
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
File: itr_GHci3uuw3c4Fe_PCmNAsfM4.mft (raw, json)
Hash identifier: BaC4QmY+45GXB+7XGINumRR8HOwqRzaAs6pSRxewwXo=
Subject key identifier: 51:2D:F6:E6:10:AD:92:16:CC:FA:0F:6E:36:C8:CD:A8:66:3A:C9:3C
Authority key identifier: 8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
Certificate issuer: /CN=F36939A6AR/serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
Certificate serial: 03AC
Authority info access: rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
Manifest number: 03AB
Signing time: Sat 23 Aug 2025 03:29:48 +0000
Manifest this update: Sat 23 Aug 2025 03:29:48 +0000
Manifest next update: Mon 25 Aug 2025 03:29:48 +0000
Files and hashes: 1: itr_GHci3uuw3c4Fe_PCmNAsfM4.crl (hash: POhAtJBcME2+QX9DTSnvVChtIT7RF/rndcwaB26HaIw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940 (0x3ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36939A6AR, serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
Validity
Not Before: Aug 23 03:29:48 2025 GMT
Not After : Aug 25 03:29:48 2025 GMT
Subject: CN=68a935ac-955a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:62:c0:6d:9f:69:87:72:3a:c8:a5:ea:07:
62:7e:ab:2b:54:41:33:34:f7:0a:58:90:dd:b9:93:
cf:c3:96:82:38:f2:95:8a:c3:62:5f:6e:88:00:5b:
01:b5:25:bc:fd:d0:3f:50:36:7a:da:e5:ee:db:da:
23:ed:77:c9:0a:97:08:7b:da:25:0d:c0:a3:a9:15:
fb:2d:15:1d:6c:b7:40:c6:e8:f2:b8:d2:b0:6f:40:
d1:0c:69:84:e4:b0:18:a3:58:f1:e5:43:06:b2:b4:
7b:e6:66:9b:f7:ae:cb:a9:44:86:45:11:09:73:f9:
a3:ba:9f:da:87:3c:c8:ac:3a:89:79:2e:34:41:07:
a0:2a:9f:a0:4b:eb:13:61:27:04:2f:40:6c:0b:a3:
8d:9d:fc:6a:36:a4:a5:02:05:3f:3d:d2:03:7c:b2:
32:5f:34:51:c8:04:dd:33:78:c2:10:10:9a:48:d2:
95:e3:92:c1:a5:00:36:d0:bb:9f:cd:d8:6f:71:04:
eb:f5:b8:f2:94:05:0c:91:1e:ff:07:70:a5:05:73:
41:1e:f8:6e:cc:fa:2d:ff:6f:43:b0:57:2f:a3:a1:
79:40:f5:33:87:6a:8e:ac:41:b0:83:09:94:4c:48:
ce:cf:21:b2:b1:d0:dc:e7:f5:7f:d5:13:19:28:73:
74:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2D:F6:E6:10:AD:92:16:CC:FA:0F:6E:36:C8:CD:A8:66:3A:C9:3C
X509v3 Authority Key Identifier:
keyid:8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:16:a0:69:a4:64:87:85:fa:52:71:32:36:a4:cd:1a:66:f0:
c1:d7:72:d3:8f:f2:52:10:1c:4b:ca:44:82:88:e9:9e:a2:9f:
e4:68:a4:50:be:09:71:e2:f8:b1:26:20:2e:8a:0f:66:68:08:
11:38:59:4c:69:e7:c0:39:c6:4b:93:41:e4:f1:bb:05:0c:41:
93:4b:5a:4d:3e:3a:d5:8d:aa:26:d6:8c:c0:ee:a5:37:36:89:
71:ec:15:d4:cf:d3:47:08:f3:1d:de:4d:ee:d8:ca:c1:46:83:
47:eb:97:ce:97:14:07:a4:a2:a4:fe:5a:91:28:e3:d3:da:98:
59:3d:5a:94:db:81:ca:db:4b:a7:44:40:2e:5d:0d:40:2f:7e:
c9:c7:95:03:99:00:8e:bb:80:9b:b8:ae:f3:14:11:21:9f:cc:
c8:9a:23:31:e6:f4:ee:cc:13:0d:0e:be:f3:13:ef:3f:df:d2:
07:4e:a0:4a:20:92:3e:49:a2:fe:40:eb:5d:99:6e:11:1d:86:
53:df:aa:e3:41:9f:dd:03:00:aa:b2:3e:93:e6:51:da:91:33:
58:9d:bb:67:d0:a8:53:54:c1:9d:5a:a3:1a:ab:73:9c:04:7a:
5d:4b:0b:50:89:e3:80:bb:dc:1d:68:bd:8b:69:37:0c:82:e5:
74:1b:da:52
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTM5QTZBUjExMC8GA1UEBRMoOEFEQUZGMTg3NzIyREVFQkIwRERDRTA1N0JGM0My
OThEMDJDN0NDRTAeFw0yNTA4MjMwMzI5NDhaFw0yNTA4MjUwMzI5NDhaMBgxFjAU
BgNVBAMTDTY4YTkzNWFjLTk1NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCcZ2LAbZ9ph3I6yKXqB2J+qytUQTM09wpYkN25k8/DloI48pWKw2JfbogA
WwG1Jbz90D9QNnra5e7b2iPtd8kKlwh72iUNwKOpFfstFR1st0DG6PK40rBvQNEM
aYTksBijWPHlQwaytHvmZpv3rsupRIZFEQlz+aO6n9qHPMisOol5LjRBB6Aqn6BL
6xNhJwQvQGwLo42d/Go2pKUCBT890gN8sjJfNFHIBN0zeMIQEJpI0pXjksGlADbQ
u5/N2G9xBOv1uPKUBQyRHv8HcKUFc0Ee+G7M+i3/b0OwVy+joXlA9TOHao6sQbCD
CZRMSM7PIbKx0Nzn9X/VExkoc3SBAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUUS32
5hCtkhbM+g9uNsjNqGY6yTwwHwYDVR0jBBgwFoAUitr/GHci3uuw3c4Fe/PCmNAs
fM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkzOUE2L0FEOTRBQTIwQjVGRDExRURCRkJBNjNGMUYxMjIyNDY4L2l0cl9H
SGNpM3V1dzNjNEZlX1BDbU5Bc2ZNNC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2l0cl9HSGNpM3V1dzNjNEZlX1BDbU5Bc2ZNNC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTM5QTYvQUQ5NEFBMjBCNUZEMTFFREJGQkE2M0YxRjEyMjI0
NjgvaXRyX0dIY2kzdXV3M2M0RmVfUENtTkFzZk00Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQFqBppGSHhfpScTI2pM0aZvDB13LTj/JS
EBxLykSCiOmeop/kaKRQvglx4vixJiAuig9maAgROFlMaefAOcZLk0Hk8bsFDEGT
S1pNPjrVjaom1ozA7qU3Nolx7BXUz9NHCPMd3k3u2MrBRoNH65fOlxQHpKKk/lqR
KOPT2phZPVqU24HK20unREAuXQ1AL37Jx5UDmQCOu4CbuK7zFBEhn8zImiMx5vTu
zBMNDr7zE+8/39IHTqBKIJI+SaL+QOtdmW4RHYZT36rjQZ/dAwCqsj6T5lHakTNY
nbtn0KhTVMGdWqMaq3OcBHpdSwtQieOAu9wdaL2LaTcMguV0G9pS
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:00:26 2025 by rpki-client