Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.mft
File:                     zr72_yUpPCZcGHZHV9_F8TsETzE.mft (raw, json)
Hash identifier:          7U/Mq0ul2ro0+jgq+HcbBuaNxmrpl6Tu1MZiM6+O94M=
Subject key identifier:   24:C4:56:61:58:70:6F:E7:FC:6A:39:45:A8:46:BD:1F:4A:8C:C7:1D
Authority key identifier: CE:BE:F6:FF:25:29:3C:26:5C:18:76:47:57:DF:C5:F1:3B:04:4F:31
Certificate issuer:       /CN=F3610D4EAR/serialNumber=CEBEF6FF25293C265C18764757DFC5F13B044F31
Certificate serial:       21
Authority info access:    rsync://rpki.afrinic.net/repository/arin/zr72_yUpPCZcGHZHV9_F8TsETzE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.mft
Manifest number:          1E
Signing time:             Thu 17 Sep 2026 05:51:58 +0000
Manifest this update:     Thu 17 Sep 2026 05:51:57 +0000
Manifest next update:     Sat 19 Sep 2026 05:51:57 +0000
Files and hashes:         1: zr72_yUpPCZcGHZHV9_F8TsETzE.crl (hash: QejYjWNSXqCuXuP138cAvzoH5gL3VdFgKr174DnYvCQ=)
                          2: 157A89C8AAA311F1A7D034ACCE1D38B0.roa (hash: VPuRgIRCMZFdPQeJMzCTEgJMNjVVGjJw+fyDowhzR3E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.mft
                          rsync://rpki.afrinic.net/repository/arin/zr72_yUpPCZcGHZHV9_F8TsETzE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610D4EAR, serialNumber=CEBEF6FF25293C265C18764757DFC5F13B044F31
        Validity
            Not Before: Sep 17 05:51:57 2026 GMT
            Not After : Sep 19 05:51:57 2026 GMT
        Subject: CN=6aab7ffe-2a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:23:b3:fb:75:54:db:7a:b0:c2:97:ce:cb:11:
                    9b:5c:52:99:49:99:27:fa:52:1e:26:ef:95:6e:ff:
                    b4:9d:8a:92:da:60:13:24:0e:5a:1f:c7:cf:ad:bb:
                    62:05:7c:99:bc:38:4d:85:b6:b9:4d:f7:4c:c1:21:
                    c1:07:93:5f:14:5f:f8:a7:54:08:f6:c2:3b:a7:69:
                    29:1d:0d:5b:85:b1:10:33:63:25:14:41:ac:f3:7c:
                    c8:34:86:fc:b5:9d:90:b4:56:0a:a1:f5:0d:b3:d5:
                    0d:d8:bc:c8:b9:69:5e:f9:91:ca:d3:ec:bc:ec:88:
                    6c:2e:7d:08:5d:22:18:6a:45:e9:a2:59:a9:dc:e4:
                    86:04:8d:99:38:83:59:8a:db:f5:98:e3:75:8b:7f:
                    94:0e:8e:a4:e2:54:02:a0:73:fe:16:21:16:e9:71:
                    cb:03:80:c0:c8:2c:c3:77:a1:c6:39:44:a9:ea:8c:
                    4d:03:0b:50:fa:58:48:37:ae:38:5b:53:7f:c0:39:
                    c7:84:d2:6b:75:a4:ed:6c:6d:38:d0:04:1a:76:92:
                    b1:9e:c7:ac:4b:36:30:e9:31:30:16:af:4c:9f:e0:
                    13:2c:33:cb:68:ce:63:4e:36:c5:09:cc:4b:c4:ff:
                    e0:49:12:3b:ae:b0:f1:68:9c:ca:25:5d:fd:c7:11:
                    9f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C4:56:61:58:70:6F:E7:FC:6A:39:45:A8:46:BD:1F:4A:8C:C7:1D
            X509v3 Authority Key Identifier:
                keyid:CE:BE:F6:FF:25:29:3C:26:5C:18:76:47:57:DF:C5:F1:3B:04:4F:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zr72_yUpPCZcGHZHV9_F8TsETzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:3b:8b:33:ff:67:7c:85:b7:ac:dd:25:f2:20:a4:49:d8:7f:
         07:ed:b7:54:d5:ba:e3:dc:f4:75:c6:fd:8d:e4:aa:d4:eb:dc:
         a8:f0:23:3a:56:11:e7:1f:dd:7b:5e:c8:eb:8e:ac:e5:65:9d:
         95:d0:bf:1e:a8:dd:ee:da:73:f4:06:e9:6f:79:57:17:02:9a:
         b0:c1:5d:57:32:cb:8c:77:5e:74:cb:c8:db:a3:d7:d5:3d:9d:
         33:8d:c8:85:59:e6:8d:76:e4:42:75:2b:b9:4b:07:48:0a:55:
         18:5a:84:79:9c:ea:92:f9:58:60:a1:46:52:80:3f:c8:78:68:
         51:be:aa:93:8a:12:8d:2c:f8:cc:a8:de:1d:48:56:2b:98:36:
         d8:12:57:38:ae:26:f8:2c:a4:c9:b6:39:37:f1:f3:54:71:ab:
         7a:2b:d4:91:6d:a8:b9:7b:9b:7a:3d:e5:ba:d8:08:86:74:df:
         be:35:9e:93:65:4b:05:81:62:a4:3d:87:62:5a:df:1b:0a:22:
         36:25:0d:ad:a7:4c:0e:e4:58:22:7e:30:3f:44:35:b4:fc:71:
         bb:cd:8a:b7:1c:56:9d:ce:56:3c:3f:20:7e:b2:3f:c9:3c:ce:
         33:65:24:95:c8:30:73:30:f3:64:2d:b8:5d:47:a0:cd:88:00:
         cd:bb:be:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----