Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
File:                     itr_GHci3uuw3c4Fe_PCmNAsfM4.mft (raw, json)
Hash identifier:          7kscEiEAuBvBjrcujh17W6Q7VhxClHCHTZskirROaYM=
Subject key identifier:   04:23:AD:48:3F:17:9B:95:50:E1:5B:86:F1:91:67:73:76:1B:F9:2E
Authority key identifier: 8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
Certificate issuer:       /CN=F36939A6AR/serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
Certificate serial:       053F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
Manifest number:          053E
Signing time:             Sat 26 Sep 2026 03:15:52 +0000
Manifest this update:     Sat 26 Sep 2026 03:15:51 +0000
Manifest next update:     Mon 28 Sep 2026 03:15:51 +0000
Files and hashes:         1: itr_GHci3uuw3c4Fe_PCmNAsfM4.crl (hash: fvVW0z6r6ELupLJRMrrOnvzmd007j1rPe2jQxdkxpv8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                          rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1343 (0x53f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36939A6AR, serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
        Validity
            Not Before: Sep 26 03:15:51 2026 GMT
            Not After : Sep 28 03:15:51 2026 GMT
        Subject: CN=6ab738e8-49d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c4:4e:8f:9b:06:7f:1a:82:cd:bd:02:40:48:
                    c4:af:65:64:fb:31:db:10:18:04:a4:44:40:94:4a:
                    35:43:95:b2:d4:8f:9b:48:ff:61:63:36:ec:64:8d:
                    60:fd:43:08:f3:cc:80:aa:12:9b:c9:93:0d:fe:ab:
                    68:27:1b:f6:e8:c3:14:3f:74:76:9c:2d:0a:7d:a2:
                    58:f5:bd:b8:15:12:d0:2f:5d:40:9d:65:e8:69:ee:
                    88:a3:43:b7:7f:82:ef:41:50:b0:ef:29:cb:d5:30:
                    e7:41:99:7a:73:bf:0d:9a:ee:4f:c3:bd:50:42:f9:
                    7f:9e:4c:93:de:ab:20:21:61:64:85:4b:a3:7a:1a:
                    9d:01:81:23:ca:bf:52:7c:a3:c0:a7:ba:be:b6:99:
                    ee:1a:02:38:31:14:70:51:f0:cf:3b:d0:ad:3e:81:
                    01:fd:ac:39:04:4b:98:e9:86:c9:48:4a:1a:28:6d:
                    86:00:2f:b4:ed:d3:a0:4b:48:7f:a9:91:dc:ef:cd:
                    d9:a2:a8:a5:54:76:ed:ad:41:55:65:b8:8a:b5:25:
                    05:d4:5b:bf:f1:82:fb:94:81:54:9c:7d:76:b9:5a:
                    f4:fc:d7:b5:1d:24:40:a0:0b:38:17:c0:43:cf:ef:
                    e6:a6:3e:b8:30:bf:1f:cb:72:0c:f9:d5:ea:fa:c6:
                    6d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:23:AD:48:3F:17:9B:95:50:E1:5B:86:F1:91:67:73:76:1B:F9:2E
            X509v3 Authority Key Identifier:
