Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File:                     bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier:          ZWJwTTlDbwZyHtYij34G9GFUpeDGY0F57J3GgV6EtOY=
Subject key identifier:   DA:A6:16:B3:56:02:BC:18:99:7F:31:55:BA:84:1F:11:47:11:60:4B
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer:       /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial:       108B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number:          1075
Signing time:             Mon 21 Sep 2026 00:15:14 +0000
Manifest this update:     Mon 21 Sep 2026 00:15:11 +0000
Manifest next update:     Wed 23 Sep 2026 00:15:11 +0000
Files and hashes:         1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: GaWnqoVrC3kcOXythBeNzRGRDHfYdmLtxzQZnGHtrsc=)
                          2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: WXieplFZITfSrjqjGpIkNzx7vsKf/31zVrHjFuUH5j4=)
                          3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: 6KxNllccFl5UCK+IGZyhCatSKHDy54CHiCvi7y8S9Wo=)
                          4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: F4i+2pecUhgcF+gygFFlyaDemPqaRSU2tPuKYUBXKKQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4235 (0x108b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
        Validity
            Not Before: Sep 21 00:15:11 2026 GMT
            Not After : Sep 23 00:15:11 2026 GMT
        Subject: CN=6ab07710-518b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3f:bb:6d:56:df:a9:9f:fd:0e:9b:3a:76:93:
                    74:0a:8f:c1:53:8d:5e:a8:d2:13:3f:92:79:82:1d:
                    78:c0:58:13:d1:d6:86:78:2c:cf:df:22:3e:97:b2:
                    bd:55:bf:88:81:53:12:71:f4:f0:2a:4a:57:d9:11:
                    d3:fa:3b:d7:35:6e:9b:2b:3e:df:b3:34:54:ed:29:
                    84:79:28:d4:21:df:8b:48:2b:c7:8a:68:5c:b0:2c:
                    d3:50:c7:6f:8f:c7:ce:ce:31:9b:1f:3e:52:f2:c8:
                    8a:f8:e2:73:15:3a:b0:5a:1b:6f:55:d3:ca:b4:ff:
                    27:2a:47:f6:24:51:71:7a:f1:8b:4c:15:59:8c:f6:
                    3a:08:32:c2:20:be:2c:43:8e:81:3b:00:44:63:a5:
                    f0:e4:89:a0:7b:0b:a4:d7:7f:9a:3e:10:2f:04:c8:
                    44:f2:35:a3:9c:4d:5f:58:e1:01:e4:8c:0f:d3:1c:
                    a2:04:a0:16:0b:6c:58:80:4a:62:6e:c2:50:2a:b2:
                    5c:f6:73:66:43:bd:c1:70:1c:bb:e3:b6:20:73:9b:
                    a9:62:de:3e:1f:1c:95:67:61:b0:89:60:cb:7c:6d:
                    34:53:0a:4f:af:27:6e:a7:cc:7f:c2:c6:a9:aa:63:
                    68:ef:7d:02:a9:0e:1a:aa:9b:87:2b:0c:23:00:eb:
                    18:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A6:16:B3:56:02:BC:18:99:7F:31:55:BA:84:1F:11:47:11:60:4B
            X509v3 Authority Key Identifier:
                keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:9d:54:71:5b:3b:83:25:fc:c5:8c:f0:ce:f0:e8:28:53:42:
         64:37:2f:f0:c8:51:a7:a7:0c:cb:f8:ff:d3:13:a0:00:41:03:
         af:80:8d:7e:34:77:7d:7c:93:0c:cc:9c:1b:a1:33:6c:7d:f4:
         bc:75:98:31:ad:1f:ac:b6:c4:ef:fe:65:4b:bd:79:87:e2:f2:
         40:ec:2a:ce:d7:83:86:b0:ae:16:67:ed:4f:f5:55:97:51:4d:
         b0:59:59:f7:c8:50:30:d8:d5:86:33:92:28:26:df:5e:5e:e4:
         1a:52:e4:6e:ee:b9:d9:67:cb:14:7f:47:60:64:35:5a:15:29:
         6b:40:ea:98:d7:c5:2a:c5:6b:85:ad:a2:ea:85:1e:8b:9d:3f:
         9c:ce:b1:fc:e1:60:9a:fe:93:c3:d4:1a:38:8f:82:64:cd:38:
         3c:4d:2a:fc:d3:b2:1e:b0:b3:c4:90:36:09:a5:b4:10:c2:32:
         d8:b7:89:b4:70:b3:46:00:d8:e0:aa:5e:37:b6:89:91:97:36:
         72:cf:7e:ad:0d:e2:e6:c9:eb:03:4f:4e:1b:d8:1f:87:5f:0a:
         67:4e:eb:8f:76:ea:83:36:36:0a:8d:1b:64:6c:7b:16:ea:29:
         53:b0:b0:de:e0:6a:0a:e2:9b:32:6b:cd:1d:c2:93:cb:54:da:
         bc:48:fb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----