Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
File: OckZvvVPpaxnw34-dWyhP7I0tT8.mft (raw, json)
Hash identifier: zW/oToxd7/sHdRQV0Hh4908CW3mrq2hjHTHyXWW7H40=
Subject key identifier: 7B:1D:1E:19:CC:C0:F4:A4:16:8D:21:37:94:E9:E7:49:E7:B8:38:82
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Certificate issuer: /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial: 0240
Authority info access: rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
Manifest number: 023D
Signing time: Mon 11 Aug 2025 04:29:56 +0000
Manifest this update: Mon 11 Aug 2025 04:29:55 +0000
Manifest next update: Wed 13 Aug 2025 04:29:55 +0000
Files and hashes: 1: OckZvvVPpaxnw34-dWyhP7I0tT8.crl (hash: cDF1tyUnN1h6iSwgXn5VAJUGkdz62XGyqEEmgRjsbBM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 13 Aug 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F68F4AR, serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Validity
Not Before: Aug 11 04:29:55 2025 GMT
Not After : Aug 13 04:29:55 2025 GMT
Subject: CN=689971c4-ae20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:04:ec:e1:70:38:cf:52:ab:ab:d6:6e:91:
59:30:66:48:9a:6d:75:7f:7a:eb:6b:15:ae:cf:eb:
5c:c6:49:06:ea:c5:75:15:70:86:08:3c:37:8a:f1:
ca:00:88:29:92:88:0b:28:00:03:f5:6d:50:b4:5d:
dd:0d:0b:96:42:b8:30:c2:c3:73:90:bc:fd:58:ac:
a2:7b:42:92:e9:18:eb:8e:a0:2b:e0:8f:03:56:83:
88:46:f8:73:31:a0:eb:35:7b:dc:1e:c8:61:c2:c1:
2a:22:fb:4d:6a:a1:a4:9f:53:30:97:da:00:18:b4:
25:32:ff:df:03:1e:d4:1a:06:c1:f5:91:63:af:28:
20:42:25:cd:8f:ce:f2:57:88:23:84:a9:d1:d6:88:
5b:b6:3d:e2:17:e3:90:c2:1c:7c:84:2e:94:ba:3f:
3a:26:bc:b3:61:ea:d3:10:be:4f:fb:d5:49:b2:70:
ba:5b:04:68:b0:59:6e:08:54:bd:04:6a:f3:76:fd:
a7:65:ad:12:13:2b:b3:8d:28:83:cc:e5:ff:42:b8:
ae:01:63:17:a2:9b:b8:00:00:11:cc:f1:cd:8a:a7:
75:91:68:44:45:62:30:fd:09:de:61:21:78:f8:25:
a4:b0:88:09:d8:d0:dc:aa:a1:1d:6c:60:71:c3:8f:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1D:1E:19:CC:C0:F4:A4:16:8D:21:37:94:E9:E7:49:E7:B8:38:82
X509v3 Authority Key Identifier:
keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:4c:65:48:e8:40:0c:80:3d:93:49:9f:70:df:33:ec:f3:7d:
3c:66:25:58:08:ac:b2:d7:22:51:3e:0e:aa:fb:26:a2:d6:13:
82:ba:d6:41:42:26:e0:bb:b3:1f:8b:3c:1c:f0:ef:6e:af:c1:
11:18:60:ca:7b:a3:9f:18:8b:8a:0d:de:4a:d1:65:69:80:bf:
08:b4:c1:b5:39:7e:a6:26:da:0d:0a:9f:db:d7:9e:16:18:93:
f9:b7:83:9b:e1:72:11:22:d0:55:ae:ef:0a:3a:ad:44:f5:74:
7a:59:ed:0f:aa:82:4b:12:fa:f2:25:b0:b4:fa:93:a0:5e:bd:
05:47:74:07:9d:ca:06:f4:ef:89:12:f0:b4:cc:d8:99:21:04:
9e:4f:4c:01:19:a9:fb:85:53:fe:ce:a6:4c:52:3b:d9:ba:aa:
be:99:62:c2:f0:71:8c:4f:a8:00:f0:85:6b:85:fd:6a:a2:46:
a2:b9:2b:59:2a:6f:21:dd:a3:22:15:11:7d:3a:15:0c:26:b6:
54:e7:c0:05:a2:5a:c1:17:7a:2d:9f:67:8e:05:06:79:78:e6:
ab:ce:f1:d9:b8:40:4c:83:85:c0:cc:4a:f7:ff:b8:8c:f0:32:
a0:b5:ff:9a:1b:cd:cf:61:0b:ab:0a:3d:27:fe:a6:ca:c8:ef:
51:9e:18:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:45:33 2025 by rpki-client