Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
File:                     itr_GHci3uuw3c4Fe_PCmNAsfM4.mft (raw, json)
Hash identifier:          h5M3w6dHs7ZqGEB/E4E6ynuP+4Bj4+u2ypsdLTo141s=
Subject key identifier:   1E:FF:B2:16:8B:5A:C7:09:BA:99:E9:10:AB:D0:6B:DA:6E:5A:E3:84
Authority key identifier: 8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
Certificate issuer:       /CN=F36939A6AR/serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
Certificate serial:       051D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
Manifest number:          051C
Signing time:             Sun 23 Aug 2026 03:16:54 +0000
Manifest this update:     Sun 23 Aug 2026 03:16:54 +0000
Manifest next update:     Tue 25 Aug 2026 03:16:54 +0000
Files and hashes:         1: itr_GHci3uuw3c4Fe_PCmNAsfM4.crl (hash: m7gOybdZBxUQw6BYLuS1OWv9g2Z93rTf2RXzAQIUgQI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                          rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 25 Aug 2026 03:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1309 (0x51d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36939A6AR, serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
        Validity
            Not Before: Aug 23 03:16:54 2026 GMT
            Not After : Aug 25 03:16:54 2026 GMT
        Subject: CN=6a8a6626-9efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e6:a5:35:56:b2:57:9a:ca:f0:58:86:e5:69:
                    39:be:5c:b6:39:85:68:30:56:4e:37:5a:5f:48:1f:
                    3a:10:e3:ac:47:1f:68:3d:f4:9d:c7:57:d5:7d:f7:
                    e3:61:29:bc:16:ca:a4:a7:c8:98:e5:7e:d2:92:6a:
                    f5:3a:b1:1a:d0:b7:9a:d2:12:e6:1f:fc:c1:9a:2c:
                    7d:a9:3f:a6:f0:5c:f0:e3:18:21:da:aa:a6:ae:f7:
                    10:ca:f9:7a:97:64:f4:4c:58:f1:99:73:65:fa:1a:
                    33:5c:34:4f:d0:a0:71:ce:8c:04:99:cf:0a:d4:ef:
                    97:7b:9c:19:5f:4d:56:a9:0d:91:fe:31:f5:3c:e6:
                    f9:8b:e6:0c:65:24:bf:cb:b9:38:78:27:13:02:fe:
                    c4:4a:df:9c:52:23:d2:1a:bb:fb:31:71:1c:ca:0d:
                    93:69:77:87:6f:67:24:8d:65:f9:21:4e:0b:b6:0a:
                    67:27:3f:4e:11:4c:be:ec:a3:d8:7e:5c:0a:50:27:
                    3d:cb:46:30:c5:57:37:7e:02:62:51:2c:72:4a:5d:
                    e5:0b:3e:81:cc:6b:3a:5e:6d:0f:b7:81:bb:ac:a5:
                    88:61:b1:19:78:d5:c9:d2:6e:f0:34:c5:42:40:49:
                    44:9e:ef:2d:da:0f:f2:3f:82:17:41:18:45:07:44:
                    5b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FF:B2:16:8B:5A:C7:09:BA:99:E9:10:AB:D0:6B:DA:6E:5A:E3:84
            X509v3 Authority Key Identifier:
                keyid:8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c4:6a:66:4f:3c:e4:c0:fb:aa:f8:1f:b6:84:9b:15:2e:91:
         fd:a8:ff:67:63:3e:d3:0d:58:22:1d:4e:6e:7f:49:20:cf:a6:
         b6:25:a5:1f:24:15:96:0d:84:6e:a8:b5:fd:3b:45:f3:f1:47:
         38:57:5e:70:c8:a6:3c:33:a3:82:97:13:3d:f2:73:6a:67:42:
         b7:50:4a:10:ce:2c:bc:57:31:bd:06:44:1e:fd:2c:3e:a7:39:
         1d:d2:e5:60:e8:35:6a:7e:b2:72:79:a1:1a:7e:91:fb:b9:09:
         af:1c:0e:9e:64:62:c4:91:9f:2c:b3:fc:5e:13:cf:68:c3:a7:
         10:c2:91:3d:c3:33:87:82:01:fe:4f:b3:48:3a:21:79:80:99:
         fa:dd:d0:63:0a:15:ba:49:a8:81:c3:de:ec:d6:c9:f0:bc:48:
         35:d5:15:5c:f0:a4:1f:88:18:84:9c:9b:9e:2c:b2:25:34:f7:
         9a:4e:40:ac:9e:c6:d5:a1:92:cf:2f:ae:b1:07:74:9a:4f:e4:
         7b:41:a8:3f:3e:ff:54:e2:ab:27:7d:09:22:59:85:ff:64:b4:
         ea:80:e6:ce:ec:2b:01:6b:11:1f:0b:dd:88:a8:d0:c9:23:bf:
         0d:90:01:05:fb:0c:ce:71:46:83:e6:51:a8:74:3a:0c:85:3b:
         0d:96:97:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----