Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
File:                     itr_GHci3uuw3c4Fe_PCmNAsfM4.mft (raw, json)
Hash identifier:          ES9QPCLLhB2T4J8G7weE5kYNjYrgfNri6LCdDUeX4Q8=
Subject key identifier:   C2:50:3C:B0:32:34:A0:61:58:C1:23:82:C7:13:77:28:34:B9:EE:CB
Authority key identifier: 8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
Certificate issuer:       /CN=F36939A6AR/serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
Certificate serial:       04D6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
Manifest number:          04D5
Signing time:             Sat 13 Jun 2026 03:14:50 +0000
Manifest this update:     Sat 13 Jun 2026 03:14:49 +0000
Manifest next update:     Mon 15 Jun 2026 03:14:49 +0000
Files and hashes:         1: itr_GHci3uuw3c4Fe_PCmNAsfM4.crl (hash: wzwLEoyvRePP+0dLq09LBv2COPQOSqSToljkUzqB5nk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                          rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1238 (0x4d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36939A6AR, serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
        Validity
            Not Before: Jun 13 03:14:49 2026 GMT
            Not After : Jun 15 03:14:49 2026 GMT
        Subject: CN=6a2ccb2a-637d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a8:57:6a:c4:f4:dd:ae:65:c9:65:c2:91:34:
                    ed:96:71:27:52:37:81:53:06:85:e6:d3:d0:7f:d9:
                    8b:1a:b3:57:28:5d:f7:25:89:c7:18:aa:53:11:9d:
                    59:c4:c6:60:db:8c:76:60:61:fc:f4:5b:43:6a:94:
                    8a:11:f3:50:a4:1a:57:70:d5:3a:fe:96:f7:1a:60:
                    7a:79:32:e7:81:17:7e:22:03:c6:f5:0e:b6:30:b1:
                    16:e8:06:df:e9:7e:6b:6f:be:d9:3b:02:4b:d3:ff:
                    1e:d6:b1:c7:a3:3a:45:c9:71:e2:8d:00:e5:93:6b:
                    9a:d2:26:0e:d7:63:73:02:6c:4f:72:0e:13:7a:1e:
                    b0:c0:1a:a4:6a:8a:ac:75:1c:c7:c8:5f:d6:e7:7b:
                    8f:4e:8c:a1:ef:81:5d:6f:8d:37:3a:f9:90:30:14:
                    b6:48:ac:b4:4c:6a:a5:18:f6:91:4a:01:1f:f1:68:
                    ad:96:f3:33:b1:2d:b6:3a:d2:86:55:ae:38:ad:92:
                    f7:36:3d:33:58:24:6d:92:e9:ae:2b:c9:e9:ae:ef:
                    40:59:aa:cc:6c:1d:d8:9d:6c:d6:e6:97:0e:e6:34:
                    a4:b2:13:96:c7:53:d3:ea:0e:af:d3:12:7a:4e:68:
                    91:1c:94:52:25:9c:d7:35:95:41:5b:67:e9:72:81:
                    84:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:50:3C:B0:32:34:A0:61:58:C1:23:82:C7:13:77:28:34:B9:EE:CB
            X509v3 Authority Key Identifier:
                keyid:8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b9:0a:28:3c:29:da:e8:0e:2e:b2:dd:42:75:bb:68:39:be:
         56:66:71:8b:b0:2c:db:eb:02:6b:f0:3c:8d:06:6a:e3:f1:d1:
         af:b0:36:80:73:76:9a:f4:dc:b2:dc:71:f3:98:0a:db:7b:f9:
         ea:fb:9b:ef:68:56:cb:c1:2e:d7:42:f0:2d:15:10:2f:a3:be:
         c3:02:42:44:20:70:55:20:dd:2a:52:83:6b:e9:12:88:66:9f:
         8c:c7:58:8a:06:e4:e3:70:d6:73:a9:7f:5e:c2:8a:db:cd:ec:
         84:11:9e:68:15:9e:8e:21:30:47:db:63:10:c9:ad:bb:18:be:
         c0:31:12:fc:8a:09:db:a2:73:1c:2c:42:8f:99:dc:fe:f2:8d:
         f0:76:14:2f:7f:5a:39:86:67:f9:25:ea:89:f7:e7:b6:7a:23:
         d0:ed:08:16:07:05:a1:34:44:7c:ac:31:40:6d:de:8b:1f:a2:
         b0:d2:16:5c:85:af:cb:79:10:0b:d9:d4:3a:4f:98:d3:09:db:
         b2:12:9f:af:88:3a:a0:c3:e8:94:46:cd:63:9d:10:eb:e3:5b:
         14:16:8e:9a:b5:cf:25:d4:5e:5e:45:5f:4b:13:81:48:98:21:
         9c:37:b5:2d:a6:83:d6:fb:3b:f6:12:6e:3f:1f:49:9a:b8:a6:
         26:6b:2d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:18:53 2026 by rpki-client