Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.mft
File:                     zr72_yUpPCZcGHZHV9_F8TsETzE.mft (raw, json)
Hash identifier:          BtWlg3vvowZSvio44zDcRQxi6cGbna64tC4Tqu2AWAs=
Subject key identifier:   FE:8D:12:3A:BC:A9:86:E9:4C:A2:3C:6F:7B:8C:34:7C:AB:B3:30:D2
Authority key identifier: CE:BE:F6:FF:25:29:3C:26:5C:18:76:47:57:DF:C5:F1:3B:04:4F:31
Certificate issuer:       /CN=F3610D4EAR/serialNumber=CEBEF6FF25293C265C18764757DFC5F13B044F31
Certificate serial:       50
Authority info access:    rsync://rpki.afrinic.net/repository/arin/zr72_yUpPCZcGHZHV9_F8TsETzE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.mft
Manifest number:          4D
Signing time:             Tue 03 Nov 2026 05:52:14 +0000
Manifest this update:     Tue 03 Nov 2026 05:52:13 +0000
Manifest next update:     Thu 05 Nov 2026 05:52:13 +0000
Files and hashes:         1: zr72_yUpPCZcGHZHV9_F8TsETzE.crl (hash: IYKPsEIdocnSjeFPrMtIjRuPnaG9uOddqUbPXD4H8AI=)
                          2: 157A89C8AAA311F1A7D034ACCE1D38B0.roa (hash: VPuRgIRCMZFdPQeJMzCTEgJMNjVVGjJw+fyDowhzR3E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.mft
                          rsync://rpki.afrinic.net/repository/arin/zr72_yUpPCZcGHZHV9_F8TsETzE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 05:52:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610D4EAR, serialNumber=CEBEF6FF25293C265C18764757DFC5F13B044F31
        Validity
            Not Before: Nov  3 05:52:13 2026 GMT
            Not After : Nov  5 05:52:13 2026 GMT
        Subject: CN=6ae9768e-19ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:98:51:89:2c:c8:e3:74:72:f2:d5:39:5f:67:
                    2f:03:fd:7d:6b:0d:c5:d4:b9:cd:7b:10:43:0c:23:
                    2e:a5:38:56:47:e5:d9:93:d7:4d:b0:f6:0c:ad:45:
                    2a:8e:f8:67:d2:4e:88:a5:3d:e2:72:58:78:04:d6:
                    fa:84:67:0d:22:21:61:1d:7d:c6:6a:1b:f8:1c:86:
                    f2:69:e0:81:3a:74:8d:d3:e0:be:19:dc:a2:4c:a9:
                    7f:7e:74:8f:72:64:79:47:4c:9b:d1:c5:dc:15:de:
                    d3:7b:6c:37:92:bf:40:18:d7:b6:24:81:c4:8c:7a:
                    c6:5a:f4:b9:28:ee:04:e6:c5:ba:1d:2f:53:e6:c1:
                    10:e8:98:8a:45:ca:f1:7f:7b:f2:ac:a0:f6:ac:d7:
                    a3:b7:7b:66:22:a2:a4:c7:4c:98:c2:3d:d2:ee:67:
                    da:2e:b6:b0:b7:56:95:0c:a8:ef:c2:1d:40:06:a1:
                    c3:3c:ad:ff:52:4a:8b:38:70:73:e8:40:0e:cb:9b:
                    27:63:0e:8b:c4:f5:be:ac:5b:6a:66:8c:5d:c8:33:
                    69:7b:70:08:f7:41:7e:b4:02:a1:92:74:10:3c:b9:
                    34:79:f1:26:ff:96:d4:eb:99:33:81:2c:25:44:8d:
                    60:07:ab:6b:21:0a:8f:49:65:70:62:fa:bf:5a:c5:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8D:12:3A:BC:A9:86:E9:4C:A2:3C:6F:7B:8C:34:7C:AB:B3:30:D2
