Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
File:                     itr_GHci3uuw3c4Fe_PCmNAsfM4.mft (raw, json)
Hash identifier:          phRyTuRPtEz6hchwerppzlN3jZaBg8kZ7TPkzE+z9gk=
Subject key identifier:   55:28:99:A7:A3:79:94:F3:DF:D9:43:EE:F9:30:0E:1F:D1:3E:A5:59
Authority key identifier: 8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
Certificate issuer:       /CN=F36939A6AR/serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
Certificate serial:       0570
Authority info access:    rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
Manifest number:          056F
Signing time:             Sat 14 Nov 2026 03:14:08 +0000
Manifest this update:     Sat 14 Nov 2026 03:14:08 +0000
Manifest next update:     Mon 16 Nov 2026 03:14:07 +0000
Files and hashes:         1: itr_GHci3uuw3c4Fe_PCmNAsfM4.crl (hash: YobLQSRot7WZTvJPluNhEizm9EkL8VDD1RhVx8CRLFM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                          rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1392 (0x570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36939A6AR, serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
        Validity
            Not Before: Nov 14 03:14:08 2026 GMT
            Not After : Nov 16 03:14:07 2026 GMT
        Subject: CN=6af7d200-37d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:63:a3:40:3a:0f:b7:70:a6:1a:8c:91:eb:52:
                    e5:a4:6f:13:26:52:bc:ec:f4:37:55:93:a0:c6:20:
                    a1:47:2d:0c:50:2e:3c:ff:dd:25:39:f4:93:c2:01:
                    9b:c1:1f:5b:b9:a7:86:96:52:d5:25:6f:4d:80:ee:
                    0c:31:60:a3:07:0d:bb:de:9b:e1:36:72:7d:db:c2:
                    5a:85:27:ed:0f:45:9e:48:e7:33:48:9d:5a:de:6e:
                    39:09:f5:9b:2f:ea:94:b4:cd:79:25:44:37:37:08:
                    c1:16:54:c3:27:01:32:85:60:a0:8a:e0:2a:66:c8:
                    c9:ee:10:91:f5:fc:a5:11:bc:38:ee:95:bf:65:08:
                    df:c6:3e:ec:34:70:9c:fa:4a:0d:8d:5a:f3:84:c0:
                    c1:9c:d2:47:02:8b:06:27:f3:65:e4:9b:4d:22:4c:
                    a4:a1:da:bd:7e:45:4c:66:4e:f1:55:e5:ca:03:f2:
                    19:eb:c0:c2:3d:40:34:80:71:68:29:f9:a9:7e:f5:
                    e9:f1:2d:83:02:60:4a:57:99:82:21:99:b1:cb:bb:
                    ee:e8:f1:e7:8c:67:c8:3d:71:3b:2a:82:3f:c1:92:
                    36:3d:01:5b:3d:61:ce:fa:cf:51:fd:61:87:5a:fe:
                    c4:89:6f:4d:72:3b:f9:4d:5a:d9:3a:33:d5:01:af:
                    c5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:28:99:A7:A3:79:94:F3:DF:D9:43:EE:F9:30:0E:1F:D1:3E:A5:59
            X509v3 Authority Key Identifier:
                keyid:8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:de:44:79:25:50:9a:01:4f:a6:bc:0b:4c:13:f3:fa:26:71:
         42:73:3f:58:d3:05:ae:bc:cf:39:32:0f:76:4d:17:4d:b3:36:
         49:29:06:91:20:6b:b3:bf:8b:4b:c0:e2:83:05:ba:11:87:7e:
         7c:bb:6c:74:8b:c5:cc:bf:65:35:84:e4:05:bc:f7:bc:34:1a:
         c6:6a:ac:2d:c4:07:ea:90:c4:4f:35:6b:68:a2:1a:96:8d:3d:
         f1:4c:5d:c0:7e:d8:c0:a2:ca:c1:de:38:0d:fe:79:47:97:1d:
         50:4c:65:66:52:8d:42:d8:af:2d:77:ab:06:2a:d2:d7:7f:c7:
         51:1b:47:73:8c:7d:86:c9:f7:c5:f4:43:ad:86:d2:f2:6f:80:
         7b:9a:af:50:52:48:55:93:49:47:11:65:ce:ba:d3:7f:c0:22:
         7b:0b:9d:a8:f0:31:1d:2c:27:11:d8:7b:d7:dc:69:25:b8:f9:
         50:0b:e7:c7:ef:77:64:35:ff:0d:a2:09:37:d9:ed:08:c1:c6:
         86:ae:74:e1:cf:f4:88:13:59:15:07:2a:93:a4:c8:cc:e4:4e:
         10:23:b4:c8:bd:78:30:46:39:0d:85:fb:d9:a4:ff:48:a3:f9:
         47:bb:07:8a:0d:2f:b8:b0:70:1d:d9:e6:10:d8:64:9d:d4:cb:
         93:73:94:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----