Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
File:                     itr_GHci3uuw3c4Fe_PCmNAsfM4.mft (raw, json)
Hash identifier:          Yd2+3zpU6jbg+ug09JKtykUc9VtL5yRBy1kYhriEOns=
Subject key identifier:   73:46:EC:BD:9E:E1:CF:FE:D3:9F:C9:76:8F:11:5E:DE:80:90:22:F8
Authority key identifier: 8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
Certificate issuer:       /CN=F36939A6AR/serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
Certificate serial:       0391
Authority info access:    rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
Manifest number:          0390
Signing time:             Sun 27 Jul 2025 03:32:30 +0000
Manifest this update:     Sun 27 Jul 2025 03:32:29 +0000
Manifest next update:     Tue 29 Jul 2025 03:32:29 +0000
Files and hashes:         1: itr_GHci3uuw3c4Fe_PCmNAsfM4.crl (hash: zKl3SyF6pjyXrN8kZsAE8ioF5mDlUcDKRnsYdsi2haQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                          rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913 (0x391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36939A6AR, serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
        Validity
            Not Before: Jul 27 03:32:29 2025 GMT
            Not After : Jul 29 03:32:29 2025 GMT
        Subject: CN=68859dce-ed03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:48:1c:09:54:58:4c:1c:e6:38:6c:c8:f8:3f:
                    e8:02:5d:51:49:8e:6f:dc:54:b2:ab:0c:a6:ac:f6:
                    83:c1:bf:b9:ef:56:be:eb:e7:9e:96:5a:50:f9:6e:
                    42:5e:5a:50:ab:d9:35:32:33:f5:84:63:97:3b:ce:
                    e7:94:6d:31:2c:f2:26:fa:26:5e:55:df:36:00:93:
                    ad:74:bd:77:57:e8:bd:9e:9d:31:98:c7:7e:03:47:
                    db:b1:15:03:19:ba:af:2f:bc:45:31:71:4a:8f:a9:
                    c0:4f:cc:d0:19:3c:13:f4:03:d2:f7:ae:0c:f2:b4:
                    9b:02:da:97:a4:24:99:56:9b:aa:1b:60:d1:0e:cf:
                    62:83:96:52:2b:6b:bb:a9:02:6a:8a:c1:65:43:bc:
                    1e:00:c7:ef:c4:20:81:1e:b2:7a:d9:5d:3d:51:52:
                    f1:00:51:c0:14:3d:36:ae:2c:cc:04:c6:77:f1:83:
                    12:11:81:dd:3b:6b:5f:fc:9d:c2:7a:43:fd:44:b3:
                    12:51:a5:53:6c:dd:93:3c:25:94:31:a6:7f:93:90:
                    94:8a:1d:4e:fb:03:8d:cb:e3:5b:28:57:d1:87:5e:
                    6c:e4:9f:be:a6:cb:ba:65:bd:7c:25:c9:47:a3:74:
                    54:20:dd:4f:f9:75:db:8d:52:80:53:05:01:f6:ba:
                    b2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:46:EC:BD:9E:E1:CF:FE:D3:9F:C9:76:8F:11:5E:DE:80:90:22:F8
