Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File:                     bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier:          t+YJ5coO5z21Mr31b66kZ4roXFDwOsJo0wNDKRIYxQw=
Subject key identifier:   79:8D:06:55:8C:E6:E9:A3:21:A1:A1:48:2F:C7:AC:02:C4:26:6D:9D
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer:       /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial:       10C1
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number:          10AB
Signing time:             Sat 14 Nov 2026 00:15:13 +0000
Manifest this update:     Sat 14 Nov 2026 00:15:11 +0000
Manifest next update:     Mon 16 Nov 2026 00:15:11 +0000
Files and hashes:         1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: +p0h7gg+vcdZ7xafT0lPkzCWUJcA0/YuX39Alc7dZZ8=)
                          2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: WXieplFZITfSrjqjGpIkNzx7vsKf/31zVrHjFuUH5j4=)
                          3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: 6KxNllccFl5UCK+IGZyhCatSKHDy54CHiCvi7y8S9Wo=)
                          4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: F4i+2pecUhgcF+gygFFlyaDemPqaRSU2tPuKYUBXKKQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4289 (0x10c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
        Validity
            Not Before: Nov 14 00:15:11 2026 GMT
            Not After : Nov 16 00:15:11 2026 GMT
        Subject: CN=6af7a80f-0a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5f:18:99:12:5a:ef:02:03:21:4e:a5:18:41:
                    4d:1a:ae:91:1b:5b:11:8d:af:36:80:1d:86:7c:8c:
                    55:76:b6:e2:92:33:cc:81:b3:ba:de:cd:d4:c7:d4:
                    48:30:48:51:13:ad:4c:4b:bb:ed:b8:50:28:eb:08:
                    53:50:e5:e3:2a:28:bd:85:fa:a7:db:ee:8d:e8:64:
                    fb:4f:e5:c5:2c:3a:3e:a9:7b:e9:44:76:56:2d:46:
                    23:a1:38:1d:7c:9c:50:76:d6:8c:22:1b:dd:1b:3f:
                    6a:ec:4a:03:35:bc:e2:75:0b:55:cb:88:ed:bf:b4:
                    cf:98:a5:3a:c1:76:e0:3b:cc:07:b4:9c:13:48:c4:
                    4f:44:05:0b:ed:d6:8a:44:ca:16:86:24:f7:71:ff:
                    31:7b:d9:e8:20:a2:e4:fe:16:64:43:d0:48:0c:c6:
                    bc:5c:c6:ce:e3:b9:e3:5d:9f:f6:2b:bb:9d:92:e8:
                    15:ae:53:28:be:d9:ec:5d:3f:af:c3:4d:1d:e0:b5:
                    0c:56:3a:6d:13:43:0f:b7:15:04:7b:7a:30:01:be:
                    f6:50:29:31:60:36:5c:f1:60:7a:c4:f0:61:3e:38:
                    6d:e1:c7:62:61:8d:e8:02:3d:f1:c2:b2:5d:b8:1e:
                    dc:be:f6:cf:3e:3e:ab:2b:76:dd:f9:6a:36:b8:e6:
                    8e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8D:06:55:8C:E6:E9:A3:21:A1:A1:48:2F:C7:AC:02:C4:26:6D:9D
            X509v3 Authority Key Identifier:
                keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:03:a6:bd:7e:71:16:d1:b5:e4:9a:3d:e5:fa:28:cb:5f:63:
         1e:27:b3:27:46:45:b9:78:5a:06:49:6d:98:df:6c:66:3b:b8:
         ff:f3:75:2b:ea:6f:20:d0:55:44:e5:3e:5c:5e:16:76:47:94:
         1c:25:9e:a6:bf:83:0a:be:58:aa:de:70:22:2a:b1:8f:39:7d:
         1a:04:16:44:a8:12:c3:a8:bb:65:21:9a:08:28:6f:40:1a:3f:
         fc:63:42:0a:55:97:5d:6d:c3:92:ec:8f:88:26:dd:38:b0:be:
         55:a9:bd:1a:84:30:9b:9c:46:4a:61:cc:7f:9d:8c:07:25:ca:
         7c:e0:70:23:e0:ae:ec:44:3f:bd:8e:8b:fa:d2:0f:84:dd:9b:
         55:53:84:e1:26:09:9c:ae:29:69:be:09:53:b9:05:82:45:09:
         9c:aa:0a:32:ea:78:6a:28:2e:17:16:b9:a6:2a:86:9a:e0:5e:
         b0:a3:88:ee:53:ca:74:ed:27:81:ef:b0:c4:42:fc:f1:8d:3c:
         f6:c3:74:d4:44:e6:26:15:92:0c:1a:e6:3b:ae:6d:cb:3b:cd:
         cd:46:e1:77:95:95:79:5c:64:b8:20:a3:a0:ce:08:49:e5:89:
         e9:97:f2:dd:98:74:8b:99:b2:6b:c8:3f:bf:75:36:59:1a:3f:
         07:f6:eb:8f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgICEMEwDQYJKoZIhvcNAQELBQAwTDEXMBUGA1UEAxMOQVBO
SUNUT0FGUklOSUMxMTAvBgNVBAUTKDZGMUExMDNFMTQyN0ZGMDM0ODNBQkZEOUUz
NERBQ0JFMTUyNEZGOEIwHhcNMjYxMTE0MDAxNTExWhcNMjYxMTE2MDAxNTExWjAY
MRYwFAYDVQQDEw02YWY3YTgwZi0wYTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyl8YmRJa7wIDIU6lGEFNGq6RG1sRja82gB2GfIxVdrbikjPMgbO6
3s3Ux9RIMEhRE61MS7vtuFAo6whTUOXjKii9hfqn2+6N6GT7T+XFLDo+qXvpRHZW
LUYjoTgdfJxQdtaMIhvdGz9q7EoDNbzidQtVy4jtv7TPmKU6wXbgO8wHtJwTSMRP
RAUL7daKRMoWhiT3cf8xe9noIKLk/hZkQ9BIDMa8XMbO47njXZ/2K7udkugVrlMo
vtnsXT+vw00d4LUMVjptE0MPtxUEe3owAb72UCkxYDZc8WB6xPBhPjht4cdiYY3o
Aj3xwrJduB7cvvbPPj6rK3bd+Wo2uOaOoQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FHmNBlWM5umjIaGhSC/HrALEJm2dMB8GA1UdIwQYMBaAFG8aED4UJ/8DSDq/2eNN
rL4VJP+LMA4GA1UdDwEB/wQEAwIHgDBaBgNVHR8EUzBRME+gTaBLhklyc3luYzov
L3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcG5pYy9ieG9RUGhRbl93TklP
cl9aNDAyc3ZoVWtfNHMuY3JsMHUGCCsGAQUFBwEBBGkwZzBlBggrBgEFBQcwAoZZ
cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvMDRFOEIwRDgwRjRE
MTFFMEI2NTdEODkzMTM2N0FFN0QvYXBuaWMtdG8tYWZyaW5pYy5jZXIwTwYDVR0g
AQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2ku
YWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwgZ4GCCsGAQUFBwELBIGRMIGOMFUG
CCsGAQUFBzALhklyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9h
cG5pYy9ieG9RUGhRbl93TklPcl9aNDAyc3ZoVWtfNHMubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAJ4Dpr1+cRbRteSaPeX6KMtfYx4nsydG
Rbl4WgZJbZjfbGY7uP/zdSvqbyDQVUTlPlxeFnZHlBwlnqa/gwq+WKrecCIqsY85
fRoEFkSoEsOou2Uhmggob0AaP/xjQgpVl11tw5Lsj4gm3TiwvlWpvRqEMJucRkph
zH+djAclynzgcCPgruxEP72Oi/rSD4Tdm1VThOEmCZyuKWm+CVO5BYJFCZyqCjLq
eGooLhcWuaYqhprgXrCjiO5TynTtJ4HvsMRC/PGNPPbDdNRE5iYVkgwa5juubcs7
zc1G4XeVlXlcZLggo6DOCEnliemX8t2YdIuZsmvIP791NlkaPwf2648=
-----END CERTIFICATE-----