Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
File:                     OckZvvVPpaxnw34-dWyhP7I0tT8.mft (raw, json)
Hash identifier:          ofgOafm3uEunOiaMcSK9VHpeJoi6ofXgfg3O40Q6Ews=
Subject key identifier:   CD:8E:70:C1:91:DA:97:B1:04:66:8D:E7:58:0F:7C:50:12:81:FD:11
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Certificate issuer:       /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial:       03EB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
Manifest number:          03E8
Signing time:             Thu 08 Oct 2026 04:00:02 +0000
Manifest this update:     Thu 08 Oct 2026 04:00:01 +0000
Manifest next update:     Sat 10 Oct 2026 04:00:01 +0000
Files and hashes:         1: OckZvvVPpaxnw34-dWyhP7I0tT8.crl (hash: o2IG4NbavMWrp6BxxRvgyx0VqYcXHRJro7Bo2XC7q1Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
                          rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 00:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1003 (0x3eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F68F4AR, serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
        Validity
            Not Before: Oct  8 04:00:01 2026 GMT
            Not After : Oct 10 04:00:01 2026 GMT
        Subject: CN=6ac71542-5526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5f:de:88:f5:23:5b:30:e6:1a:02:f4:ee:4e:
                    54:45:73:f6:f9:73:10:55:61:fa:20:71:50:c0:0a:
                    c4:5f:22:4d:6d:ec:d2:15:2a:bf:30:01:3a:26:e3:
                    ad:d2:82:c7:cd:20:e9:b3:08:fb:82:ff:b3:37:08:
                    03:cf:ff:db:9a:bb:fd:e2:b1:d6:ac:b3:dc:f7:5f:
                    45:52:76:21:91:0b:d9:9d:64:b9:41:91:51:24:51:
                    86:fd:08:9e:09:a8:25:70:9c:c7:60:46:64:54:fa:
                    82:26:94:45:33:87:af:21:a1:ba:b6:1d:01:9f:c7:
                    f7:02:c9:f8:38:07:b7:ee:0b:84:21:40:7e:1f:e4:
                    c4:cf:92:cf:f5:98:16:a0:74:a6:1c:c6:89:0a:48:
                    d0:9f:9d:17:37:fc:95:5f:3d:07:43:66:96:7e:17:
                    4d:fa:94:34:7c:e4:a9:7f:44:d3:a9:de:f2:56:41:
                    8c:16:ed:58:5d:38:54:4c:42:2b:bc:ad:e0:89:7b:
                    5c:d7:0d:37:f4:a9:bf:22:0a:65:58:e2:4f:2e:f4:
                    45:39:7f:df:ce:b2:2d:fe:bd:e3:c5:82:8a:95:3a:
                    59:3d:d6:bc:cb:fc:da:51:3e:22:f5:12:af:40:87:
                    e1:13:d9:62:a4:3b:f0:1d:e8:b4:af:58:74:1e:13:
                    61:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8E:70:C1:91:DA:97:B1:04:66:8D:E7:58:0F:7C:50:12:81:FD:11
            X509v3 Authority Key Identifier:
                keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:0e:02:17:9e:2c:80:cd:ba:e2:59:b8:f5:21:3c:58:96:5f:
         b4:ea:81:e2:4a:8c:6c:9a:65:b4:04:f0:8b:54:12:b6:31:90:
         0d:1c:85:4f:27:11:ae:9a:7e:29:06:6b:e2:51:02:63:a8:e1:
         8b:3b:52:13:de:08:a9:80:e8:89:88:bb:fc:a7:6e:25:b7:cb:
         5f:95:04:15:5a:36:ff:c0:f5:ae:75:38:80:5d:d3:c1:8a:ab:
         ae:67:91:56:c5:4f:50:50:74:0b:76:2f:93:80:a3:ae:a7:33:
         88:79:25:dd:a6:76:5b:35:02:71:ed:86:83:15:1c:0b:f3:8a:
         3d:1c:bd:aa:f8:f5:bc:b1:47:7b:e9:6e:77:a6:cf:22:33:05:
         35:89:bd:fe:b2:4e:38:72:93:42:14:92:11:e5:ef:cc:53:d2:
         4f:fd:d1:4a:e6:f1:00:6a:c1:f0:e2:e8:7d:1e:e6:b8:4d:22:
         b6:6e:5d:81:56:da:a7:03:57:e8:72:ad:07:a5:43:32:5c:55:
         bc:f6:c3:6b:07:b0:1a:9d:1b:a9:0b:85:a2:6d:3c:e0:05:bb:
         f0:27:86:9d:29:1c:76:7e:37:9a:0a:8d:10:0a:05:04:0a:dc:
         00:50:7b:5b:99:15:63:cf:30:40:4a:01:1e:0c:24:b2:b9:72:
         54:92:cf:8e
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA+swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjY4RjRBUjExMC8GA1UEBRMoMzlDOTE5QkVGNTRGQTVBQzY3QzM3RTNFNzU2Q0Ex
M0ZCMjM0QjUzRjAeFw0yNjEwMDgwNDAwMDFaFw0yNjEwMTAwNDAwMDFaMBgxFjAU
BgNVBAMTDTZhYzcxNTQyLTU1MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcX96I9SNbMOYaAvTuTlRFc/b5cxBVYfogcVDACsRfIk1t7NIVKr8wATom
463SgsfNIOmzCPuC/7M3CAPP/9uau/3isdass9z3X0VSdiGRC9mdZLlBkVEkUYb9
CJ4JqCVwnMdgRmRU+oImlEUzh68hobq2HQGfx/cCyfg4B7fuC4QhQH4f5MTPks/1
mBagdKYcxokKSNCfnRc3/JVfPQdDZpZ+F036lDR85Kl/RNOp3vJWQYwW7VhdOFRM
Qiu8reCJe1zXDTf0qb8iCmVY4k8u9EU5f9/Osi3+vePFgoqVOlk91rzL/NpRPiL1
Eq9Ah+ET2WKkO/Ad6LSvWHQeE2ETAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUzY5w
wZHal7EEZo3nWA98UBKB/REwHwYDVR0jBBgwFoAUOckZvvVPpaxnw34+dWyhP7I0
tT8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY2OEY0LzY2RjM4MzJBQzY3MzExRUVCM0RCNzNBNTc3NTQxMkU2L09ja1p2
dlZQcGF4bnczNC1kV3loUDdJMHRUOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L09ja1p2dlZQcGF4bnczNC1kV3loUDdJMHRUOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RjY4RjQvNjZGMzgzMkFDNjczMTFFRUIzREI3M0E1Nzc1NDEy
RTYvT2NrWnZ2VlBwYXhudzM0LWRXeWhQN0kwdFQ4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKDgIXniyAzbriWbj1ITxYll+06oHiSoxs
mmW0BPCLVBK2MZANHIVPJxGumn4pBmviUQJjqOGLO1IT3gipgOiJiLv8p24lt8tf
lQQVWjb/wPWudTiAXdPBiquuZ5FWxU9QUHQLdi+TgKOupzOIeSXdpnZbNQJx7YaD
FRwL84o9HL2q+PW8sUd76W53ps8iMwU1ib3+sk44cpNCFJIR5e/MU9JP/dFK5vEA
asHw4uh9Hua4TSK2bl2BVtqnA1focq0HpUMyXFW89sNrB7AanRupC4WibTzgBbvw
J4adKRx2fjeaCo0QCgUECtwAUHtbmRVjzzBASgEeDCSyuXJUks+O
-----END CERTIFICATE-----