Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
File: OckZvvVPpaxnw34-dWyhP7I0tT8.mft (raw, json)
Hash identifier: C+SYQb8JBboQ92nnfMyZB0n2FMJSRw8Wh/mP+ecooEM=
Subject key identifier: BE:03:BF:6F:9B:C5:FD:1E:C2:D2:79:01:22:41:25:34:D3:DC:35:6E
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Certificate issuer: /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial: 024C
Authority info access: rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
Manifest number: 0249
Signing time: Sat 23 Aug 2025 04:19:35 +0000
Manifest this update: Sat 23 Aug 2025 04:19:34 +0000
Manifest next update: Mon 25 Aug 2025 04:19:34 +0000
Files and hashes: 1: OckZvvVPpaxnw34-dWyhP7I0tT8.crl (hash: yHCSiFyFItyLfeN6PcpjdBMpQ5h/DpSMV5VAVlFgsVA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F68F4AR, serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Validity
Not Before: Aug 23 04:19:34 2025 GMT
Not After : Aug 25 04:19:34 2025 GMT
Subject: CN=68a94157-1ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:42:0d:9f:0a:f7:b4:e4:50:52:b9:eb:f9:57:
ab:b5:5f:74:66:e7:32:ac:b2:a9:ea:a0:ed:f8:4f:
f5:6b:70:7c:44:b7:1d:ac:4b:79:a2:5f:cb:68:99:
ab:30:f3:9a:4d:4c:b8:b6:41:41:5f:15:de:be:45:
da:fc:42:d3:9d:ff:44:a5:42:9e:5c:39:f1:30:9f:
90:78:40:26:f4:e1:7c:a7:c3:3f:14:ed:04:9f:4c:
ab:d7:11:67:b8:0d:4d:71:3f:a6:c7:5e:ba:13:88:
a6:90:e1:a7:f4:04:cb:75:42:37:7f:93:bb:54:ee:
0c:c3:eb:b2:2c:6d:56:95:9d:b6:da:21:e1:25:a6:
2a:62:23:95:34:0d:e8:a2:75:d5:e3:dc:1a:12:33:
e8:6e:72:8c:7e:12:a4:b6:2b:7f:e2:9c:fa:70:a1:
5f:b4:4d:93:9f:57:4f:35:a1:b7:44:00:bd:9f:c0:
ca:12:ed:39:70:7f:5c:67:39:f4:86:0e:c1:88:61:
7b:b8:1c:a4:6c:53:56:fe:1c:04:38:ed:93:67:5a:
36:90:ec:a9:73:5d:00:60:38:e7:e6:2f:5f:3d:68:
5b:e5:fe:85:7e:ea:2d:76:f8:85:03:34:06:80:b6:
1f:bf:b3:11:67:a6:13:1f:b7:94:7d:0b:6f:91:ad:
42:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:03:BF:6F:9B:C5:FD:1E:C2:D2:79:01:22:41:25:34:D3:DC:35:6E
X509v3 Authority Key Identifier:
keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:8f:71:23:81:28:3c:92:ad:c7:01:95:7b:e4:91:f3:92:36:
c0:89:cd:90:77:25:ae:19:2f:ef:f0:d1:d1:b8:95:e4:06:69:
8e:18:92:a7:38:13:ee:47:c1:3e:bf:12:b7:4d:ed:45:d0:1a:
0e:b0:6e:04:f1:5b:44:4f:88:08:25:7c:a6:4b:58:87:1d:40:
a3:27:d6:70:a6:c8:1c:96:08:54:d1:69:dd:5a:d5:7e:cb:4f:
68:81:c0:73:fd:2d:64:a5:f8:18:3f:c3:e0:ce:62:72:cd:c2:
8c:08:2f:0a:87:cb:ac:bf:29:88:64:d9:24:58:77:b6:97:fb:
99:8a:fb:a0:20:93:f9:92:3e:cd:b4:71:63:ff:c9:7b:f1:89:
95:e8:eb:21:cc:f5:1b:71:54:0a:f8:d8:5a:f8:12:36:b9:79:
29:92:f0:4e:92:2e:0b:0e:27:69:cf:75:10:6f:39:02:70:2b:
40:df:dd:87:34:08:b9:be:9e:d9:3e:eb:e6:4e:76:68:aa:b9:
ce:25:1f:43:85:4a:80:95:74:19:b2:83:3a:a9:91:9e:5d:f1:
db:01:56:4f:dc:4d:c7:67:9e:54:fc:e5:34:ba:91:e4:e8:18:
2f:01:22:88:4f:df:1e:2c:52:6a:e9:da:c0:24:e1:b6:7a:3f:
cc:7b:a6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:35:21 2025 by rpki-client