Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.mft
File:                     zr72_yUpPCZcGHZHV9_F8TsETzE.mft (raw, json)
Hash identifier:          8Xx18ErZVCb9SQ7xMJDc9HaIRe3xsx4gpacoiJdje7o=
Subject key identifier:   50:90:C8:C6:FF:99:5F:4C:49:F3:DB:25:8B:A6:20:01:24:22:12:63
Authority key identifier: CE:BE:F6:FF:25:29:3C:26:5C:18:76:47:57:DF:C5:F1:3B:04:4F:31
Certificate issuer:       /CN=F3610D4EAR/serialNumber=CEBEF6FF25293C265C18764757DFC5F13B044F31
Certificate serial:       28
Authority info access:    rsync://rpki.afrinic.net/repository/arin/zr72_yUpPCZcGHZHV9_F8TsETzE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.mft
Manifest number:          25
Signing time:             Thu 24 Sep 2026 05:50:59 +0000
Manifest this update:     Thu 24 Sep 2026 05:50:58 +0000
Manifest next update:     Sat 26 Sep 2026 05:50:58 +0000
Files and hashes:         1: zr72_yUpPCZcGHZHV9_F8TsETzE.crl (hash: fYIxop58HkopEOzsjs68ihri88/9O3v0mmqa+lUXuIA=)
                          2: 157A89C8AAA311F1A7D034ACCE1D38B0.roa (hash: VPuRgIRCMZFdPQeJMzCTEgJMNjVVGjJw+fyDowhzR3E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.mft
                          rsync://rpki.afrinic.net/repository/arin/zr72_yUpPCZcGHZHV9_F8TsETzE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610D4EAR, serialNumber=CEBEF6FF25293C265C18764757DFC5F13B044F31
        Validity
            Not Before: Sep 24 05:50:58 2026 GMT
            Not After : Sep 26 05:50:58 2026 GMT
        Subject: CN=6ab4ba42-d968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c4:e2:88:9f:57:ca:34:f3:af:e2:7c:f6:de:
                    d6:fc:b2:05:e3:ec:27:11:21:c1:53:82:1b:e6:9f:
                    33:c0:5d:fc:c6:43:9a:d5:2d:e1:15:05:da:4a:79:
                    d7:d3:99:93:b8:28:8d:e1:9c:94:86:f5:50:e3:e6:
                    31:ff:7d:bf:33:e2:06:a2:ef:75:69:58:64:33:43:
                    9c:86:be:5c:29:ad:f2:3a:4f:13:c8:ea:f4:80:fa:
                    a4:a4:ba:57:50:8b:35:5f:b5:db:32:e6:7e:59:fd:
                    19:0d:ee:21:fd:d9:36:2c:7f:8c:04:27:1c:7f:77:
                    0f:e5:a6:85:c4:7e:38:53:81:47:eb:80:ad:80:f6:
                    b2:7d:4f:1a:10:2a:6f:18:3c:b2:2b:48:f6:50:e2:
                    cf:cb:48:75:1a:15:51:2d:56:0d:ee:7f:e1:bf:57:
                    b8:d8:f9:74:70:36:67:17:27:97:bf:f1:91:b8:36:
                    ea:91:5a:49:62:05:a4:a3:0a:fd:15:9f:7a:68:52:
                    7c:d6:92:88:d6:c7:97:b8:2b:0f:1c:56:a0:73:90:
                    41:e9:8d:21:86:28:a9:35:d1:41:43:13:82:eb:60:
                    09:a2:de:71:66:9c:33:ae:8a:91:cb:89:01:82:68:
                    23:47:ed:47:98:4d:5d:6e:87:d8:70:88:79:28:6f:
                    d7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:90:C8:C6:FF:99:5F:4C:49:F3:DB:25:8B:A6:20:01:24:22:12:63
            X509v3 Authority Key Identifier:
                keyid:CE:BE:F6:FF:25:29:3C:26:5C:18:76:47:57:DF:C5:F1:3B:04:4F:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zr72_yUpPCZcGHZHV9_F8TsETzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f8:05:e7:c5:42:bb:d3:51:c9:c7:2b:5a:85:b7:fb:41:3d:
         2a:60:60:e0:87:2d:ee:78:98:b3:4e:0e:bd:6b:a1:07:a9:ac:
         2f:b8:30:d0:1c:17:1b:81:30:37:a3:7a:14:c7:2b:13:a5:6b:
         91:c6:67:c8:26:4e:48:0f:21:cb:d3:8f:83:12:b6:5a:4c:f8:
         67:57:1a:58:fe:d8:96:c3:c6:56:d5:98:0f:71:78:62:27:e8:
         2d:41:dc:d9:47:5a:9a:f2:df:a7:1a:fe:2d:ad:21:09:4f:e7:
         05:b0:58:8b:26:a0:43:93:f4:a8:76:76:85:2b:05:8c:3f:88:
         15:02:cf:a1:5b:ad:62:f2:47:a7:6e:ac:2b:27:69:e4:30:42:
         51:1f:1a:fa:3c:eb:b6:a3:8b:07:ee:22:15:91:ef:f5:7c:99:
         ba:8b:e6:93:3a:bb:b0:fb:f6:ee:11:f8:0f:5b:b9:8c:5f:50:
         df:1b:a7:dd:4f:a0:04:2a:e0:ed:43:70:4d:29:7a:84:17:ac:
         c3:7d:cd:c8:75:fa:1b:97:1f:26:e5:da:4a:1b:71:0e:9d:37:
         ba:3a:4e:7f:32:81:86:73:6f:18:d7:14:b4:51:69:0d:d8:ce:
         f3:3d:75:f6:35:97:de:69:4e:41:54:0b:66:1b:08:5c:69:b7:
         e1:92:5e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----