Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
File: OckZvvVPpaxnw34-dWyhP7I0tT8.mft (raw, json)
Hash identifier: uY6C7Ix2VoTcEDkzoH+5+Xs1nkVYR+d5jChr38r9shw=
Subject key identifier: F1:57:7A:AA:BC:79:ED:A9:F8:3C:BC:8E:0D:65:79:96:E3:D7:1F:98
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Certificate issuer: /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial: 01E5
Authority info access: rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
Manifest number: 01E3
Signing time: Fri 16 May 2025 02:42:44 +0000
Manifest this update: Fri 16 May 2025 02:42:43 +0000
Manifest next update: Sun 18 May 2025 02:42:43 +0000
Files and hashes: 1: OckZvvVPpaxnw34-dWyhP7I0tT8.crl (hash: TLDMvaWchazXpMIvl/Bfa9lMFqY7tFomFaBj0TjhDzE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 18 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485 (0x1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F68F4AR, serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Validity
Not Before: May 16 02:42:43 2025 GMT
Not After : May 18 02:42:43 2025 GMT
Subject: CN=6826a624-3e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:e2:98:3a:a4:27:b1:b4:26:83:33:83:f2:
a2:b2:0f:6b:a1:fd:52:30:ef:31:29:cb:b6:ca:08:
3d:c7:29:05:06:bf:35:26:54:06:ae:f4:a4:a6:be:
a8:33:f0:32:75:71:e3:47:c2:71:fc:c6:29:97:15:
15:2b:17:f2:c5:7a:14:86:7e:b1:6e:16:0a:de:2a:
37:c8:7a:a2:56:c6:33:db:97:7a:80:1b:82:50:5f:
93:d4:39:90:92:70:25:2e:71:b0:73:d6:d5:2c:13:
43:36:1c:a9:79:87:c7:5c:92:67:a7:4c:11:d7:1e:
8d:f6:24:67:05:6e:d8:6a:17:e8:00:c5:60:d8:f5:
4f:21:20:79:92:a9:54:3a:66:79:45:f3:c0:44:45:
b4:6a:c6:63:68:b2:4b:54:2d:cc:b9:08:c7:a7:e3:
04:11:fe:bc:42:16:cc:53:a6:96:a2:22:38:e4:00:
e3:e3:47:6e:a3:3c:9c:ef:a0:3d:25:a7:22:bd:14:
26:75:0d:b3:b3:b4:c5:fc:9e:b7:46:56:e5:26:ca:
04:7d:fd:9e:f8:98:5b:26:e2:e6:74:e6:55:fd:e9:
9e:9d:a4:bc:fa:e0:64:5b:33:dd:fd:c6:2c:85:d2:
56:b4:c5:c7:32:8d:96:35:8e:7b:a1:77:21:24:20:
3b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:57:7A:AA:BC:79:ED:A9:F8:3C:BC:8E:0D:65:79:96:E3:D7:1F:98
X509v3 Authority Key Identifier:
keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:c9:19:af:d4:88:e2:d2:84:d9:d9:37:5a:4d:e2:39:af:0c:
09:b0:0c:83:61:ab:72:91:eb:c7:bc:5a:57:e7:de:66:ca:2f:
f5:6b:1a:24:03:77:4c:e9:24:5f:15:d4:16:d3:3f:d4:13:a0:
8d:e7:1d:b2:54:25:58:1b:c9:94:f9:38:26:bf:4d:ab:6d:f2:
b4:f8:32:29:b9:5c:b8:7f:ca:bf:a7:64:ef:41:e1:1f:2f:61:
cc:87:e1:ba:be:6b:11:2d:2b:c3:96:89:bd:10:45:b9:8e:70:
fe:11:1b:3c:04:14:52:b7:0f:4f:0f:63:6f:0a:47:19:6d:32:
c8:ba:62:bd:52:97:4f:0c:78:f1:4f:1b:f9:98:fa:1d:bc:9a:
e4:9e:3d:d2:cc:2e:c3:fb:dd:9d:26:5e:17:f5:cd:9b:04:e1:
0f:6b:7a:70:58:b1:2b:5d:75:d2:5c:c6:31:d2:41:b7:53:53:
e5:14:4d:de:02:79:bd:09:6f:60:2f:94:e7:27:23:9f:75:63:
c9:63:8c:96:7a:e2:f2:0b:91:e8:db:cb:00:50:85:e7:1c:cd:
fa:08:83:63:d1:2e:10:b2:ce:cd:c0:93:00:73:8f:43:00:c4:
7f:e9:e2:50:41:61:e9:c1:ba:6b:26:31:ac:49:0d:f3:b8:f2:
a9:79:93:b9
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjY4RjRBUjExMC8GA1UEBRMoMzlDOTE5QkVGNTRGQTVBQzY3QzM3RTNFNzU2Q0Ex
M0ZCMjM0QjUzRjAeFw0yNTA1MTYwMjQyNDNaFw0yNTA1MTgwMjQyNDNaMBgxFjAU
BgNVBAMTDTY4MjZhNjI0LTNlNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLt+KYOqQnsbQmgzOD8qKyD2uh/VIw7zEpy7bKCD3HKQUGvzUmVAau9KSm
vqgz8DJ1ceNHwnH8ximXFRUrF/LFehSGfrFuFgreKjfIeqJWxjPbl3qAG4JQX5PU
OZCScCUucbBz1tUsE0M2HKl5h8dckmenTBHXHo32JGcFbthqF+gAxWDY9U8hIHmS
qVQ6ZnlF88BERbRqxmNosktULcy5CMen4wQR/rxCFsxTppaiIjjkAOPjR26jPJzv
oD0lpyK9FCZ1DbOztMX8nrdGVuUmygR9/Z74mFsm4uZ05lX96Z6dpLz64GRbM939
xiyF0la0xccyjZY1jnuhdyEkIDtnAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU8Vd6
qrx57an4PLyODWV5luPXH5gwHwYDVR0jBBgwFoAUOckZvvVPpaxnw34+dWyhP7I0
tT8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY2OEY0LzY2RjM4MzJBQzY3MzExRUVCM0RCNzNBNTc3NTQxMkU2L09ja1p2
dlZQcGF4bnczNC1kV3loUDdJMHRUOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L09ja1p2dlZQcGF4bnczNC1kV3loUDdJMHRUOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RjY4RjQvNjZGMzgzMkFDNjczMTFFRUIzREI3M0E1Nzc1NDEy
RTYvT2NrWnZ2VlBwYXhudzM0LWRXeWhQN0kwdFQ4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBhyRmv1Iji0oTZ2TdaTeI5rwwJsAyDYaty
kevHvFpX595myi/1axokA3dM6SRfFdQW0z/UE6CN5x2yVCVYG8mU+Tgmv02rbfK0
+DIpuVy4f8q/p2TvQeEfL2HMh+G6vmsRLSvDlom9EEW5jnD+ERs8BBRStw9PD2Nv
CkcZbTLIumK9UpdPDHjxTxv5mPodvJrknj3SzC7D+92dJl4X9c2bBOEPa3pwWLEr
XXXSXMYx0kG3U1PlFE3eAnm9CW9gL5TnJyOfdWPJY4yWeuLyC5Ho28sAUIXnHM36
CINj0S4Qss7NwJMAc49DAMR/6eJQQWHpwbprJjGsSQ3zuPKpeZO5
-----END CERTIFICATE-----
Generated at Fri May 16 23:59:03 2025 by rpki-client