87:31:9d:55:6a:2f:e3:48:a8:4f:92:
64:65:8d:17:d6:1f:5f:9f:b0:19:d0:33:04:5e:36:
e1:27:fc:37:6b:14:cf:f9:4b:ff:cb:d6:6d:ed:14:
02:e8:1b:de:af:ae:a1:6b:8c:8d:1a:3a:33:73:ca:
07:53:7c:71:b6:42:d6:4a:58:c7:fc:9c:4c:11:44:
0e:ce:16:e2:01:bd:ff:ce:1b:c7:8f:56:c6:fd:d9:
5c:e9:f3:16:ed:aa:06:26:05:df:e8:c7:c1:06:16:
f4:6f:2d:27:6f:4f:1d:8a:18:a7:11:0f:e5:f8:3d:
f4:eb:44:24:29:97:b6:d8:34:79:ce:6f:17:d6:83:
f4:95:fc:e2:a4:0a:77:cf:85:c1:1b:35:58:89:87:
ea:8d:85:5f:41:80:85:73:dd:68:76:a1:70:b7:17:
73:12:b8:21:db:24:6f:38:fd:76:35:cc:de:62:90:
9e:69:8c:c9:6b:28:e0:b8:fc:d8:10:92:24:29:84:
12:ea:41:20:f5:5a:65:9d:0b:88:f8:c6:8e:9f:f4:
67:30:1b:19:76:da:b3:36:41:48:dc:61:62:a7:56:
03:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:47:8B:57:A0:48:F9:93:AA:EE:D0:AF:B0:03:B6:10:C2:C9:9D:A9
X509v3 Authority Key Identifier:
keyid:C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:64:fa:4e:7c:33:d6:12:1e:60:48:b6:8e:21:26:73:cd:ca:
11:47:a1:51:4e:8b:cb:61:fa:6d:38:fe:a3:0c:89:2c:40:1b:
aa:60:ad:f9:63:dd:34:7b:1e:00:5b:83:af:7c:bb:3c:d3:67:
30:29:59:02:46:d9:af:8c:5c:0c:47:f5:12:c7:8f:91:e9:fe:
b0:6a:18:72:68:98:73:34:1d:73:49:43:88:af:fe:b1:98:2f:
a6:c1:7d:c0:27:d2:79:f9:61:74:87:c3:02:ae:20:f3:56:09:
68:46:f4:e3:bf:31:07:ea:20:da:4b:fc:17:09:19:1f:0d:63:
23:7d:f4:79:b9:bf:d4:92:c1:1f:9d:c2:29:6b:5d:5d:40:4f:
6a:17:fd:be:81:fc:4e:e5:53:98:ee:da:5d:8b:a8:d4:a1:44:
65:cd:82:21:23:f4:a6:0c:e2:5e:a1:5f:2a:ba:db:ae:a5:61:
78:07:67:3e:b5:a1:81:b3:7d:b7:77:4a:61:d4:58:3a:68:0b:
28:7a:7a:ea:a1:d7:5e:d8:f7:d5:28:45:d5:36:b6:1f:f1:65:
57:8a:38:e2:3b:fa:04:b4:e0:11:3c:95:da:8f:60:d1:31:6b:
01:73:1b:4c:e6:c7:6c:5d:38:49:f0:9c:f5:1b:58:a2:13:74:
c1:7f:09:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:29 2025 by rpki-client