Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
File:                     OckZvvVPpaxnw34-dWyhP7I0tT8.mft (raw, json)
Hash identifier:          G1hHsuPH4GSWMf6efjiAE25igJ9vDCxuGM/FLWsLF/I=
Subject key identifier:   F4:3F:BC:69:69:E8:76:59:3F:6E:ED:58:25:CE:15:28:DB:9B:8B:6D
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Certificate issuer:       /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial:       039F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
Manifest number:          039C
Signing time:             Fri 24 Jul 2026 04:01:21 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:20 +0000
Manifest next update:     Sun 26 Jul 2026 04:01:20 +0000
Files and hashes:         1: OckZvvVPpaxnw34-dWyhP7I0tT8.crl (hash: pNXuWRIS+RaKjumMAQfU1HTjywJHWH1HQjh2LGoECWY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
                          rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927 (0x39f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F68F4AR, serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
        Validity
            Not Before: Jul 24 04:01:20 2026 GMT
            Not After : Jul 26 04:01:20 2026 GMT
        Subject: CN=6a62e391-176b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f1:a6:07:75:a0:77:0d:33:e5:fa:33:e5:52:
                    6d:f6:50:09:1d:c6:98:e7:8c:b8:7a:ac:44:bb:df:
                    40:1b:e1:1a:36:26:67:e8:46:87:2a:08:6c:c0:18:
                    55:d0:9d:c2:cb:8d:1c:4a:72:41:94:ce:57:4f:73:
                    a6:d2:80:f4:05:18:c1:4d:2c:ec:61:4b:f6:4b:f3:
                    86:d8:dc:d0:47:1e:78:33:34:af:16:d5:16:ef:42:
                    86:5f:1e:3f:9d:be:10:21:5a:4c:37:88:07:e2:5a:
                    b1:40:a8:b9:84:6d:ce:ba:b1:55:0b:c4:e6:a2:34:
                    d3:4b:c1:f6:c1:37:0d:e3:43:82:ba:54:2a:42:2b:
                    39:65:f7:55:45:0c:87:11:90:ef:5e:6d:ac:35:5a:
                    90:01:c6:ea:ca:0b:64:2c:4d:cc:6c:75:a3:5f:a7:
                    fb:b2:a1:ad:65:93:30:5c:fd:bc:08:92:f3:f1:4b:
                    2e:98:57:8c:1d:6d:44:7f:13:04:14:15:12:98:f9:
                    0d:f4:28:ba:5f:0e:30:fb:e9:cc:ab:81:ce:2e:4e:
                    ea:ed:57:46:ba:d2:60:31:a9:e1:35:6b:d1:70:84:
                    04:5c:98:81:fe:84:fe:82:0e:ea:ef:40:7e:61:5d:
                    0e:bd:7c:1f:f9:16:86:7a:97:c3:2f:20:8c:31:c1:
                    ff:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3F:BC:69:69:E8:76:59:3F:6E:ED:58:25:CE:15:28:DB:9B:8B:6D
            X509v3 Authority Key Identifier:
                keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:81:d9:3f:1b:f5:a1:a2:69:d2:b9:49:4a:ed:1f:b5:0a:d0:
         4f:ca:3c:ae:d5:e1:61:3f:f5:11:f9:44:e0:3c:7b:ff:e0:14:
         ca:38:c5:b3:82:b7:a0:db:2b:75:e7:30:da:b3:1f:ee:aa:cb:
         4a:61:c9:3e:12:61:10:72:8d:61:85:c7:83:9d:ae:da:5e:98:
         55:5e:6e:11:66:0b:6a:d0:3b:7d:87:3c:f1:79:59:4a:d2:b0:
         e5:37:4e:72:2c:5d:5b:07:fd:21:7e:be:ab:77:3d:a5:25:81:
         0e:3d:15:2b:18:ca:8d:66:71:cd:3a:c4:6d:3d:c7:94:cf:38:
         1c:30:50:f5:aa:14:53:35:01:90:47:b0:eb:f5:06:bb:d1:88:
         a2:31:57:ac:94:d6:e2:11:ce:ea:c2:63:ed:24:1c:5e:7b:4c:
         8d:21:c8:f0:b4:e6:e5:bd:a0:15:06:b0:c9:32:d5:49:2b:6f:
         66:5e:1a:ff:a5:2a:f8:9f:a5:c4:b4:ce:29:aa:26:1b:06:dd:
         ca:6e:d1:cc:29:7a:77:00:da:0e:0a:73:c9:9b:13:b5:96:f1:
         55:75:83:84:51:68:cf:39:a7:8c:43:4b:1c:be:b0:d8:a9:67:
         6f:2c:ca:2b:22:cd:6c:99:47:ab:a2:bd:3b:33:33:79:0c:78:
         6b:4e:05:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:00:00 2026 by rpki-client