Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
File:                     OckZvvVPpaxnw34-dWyhP7I0tT8.mft (raw, json)
Hash identifier:          l1vc3wN0nsOo7usqImqsVxi/oZCC4IFmX2NbP208Lpg=
Subject key identifier:   29:2A:8B:B3:E7:5D:71:C9:7B:C7:BB:C9:C4:0C:FC:02:25:2B:7C:F8
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Certificate issuer:       /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial:       0376
Authority info access:    rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
Manifest number:          0373
Signing time:             Sat 13 Jun 2026 04:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 04:01:19 +0000
Manifest next update:     Mon 15 Jun 2026 04:01:19 +0000
Files and hashes:         1: OckZvvVPpaxnw34-dWyhP7I0tT8.crl (hash: hah7m331bEiGL38vVLRiv1LHmEWBBOPSBQPggWvsmFw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
                          rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886 (0x376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F68F4AR, serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
        Validity
            Not Before: Jun 13 04:01:19 2026 GMT
            Not After : Jun 15 04:01:19 2026 GMT
        Subject: CN=6a2cd610-0c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:10:17:18:2d:60:8e:04:e9:7f:ba:7f:97:d0:
                    32:0b:61:60:2e:2b:70:d8:a6:72:26:b4:27:89:28:
                    c3:04:1d:45:93:23:57:4e:cf:c1:36:57:83:97:0e:
                    83:ec:94:29:f9:86:73:24:58:a5:f5:90:0e:e3:a5:
                    68:44:47:51:2a:1b:66:03:a1:31:e6:03:8c:a9:88:
                    33:bb:e2:a4:35:09:65:75:c9:44:cf:31:70:d0:e8:
                    70:49:39:90:f3:dd:5c:b8:ba:93:c7:5d:f1:e3:ab:
                    4b:6b:2a:45:e4:eb:38:d0:0b:28:d3:21:4b:d2:36:
                    5e:d9:d8:c1:4f:55:cc:5f:9e:72:c4:6f:ad:cc:20:
                    4a:2b:64:bf:dd:47:20:79:c3:2c:9e:d3:03:18:0a:
                    77:7d:ca:41:d4:ad:25:c5:6d:6a:c2:16:ae:20:bc:
                    23:0e:8d:77:c5:0b:2f:c1:10:c1:97:1f:49:ff:aa:
                    7f:93:36:94:c9:ec:0f:77:a6:fa:d8:6e:a5:30:2a:
                    0e:4b:c2:e1:cb:e5:65:de:09:70:a1:87:4b:56:f3:
                    33:5f:cc:62:1d:3a:8a:31:97:db:97:d8:a6:0b:e5:
                    13:66:15:a3:12:2f:2d:47:b8:64:93:6e:7b:0c:8f:
                    5f:a2:b8:d7:b7:00:8c:09:89:e9:86:fb:9f:57:f0:
                    ff:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2A:8B:B3:E7:5D:71:C9:7B:C7:BB:C9:C4:0C:FC:02:25:2B:7C:F8
            X509v3 Authority Key Identifier:
                keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:45:4f:7d:b4:f9:a7:e1:9b:4b:3f:72:a3:1e:86:66:0a:94:
         13:28:44:b7:fd:f0:68:a2:eb:83:21:c1:4c:0b:5e:16:cb:8b:
         ef:4c:11:0f:8b:3b:bd:d4:9e:6d:f4:74:fb:8f:f0:4f:f5:4d:
         a1:5f:50:64:02:ee:b3:fc:96:3b:2a:e6:96:6d:c7:22:8c:8c:
         63:ff:63:c4:d2:6e:34:64:8b:38:d5:41:58:8f:95:37:62:3a:
         92:71:d3:27:30:df:6b:14:03:f8:bb:23:f2:ba:0f:0a:15:c1:
         8e:3a:fc:95:4a:30:84:94:18:44:a7:6b:57:41:96:f6:ec:d2:
         de:fb:e2:cf:bc:d0:dc:22:54:93:c8:87:c3:d1:6e:af:63:c2:
         fd:18:98:0e:94:c4:c6:29:5a:b5:06:c6:29:a2:1d:53:7c:a9:
         f6:0e:61:f0:f8:6d:2e:95:1c:20:d6:27:97:c1:5d:4a:9f:90:
         20:92:ab:90:a4:88:a3:ca:ad:31:20:9f:b3:91:cb:e4:f4:35:
         51:09:80:dc:41:82:56:5e:9f:d6:76:33:25:85:a6:73:47:42:
         45:24:6d:3d:74:4f:c4:1d:10:05:ec:d9:d9:a9:70:33:76:1e:
         00:e2:25:14:3e:d9:da:44:12:fa:05:b7:d4:c9:22:fb:f7:58:
         59:00:2b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:37:17 2026 by rpki-client