Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
File:                     itr_GHci3uuw3c4Fe_PCmNAsfM4.mft (raw, json)
Hash identifier:          YnxRhJL/YvPHYsG9ElZKX0diRjCiXjLfNgi98j8u0n4=
Subject key identifier:   2D:70:6A:C4:1F:BD:4C:FF:8A:A2:CE:84:AD:4D:57:AD:E0:FE:9A:CE
Authority key identifier: 8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
Certificate issuer:       /CN=F36939A6AR/serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
Certificate serial:       0564
Authority info access:    rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
Manifest number:          0563
Signing time:             Mon 02 Nov 2026 03:16:00 +0000
Manifest this update:     Mon 02 Nov 2026 03:15:59 +0000
Manifest next update:     Wed 04 Nov 2026 03:15:59 +0000
Files and hashes:         1: itr_GHci3uuw3c4Fe_PCmNAsfM4.crl (hash: XfER/ASIBG5iuKZtBONYezXjg5d7abDF8u+2RBNdZzY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                          rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1380 (0x564)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36939A6AR, serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
        Validity
            Not Before: Nov  2 03:15:59 2026 GMT
            Not After : Nov  4 03:15:59 2026 GMT
        Subject: CN=6ae80070-9955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ae:34:0b:58:7d:6a:63:71:b0:a2:76:fe:58:
                    9c:5f:e4:17:9e:a6:cf:e5:a7:d1:64:74:26:87:56:
                    03:0e:ff:82:79:17:f2:6a:db:fe:42:78:80:55:a2:
                    10:4e:07:3f:44:12:b1:c3:1a:6e:ad:e3:ae:8e:26:
                    e5:7c:09:46:5c:02:c2:5c:52:3f:e7:08:9f:ad:9e:
                    28:47:ed:c7:ab:a3:16:e5:7d:fb:5a:e0:a1:71:08:
                    93:33:30:b8:57:9e:c5:8c:83:79:bb:bf:2f:83:2d:
                    c7:f1:7f:66:f8:ea:d2:6f:2b:8b:e4:90:12:fa:c8:
                    68:a9:49:bf:f3:ab:2e:55:ef:9f:bf:c0:27:f0:a9:
                    4c:07:15:54:93:d4:c1:54:80:b6:3b:c8:1b:61:ba:
                    1f:5d:6f:a0:a1:48:86:f8:54:1b:65:27:0f:74:f3:
                    7a:2d:b7:f1:78:ab:89:f9:bd:ae:b7:f9:5a:cb:55:
                    a0:ea:1f:fd:4b:4b:06:c6:03:1b:4d:5f:98:38:81:
                    b9:aa:db:2a:a5:c3:27:f8:ec:10:a8:56:72:b6:3c:
                    c1:78:7b:cb:48:a7:70:a5:08:cd:11:3d:f9:74:79:
                    29:c1:3b:d5:70:91:b6:fa:05:de:73:07:56:d6:94:
                    72:fc:4f:f6:78:5d:86:58:b2:4f:09:3c:1f:8a:5d:
                    33:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:70:6A:C4:1F:BD:4C:FF:8A:A2:CE:84:AD:4D:57:AD:E0:FE:9A:CE
            X509v3 Authority Key Identifier:
                keyid:8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:41:2a:c6:9f:96:9a:98:0f:b6:cd:f7:c4:73:84:91:f2:4a:
         11:ee:d7:cc:65:5e:4e:fd:e5:12:5a:8d:68:39:5a:a4:75:c9:
         bd:51:a1:d7:de:72:9a:7f:7b:43:b0:03:11:7b:2a:ba:cd:f7:
         89:99:c7:5c:a9:5f:ea:d6:97:82:ea:fa:ed:36:22:b0:ed:36:
         cd:cf:63:3f:6d:c1:4e:f4:c0:eb:d8:6d:bd:56:eb:20:7c:19:
         14:a9:e7:69:a4:0b:f7:ec:e0:13:94:b8:a0:d9:94:b9:f2:41:
         72:e3:ad:6a:d9:11:97:35:9f:df:e8:c6:7f:31:b1:5e:23:be:
         02:33:b5:64:11:96:f9:e2:d4:28:f6:c5:8d:cb:b6:37:11:3f:
         c2:fc:af:24:5a:e4:62:42:75:29:22:af:85:a2:18:24:18:63:
         25:4c:d7:2d:d7:59:1b:93:d3:d4:c6:27:b8:ff:bb:b5:79:a1:
         82:82:83:d4:37:bc:6f:00:ed:40:f0:19:52:d7:01:86:13:27:
         89:fb:2e:24:ab:f7:51:59:3a:0d:fe:12:22:55:54:0b:42:53:
         98:de:11:2f:05:41:34:f3:b5:86:37:cb:f3:89:80:e7:3c:84:
         bd:1f:bc:00:e7:64:ae:df:6c:4b:0f:0d:fe:05:0e:77:bd:d0:
         ad:ac:72:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----