Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
File: OckZvvVPpaxnw34-dWyhP7I0tT8.mft (raw, json)
Hash identifier: 0nlXsk9+7oaOVDKeFXYcVoIQ+Wb0QXELdxkh5j6+Ps8=
Subject key identifier: A0:A2:9A:72:96:FB:9F:82:B6:D3:24:96:DA:C2:0F:82:21:FE:5C:16
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Certificate issuer: /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial: 0202
Authority info access: rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
Manifest number: 0200
Signing time: Sat 14 Jun 2025 04:23:26 +0000
Manifest this update: Sat 14 Jun 2025 04:23:25 +0000
Manifest next update: Mon 16 Jun 2025 04:23:25 +0000
Files and hashes: 1: OckZvvVPpaxnw34-dWyhP7I0tT8.crl (hash: bQvkb841kcDO/xqOP6AWEUlWoxJV48VYGNS0scixFU4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F68F4AR, serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Validity
Not Before: Jun 14 04:23:25 2025 GMT
Not After : Jun 16 04:23:25 2025 GMT
Subject: CN=684cf93e-33cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:99:06:1b:84:de:51:7b:59:45:d1:91:17:
54:ca:44:8e:6d:06:26:8d:6d:fa:0d:14:06:7b:ac:
62:b3:03:83:ea:e8:10:eb:96:f3:fb:67:88:bf:41:
52:93:69:41:50:b0:ec:7c:f7:be:55:a2:7d:d2:c9:
24:5a:21:74:c9:39:94:c6:3c:5a:b8:95:8b:e7:0e:
9c:62:c7:96:bd:1b:7d:ba:29:f5:48:e7:8a:47:a6:
97:12:7a:f9:b6:02:b9:7c:a3:a3:c2:81:70:7d:3d:
b4:ba:44:90:83:5f:82:48:78:2e:23:9a:e8:fb:8b:
80:5c:10:da:a3:97:b6:14:d7:4b:b2:2f:b1:10:9f:
36:7b:c1:7a:d7:6c:87:f3:20:5c:72:0b:52:cf:81:
7d:a7:28:48:df:61:c9:87:83:d5:2f:49:73:2e:57:
eb:f1:22:50:d8:ea:77:e5:d4:8f:68:e1:b8:0a:b4:
37:35:6c:5f:1f:fa:07:2a:57:51:11:6d:5b:e0:7d:
03:29:6b:25:9d:32:e6:52:f7:d8:e9:51:1b:8d:c4:
d7:7a:9c:82:df:a0:f5:a7:af:a8:20:24:a5:ba:06:
3c:59:10:e6:1a:95:0b:9e:b3:cf:eb:e4:50:49:11:
ad:bc:0a:35:b6:14:95:af:cf:24:6c:31:f7:51:58:
73:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A2:9A:72:96:FB:9F:82:B6:D3:24:96:DA:C2:0F:82:21:FE:5C:16
X509v3 Authority Key Identifier:
keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:13:23:6b:8c:a7:23:77:81:4d:ad:3f:85:d2:32:e3:1e:3e:
4f:de:5b:38:47:ec:c9:06:94:8f:6b:35:2d:a3:df:62:15:fa:
81:55:5f:6c:ea:a4:02:d5:66:1c:4f:4f:87:fe:bb:e1:47:3f:
32:82:b8:24:85:1b:96:57:32:69:0f:07:fe:c6:1a:aa:de:53:
9c:32:08:b4:0e:95:31:5a:72:5d:72:27:f3:17:1f:c2:e9:54:
55:f2:5c:6f:84:9d:31:44:51:63:38:83:69:55:83:39:db:32:
3f:10:1b:d7:af:b1:7f:17:25:cf:1b:08:ed:fe:a2:7a:5e:ba:
aa:ae:0c:f8:9f:2a:35:a2:4d:8e:5d:ce:b4:10:d4:26:ea:df:
8c:f5:cd:a6:c6:58:a8:f0:a7:cf:a4:91:94:c6:9e:97:cb:04:
32:17:d0:63:c8:95:08:54:fd:98:da:0c:63:75:1b:6b:2e:d7:
9d:3d:e7:c8:09:1e:ae:95:a2:b6:3c:c7:b0:6f:94:e4:7d:e4:
74:f3:58:66:88:82:29:69:18:01:b1:64:bf:c0:f5:31:5d:41:
0a:95:ac:7f:6f:9a:76:fe:3b:ba:ad:c3:77:d5:8e:f0:6d:cd:
6c:c7:56:78:d3:f5:47:0a:0d:67:63:c5:e4:ab:3d:46:40:97:
00:84:14:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:36:45 2025 by rpki-client