Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
File:                     itr_GHci3uuw3c4Fe_PCmNAsfM4.mft (raw, json)
Hash identifier:          1zKKf+aP1EJNozk0d+C+vORtzESVtOgvzVbEA86FUQQ=
Subject key identifier:   1E:01:BE:83:58:8A:94:D3:C1:EC:78:ED:A2:F9:36:FE:18:9C:87:1A
Authority key identifier: 8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
Certificate issuer:       /CN=F36939A6AR/serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
Certificate serial:       0519
Authority info access:    rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
Manifest number:          0518
Signing time:             Wed 19 Aug 2026 03:15:32 +0000
Manifest this update:     Wed 19 Aug 2026 03:15:31 +0000
Manifest next update:     Fri 21 Aug 2026 03:15:31 +0000
Files and hashes:         1: itr_GHci3uuw3c4Fe_PCmNAsfM4.crl (hash: oOQLNTSTlpe9xhxNGexoSv44miMm/3R/Zc2rTqK/mIY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                          rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 21 Aug 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1305 (0x519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36939A6AR, serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
        Validity
            Not Before: Aug 19 03:15:31 2026 GMT
            Not After : Aug 21 03:15:31 2026 GMT
        Subject: CN=6a851fd4-db89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d4:79:7e:0c:72:44:69:16:f1:01:87:e5:2f:
                    82:9e:d2:34:9f:a3:43:a4:26:4b:ca:71:79:ad:c6:
                    a4:87:cf:4a:fe:b5:75:22:a5:74:ec:27:43:82:74:
                    82:5e:3a:90:80:cf:42:9f:63:52:8a:85:15:7c:0a:
                    00:3c:59:0d:a1:66:96:18:5a:fa:0f:13:6d:37:44:
                    47:c3:38:1e:eb:56:6f:ae:74:36:d5:b2:cf:24:b2:
                    61:8d:56:3e:04:55:05:b0:32:a5:aa:84:fb:cc:de:
                    7f:e2:b5:cb:b1:c7:4e:3d:5c:ac:40:c6:f5:86:26:
                    1d:3d:5d:2a:8e:22:0f:b6:b1:c3:b0:4b:0b:10:e4:
                    9a:74:bd:f0:88:ba:49:fe:47:93:2a:cf:7e:9f:9f:
                    18:77:cf:8f:ef:8f:d8:8c:51:c8:9f:39:c5:c1:0d:
                    9f:a2:26:01:89:84:cb:a8:58:73:ab:8e:4e:f2:6d:
                    08:9d:e2:e8:da:03:b0:67:e3:2a:0f:5e:24:1a:9e:
                    6e:0d:f2:a7:f7:eb:0b:5c:1e:2d:0b:5e:c3:ca:c8:
                    ec:7a:70:cf:5a:14:f0:ba:ae:1d:e5:ac:57:66:28:
                    f7:79:ec:7f:7f:1e:54:a0:f9:50:97:b0:03:37:ea:
                    11:63:19:69:53:2d:8e:41:ad:47:6e:f2:0c:63:94:
                    86:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:01:BE:83:58:8A:94:D3:C1:EC:78:ED:A2:F9:36:FE:18:9C:87:1A