            X509v3 Authority Key Identifier:
                keyid:CE:BE:F6:FF:25:29:3C:26:5C:18:76:47:57:DF:C5:F1:3B:04:4F:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zr72_yUpPCZcGHZHV9_F8TsETzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:5e:97:f5:f8:91:82:df:9c:1c:e5:38:a7:bc:b6:e2:40:8d:
         ae:ec:46:78:20:82:4e:51:74:b0:78:b9:00:a2:87:73:e5:ff:
         f0:95:e4:60:3c:fa:8c:84:f9:e1:07:32:a6:18:32:ea:d2:be:
         30:c7:80:4e:db:cc:7a:34:7a:66:37:ec:20:44:7b:36:5c:02:
         7a:17:c3:35:6c:3f:1a:f9:40:c7:27:df:b6:fc:15:22:bd:c1:
         27:1e:2d:c1:2d:3b:db:bb:5f:e5:86:ee:ee:df:bd:6b:93:ea:
         87:f5:89:ae:b7:d2:b9:43:aa:bc:ef:22:78:54:95:ac:13:6f:
         46:a2:d4:41:f2:11:01:f3:62:c9:b7:00:39:af:c3:36:0f:99:
         d1:bb:58:13:91:6d:c2:a6:37:80:de:f9:67:49:b0:06:f7:98:
         50:a5:2f:da:b4:6c:04:fa:60:bc:3f:d7:91:a1:3f:7d:62:1a:
         9f:12:84:f5:98:97:7b:b1:94:43:51:76:94:dd:99:19:f9:21:
         01:08:0c:63:82:ea:f7:58:6d:a2:87:99:4a:3b:02:f0:6f:87:
         06:d4:0a:f4:f6:63:7f:a8:59:be:3a:b5:df:2c:88:eb:6b:69:
         b0:7b:b7:da:34:19:ae:c1:72:6b:e1:5a:29:a4:aa:de:a3:df:
         1b:d4:77:8f
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBUDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
MEQ0RUFSMTEwLwYDVQQFEyhDRUJFRjZGRjI1MjkzQzI2NUMxODc2NDc1N0RGQzVG
MTNCMDQ0RjMxMB4XDTI2MTEwMzA1NTIxM1oXDTI2MTEwNTA1NTIxM1owGDEWMBQG
A1UEAxMNNmFlOTc2OGUtMTljYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM+YUYksyON0cvLVOV9nLwP9fWsNxdS5zXsQQwwjLqU4Vkfl2ZPXTbD2DK1F
Ko74Z9JOiKU94nJYeATW+oRnDSIhYR19xmob+ByG8mnggTp0jdPgvhncokypf350
j3JkeUdMm9HF3BXe03tsN5K/QBjXtiSBxIx6xlr0uSjuBObFuh0vU+bBEOiYikXK
8X978qyg9qzXo7d7ZiKipMdMmMI90u5n2i62sLdWlQyo78IdQAahwzyt/1JKizhw
c+hADsubJ2MOi8T1vqxbamaMXcgzaXtwCPdBfrQCoZJ0EDy5NHnxJv+W1OuZM4Es
JUSNYAerayEKj0llcGL6v1rFbcUCAwEAAaOCArUwggKxMB0GA1UdDgQWBBT+jRI6
vKmG6UyiPG97jDR8q7Mw0jAfBgNVHSMEGDAWgBTOvvb/JSk8JlwYdkdX38XxOwRP
MTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTBENEUvMjJDMTk3NjQ5RkE2MTFGMTkxNTc1NzFFQ0YxRDM4QjAvenI3Ml95
VXBQQ1pjR0haSFY5X0Y4VHNFVHpFLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
enI3Ml95VXBQQ1pjR0haSFY5X0Y4VHNFVHpFLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzYxMEQ0RS8yMkMxOTc2NDlGQTYxMUYxOTE1NzU3MUVDRjFEMzhC
MC96cjcyX3lVcFBDWmNHSFpIVjlfRjhUc0VUekUubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIVel/X4kYLfnBzlOKe8tuJAja7sRngggk5R
dLB4uQCih3Pl//CV5GA8+oyE+eEHMqYYMurSvjDHgE7bzHo0emY37CBEezZcAnoX
wzVsPxr5QMcn37b8FSK9wSceLcEtO9u7X+WG7u7fvWuT6of1ia630rlDqrzvInhU
lawTb0ai1EHyEQHzYsm3ADmvwzYPmdG7WBORbcKmN4De+WdJsAb3mFClL9q0bAT6
YLw/15GhP31iGp8ShPWYl3uxlENRdpTdmRn5IQEIDGOC6vdYbaKHmUo7AvBvhwbU
CvT2Y3+oWb46td8siOtrabB7t9o0Ga7BcmvhWimkqt6j3xvUd48=
-----END CERTIFICATE-----