![](/console.gif)
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
File: Upl4cSNfYM1xWncQ_9bi6kyI0po.mft (raw, json)
Hash identifier: L9gq5oKY19I1svKy2qXYA+e7KrVmSp/8JdjpHcr/avs=
Subject key identifier: 41:A2:90:D3:85:90:0B:0F:49:03:C1:E7:FA:66:81:5C:6D:29:1B:7E
Authority key identifier: 52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
Certificate issuer: /CN=F36F7F21AF/serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Certificate serial: 040E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
Manifest number: 0406
Signing time: Sun 16 Feb 2025 02:06:27 +0000
Manifest this update: Sun 16 Feb 2025 02:06:27 +0000
Manifest next update: Tue 18 Feb 2025 02:06:27 +0000
Files and hashes: 1: Upl4cSNfYM1xWncQ_9bi6kyI0po.crl (hash: Ln6n7avRG5UA1iwg/2dIg6OYJDVE+N73/sUFmiParBk=)
2: A27E602082FF11EE8205C9864AD9E6FC.roa (hash: pv58iSJoNZfLF15J4awhKwcNzaZSo1gyn9KUtGLQf7U=)
3: 811B0F4682FF11EEAC9619864AD9E6FC.roa (hash: pPHAUOTt22hBeaB17IRburRyPCm6dJpRxd6TfErC+xI=)
4: 504C6FECEA3811EC884DB1F5F1222468.roa (hash: 2dT5xvQBi0tE9GzEX5D2/RqrdvgMzSxkzDaBAFZ3JCY=)
5: 40750D8E82FF11EEA9EF75854AD9E6FC.roa (hash: IfBtUMkbvyisKLp/KIr1N58P5Vt8K4q1zYyTPAWX8DY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1038 (0x40e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F7F21AF
Validity
Not Before: Feb 16 02:06:27 2025 GMT
Not After : Feb 18 02:06:27 2025 GMT
Subject: CN=67b14823-9976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ff:6c:f8:5f:66:74:fc:0e:f7:18:e2:af:e4:
3a:c4:59:cc:e5:c3:e3:70:00:00:96:72:03:83:98:
e0:41:1f:d6:17:0e:76:e2:6f:de:90:31:50:06:97:
1f:19:e3:40:14:86:1c:ae:6d:8d:19:1a:db:c0:05:
52:55:fd:bf:48:1d:7b:e9:b1:7e:4b:30:12:af:22:
bd:3a:59:bf:61:6a:7c:03:83:46:fe:44:ea:ad:5c:
2c:77:bf:23:c6:a6:b0:ef:aa:27:72:75:26:6d:80:
6f:55:b3:58:53:05:67:6f:e2:24:d4:54:56:5f:35:
42:60:55:15:86:20:9c:0d:c2:64:7d:e7:25:4c:85:
2e:23:c2:f9:a8:2d:d8:28:cb:c7:98:55:d9:35:81:
a2:ab:86:00:fa:89:ca:45:38:40:67:2e:93:31:5d:
d7:61:e1:ab:ca:fb:4c:b3:99:05:6b:2a:ed:53:be:
df:0f:77:e0:24:3b:f1:02:95:58:32:70:40:d0:e1:
45:79:ce:9a:87:d9:ab:da:0f:76:b5:82:34:76:08:
75:0c:f9:28:ab:46:1b:24:1e:7c:2d:70:18:28:9e:
0f:f4:8f:d9:6e:d6:55:a9:90:7a:d4:9d:f4:bb:4f:
d6:39:e9:dc:09:5f:c0:81:50:98:c9:ae:3d:e8:ab:
3c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A2:90:D3:85:90:0B:0F:49:03:C1:E7:FA:66:81:5C:6D:29:1B:7E
X509v3 Authority Key Identifier:
keyid:52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:12:55:86:45:81:61:fc:aa:56:59:16:b9:97:11:40:f2:e6:
16:42:82:3a:a9:a1:9c:cf:d9:c2:fc:19:34:94:42:b5:5d:03:
2d:95:14:b5:c8:d7:c0:02:1e:0e:71:c8:7d:7f:ee:ed:12:a7:
ab:fe:04:46:9e:1e:ed:0b:1b:11:d1:70:ac:cf:f4:ee:c1:7b:
c6:0c:5c:32:d8:2c:a5:25:e7:e5:33:f2:7a:6e:83:70:dc:ec:
ad:41:0a:e7:08:9d:05:e0:bd:5a:a0:7c:c9:57:74:fd:1d:b3:
f1:13:f3:f3:bd:86:db:22:7f:99:e0:35:e4:c6:2b:e5:5c:aa:
85:79:ad:28:58:13:c6:eb:f5:c2:0b:25:bc:f2:81:7f:41:0a:
a7:9b:d1:22:8a:0a:57:08:74:4b:71:4a:3a:96:20:ee:f1:56:
00:99:38:31:81:b2:b1:85:e9:ab:46:95:59:23:53:23:9f:0e:
6a:83:e4:37:22:7f:87:b6:9e:a9:e9:32:6a:8e:35:65:ad:02:
ac:5c:e9:82:34:f7:65:82:36:26:4e:2d:84:62:06:f6:f5:d6:
e1:a9:1c:df:14:6e:be:47:5a:56:be:87:c6:98:53:2a:4d:69:
70:00:d7:6e:00:8d:aa:f6:2a:6d:84:22:ca:2d:f3:50:b4:ba:
9d:85:0c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:12 2025 by rpki-client