Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File:                     bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier:          IufUs3OpsjZ1IroZh82uywXkD2/BpCOLqADZw5fcmOw=
Subject key identifier:   F1:FB:E2:E5:35:13:6B:53:14:32:02:62:28:81:24:AF:04:A4:6F:59
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer:       /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial:       10C2
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number:          10AC
Signing time:             Sun 15 Nov 2026 00:15:15 +0000
Manifest this update:     Sun 15 Nov 2026 00:15:13 +0000
Manifest next update:     Tue 17 Nov 2026 00:15:13 +0000
Files and hashes:         1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: 0r+QqUbnOe8HiqtY8p/Ysgt5dv6hQ6SsPyqAWrdfZgE=)
                          2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: WXieplFZITfSrjqjGpIkNzx7vsKf/31zVrHjFuUH5j4=)
                          3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: 6KxNllccFl5UCK+IGZyhCatSKHDy54CHiCvi7y8S9Wo=)
                          4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: F4i+2pecUhgcF+gygFFlyaDemPqaRSU2tPuKYUBXKKQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4290 (0x10c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
        Validity
            Not Before: Nov 15 00:15:13 2026 GMT
            Not After : Nov 17 00:15:13 2026 GMT
        Subject: CN=6af8f991-1866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2c:e8:f1:85:2e:c3:e9:38:0e:1f:73:3c:26:
                    0a:be:1f:cf:4c:42:e0:3f:fc:26:dd:85:58:20:2d:
                    50:81:7a:2a:c9:70:f5:40:bb:e0:25:35:a0:2f:e2:
                    cb:ad:ea:ec:f8:54:1d:c6:8f:29:e6:c4:ff:eb:da:
                    4e:46:bd:d5:89:d3:f2:54:c6:02:10:21:e8:98:97:
                    4e:f6:2c:3a:86:a4:91:f0:88:4e:fc:c3:ac:60:7e:
                    d2:97:1e:8f:19:7e:24:0c:d1:d5:09:9b:14:1a:db:
                    3c:db:4b:9f:82:4a:c0:aa:7a:45:3b:64:5c:0e:66:
                    ed:2b:91:f7:5b:35:37:07:5a:ad:95:06:c6:56:b2:
                    f7:43:d0:14:6f:9f:fb:1d:5f:ab:78:eb:de:32:df:
                    39:de:09:77:6a:6a:db:1f:9b:04:3b:52:22:6d:1e:
                    5c:52:52:19:5e:b7:f5:35:a5:52:94:89:14:a9:73:
                    32:85:58:cb:1b:12:c8:c0:0b:d0:8e:97:9d:38:65:
                    c0:c0:b6:f2:3f:55:df:d7:2e:70:84:dd:2c:5e:58:
                    34:e3:0a:9a:a0:dd:5f:7c:25:b1:4e:2c:a7:50:d0:
                    29:16:0a:27:9c:00:fa:7b:99:9b:57:bd:9a:9f:b1:
                    09:88:6c:3c:a6:2a:7c:19:a4:fc:b7:2d:d9:8f:d1:
                    1a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FB:E2:E5:35:13:6B:53:14:32:02:62:28:81:24:AF:04:A4:6F:59
            X509v3 Authority Key Identifier:
                keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f4:e8:fb:cc:97:32:0b:07:47:62:2a:63:17:45:b3:4a:8d:
         53:cf:f9:dc:39:b3:ee:9d:53:d1:80:69:b0:54:2f:17:9c:6b:
         9a:72:b7:51:d7:cd:e0:50:f4:85:49:77:89:ed:8a:f9:e2:1c:
         c1:23:df:fb:18:5c:ef:34:7f:c4:e1:72:c9:4f:71:05:d0:65:
         18:e8:43:88:c9:70:bb:7d:25:59:6c:87:85:42:96:58:49:91:
         5a:0a:fa:02:8f:19:e5:f3:e9:d1:45:5e:9d:04:29:2f:52:c9:
         b1:d9:1d:e6:cd:e4:71:b3:33:83:95:dc:3b:87:b3:b3:44:85:
         5b:57:f3:39:25:91:87:d9:5b:6a:44:14:25:c6:9b:1a:37:d3:
         bb:44:3e:e5:6c:0c:ec:05:78:d2:9b:7c:c6:54:94:8c:c3:1b:
         69:10:fc:63:3f:eb:f4:f7:49:32:73:a3:da:4d:93:21:c3:50:
         78:e3:1a:8d:f1:11:9c:c2:95:bb:16:87:06:c2:ee:74:f3:ad:
         bc:84:ff:aa:c9:ec:d3:c2:bb:43:47:ea:81:7f:1b:32:27:30:
         41:da:3a:09:6d:59:54:80:b2:b4:2e:df:03:35:e2:5c:6e:4c:
         61:29:2c:9a:20:59:ae:15:e1:e8:7f:64:c3:9d:88:7e:c9:fb:
         c2:70:e3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----