            X509v3 Authority Key Identifier:
                keyid:8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2f:c7:c2:5c:a5:11:da:55:c8:67:b4:11:99:c3:d5:a9:70:
         0a:b0:e8:77:c3:8b:ab:34:fb:ba:50:d0:5b:82:99:9b:a1:92:
         86:d4:34:cc:90:29:97:b4:a9:3e:67:b1:e6:89:ba:1c:b4:08:
         41:03:51:14:54:6c:b1:79:6b:28:91:a1:ba:fe:6e:0f:11:9e:
         12:35:52:33:10:2b:1e:b0:a6:2f:40:f4:5e:f9:42:bb:d3:83:
         bf:f7:7a:2b:a7:44:33:d6:c3:29:b8:c5:74:22:8e:7b:8c:91:
         5f:96:6c:56:de:1b:99:61:d8:4a:8c:53:0b:7f:a3:43:12:ea:
         f0:ce:cd:fe:1d:89:a0:19:42:6e:01:dd:4b:85:d1:eb:5f:5c:
         14:66:fa:a8:5f:ba:29:12:1f:a6:86:9e:83:5e:86:0a:cc:43:
         44:ad:85:3e:db:74:49:b9:6d:2f:99:b8:e0:78:81:29:2d:a0:
         6d:cd:91:f2:ef:28:f6:7f:f7:cb:a1:ff:aa:65:ed:3b:a6:a9:
         bb:34:d6:d1:13:78:7b:52:89:82:16:76:e5:9c:5e:ec:51:d4:
         3b:6f:81:a8:e6:e4:ca:79:e6:0a:82:4d:b7:54:45:40:7c:3b:
         51:5e:b0:40:2a:90:1a:f9:ab:91:01:51:07:8f:01:1a:a6:f5:
         fc:8e:3f:95
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTM5QTZBUjExMC8GA1UEBRMoOEFEQUZGMTg3NzIyREVFQkIwRERDRTA1N0JGM0My
OThEMDJDN0NDRTAeFw0yNTA3MjcwMzMyMjlaFw0yNTA3MjkwMzMyMjlaMBgxFjAU
BgNVBAMTDTY4ODU5ZGNlLWVkMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLSBwJVFhMHOY4bMj4P+gCXVFJjm/cVLKrDKas9oPBv7nvVr7r556WWlD5
bkJeWlCr2TUyM/WEY5c7zueUbTEs8ib6Jl5V3zYAk610vXdX6L2enTGYx34DR9ux
FQMZuq8vvEUxcUqPqcBPzNAZPBP0A9L3rgzytJsC2pekJJlWm6obYNEOz2KDllIr
a7upAmqKwWVDvB4Ax+/EIIEesnrZXT1RUvEAUcAUPTauLMwExnfxgxIRgd07a1/8
ncJ6Q/1EsxJRpVNs3ZM8JZQxpn+TkJSKHU77A43L41soV9GHXmzkn76my7plvXwl
yUejdFQg3U/5dduNUoBTBQH2urIZAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUc0bs
vZ7hz/7Tn8l2jxFe3oCQIvgwHwYDVR0jBBgwFoAUitr/GHci3uuw3c4Fe/PCmNAs
fM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkzOUE2L0FEOTRBQTIwQjVGRDExRURCRkJBNjNGMUYxMjIyNDY4L2l0cl9H
SGNpM3V1dzNjNEZlX1BDbU5Bc2ZNNC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2l0cl9HSGNpM3V1dzNjNEZlX1BDbU5Bc2ZNNC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTM5QTYvQUQ5NEFBMjBCNUZEMTFFREJGQkE2M0YxRjEyMjI0
NjgvaXRyX0dIY2kzdXV3M2M0RmVfUENtTkFzZk00Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtL8fCXKUR2lXIZ7QRmcPVqXAKsOh3w4ur
NPu6UNBbgpmboZKG1DTMkCmXtKk+Z7HmiboctAhBA1EUVGyxeWsokaG6/m4PEZ4S
NVIzECsesKYvQPRe+UK704O/93orp0Qz1sMpuMV0Io57jJFflmxW3huZYdhKjFML
f6NDEurwzs3+HYmgGUJuAd1LhdHrX1wUZvqoX7opEh+mhp6DXoYKzENErYU+23RJ
uW0vmbjgeIEpLaBtzZHy7yj2f/fLof+qZe07pqm7NNbRE3h7UomCFnblnF7sUdQ7
b4Go5uTKeeYKgk23VEVAfDtRXrBAKpAa+auRAVEHjwEapvX8jj+V
-----END CERTIFICATE-----
Generated at Mon Jul 28 01:03:03 2025 by rpki-client