Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.mft
File:                     zr72_yUpPCZcGHZHV9_F8TsETzE.mft (raw, json)
Hash identifier:          zlr8GuROWLD0dthlPS02t18SgQs7FX//pRjA/IqaXHE=
Subject key identifier:   D9:AF:8C:11:7A:9A:9F:5A:6F:19:CF:A8:E4:CB:E6:FD:27:9D:F6:26
Authority key identifier: CE:BE:F6:FF:25:29:3C:26:5C:18:76:47:57:DF:C5:F1:3B:04:4F:31
Certificate issuer:       /CN=F3610D4EAR/serialNumber=CEBEF6FF25293C265C18764757DFC5F13B044F31
Certificate serial:       26
Authority info access:    rsync://rpki.afrinic.net/repository/arin/zr72_yUpPCZcGHZHV9_F8TsETzE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.mft
Manifest number:          23
Signing time:             Tue 22 Sep 2026 05:50:47 +0000
Manifest this update:     Tue 22 Sep 2026 05:50:46 +0000
Manifest next update:     Thu 24 Sep 2026 05:50:46 +0000
Files and hashes:         1: zr72_yUpPCZcGHZHV9_F8TsETzE.crl (hash: TH+UlM+XQz2GOAnlG11M8k3GaY+ACE24HvDU3JbGTlE=)
                          2: 157A89C8AAA311F1A7D034ACCE1D38B0.roa (hash: VPuRgIRCMZFdPQeJMzCTEgJMNjVVGjJw+fyDowhzR3E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.mft
                          rsync://rpki.afrinic.net/repository/arin/zr72_yUpPCZcGHZHV9_F8TsETzE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610D4EAR, serialNumber=CEBEF6FF25293C265C18764757DFC5F13B044F31
        Validity
            Not Before: Sep 22 05:50:46 2026 GMT
            Not After : Sep 24 05:50:46 2026 GMT
        Subject: CN=6ab21737-fa5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:db:63:1a:dd:f4:fd:6f:42:18:73:7b:dc:be:
                    ac:0e:f7:f8:88:36:a2:92:7e:c5:9c:0c:98:00:e5:
                    53:4c:f2:95:18:6e:d9:6f:53:d1:a4:ed:9a:25:a7:
                    fc:91:3d:64:10:8a:ed:fe:9b:69:09:3a:78:fd:d5:
                    60:fd:a8:09:3b:f1:43:2e:17:4a:a5:63:30:71:8d:
                    ba:37:56:96:f1:4e:29:c4:32:4d:9c:a4:59:65:ff:
                    6e:bf:3d:3d:83:00:3b:b8:f3:72:c5:cd:03:40:c0:
                    24:0d:9b:95:41:5e:81:01:6c:4c:be:ae:91:45:18:
                    f1:d3:c5:5f:06:37:bf:28:7d:37:1a:6a:52:da:74:
                    20:5f:ab:a6:8d:62:62:d6:06:42:f6:58:13:18:6f:
                    c0:ac:76:f2:8b:90:df:87:c7:42:84:67:a1:54:6a:
                    f6:77:ce:6b:0e:c9:b2:aa:91:a1:e1:49:52:57:2b:
                    2a:7c:bd:cb:48:3c:6c:87:68:ac:5c:ea:cb:99:67:
                    f3:8a:88:5b:c5:0c:99:34:d2:65:4d:a5:f1:a2:f5:
                    df:ef:fd:db:db:cb:93:f6:b3:69:44:43:1f:07:17:
                    5c:dd:29:38:d7:94:79:af:83:1a:df:b1:bd:43:50:
                    fe:96:92:b6:cf:13:cd:cf:a8:e5:c7:e0:94:ba:16:
                    3e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AF:8C:11:7A:9A:9F:5A:6F:19:CF:A8:E4:CB:E6:FD:27:9D:F6:26
            X509v3 Authority Key Identifier:
                keyid:CE:BE:F6:FF:25:29:3C:26:5C:18:76:47:57:DF:C5:F1:3B:04:4F:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zr72_yUpPCZcGHZHV9_F8TsETzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/22C197649FA611F19157571ECF1D38B0/zr72_yUpPCZcGHZHV9_F8TsETzE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:af:b2:08:20:2c:ea:84:48:d5:9c:f5:e5:9e:44:f5:91:ca:
         c5:73:d8:a4:77:03:c2:3b:19:a2:e1:b0:59:41:84:a4:5d:1a:
         26:90:f6:5f:af:04:bc:67:8b:07:52:b7:88:be:ab:b5:d2:22:
         a0:e4:1d:eb:57:31:58:e3:a7:4b:81:5e:e4:f2:ea:24:c6:01:
         87:94:04:bc:72:8f:a0:a0:22:18:53:ca:61:f9:74:e2:d3:36:
         53:a2:94:3c:69:ea:9a:6f:5e:c9:e1:f0:0a:d7:7c:95:2f:59:
         8e:f1:39:e5:99:82:8a:57:cd:34:7f:b0:c2:5c:d1:a3:49:6e:
         d8:2f:4e:b0:4d:93:c2:91:13:43:85:50:2b:be:50:1a:b1:cd:
         77:75:24:04:ab:f2:b7:b1:8a:d5:43:5e:a3:56:98:04:d9:14:
         f3:72:ff:0d:5f:1b:0d:d3:59:45:58:1f:82:f7:3b:91:b7:a0:
         de:2f:26:6d:ae:98:c5:de:b5:3b:61:84:9c:1d:9d:ab:e1:5e:
         76:70:69:b0:02:93:b0:84:72:ba:8d:f8:73:67:e1:51:c4:88:
         fe:78:5f:28:9f:35:37:d5:13:2c:9b:1f:d5:e1:84:ae:30:df:
         5f:98:b0:b8:e8:a8:1d:8a:7f:e3:a1:bb:75:ae:89:37:7e:ad:
         e5:c3:cd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----