Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
File: OckZvvVPpaxnw34-dWyhP7I0tT8.mft (raw, json)
Hash identifier: tU/8+ILeoJYoLswyV5FhxXMii7J2OYP7/tt+N9vGJ8Y=
Subject key identifier: DC:89:98:9C:EF:B7:9B:8A:44:3E:07:CC:D9:87:CD:FA:B6:06:71:16
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Certificate issuer: /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial: 0296
Authority info access: rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
Manifest number: 0293
Signing time: Tue 04 Nov 2025 05:23:02 +0000
Manifest this update: Tue 04 Nov 2025 05:23:01 +0000
Manifest next update: Thu 06 Nov 2025 05:23:01 +0000
Files and hashes: 1: OckZvvVPpaxnw34-dWyhP7I0tT8.crl (hash: a+t1cwhvn+9Zm7H28CnbcxYcJjbHSnuwUWc3Yy4FpDU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662 (0x296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F68F4AR, serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Validity
Not Before: Nov 4 05:23:01 2025 GMT
Not After : Nov 6 05:23:01 2025 GMT
Subject: CN=69098db6-ab3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:51:8d:11:78:bf:2a:09:6b:f1:49:3e:84:
36:93:3d:de:be:75:94:ca:54:90:8c:eb:36:7a:98:
29:aa:dd:71:41:a5:6a:3e:b0:8a:f1:cf:d6:76:67:
28:b5:bc:1e:d6:6c:63:00:2b:a8:30:74:78:20:46:
e6:2b:05:8b:62:95:99:7f:cc:24:0d:47:c8:96:23:
f2:7b:b4:f9:87:c3:a4:3d:26:72:4c:37:25:61:16:
6c:1b:9d:85:5e:ac:bb:d4:5a:9f:ce:88:7b:d6:58:
39:ee:2e:cb:5a:b6:3b:38:b6:50:6f:0e:1c:d2:b5:
90:14:b4:3c:4f:6e:1d:18:32:17:b8:fd:b4:68:99:
95:f7:3b:93:bd:c8:b1:2b:93:32:38:0c:24:f4:7a:
a8:31:fd:aa:74:8c:ba:ac:c0:0f:09:dc:53:f6:22:
86:de:da:0c:c0:f6:27:96:a7:cc:2e:8a:ba:93:09:
17:be:29:24:4f:56:4d:03:22:93:08:96:51:06:c2:
71:09:22:1a:38:5e:a5:e4:e8:b9:63:6e:cd:68:de:
20:85:b8:0e:ac:9a:70:ab:f4:24:9a:54:1f:e8:7f:
af:04:6a:b0:82:33:64:dd:52:38:30:8d:ed:db:03:
a0:5a:48:a5:a8:9a:10:b6:d6:90:96:df:3f:f6:36:
49:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:89:98:9C:EF:B7:9B:8A:44:3E:07:CC:D9:87:CD:FA:B6:06:71:16
X509v3 Authority Key Identifier:
keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:4c:ce:1b:16:73:b2:27:9e:ab:aa:1a:ce:1f:51:95:4e:5b:
69:b5:7e:4a:d8:f5:0e:7a:42:ac:79:2f:b8:10:60:c8:b2:19:
98:1b:ae:ff:f0:b2:61:ba:e2:0f:22:04:9e:d5:ef:42:7b:6b:
87:12:51:f0:e8:37:59:5d:58:38:b3:d5:47:19:33:2c:27:19:
2b:e8:51:b7:76:fb:35:b9:51:bc:08:a1:a0:4f:01:f6:57:4a:
ea:f7:dc:69:71:c0:fd:0d:f8:ba:da:89:32:09:b6:2a:83:9e:
ad:03:d6:55:ac:0f:8f:97:d1:0f:11:11:64:56:b4:eb:2d:95:
11:02:bc:b6:dd:d4:7c:4f:a6:d1:70:14:bf:be:6a:35:34:4f:
b7:e7:54:9a:27:72:9e:c5:55:8b:e0:35:5b:6a:4b:33:88:c5:
fa:82:36:2e:27:35:3b:2b:d9:9e:4b:eb:c0:d9:25:34:fe:3a:
8f:de:bc:e4:7d:33:41:af:62:ab:e9:69:32:b8:89:56:38:28:
eb:4e:75:cf:0f:ff:c5:c4:41:4b:11:5c:a2:48:d8:75:1c:93:
b8:95:52:71:c7:4a:d7:dd:a3:55:30:1c:63:69:4f:a4:53:11:
ad:f2:a4:97:10:85:fb:39:f9:7f:45:53:df:c1:dd:b1:0d:44:
ff:ea:af:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:03:00 2025 by rpki-client