Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File:                     bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier:          ELqRXF3wMtsGLI6ruEcmA1+eBPK0nIMqj7M+wc9onfU=
Subject key identifier:   FC:73:65:D6:93:AE:71:9F:75:40:CA:C6:62:C5:27:A4:F9:6B:A1:ED
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer:       /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial:       0FE1
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number:          0FCB
Signing time:             Sun 05 Apr 2026 00:15:54 +0000
Manifest this update:     Sun 05 Apr 2026 00:15:42 +0000
Manifest next update:     Tue 07 Apr 2026 00:15:42 +0000
Files and hashes:         1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: zEWnaQNORyTFHBPduqj4DRDmycnfxWPLaWf7CzW0Fa4=)
                          2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: WXieplFZITfSrjqjGpIkNzx7vsKf/31zVrHjFuUH5j4=)
                          3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: 6KxNllccFl5UCK+IGZyhCatSKHDy54CHiCvi7y8S9Wo=)
                          4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: F4i+2pecUhgcF+gygFFlyaDemPqaRSU2tPuKYUBXKKQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 Apr 2026 00:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4065 (0xfe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
        Validity
            Not Before: Apr  5 00:15:42 2026 GMT
            Not After : Apr  7 00:15:42 2026 GMT
        Subject: CN=69d1a9b2-ad81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:05:5f:20:89:d1:62:a0:5b:2e:bb:86:c9:b6:
                    d0:85:76:d4:4c:8b:76:9a:88:68:07:01:49:49:d6:
                    0e:07:da:c5:e1:0e:58:9f:30:50:e1:29:3a:83:34:
                    60:c8:18:a3:aa:27:d6:bd:82:3d:88:8a:03:4c:0a:
                    56:95:b2:5f:20:4a:ba:fc:7e:69:2f:50:47:29:ff:
                    f1:34:00:d1:24:a8:43:90:81:fd:a0:7f:83:d8:6a:
                    b4:0d:cf:6a:34:81:c9:ce:15:a0:75:54:cf:6c:3f:
                    22:eb:5f:b9:3e:08:43:1f:11:63:5c:94:a2:a9:37:
                    e0:6c:bb:1b:9f:62:20:6e:fa:14:f3:fa:3e:93:aa:
                    d4:b6:16:92:45:3d:37:71:96:a5:82:16:61:e6:e5:
                    b1:25:d5:d6:38:ef:62:96:4b:4d:27:19:17:bf:33:
                    bb:e3:e8:aa:33:46:42:e5:cb:63:fe:d1:3d:09:0d:
                    de:47:24:8f:eb:a7:32:90:d2:ab:60:43:e9:c8:e1:
                    90:80:35:e2:e0:b2:f7:73:d3:92:2b:7b:2d:b5:44:
                    1d:61:6b:72:f2:2e:ba:45:81:74:cd:e6:a2:ee:7d:
                    10:a0:23:37:8b:88:55:c2:2e:54:0d:89:0c:e9:6f:
                    9b:d9:33:25:bb:7a:fc:b3:15:ff:16:46:50:ef:38:
