Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
File:                     OckZvvVPpaxnw34-dWyhP7I0tT8.mft (raw, json)
Hash identifier:          A4+vvBWzdkBYcGMKa5gvhpepzEVVTkxJrvbrq1/b/gw=
Subject key identifier:   A4:EA:67:BE:75:14:08:08:6F:A0:32:D8:AD:93:B2:15:DC:AC:61:92
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Certificate issuer:       /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial:       03ED
Authority info access:    rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
Manifest number:          03EA
Signing time:             Sat 10 Oct 2026 04:01:37 +0000
Manifest this update:     Sat 10 Oct 2026 04:01:36 +0000
Manifest next update:     Mon 12 Oct 2026 04:01:36 +0000
Files and hashes:         1: OckZvvVPpaxnw34-dWyhP7I0tT8.crl (hash: yle9+2w1b2iTZdOeQCXrP4XHcCYxwM2hj51jYGepNwE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
                          rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 04:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1005 (0x3ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F68F4AR, serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
        Validity
            Not Before: Oct 10 04:01:36 2026 GMT
            Not After : Oct 12 04:01:36 2026 GMT
        Subject: CN=6ac9b8a0-5575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:18:fd:7f:e1:d4:a5:5c:98:8a:af:5d:10:c0:
                    b0:2c:6a:53:be:bf:b5:c3:98:3e:e5:35:d2:ec:57:
                    65:16:16:bf:ca:72:59:7b:c8:dd:9b:12:0f:21:b3:
                    b6:10:dc:59:30:de:28:cd:56:de:1b:3a:23:0f:a4:
                    89:21:da:1a:d1:ac:54:50:38:74:c9:47:be:c8:53:
                    54:60:25:f6:95:d6:0f:bd:22:f5:fa:01:62:50:a5:
                    64:5c:65:ee:a0:fd:39:f8:e6:69:c7:ee:6a:4e:08:
                    41:0f:ba:27:c4:87:ef:af:66:5e:d3:65:62:93:74:
                    e5:36:66:06:03:48:a1:53:53:fc:93:02:9e:05:1e:
                    90:21:65:bf:1a:dc:84:79:55:b2:9d:6e:8d:f3:81:
                    c3:c6:10:9b:1f:97:b7:99:e8:48:49:6d:65:1f:3c:
                    37:34:53:8f:fe:26:a9:0a:eb:3f:6b:1c:7e:61:1d:
                    00:9b:e4:60:30:31:bf:46:cb:5d:c8:cc:ba:b5:27:
                    8e:80:c9:26:41:28:74:1c:f7:e8:e1:d4:21:c2:e8:
                    4e:43:22:90:bd:e7:1a:bb:38:56:02:96:30:5b:07:
                    fb:bc:c8:3c:c0:6a:2c:36:b7:7b:20:c5:cc:fd:fb:
                    3f:50:fd:9e:d1:de:70:86:f5:10:68:12:21:f3:16:
                    46:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EA:67:BE:75:14:08:08:6F:A0:32:D8:AD:93:B2:15:DC:AC:61:92
            X509v3 Authority Key Identifier:
                keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3a:e1:04:ff:2e:8e:a0:eb:7f:88:8e:90:44:32:29:b5:e5:
         c9:8c:1d:50:20:e6:c5:fe:da:78:17:67:02:76:3b:a8:29:63:
         f4:97:f7:8a:6f:02:ec:62:31:3d:2d:fb:7f:55:af:bd:c0:9b:
         47:b0:4d:40:a2:b5:2b:71:5b:70:44:6a:2f:1a:19:c0:36:7c:
         cf:59:f1:9a:87:fc:10:83:4b:1a:c4:cf:45:fb:e2:3a:c7:c7:
         85:04:68:6e:a7:ef:08:43:30:3f:c4:e1:c6:15:9f:80:c1:ec:
         14:31:6e:a1:07:06:75:5f:59:ec:af:d5:02:a0:b5:88:d8:61:
         e8:e3:07:46:f1:16:3a:b2:72:d7:1d:82:6b:33:9d:88:b2:14:
         80:3e:01:b4:59:4b:ae:5b:bc:69:0f:6e:64:9d:d2:39:bf:d8:
         a6:ff:f7:e1:89:18:fd:3c:83:49:e3:ba:67:47:51:b2:9b:8f:
         ba:ca:f4:7c:f9:74:dd:8e:43:20:aa:c3:2e:a0:9f:5a:a3:da:
         87:03:89:4f:20:f1:73:8f:77:44:c7:10:72:09:98:1b:fc:5c:
         a6:a2:1a:8f:ac:1a:af:d8:88:96:e0:e5:3f:43:68:8e:3b:ce:
         d3:ac:4a:1a:96:20:d9:9a:15:ce:7c:0d:76:17:0a:46:53:78:
         be:58:ea:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----