Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
File:                     itr_GHci3uuw3c4Fe_PCmNAsfM4.mft (raw, json)
Hash identifier:          BaC4QmY+45GXB+7XGINumRR8HOwqRzaAs6pSRxewwXo=
Subject key identifier:   51:2D:F6:E6:10:AD:92:16:CC:FA:0F:6E:36:C8:CD:A8:66:3A:C9:3C
Authority key identifier: 8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
Certificate issuer:       /CN=F36939A6AR/serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
Certificate serial:       03AC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
Manifest number:          03AB
Signing time:             Sat 23 Aug 2025 03:29:48 +0000
Manifest this update:     Sat 23 Aug 2025 03:29:48 +0000
Manifest next update:     Mon 25 Aug 2025 03:29:48 +0000
Files and hashes:         1: itr_GHci3uuw3c4Fe_PCmNAsfM4.crl (hash: POhAtJBcME2+QX9DTSnvVChtIT7RF/rndcwaB26HaIw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                          rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940 (0x3ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36939A6AR, serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
        Validity
            Not Before: Aug 23 03:29:48 2025 GMT
            Not After : Aug 25 03:29:48 2025 GMT
        Subject: CN=68a935ac-955a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:67:62:c0:6d:9f:69:87:72:3a:c8:a5:ea:07:
                    62:7e:ab:2b:54:41:33:34:f7:0a:58:90:dd:b9:93:
                    cf:c3:96:82:38:f2:95:8a:c3:62:5f:6e:88:00:5b:
                    01:b5:25:bc:fd:d0:3f:50:36:7a:da:e5:ee:db:da:
                    23:ed:77:c9:0a:97:08:7b:da:25:0d:c0:a3:a9:15:
                    fb:2d:15:1d:6c:b7:40:c6:e8:f2:b8:d2:b0:6f:40:
                    d1:0c:69:84:e4:b0:18:a3:58:f1:e5:43:06:b2:b4:
                    7b:e6:66:9b:f7:ae:cb:a9:44:86:45:11:09:73:f9:
                    a3:ba:9f:da:87:3c:c8:ac:3a:89:79:2e:34:41:07:
                    a0:2a:9f:a0:4b:eb:13:61:27:04:2f:40:6c:0b:a3:
                    8d:9d:fc:6a:36:a4:a5:02:05:3f:3d:d2:03:7c:b2:
                    32:5f:34:51:c8:04:dd:33:78:c2:10:10:9a:48:d2:
                    95:e3:92:c1:a5:00:36:d0:bb:9f:cd:d8:6f:71:04:
                    eb:f5:b8:f2:94:05:0c:91:1e:ff:07:70:a5:05:73:
                    41:1e:f8:6e:cc:fa:2d:ff:6f:43:b0:57:2f:a3:a1:
                    79:40:f5:33:87:6a:8e:ac:41:b0:83:09:94:4c:48:
                    ce:cf:21:b2:b1:d0:dc:e7:f5:7f:d5:13:19:28:73:
                    74:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2D:F6:E6:10:AD:92:16:CC:FA:0F:6E:36:C8:CD:A8:66:3A:C9:3C
            X509v3 Authority Key Identifier:
                keyid:8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:16:a0:69:a4:64:87:85:fa:52:71:32:36:a4:cd:1a:66:f0:
         c1:d7:72:d3:8f:f2:52:10:1c:4b:ca:44:82:88:e9:9e:a2:9f:
         e4:68:a4:50:be:09:71:e2:f8:b1:26:20:2e:8a:0f:66:68:08:
         11:38:59:4c:69:e7:c0:39:c6:4b:93:41:e4:f1:bb:05:0c:41:
         93:4b:5a:4d:3e:3a:d5:8d:aa:26:d6:8c:c0:ee:a5:37:36:89:
         71:ec:15:d4:cf:d3:47:08:f3:1d:de:4d:ee:d8:ca:c1:46:83:
         47:eb:97:ce:97:14:07:a4:a2:a4:fe:5a:91:28:e3:d3:da:98:
         59:3d:5a:94:db:81:ca:db:4b:a7:44:40:2e:5d:0d:40:2f:7e:
         c9:c7:95:03:99:00:8e:bb:80:9b:b8:ae:f3:14:11:21:9f:cc:
         c8:9a:23:31:e6:f4:ee:cc:13:0d:0e:be:f3:13:ef:3f:df:d2:
         07:4e:a0:4a:20:92:3e:49:a2:fe:40:eb:5d:99:6e:11:1d:86:
         53:df:aa:e3:41:9f:dd:03:00:aa:b2:3e:93:e6:51:da:91:33:
         58:9d:bb:67:d0:a8:53:54:c1:9d:5a:a3:1a:ab:73:9c:04:7a:
         5d:4b:0b:50:89:e3:80:bb:dc:1d:68:bd:8b:69:37:0c:82:e5:
         74:1b:da:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:00:26 2025 by rpki-client