Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
File:                     itr_GHci3uuw3c4Fe_PCmNAsfM4.mft (raw, json)
Hash identifier:          g3aJKiCpj7zVMQlrRBqZudxNxTU5/XkhJox/J7jI28k=
Subject key identifier:   34:F9:C9:33:F3:1B:36:75:D7:5C:DF:78:35:64:8C:BE:32:CE:1A:6B
Authority key identifier: 8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
Certificate issuer:       /CN=F36939A6AR/serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
Certificate serial:       04E4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
Manifest number:          04E3
Signing time:             Sat 27 Jun 2026 03:15:19 +0000
Manifest this update:     Sat 27 Jun 2026 03:15:18 +0000
Manifest next update:     Mon 29 Jun 2026 03:15:18 +0000
Files and hashes:         1: itr_GHci3uuw3c4Fe_PCmNAsfM4.crl (hash: GZrL14evweJZG4HylJndzAx4at8NMSrtSQEVigVAbYQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                          rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Jun 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1252 (0x4e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36939A6AR, serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
        Validity
            Not Before: Jun 27 03:15:18 2026 GMT
            Not After : Jun 29 03:15:18 2026 GMT
        Subject: CN=6a3f4047-e397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:57:d4:74:f6:d0:a8:c0:e6:ce:5c:4d:74:e2:
                    9a:35:59:1b:47:3b:fa:a7:d4:3c:34:87:ec:c0:35:
                    30:a5:51:1b:62:0d:5c:20:98:fd:36:5e:45:7d:2d:
                    d1:d8:bd:2b:16:22:41:b5:f3:94:b3:eb:69:b3:9e:
                    a8:d6:65:c9:6b:bd:a5:fc:82:8b:ef:43:37:e0:27:
                    c9:e9:42:a0:ee:d9:d0:5d:5f:dd:8f:10:f7:70:ec:
                    e7:7f:ee:8b:7d:29:0c:57:86:46:f8:c3:89:1f:08:
                    5d:08:5e:7e:8a:c0:29:d7:dc:d7:7c:1f:55:1c:c6:
                    61:4a:92:b4:04:dd:c7:81:1b:3c:b8:5a:f0:57:d2:
                    ea:40:fe:47:7b:72:4a:ac:78:80:62:21:f5:55:f8:
                    d8:a0:4c:4d:f2:f3:62:f2:05:35:e8:fc:3f:f0:e6:
                    fd:a1:73:19:13:e1:3c:46:03:98:54:39:21:26:2c:
                    6e:ef:55:01:ff:17:7c:a2:e1:ac:25:4f:9e:91:ea:
                    a0:de:1e:ae:f0:40:dc:2a:65:1a:2d:fb:81:a8:c8:
                    3e:bd:1c:04:9d:7e:1e:eb:7d:df:4d:a5:db:20:aa:
                    84:08:47:4b:fe:17:0b:d8:76:80:23:ea:52:11:6c:
                    54:5e:a8:8e:ad:8d:41:fd:1b:27:c7:d0:64:03:0f:
                    29:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F9:C9:33:F3:1B:36:75:D7:5C:DF:78:35:64:8C:BE:32:CE:1A:6B
            X509v3 Authority Key Identifier:
                keyid:8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:21:0f:c8:f5:f1:16:46:98:67:05:0b:5f:71:64:08:fb:75:
         27:e7:93:c3:d3:ad:54:d3:a4:76:1d:03:37:e1:4f:24:df:a2:
         4b:bd:10:2a:ac:0f:08:91:69:fd:ba:36:f7:d8:16:2d:46:27:
         f8:08:f6:de:5d:92:0a:4c:8c:6f:d8:0b:95:3d:05:e0:ae:e2:
         e4:e4:71:9a:b7:98:87:31:b2:04:c0:57:9f:e5:3f:7b:eb:51:
         59:5d:41:b5:c2:b7:1c:b6:01:69:f5:1b:11:b3:79:c8:61:90:
         02:bc:82:fe:d8:f9:03:70:6b:75:bb:ff:c3:c0:76:71:0b:9e:
         23:af:2d:f6:d0:64:e3:9f:79:e5:0c:31:f9:01:69:d1:82:ef:
         02:34:40:75:49:d2:69:b6:ca:bb:77:3e:f8:5c:3e:17:64:66:
         a1:de:96:ed:01:ce:f2:2f:7e:50:39:9b:1e:7f:fd:ad:1f:5b:
         d7:82:f8:74:33:06:55:de:5d:bd:cf:8c:e4:df:a3:05:84:30:
         58:1e:50:5e:6b:76:91:ac:c9:17:55:b4:35:31:e4:dd:43:e9:
         d0:51:a8:0a:6c:4c:42:7a:61:5e:cb:2e:5f:68:a5:41:9a:be:
         30:94:c5:3c:fc:3c:cf:6c:87:91:05:bf:ad:ef:3f:2d:ec:14:
         00:71:9d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 20:15:33 2026 by rpki-client