Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File:                     bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier:          aJQyuWQwJ4pGReaJichl6J4Npl2Sa4vPbhGuq5Bb08s=
Subject key identifier:   48:30:D4:7F:28:01:E2:8A:A4:12:FF:CE:26:5F:7C:54:BC:E6:26:21
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer:       /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial:       1009
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number:          0FF3
Signing time:             Wed 13 May 2026 00:15:13 +0000
Manifest this update:     Wed 13 May 2026 00:15:11 +0000
Manifest next update:     Fri 15 May 2026 00:15:11 +0000
Files and hashes:         1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: BQUDjeTv2BJyw4djJ28/gg1H/y3xcXRObfEm4XTR+7o=)
                          2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: WXieplFZITfSrjqjGpIkNzx7vsKf/31zVrHjFuUH5j4=)
                          3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: 6KxNllccFl5UCK+IGZyhCatSKHDy54CHiCvi7y8S9Wo=)
                          4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: F4i+2pecUhgcF+gygFFlyaDemPqaRSU2tPuKYUBXKKQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4105 (0x1009)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
        Validity
            Not Before: May 13 00:15:11 2026 GMT
            Not After : May 15 00:15:11 2026 GMT
        Subject: CN=6a03c28f-e1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2f:0b:de:70:0e:49:c7:f0:82:4c:44:0f:b5:
                    d3:98:97:0d:fb:94:90:df:ed:71:4b:17:31:39:ff:
                    21:39:3d:7d:11:ba:c3:7e:54:cd:6e:b9:a6:97:81:
                    bd:ef:57:9e:76:81:29:5e:29:be:37:7d:79:10:85:
                    80:7b:bb:9f:ed:ae:90:ef:9b:c1:d1:ba:c1:77:a2:
                    97:45:24:94:30:13:c9:f6:9d:df:9a:08:9b:dc:ed:
                    a4:67:34:d1:8c:24:20:97:96:70:97:c5:f9:40:ce:
                    3a:e1:25:c6:b3:e0:f2:8d:0d:cf:3d:98:ca:4f:ab:
                    aa:dd:d6:81:01:09:13:90:a0:98:7f:06:de:f1:56:
                    24:c2:6a:ee:7d:99:e1:e3:ab:5d:1d:e1:71:3d:32:
                    ad:d0:a0:c7:30:a6:81:45:96:68:4e:28:65:82:05:
                    1d:b9:79:1b:96:4c:0b:72:b4:49:2e:a9:99:21:05:
                    42:4b:ac:3a:ff:c9:eb:d6:a3:f7:e9:a2:4a:0c:3e:
                    cb:04:36:d3:8a:d6:f2:a1:f1:93:17:3e:bb:48:dd:
                    c6:09:0f:fc:d9:d7:da:ad:00:aa:e5:bb:c8:f4:79:
                    f7:38:e9:ef:50:4b:ae:34:1d:2e:38:8c:fa:6e:20:
                    bf:b4:dd:26:3b:7d:d4:96:f8:06:9c:5e:1d:9b:00:
                    e6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:30:D4:7F:28:01:E2:8A:A4:12:FF:CE:26:5F:7C:54:BC:E6:26:21
            X509v3 Authority Key Identifier:
                keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:6b:cc:c8:0e:48:97:c3:7a:90:94:e7:f1:8b:ac:a9:5f:78:
         ef:7a:96:71:b2:11:36:42:e9:ab:e9:2a:96:3f:33:d2:6c:bd:
         09:65:28:7c:8e:ab:03:c9:9e:e3:92:89:d2:18:48:07:f5:f4:
         91:1c:dc:af:57:85:85:ad:8c:3a:7c:17:76:8a:32:f3:2e:34:
         6f:25:b4:4e:57:d0:d9:35:af:ab:38:79:40:2a:53:7a:fb:54:
         26:72:04:6b:e4:f5:ba:a7:06:61:31:9d:26:a3:2e:3d:ee:85:
         77:79:78:6b:a6:c5:fb:52:ae:8a:dd:bd:fc:e7:bb:ba:73:dd:
         79:98:49:90:4d:9c:a7:d2:81:93:6c:4b:71:98:5d:e8:60:4a:
         92:a8:88:29:43:db:da:4d:f2:23:88:93:3f:12:d0:bc:59:2c:
         06:a3:de:17:2e:2d:b0:03:62:45:41:c9:2c:20:6f:94:1d:4c:
         b3:33:81:c1:32:ea:4f:2e:1c:71:53:2f:1f:64:72:90:af:fd:
         ac:1e:72:45:8c:fe:33:87:e9:10:96:ba:fc:98:6a:75:66:21:
         71:ca:10:1f:e5:4b:bb:ac:c0:d4:31:af:77:11:a9:9c:fe:a9:
         8a:15:06:7b:da:29:33:9b:ff:06:43:b7:d3:d6:e6:29:93:64:
         e6:40:3a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:15 2026 by rpki-client