                keyid:8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:eb:04:56:b2:05:a5:8b:1c:00:4e:bc:5c:0e:c4:e2:38:9b:
         e6:10:b2:fc:91:84:f7:7f:f8:9a:44:88:f6:c0:7c:18:4d:2f:
         b5:47:c7:40:22:46:2f:24:2c:68:c8:e0:db:4a:7b:3e:e8:3f:
         b9:3e:ab:c4:e8:e4:d8:1f:b1:23:c1:88:0f:87:13:8f:64:c1:
         d2:f4:97:5f:f6:25:cc:c1:90:e5:61:9b:0e:b6:c5:c4:b4:83:
         24:1a:98:4d:d2:a2:fe:1c:83:6a:fe:c1:b3:91:cf:d4:b1:96:
         be:9b:83:8f:97:28:b1:c4:9c:d4:03:8c:44:aa:e9:ac:62:da:
         80:41:d3:7b:d1:a5:13:c5:da:08:b5:68:69:93:bc:a6:83:c4:
         dc:22:2c:65:22:ed:fd:47:74:84:13:c4:22:07:43:a1:56:70:
         60:e1:11:77:f0:12:44:02:24:e9:97:e0:4e:d7:d7:61:03:12:
         60:00:fc:9b:aa:50:1a:5d:a7:6b:c7:1a:32:0a:ab:f1:15:0e:
         62:86:32:c1:3f:e3:70:2e:6c:28:3b:e6:9a:0f:91:a6:3b:f9:
         e1:4a:a0:08:68:c9:34:75:df:48:a4:33:1f:47:2b:1b:fe:e5:
         fe:e8:fe:6b:1f:0e:aa:3e:6c:cd:8d:f0:fb:d9:8b:96:e6:b4:
         cd:de:ce:a2
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBT8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTM5QTZBUjExMC8GA1UEBRMoOEFEQUZGMTg3NzIyREVFQkIwRERDRTA1N0JGM0My
OThEMDJDN0NDRTAeFw0yNjA5MjYwMzE1NTFaFw0yNjA5MjgwMzE1NTFaMBgxFjAU
BgNVBAMTDTZhYjczOGU4LTQ5ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcxE6PmwZ/GoLNvQJASMSvZWT7MdsQGASkRECUSjVDlbLUj5tI/2FjNuxk
jWD9QwjzzICqEpvJkw3+q2gnG/bowxQ/dHacLQp9olj1vbgVEtAvXUCdZehp7oij
Q7d/gu9BULDvKcvVMOdBmXpzvw2a7k/DvVBC+X+eTJPeqyAhYWSFS6N6Gp0BgSPK
v1J8o8Cnur62me4aAjgxFHBR8M870K0+gQH9rDkES5jphslIShoobYYAL7Tt06BL
SH+pkdzvzdmiqKVUdu2tQVVluIq1JQXUW7/xgvuUgVScfXa5WvT817UdJECgCzgX
wEPP7+amPrgwvx/Lcgz51er6xm1DAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUBCOt
SD8Xm5VQ4VuG8ZFnc3Yb+S4wHwYDVR0jBBgwFoAUitr/GHci3uuw3c4Fe/PCmNAs
fM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkzOUE2L0FEOTRBQTIwQjVGRDExRURCRkJBNjNGMUYxMjIyNDY4L2l0cl9H
SGNpM3V1dzNjNEZlX1BDbU5Bc2ZNNC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2l0cl9HSGNpM3V1dzNjNEZlX1BDbU5Bc2ZNNC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTM5QTYvQUQ5NEFBMjBCNUZEMTFFREJGQkE2M0YxRjEyMjI0
NjgvaXRyX0dIY2kzdXV3M2M0RmVfUENtTkFzZk00Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBx6wRWsgWlixwATrxcDsTiOJvmELL8kYT3
f/iaRIj2wHwYTS+1R8dAIkYvJCxoyODbSns+6D+5PqvE6OTYH7EjwYgPhxOPZMHS
9Jdf9iXMwZDlYZsOtsXEtIMkGphN0qL+HINq/sGzkc/UsZa+m4OPlyixxJzUA4xE
qumsYtqAQdN70aUTxdoItWhpk7ymg8TcIixlIu39R3SEE8QiB0OhVnBg4RF38BJE
AiTpl+BO19dhAxJgAPybqlAaXadrxxoyCqvxFQ5ihjLBP+NwLmwoO+aaD5GmO/nh
SqAIaMk0dd9IpDMfRysb/uX+6P5rHw6qPmzNjfD72YuW5rTN3s6i
-----END CERTIFICATE-----