Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
File: OckZvvVPpaxnw34-dWyhP7I0tT8.mft (raw, json)
Hash identifier: fftPsMTzvQkqPjvr2In3m1DBXhhF9WyWHOp9AUrBF5A=
Subject key identifier: E5:85:30:E1:2B:7A:40:F9:B0:DE:AE:95:42:26:D1:32:33:F6:A2:B0
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Certificate issuer: /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial: 0231
Authority info access: rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
Manifest number: 022E
Signing time: Sun 27 Jul 2025 04:24:39 +0000
Manifest this update: Sun 27 Jul 2025 04:24:38 +0000
Manifest next update: Tue 29 Jul 2025 04:24:38 +0000
Files and hashes: 1: OckZvvVPpaxnw34-dWyhP7I0tT8.crl (hash: 8EpY8cdhi68iuwhGjbVJ6YqtNzxv3miANtUpnv22knU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561 (0x231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F68F4AR, serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Validity
Not Before: Jul 27 04:24:38 2025 GMT
Not After : Jul 29 04:24:38 2025 GMT
Subject: CN=6885aa07-142b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:0e:42:c1:02:95:df:77:15:03:13:63:1c:
bb:47:cb:d2:28:7d:15:db:41:c7:f1:0e:21:c6:57:
f7:53:eb:8d:1f:76:82:57:79:fe:a7:84:80:a3:63:
4f:c1:1c:32:21:c5:bc:dc:1b:8f:69:ba:2a:17:de:
ec:0b:3a:24:94:03:87:ec:e0:01:b4:b7:e3:65:1d:
63:0f:c5:7a:59:4f:6a:2e:44:c6:19:c8:c0:2b:89:
c7:08:55:3f:b5:05:8b:a9:2a:82:95:25:0b:d9:bb:
97:86:a2:1b:e0:54:a6:c5:17:ba:08:49:08:9d:36:
72:7d:02:a5:c1:a5:b3:e6:59:64:d8:3f:2e:8b:fc:
7d:e8:f4:95:a7:a5:8a:a9:d6:6d:42:78:15:16:cc:
70:51:b9:83:0e:e8:d3:29:34:b6:88:b3:9b:08:9b:
a2:dc:6f:89:fd:f0:90:1c:0f:42:87:51:c1:aa:07:
5a:13:e7:48:59:d6:63:85:89:8a:43:f2:a7:a6:23:
c9:19:0a:96:77:50:76:50:7a:70:31:dd:69:31:f3:
d5:a2:ef:b6:b0:c9:6b:0d:27:8d:52:7e:45:ac:a9:
40:81:1a:43:81:f9:8a:ea:1a:01:46:91:79:10:a6:
83:f6:65:96:89:5b:a7:bd:80:9f:44:82:62:84:13:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:85:30:E1:2B:7A:40:F9:B0:DE:AE:95:42:26:D1:32:33:F6:A2:B0
X509v3 Authority Key Identifier:
keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:07:7a:6a:ef:00:19:a8:a0:7c:10:53:13:c9:ab:e2:36:20:
79:4a:a5:58:c4:4c:53:ba:1f:64:0a:70:de:ca:f7:ad:74:f9:
07:93:d2:d1:20:84:87:6c:1b:6a:76:4e:e5:57:09:6d:47:b1:
2a:0e:10:4e:75:cf:51:13:f9:2e:b0:39:20:a4:59:8e:68:d7:
e0:8d:d2:ba:38:cf:b5:0c:2d:6e:c0:a6:b1:5e:51:c6:a9:6f:
5e:bb:50:2f:72:a6:b8:45:b4:a4:4d:ac:69:c5:5f:b8:cf:ca:
00:fb:fc:72:e2:d4:3c:68:6d:13:e9:d5:50:1f:22:e4:d6:9e:
81:7e:b8:61:54:0b:ec:5f:e4:91:ef:60:b0:e4:f0:53:c0:4f:
a8:c1:ce:b3:2e:c5:8f:40:a0:c4:d2:9e:c6:e4:b1:04:8a:8e:
d3:b6:95:33:e1:1d:87:83:9a:7b:19:dc:73:24:2f:b3:ea:49:
2a:0c:16:1f:68:47:98:aa:e3:75:81:67:7e:57:71:eb:19:df:
0f:ab:c9:19:d9:14:ac:e8:d5:4c:70:d7:0d:4d:6b:16:62:2d:
35:95:1f:74:40:94:40:c9:5c:b0:f4:6c:29:c2:41:d1:36:94:
76:b7:9c:0d:c2:f2:fa:8c:e8:48:cf:c1:fb:23:e3:ad:9d:d9:
9c:87:99:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:01:59 2025 by rpki-client