![](/console.gif)
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft
File: -fFqivVlH4qYTwMxRWULP55dioY.mft (raw, json)
Hash identifier: vOw9oRMV7cUA7UaeryIPcSe/ESoILRBm1AWM4aLB/I8=
Subject key identifier: 24:9E:D8:A6:AD:79:F3:F4:5B:3F:FD:89:DF:20:66:1B:60:9D:2B:F9
Authority key identifier: F9:F1:6A:8A:F5:65:1F:8A:98:4F:03:31:45:65:0B:3F:9E:5D:8A:86
Certificate issuer: /CN=F36EC460AF/serialNumber=F9F16A8AF5651F8A984F033145650B3F9E5D8A86
Certificate serial: 047C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-fFqivVlH4qYTwMxRWULP55dioY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft
Manifest number: 047A
Signing time: Sun 16 Feb 2025 02:00:39 +0000
Manifest this update: Sun 16 Feb 2025 02:00:38 +0000
Manifest next update: Tue 18 Feb 2025 02:00:38 +0000
Files and hashes: 1: -fFqivVlH4qYTwMxRWULP55dioY.crl (hash: KGscyYWBmtaGt0+Up6PSda176/h9kK+/ojB2IKARQds=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft
rsync://rpki.afrinic.net/repository/afrinic/-fFqivVlH4qYTwMxRWULP55dioY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148 (0x47c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EC460AF
Validity
Not Before: Feb 16 02:00:38 2025 GMT
Not After : Feb 18 02:00:38 2025 GMT
Subject: CN=67b146c7-1c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d5:a8:65:7c:f8:c0:13:83:90:f0:68:38:d2:
d6:ce:ad:da:bc:d4:7a:71:f9:f0:22:01:e8:76:ed:
68:1f:86:db:80:9e:1a:09:99:6d:fb:29:df:39:ff:
ac:28:39:c0:2a:5e:01:26:2c:96:18:85:7b:63:39:
1a:cd:d7:2c:48:71:79:f8:c3:02:86:2d:2b:93:f9:
6b:41:d3:b1:d0:f1:e3:19:5a:42:c8:b8:a4:3a:3f:
78:e6:8e:8a:06:1c:e1:40:ba:d3:5a:68:79:74:b2:
b4:c7:01:bd:c9:e9:5c:6f:8d:06:5b:b5:23:e9:f3:
6f:10:b4:51:14:33:38:3c:20:f2:fa:b0:eb:97:89:
5f:0c:31:ca:ce:d6:7a:14:38:fa:45:68:eb:2e:7d:
2c:f4:64:91:3b:fd:8f:58:7a:90:84:59:65:23:29:
b9:ef:b9:de:8f:33:5d:f6:f0:26:36:97:ef:c9:72:
49:d0:06:fa:94:c3:47:a5:04:7e:d1:58:83:5f:f5:
f2:d0:8d:43:d8:9d:d3:84:f6:b4:c2:7d:9c:1a:6e:
cf:88:79:f7:5a:6d:0f:6a:a8:86:58:7c:ce:54:05:
83:34:40:42:12:6b:cb:08:d7:58:ff:48:ad:fc:a0:
cc:67:8c:5d:ae:5a:64:ed:13:c1:38:4d:8d:b1:c6:
90:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9E:D8:A6:AD:79:F3:F4:5B:3F:FD:89:DF:20:66:1B:60:9D:2B:F9
X509v3 Authority Key Identifier:
keyid:F9:F1:6A:8A:F5:65:1F:8A:98:4F:03:31:45:65:0B:3F:9E:5D:8A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-fFqivVlH4qYTwMxRWULP55dioY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:8c:f8:04:f3:bf:a5:19:62:01:40:36:02:ee:f6:6a:c5:69:
