Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File:                     bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier:          xRnLk+xi5W8EPFDg5uJGD6cR+0BxCLWtz9BS2TigmlY=
Subject key identifier:   7F:00:26:36:68:AF:78:B8:D5:6D:AD:7F:3E:34:15:27:6E:C7:14:62
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer:       /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial:       108D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number:          1077
Signing time:             Wed 23 Sep 2026 00:15:13 +0000
Manifest this update:     Wed 23 Sep 2026 00:15:11 +0000
Manifest next update:     Fri 25 Sep 2026 00:15:11 +0000
Files and hashes:         1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: a72OQNSpS07o+zUf3UQZHvc128zzwwfSKiA+TBloo5A=)
                          2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: WXieplFZITfSrjqjGpIkNzx7vsKf/31zVrHjFuUH5j4=)
                          3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: 6KxNllccFl5UCK+IGZyhCatSKHDy54CHiCvi7y8S9Wo=)
                          4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: F4i+2pecUhgcF+gygFFlyaDemPqaRSU2tPuKYUBXKKQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4237 (0x108d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
        Validity
            Not Before: Sep 23 00:15:11 2026 GMT
            Not After : Sep 25 00:15:11 2026 GMT
        Subject: CN=6ab31a0f-2787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5c:8f:17:79:31:d5:a1:c2:23:f3:04:55:26:
                    83:24:47:b1:bb:71:8c:7e:38:5d:83:46:f3:3c:5f:
                    f7:a0:8c:03:bf:5d:0d:51:27:f7:f5:d6:0b:0d:4a:
                    71:77:ab:ea:15:5c:72:3f:50:1c:33:db:15:d6:b7:
                    21:f8:6d:43:dd:c8:93:c1:49:65:b7:12:45:ec:a2:
                    8a:c9:cf:75:04:0f:db:52:a2:ac:b1:8d:84:8f:e5:
                    83:6c:04:83:74:0d:fe:6a:b1:50:86:2e:3c:f5:fe:
                    71:71:96:52:5f:dc:db:c6:77:30:b4:73:09:3f:72:
                    a7:e1:24:47:6d:7d:50:a0:cf:b6:fc:de:d9:1e:c2:
                    d8:c1:22:96:1f:15:c4:25:0a:ef:85:30:a0:ab:40:
                    99:bc:9e:31:f8:43:6e:3e:9e:1a:de:85:d8:b7:19:
                    bc:64:c1:5b:44:4a:88:50:85:d6:6d:34:68:85:ee:
                    3c:39:9a:42:81:4d:b8:a4:ad:f5:a9:6a:04:90:c4:
                    50:68:eb:20:d9:ea:f0:a0:f9:44:c3:78:ef:2d:f7:
                    c1:74:5d:88:49:f1:0f:6a:b2:23:7c:32:2e:bd:12:
                    6b:15:d1:d1:0e:7d:28:05:f8:82:bf:01:72:02:09:
                    3b:86:e8:3f:ea:60:a9:5f:01:6a:b0:c6:6d:27:b8:
                    3f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:00:26:36:68:AF:78:B8:D5:6D:AD:7F:3E:34:15:27:6E:C7:14:62
            X509v3 Authority Key Identifier:
                keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:c7:57:98:34:1d:59:9e:56:5b:a8:8e:bb:14:02:99:c1:19:
         e7:5c:91:dc:ea:57:74:62:69:1d:a6:b0:ab:30:82:8e:92:0d:
         be:3e:c3:fe:fc:2c:1f:2d:e1:ab:9d:64:e5:5a:c6:60:d1:c6:
         c7:59:9c:5d:34:d7:99:63:59:26:ac:ce:1e:29:87:32:dc:40:
         c9:da:a2:3a:b2:aa:81:72:d5:30:0d:be:ce:34:c1:ff:f1:4d:
         68:f5:41:70:4a:ac:8f:56:90:ca:f1:6d:69:5d:65:84:b5:ab:
         94:66:85:e4:c7:d8:97:e8:3d:10:22:79:26:5f:a4:18:0a:fb:
         e0:df:53:0a:7a:23:39:df:c6:09:aa:7b:12:db:bb:59:8f:dd:
         46:51:f6:60:da:b8:2e:f2:f5:2d:51:30:30:1c:0e:ec:47:d9:
         0e:fa:80:09:4a:a9:7c:c3:54:73:ed:21:cf:65:bf:15:56:6f:
         b4:98:f7:fa:07:af:80:7e:65:a8:c1:31:4c:8d:8d:3c:b7:0c:
         03:70:67:3e:d7:24:cd:1a:15:e8:dd:b5:f2:13:5a:cf:42:84:
         92:0d:81:fc:32:16:cd:a8:f4:6b:f4:fa:7d:be:e7:ca:91:d2:
         af:ac:ae:7f:ee:99:12:6a:16:3c:ff:1f:9e:52:0b:a2:34:9c:
         65:fb:83:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----