Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
File:                     itr_GHci3uuw3c4Fe_PCmNAsfM4.mft (raw, json)
Hash identifier:          t2DoPCu4n2hp6eXyO1IldWJOOR0spEw0coYUVLlDMsU=
Subject key identifier:   C9:AE:86:B5:1C:EE:AD:16:CE:EF:F3:DB:9B:C3:CD:4D:3B:4F:BF:1A
Authority key identifier: 8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
Certificate issuer:       /CN=F36939A6AR/serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
Certificate serial:       04AF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
Manifest number:          04AE
Signing time:             Tue 05 May 2026 03:15:51 +0000
Manifest this update:     Tue 05 May 2026 03:15:50 +0000
Manifest next update:     Thu 07 May 2026 03:15:50 +0000
Files and hashes:         1: itr_GHci3uuw3c4Fe_PCmNAsfM4.crl (hash: oR3UORY4FwUBsJbyj2KeRfKAoh3YX3/+oKODalzEwnM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                          rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 May 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1199 (0x4af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36939A6AR, serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
        Validity
            Not Before: May  5 03:15:50 2026 GMT
            Not After : May  7 03:15:50 2026 GMT
        Subject: CN=69f960e6-a0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:57:aa:04:74:30:4e:24:c2:2e:6c:8b:51:
                    f6:9f:41:b7:d6:0b:ba:ba:cd:1b:ec:68:cf:7a:de:
                    c4:d9:c6:60:c4:6a:11:00:c3:05:52:40:75:e5:1d:
                    b6:8d:cc:fd:15:72:fd:6e:42:95:96:ae:5e:63:cd:
                    ad:33:aa:11:8f:4f:8b:ca:2a:96:a5:e6:44:5d:e5:
                    64:6a:54:f0:24:ce:48:09:ee:1f:48:66:a6:74:48:
                    a5:93:c6:7c:bd:48:f6:05:c2:8b:5d:f9:55:bd:77:
                    be:3b:39:a4:6f:32:4a:6e:85:b9:50:39:6c:f2:a4:
                    72:6d:90:b7:dd:0b:0a:1d:40:3d:e7:d3:9e:b9:a0:
                    a7:6c:90:9c:80:96:53:ab:42:2d:a6:10:5d:e1:70:
                    47:d0:89:1e:7a:d1:c7:9d:f7:eb:e0:51:a8:d4:90:
                    6c:e7:03:b7:7e:30:36:ed:7b:d4:3e:07:f2:44:9a:
                    fd:f0:7e:a7:1d:dc:9a:02:a3:cc:7c:f6:ec:30:10:
                    fc:e1:3a:cc:4f:c9:76:04:79:9f:18:1f:2a:6b:d4:
                    83:e4:e7:ef:65:62:14:59:e1:93:92:d7:b4:0a:17:
                    37:88:76:2d:c6:87:84:db:5b:a6:b0:41:4b:1a:1a:
                    cf:52:40:68:0c:df:b7:7d:b9:59:41:40:70:9f:00:
                    8d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AE:86:B5:1C:EE:AD:16:CE:EF:F3:DB:9B:C3:CD:4D:3B:4F:BF:1A
            X509v3 Authority Key Identifier:
                keyid:8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:3f:b7:72:5f:56:09:b0:d1:82:fc:29:37:e4:26:f5:0f:69:
         ee:04:62:16:f0:fa:58:e1:bc:77:27:19:7c:e0:25:8f:da:78:
         f7:f4:8f:df:dc:53:c7:c8:4f:9b:43:83:0d:b3:53:59:35:10:
         b8:c1:f1:fb:b8:77:72:fb:fa:4b:51:ce:69:65:15:6c:f6:e3:
         2d:9b:d2:42:34:1f:e9:9d:5c:3d:ca:de:b4:4d:23:35:99:4b:
         b7:d2:27:e8:12:e3:9a:b4:bd:f8:f9:68:cf:93:75:17:96:62:
         47:ea:4d:0b:ad:94:42:3f:85:7b:81:37:11:e3:34:31:85:96:
         f9:23:e8:7a:d4:d3:4e:9d:5b:62:e6:22:ec:48:e4:d9:42:98:
         59:3f:e4:93:ca:1f:c9:a8:37:91:93:ce:ee:c8:14:22:8b:9d:
         3e:00:ab:33:71:c2:0d:31:28:25:0d:9c:12:77:8c:94:4f:7b:
         6b:0a:7f:62:35:13:6c:03:b5:3d:9b:8e:8e:71:dd:5b:fa:2d:
         9e:9c:f2:49:c0:c5:c5:1f:f9:d7:8d:c1:48:60:35:b1:73:ce:
         42:b0:79:4b:db:27:c6:89:88:5b:a6:00:9d:41:61:cf:98:95:
         a9:f3:98:c1:70:83:a2:bc:0e:62:8e:62:08:5a:40:c1:c7:c0:
         cf:32:50:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 22:11:19 2026 by rpki-client