Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
File:                     itr_GHci3uuw3c4Fe_PCmNAsfM4.mft (raw, json)
Hash identifier:          tl/j4UP4GBvcBkQytSsqfFII1rThey5XVwzssQrqltM=
Subject key identifier:   3B:8F:1B:35:80:FD:CA:85:2F:CE:B3:85:5E:D0:24:7F:17:B2:03:71
Authority key identifier: 8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
Certificate issuer:       /CN=F36939A6AR/serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
Certificate serial:       04B6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
Manifest number:          04B5
Signing time:             Tue 12 May 2026 03:13:46 +0000
Manifest this update:     Tue 12 May 2026 03:13:45 +0000
Manifest next update:     Thu 14 May 2026 03:13:45 +0000
Files and hashes:         1: itr_GHci3uuw3c4Fe_PCmNAsfM4.crl (hash: QlU08oMrziJKrB8PUl//XNcNcB5kTLGOJVhF9CbINHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                          rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1206 (0x4b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36939A6AR, serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
        Validity
            Not Before: May 12 03:13:45 2026 GMT
            Not After : May 14 03:13:45 2026 GMT
        Subject: CN=6a029aea-32c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:91:02:cc:83:a7:52:65:ae:b9:fb:54:8b:95:
                    8a:87:b9:a2:68:82:77:d8:86:2b:e6:76:e9:e2:3d:
                    09:4a:b5:c0:81:c1:c3:a7:fa:11:3f:c8:13:40:42:
                    6d:55:93:f0:de:04:68:ad:e9:0d:6b:9c:ad:6f:9e:
                    c7:c9:a2:c9:93:7b:13:45:d5:8b:09:8f:99:82:e5:
                    e8:4f:2c:b7:0e:f4:b7:70:ba:c8:eb:d8:36:d8:be:
                    14:b5:c4:b7:82:83:d3:45:f9:dd:a3:51:52:d9:cb:
                    ea:dc:ce:8d:49:35:8f:a4:fd:3e:a7:11:f7:ca:8f:
                    8b:fd:f3:33:00:c6:07:d0:74:ee:20:ea:94:b8:f8:
                    3a:d6:fe:23:70:e8:a1:d2:36:77:62:b2:a2:33:fd:
                    f3:cb:29:0e:07:f3:1d:dd:64:dc:91:68:f3:ff:8e:
                    2b:b1:86:6f:e5:c0:9f:ab:d0:1a:2d:6a:17:ad:de:
                    68:c4:1d:94:0a:99:6c:ef:37:37:e3:8c:ad:9e:04:
                    d5:dc:f7:bb:f1:d8:74:75:1f:75:8c:30:e2:28:fb:
                    05:1c:81:13:df:45:f8:5b:bd:9e:d2:6c:87:6e:0b:
                    15:67:f3:0c:6e:9c:8b:96:98:33:fd:42:41:9f:2b:
                    a1:d8:af:58:9f:1e:47:14:09:08:0a:b9:a2:f3:80:
                    c6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8F:1B:35:80:FD:CA:85:2F:CE:B3:85:5E:D0:24:7F:17:B2:03:71
            X509v3 Authority Key Identifier:
