Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
File: OckZvvVPpaxnw34-dWyhP7I0tT8.mft (raw, json)
Hash identifier: TiHcXpGtvnPRF+jGIMF9In69fA2wpd/0MsWndj3+r4M=
Subject key identifier: 7C:F1:F7:BC:E7:32:07:18:1E:A2:6E:02:03:E4:87:78:1E:20:6D:D7
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Certificate issuer: /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial: 030E
Authority info access: rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
Manifest number: 030B
Signing time: Mon 02 Mar 2026 02:48:07 +0000
Manifest this update: Mon 02 Mar 2026 02:48:06 +0000
Manifest next update: Wed 04 Mar 2026 02:48:06 +0000
Files and hashes: 1: OckZvvVPpaxnw34-dWyhP7I0tT8.crl (hash: RFIOiBHpeIZEVmJfoOaP9FPBLvxUfKxaxj0qaguG3rM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 782 (0x30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F68F4AR, serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Validity
Not Before: Mar 2 02:48:06 2026 GMT
Not After : Mar 4 02:48:06 2026 GMT
Subject: CN=69a4fa67-78b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a2:26:02:f6:a4:4f:ce:c9:2f:dd:10:92:2c:
b2:58:84:35:c2:a7:72:e3:cc:6e:9c:f2:92:0f:f6:
9d:95:cf:96:ec:3f:10:dc:68:86:29:77:4e:12:02:
f1:59:4e:37:b7:b8:14:67:30:99:97:97:c3:ca:33:
c4:37:31:17:dc:f8:3c:b5:89:00:4d:81:e9:d4:dc:
8d:91:92:11:ba:4b:6e:ac:cd:f8:1d:32:fe:3a:bb:
9e:8c:fe:4e:bf:2c:e6:fe:2d:37:59:a8:04:5e:29:
1a:bd:d6:a6:b3:fb:66:4b:18:52:f0:72:f4:73:98:
c3:80:52:ab:63:94:d0:9d:aa:a9:34:52:28:91:3b:
ef:e9:e1:0b:17:9a:4b:49:11:af:7b:eb:96:87:bb:
6a:7b:35:bd:71:cc:79:ad:09:b3:05:ae:18:e5:b2:
82:73:0f:f0:11:5e:ef:7a:52:1d:91:51:b6:e2:11:
aa:e3:c3:ee:a5:ac:fd:d5:d8:ac:ed:81:de:53:21:
b1:2d:e3:09:0c:e6:00:98:46:45:2f:44:3c:5c:50:
08:7b:c4:66:ef:39:fb:5f:be:b5:d5:8a:ef:0a:e8:
14:22:be:ff:60:67:ed:e0:54:9f:b6:54:8c:b4:ce:
9c:43:4f:69:67:fe:3f:c5:2f:ea:d7:7c:50:20:3a:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F1:F7:BC:E7:32:07:18:1E:A2:6E:02:03:E4:87:78:1E:20:6D:D7
X509v3 Authority Key Identifier:
keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:f7:79:20:65:87:e6:13:e5:1d:47:16:24:35:e5:f7:e6:a3:
7f:11:e9:73:c5:de:fc:54:5a:08:6e:d9:a4:d0:09:7a:c5:4a:
ef:f9:68:8c:de:78:5a:72:7a:68:79:31:89:47:f8:d9:f6:1a:
9f:e3:ed:2c:a3:a6:4e:60:47:84:4d:37:3a:cd:36:9d:44:04:
64:3a:79:55:f2:7a:7a:c4:3a:f0:68:67:4f:79:b6:48:54:9c:
ac:d4:6c:2e:d3:b9:0e:36:71:83:d1:94:e3:c6:79:25:bd:22:
93:54:b5:da:ad:76:86:21:74:a1:49:0d:85:a0:d8:8d:d6:63:
e1:8e:e3:2b:05:56:cb:74:fc:ca:64:bb:da:83:a0:df:d2:3d:
54:9c:39:4e:71:2f:f3:ed:e6:31:e3:4c:e9:12:5f:31:9e:42:
28:2b:b6:79:71:4b:79:bd:ee:13:b3:5a:4f:7e:6f:ac:39:a5:
5c:1a:df:af:27:42:7f:63:74:bd:c9:e4:6e:e6:dd:9e:94:f8:
41:e4:7a:40:b4:c7:34:cd:55:c0:3c:d8:51:0d:b9:b4:aa:40:
d9:83:84:b3:30:d9:d2:1f:a3:f9:8e:22:9e:6f:64:a0:d6:c7:
18:5e:cf:26:26:52:d7:fd:13:ff:5b:61:25:aa:79:2e:b6:ba:
7e:18:af:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:25:30 2026 by rpki-client