42:f9:e6:69:b8:fe:10:40:06:d5:7f:d1:d6:fb:2b:01:37:94:
63:55:69:a1:fb:37:17:44:92:e0:f0:63:5f:d5:ea:7b:ac:7c:
9d:ed:df:ad:00:6b:cd:1c:9c:0e:be:4b:5f:6a:0d:07:7a:9a:
a5:be:38:b2:7c:3f:79:3e:49:de:65:68:d4:58:70:ab:32:46:
48:d6:9f:46:6f:fd:8b:79:d1:d1:19:4c:ed:71:d8:2a:bf:de:
96:5f:a7:48:52:67:40:d9:6d:c7:97:8e:ad:d6:44:4a:6e:04:
4e:ec:fb:06:ff:d9:ae:79:fe:45:e0:51:30:56:4e:66:07:ef:
86:a0:e9:1c:94:f6:96:91:21:9c:8e:6e:39:5c:ba:f4:6f:23:
2c:7b:e7:a2:17:d9:9d:69:cd:43:65:95:e7:17:ac:dd:10:8f:
76:7c:5b:17:d0:89:a5:6d:37:dd:e2:8a:51:a4:89:9e:4a:67:
26:b4:9f:2d:59:f2:5a:53:f1:5f:1c:aa:73:68:f5:13:be:78:
c6:e8:a0:bb:dc:d3:9d:e4:7f:67:66:87:35:15:0f:c1:9e:3e:
85:98:2f:d9:fd:00:96:4d:84:6e:a9:84:b8:05:35:66:dc:e7:
8c:b4:5e:15
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUM0NjBBRjExMC8GA1UEBRMoRjlGMTZBOEFGNTY1MUY4QTk4NEYwMzMxNDU2NTBC
M0Y5RTVEOEE4NjAeFw0yNTAyMTYwMjAwMzhaFw0yNTAyMTgwMjAwMzhaMBgxFjAU
BgNVBAMTDTY3YjE0NmM3LTFjODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDg1ahlfPjAE4OQ8Gg40tbOrdq81Hpx+fAiAeh27WgfhtuAnhoJmW37Kd85
/6woOcAqXgEmLJYYhXtjORrN1yxIcXn4wwKGLSuT+WtB07HQ8eMZWkLIuKQ6P3jm
jooGHOFAutNaaHl0srTHAb3J6VxvjQZbtSPp828QtFEUMzg8IPL6sOuXiV8MMcrO
1noUOPpFaOsufSz0ZJE7/Y9YepCEWWUjKbnvud6PM1328CY2l+/JcknQBvqUw0el
BH7RWINf9fLQjUPYndOE9rTCfZwabs+IefdabQ9qqIZYfM5UBYM0QEISa8sI11j/
SK38oMxnjF2uWmTtE8E4TY2xxpAxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUJJ7Y
pq158/RbP/2J3yBmG2CdK/kwHwYDVR0jBBgwFoAU+fFqivVlH4qYTwMxRWULP55d
ioYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVDNDYwL0FDRUMyRDIyODk4MTExRUM5NUQzNTBCNDVBNDBENTc3Ly1mRnFp
dlZsSDRxWVR3TXhSV1VMUDU1ZGlvWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLy1mRnFpdlZsSDRxWVR3TXhSV1VMUDU1ZGlvWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUM0NjAvQUNFQzJEMjI4OTgxMTFFQzk1RDM1MEI0NUE0
MEQ1NzcvLWZGcWl2VmxINHFZVHdNeFJXVUxQNTVkaW9ZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2jPgE87+lGWIBQDYC7vZqxWlC+eZp
uP4QQAbVf9HW+ysBN5RjVWmh+zcXRJLg8GNf1ep7rHyd7d+tAGvNHJwOvktfag0H
epqlvjiyfD95PkneZWjUWHCrMkZI1p9Gb/2LedHRGUztcdgqv96WX6dIUmdA2W3H
l46t1kRKbgRO7PsG/9muef5F4FEwVk5mB++GoOkclPaWkSGcjm45XLr0byMse+ei
F9mdac1DZZXnF6zdEI92fFsX0ImlbTfd4opRpImeSmcmtJ8tWfJaU/FfHKpzaPUT
vnjG6KC73NOd5H9nZoc1FQ/Bnj6FmC/Z/QCWTYRuqYS4BTVm3OeMtF4V
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:12 2025 by rpki-client