                keyid:8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:8f:44:91:7d:88:2d:46:be:70:72:b9:b0:b6:19:fb:f0:56:
         5e:1d:06:69:41:8b:b4:6f:f9:34:d4:98:0a:9c:36:3f:c8:1d:
         26:45:3c:e7:17:b2:cf:b7:d6:62:66:39:16:64:58:f9:90:b5:
         d4:a1:ea:1d:a5:46:a3:84:b5:40:f2:30:55:84:ab:ea:ea:b7:
         3c:7e:66:54:c3:0c:b6:8d:2b:87:88:f8:35:58:f2:b3:f7:cd:
         7b:58:22:5b:1a:5e:d9:01:56:50:c7:d8:8e:1e:02:f3:22:7b:
         d8:d1:fc:01:2f:ed:8d:a1:5b:d0:65:75:0d:bb:4a:6c:02:96:
         6f:c1:a5:31:32:8e:06:cd:40:9a:5a:63:db:d5:f8:19:15:d5:
         2b:50:1c:cb:cb:5f:24:9c:db:31:cf:24:40:c3:a0:1a:bd:3b:
         8a:9b:f9:a5:25:a7:85:46:ec:d9:ca:9c:53:86:26:b9:ca:9a:
         6c:01:8d:30:23:47:92:05:34:b9:83:14:47:89:f6:ab:2f:23:
         5c:cd:e1:7d:71:37:59:8c:f6:2a:65:cb:a1:bb:85:cf:01:7a:
         c6:35:bd:6b:64:4d:9e:b9:83:16:4e:de:a3:32:84:ba:b1:27:
         69:65:b8:ce:b3:c0:7e:e1:f0:82:70:0d:a1:74:2d:99:b4:ac:
         e2:f6:d6:3d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBLYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTM5QTZBUjExMC8GA1UEBRMoOEFEQUZGMTg3NzIyREVFQkIwRERDRTA1N0JGM0My
OThEMDJDN0NDRTAeFw0yNjA1MTIwMzEzNDVaFw0yNjA1MTQwMzEzNDVaMBgxFjAU
BgNVBAMTDTZhMDI5YWVhLTMyYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDnkQLMg6dSZa65+1SLlYqHuaJognfYhivmduniPQlKtcCBwcOn+hE/yBNA
Qm1Vk/DeBGit6Q1rnK1vnsfJosmTexNF1YsJj5mC5ehPLLcO9Ldwusjr2DbYvhS1
xLeCg9NF+d2jUVLZy+rczo1JNY+k/T6nEffKj4v98zMAxgfQdO4g6pS4+DrW/iNw
6KHSNndisqIz/fPLKQ4H8x3dZNyRaPP/jiuxhm/lwJ+r0Botahet3mjEHZQKmWzv
NzfjjK2eBNXc97vx2HR1H3WMMOIo+wUcgRPfRfhbvZ7SbIduCxVn8wxunIuWmDP9
QkGfK6HYr1ifHkcUCQgKuaLzgMZfAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUO48b
NYD9yoUvzrOFXtAkfxeyA3EwHwYDVR0jBBgwFoAUitr/GHci3uuw3c4Fe/PCmNAs
fM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkzOUE2L0FEOTRBQTIwQjVGRDExRURCRkJBNjNGMUYxMjIyNDY4L2l0cl9H
SGNpM3V1dzNjNEZlX1BDbU5Bc2ZNNC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2l0cl9HSGNpM3V1dzNjNEZlX1BDbU5Bc2ZNNC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTM5QTYvQUQ5NEFBMjBCNUZEMTFFREJGQkE2M0YxRjEyMjI0
NjgvaXRyX0dIY2kzdXV3M2M0RmVfUENtTkFzZk00Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRj0SRfYgtRr5wcrmwthn78FZeHQZpQYu0
b/k01JgKnDY/yB0mRTznF7LPt9ZiZjkWZFj5kLXUoeodpUajhLVA8jBVhKvq6rc8
fmZUwwy2jSuHiPg1WPKz9817WCJbGl7ZAVZQx9iOHgLzInvY0fwBL+2NoVvQZXUN
u0psApZvwaUxMo4GzUCaWmPb1fgZFdUrUBzLy18knNsxzyRAw6AavTuKm/mlJaeF
RuzZypxThia5yppsAY0wI0eSBTS5gxRHifarLyNczeF9cTdZjPYqZcuhu4XPAXrG
Nb1rZE2euYMWTt6jMoS6sSdpZbjOs8B+4fCCcA2hdC2ZtKzi9tY9
-----END CERTIFICATE-----
Generated at Wed May 13 00:56:57 2026 by rpki-client