Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
File:                     OckZvvVPpaxnw34-dWyhP7I0tT8.mft (raw, json)
Hash identifier:          tXvim5OCMtArtT6JwQAaDNMNc3ILhAfkfVRq12ABrJE=
Subject key identifier:   2C:93:A5:84:35:A6:80:69:56:B6:17:6C:B0:45:14:23:86:65:02:26
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Certificate issuer:       /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial:       034F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
Manifest number:          034C
Signing time:             Tue 05 May 2026 04:01:42 +0000
Manifest this update:     Tue 05 May 2026 04:01:41 +0000
Manifest next update:     Thu 07 May 2026 04:01:41 +0000
Files and hashes:         1: OckZvvVPpaxnw34-dWyhP7I0tT8.crl (hash: 7GCpC0cOfjBH4Fte1ryJx37BeeRhWtMfk6RZ4FZV1nY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
                          rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 May 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847 (0x34f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F68F4AR, serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
        Validity
            Not Before: May  5 04:01:41 2026 GMT
            Not After : May  7 04:01:41 2026 GMT
        Subject: CN=69f96ba6-ecfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:02:07:29:04:4e:40:48:c2:ea:b7:c0:b5:
                    53:74:12:b6:88:d9:2e:77:a3:b1:65:ba:3b:bd:52:
                    d1:ff:56:d1:74:64:fe:73:9e:3c:2b:db:c6:10:4c:
                    d9:af:4a:91:c1:e3:f6:43:cc:d3:b6:66:cd:5b:db:
                    2e:ef:1b:e6:08:08:9f:de:94:38:a7:71:85:9b:61:
                    43:77:4b:15:9c:a5:d8:62:22:d7:c8:34:bb:8c:2c:
                    92:af:93:99:52:fb:0d:01:b5:22:65:51:3a:41:eb:
                    98:da:ae:0b:04:85:55:fe:1f:59:04:0e:e3:ae:ae:
                    3a:c7:1f:0e:fe:63:04:43:d3:07:57:6b:04:ad:ed:
                    dd:35:e9:d2:97:0b:d7:1a:07:87:8f:ae:45:0f:78:
                    e6:88:05:ab:5d:34:6e:24:12:03:b2:7d:49:32:a4:
                    a8:50:a9:90:a9:7b:8b:af:13:ca:41:ad:17:74:81:
                    ee:fa:aa:92:91:eb:e5:ed:f6:ac:39:c9:2f:48:a3:
                    33:2c:5e:f5:73:6d:7d:67:79:c4:68:96:3e:23:a3:
                    0d:99:51:61:a9:a5:e8:90:15:05:a7:4c:e9:27:c4:
                    5f:7b:c5:ac:80:81:af:af:c0:64:68:3d:38:cd:32:
                    a8:1b:6e:10:de:73:1c:4f:2d:ef:2f:9c:00:37:45:
                    47:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:93:A5:84:35:A6:80:69:56:B6:17:6C:B0:45:14:23:86:65:02:26
            X509v3 Authority Key Identifier:
                keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:38:1c:03:26:18:ed:2b:61:c5:5f:3a:7a:c7:49:62:cf:f5:
         f5:5b:b7:39:53:21:36:33:3b:47:9f:d3:48:2d:f3:a7:0b:1b:
         dd:1c:0e:15:65:d3:51:da:f1:c3:86:53:33:b2:35:a7:80:02:
         ca:c7:ff:e4:b7:d5:01:f7:fd:3c:03:cf:f8:d5:2f:20:0c:58:
         d1:d8:04:ea:58:b1:16:54:ea:62:31:80:19:cc:44:08:de:03:
         4d:33:96:d2:84:ce:10:6e:b2:ee:e9:cb:b1:42:3e:c8:8b:bf:
         ba:12:03:92:42:16:7f:51:77:01:18:3f:e3:35:fd:de:fb:b1:
         91:aa:a9:56:72:25:3f:bd:28:83:7b:d1:2f:d3:3e:b1:0a:01:
         80:5a:43:de:0a:18:c8:f9:03:ce:53:e8:1f:b9:fe:ae:88:89:
         1c:3b:46:77:0a:78:31:11:f1:30:d9:16:04:95:0c:69:fb:c1:
         93:49:35:83:93:79:9c:19:14:12:35:76:ba:75:dd:58:40:db:
         94:72:f8:61:1b:02:79:a1:a4:f2:47:bb:de:02:ab:91:c6:fd:
         5e:f7:56:1e:3c:30:c2:27:1e:9c:a5:71:f1:38:59:d7:20:da:
         c2:ef:67:85:e2:70:0b:fe:4c:1d:f8:b2:78:81:6a:75:b5:25:
         bf:fc:c8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 22:13:15 2026 by rpki-client