            X509v3 Authority Key Identifier:
                keyid:8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:9c:5a:24:37:a2:cb:7b:48:f1:90:a1:c5:52:bc:ff:c4:66:
         5e:a3:44:bb:0a:c0:3f:31:4d:1a:e0:38:e7:22:ed:04:1e:d4:
         26:c8:a9:ef:9c:65:ad:41:ea:7d:0c:3f:5c:a3:6c:f5:52:5b:
         d2:19:59:a9:37:5f:4b:6e:86:96:ec:0c:ac:46:91:8c:f8:83:
         0f:56:1a:78:43:1d:71:7b:9f:b3:fc:2c:9e:9f:94:4e:11:c5:
         cd:b1:86:ce:13:11:11:5f:4b:d4:fe:9f:a9:3b:6c:e8:31:c4:
         de:f6:66:4e:d8:e3:c0:f2:f1:30:23:1b:73:c4:c3:69:1b:ee:
         82:6d:46:87:04:33:b6:22:8b:21:bb:b2:a8:d2:b7:3d:03:d7:
         8b:32:f1:8a:b3:4d:09:70:bb:bd:31:0c:7d:91:b9:ea:74:a7:
         10:b4:f9:22:fd:aa:62:21:43:c6:df:fb:d2:06:7c:5a:45:4e:
         4c:fd:0e:a0:63:cf:bd:c0:40:06:7c:7f:a3:46:23:95:cb:e9:
         a9:74:e6:ad:05:e0:bb:ee:32:1e:b9:01:af:d8:67:3d:ca:ee:
         5b:25:95:df:93:1c:0a:76:97:2f:c7:5a:85:7c:a1:29:e9:f0:
         fd:f4:89:eb:cc:8d:21:08:c5:9f:aa:87:2b:3b:db:8d:61:88:
         38:ac:73:c5
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBRkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTM5QTZBUjExMC8GA1UEBRMoOEFEQUZGMTg3NzIyREVFQkIwRERDRTA1N0JGM0My
OThEMDJDN0NDRTAeFw0yNjA4MTkwMzE1MzFaFw0yNjA4MjEwMzE1MzFaMBgxFjAU
BgNVBAMTDTZhODUxZmQ0LWRiODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDL1Hl+DHJEaRbxAYflL4Ke0jSfo0OkJkvKcXmtxqSHz0r+tXUipXTsJ0OC
dIJeOpCAz0KfY1KKhRV8CgA8WQ2hZpYYWvoPE203REfDOB7rVm+udDbVss8ksmGN
Vj4EVQWwMqWqhPvM3n/itcuxx049XKxAxvWGJh09XSqOIg+2scOwSwsQ5Jp0vfCI
ukn+R5Mqz36fnxh3z4/vj9iMUcifOcXBDZ+iJgGJhMuoWHOrjk7ybQid4ujaA7Bn
4yoPXiQanm4N8qf36wtcHi0LXsPKyOx6cM9aFPC6rh3lrFdmKPd57H9/HlSg+VCX
sAM36hFjGWlTLY5BrUdu8gxjlIb3AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUHgG+
g1iKlNPB7Hjtovk2/hichxowHwYDVR0jBBgwFoAUitr/GHci3uuw3c4Fe/PCmNAs
fM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkzOUE2L0FEOTRBQTIwQjVGRDExRURCRkJBNjNGMUYxMjIyNDY4L2l0cl9H
SGNpM3V1dzNjNEZlX1BDbU5Bc2ZNNC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2l0cl9HSGNpM3V1dzNjNEZlX1BDbU5Bc2ZNNC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTM5QTYvQUQ5NEFBMjBCNUZEMTFFREJGQkE2M0YxRjEyMjI0
NjgvaXRyX0dIY2kzdXV3M2M0RmVfUENtTkFzZk00Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANnFokN6LLe0jxkKHFUrz/xGZeo0S7CsA/
MU0a4DjnIu0EHtQmyKnvnGWtQep9DD9co2z1UlvSGVmpN19LboaW7AysRpGM+IMP
Vhp4Qx1xe5+z/Cyen5ROEcXNsYbOExERX0vU/p+pO2zoMcTe9mZO2OPA8vEwIxtz
xMNpG+6CbUaHBDO2Ioshu7Ko0rc9A9eLMvGKs00JcLu9MQx9kbnqdKcQtPki/api
IUPG3/vSBnxaRU5M/Q6gY8+9wEAGfH+jRiOVy+mpdOatBeC77jIeuQGv2Gc9yu5b
JZXfkxwKdpcvx1qFfKEp6fD99InrzI0hCMWfqocrO9uNYYg4rHPF
-----END CERTIFICATE-----
Generated at Wed Aug 19 05:59:04 2026 by rpki-client