                    48:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:73:65:D6:93:AE:71:9F:75:40:CA:C6:62:C5:27:A4:F9:6B:A1:ED
            X509v3 Authority Key Identifier:
                keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:23:25:e3:8d:12:d5:47:0c:ef:76:28:64:22:65:ef:e3:aa:
         cd:d8:29:92:61:21:91:3c:44:b4:59:05:43:71:3a:b4:d1:44:
         9a:1b:8e:8f:d9:54:81:6a:b5:6a:35:59:1e:b3:ce:a8:45:e2:
         83:94:b9:74:ca:6b:25:20:65:2c:67:c6:39:f2:e4:3c:88:89:
         94:99:be:57:5d:e5:70:11:3e:80:b4:15:eb:96:0c:ea:8f:f5:
         20:fc:e6:b4:2d:86:d8:8c:05:ae:65:c7:ce:90:cf:8b:2f:08:
         cf:61:ab:f6:13:31:7f:09:05:73:29:0a:9d:7c:3e:6a:88:ba:
         93:4c:fa:20:fe:89:e7:8a:0f:7a:cc:25:d5:68:5c:b2:6b:20:
         0c:df:4c:91:af:1f:75:e5:76:fd:fd:a0:68:80:9a:cc:a5:0f:
         6a:ce:75:59:69:c8:75:dc:34:3e:a7:1f:0b:97:37:2b:5a:af:
         53:ff:d3:e0:0b:c1:72:0c:42:1a:67:cb:8b:83:64:86:ba:86:
         50:1e:53:8c:af:f3:fa:57:31:3c:8c:98:1a:5a:fd:41:37:86:
         5f:ac:75:b7:3e:54:e4:c3:38:e2:36:c4:5f:78:27:90:50:60:
         3e:ac:bb:a9:13:3c:e4:79:10:06:be:5e:c5:82:90:a6:63:c7:
         5a:db:68:2e
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgICD+EwDQYJKoZIhvcNAQELBQAwTDEXMBUGA1UEAxMOQVBO
SUNUT0FGUklOSUMxMTAvBgNVBAUTKDZGMUExMDNFMTQyN0ZGMDM0ODNBQkZEOUUz
NERBQ0JFMTUyNEZGOEIwHhcNMjYwNDA1MDAxNTQyWhcNMjYwNDA3MDAxNTQyWjAY
MRYwFAYDVQQDEw02OWQxYTliMi1hZDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0gVfIInRYqBbLruGybbQhXbUTIt2mohoBwFJSdYOB9rF4Q5YnzBQ
4Sk6gzRgyBijqifWvYI9iIoDTApWlbJfIEq6/H5pL1BHKf/xNADRJKhDkIH9oH+D
2Gq0Dc9qNIHJzhWgdVTPbD8i61+5PghDHxFjXJSiqTfgbLsbn2IgbvoU8/o+k6rU
thaSRT03cZalghZh5uWxJdXWOO9ilktNJxkXvzO74+iqM0ZC5ctj/tE9CQ3eRySP
66cykNKrYEPpyOGQgDXi4LL3c9OSK3sttUQdYWty8i66RYF0zeai7n0QoCM3i4hV
wi5UDYkM6W+b2TMlu3r8sxX/FkZQ7zhIIwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FPxzZdaTrnGfdUDKxmLFJ6T5a6HtMB8GA1UdIwQYMBaAFG8aED4UJ/8DSDq/2eNN
rL4VJP+LMA4GA1UdDwEB/wQEAwIHgDBaBgNVHR8EUzBRME+gTaBLhklyc3luYzov
L3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcG5pYy9ieG9RUGhRbl93TklP
cl9aNDAyc3ZoVWtfNHMuY3JsMHUGCCsGAQUFBwEBBGkwZzBlBggrBgEFBQcwAoZZ
cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvMDRFOEIwRDgwRjRE
MTFFMEI2NTdEODkzMTM2N0FFN0QvYXBuaWMtdG8tYWZyaW5pYy5jZXIwTwYDVR0g
AQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2ku
YWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwgZ4GCCsGAQUFBwELBIGRMIGOMFUG
CCsGAQUFBzALhklyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9h
cG5pYy9ieG9RUGhRbl93TklPcl9aNDAyc3ZoVWtfNHMubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBADUjJeONEtVHDO92KGQiZe/jqs3YKZJh
IZE8RLRZBUNxOrTRRJobjo/ZVIFqtWo1WR6zzqhF4oOUuXTKayUgZSxnxjny5DyI
iZSZvldd5XARPoC0FeuWDOqP9SD85rQthtiMBa5lx86Qz4svCM9hq/YTMX8JBXMp
Cp18PmqIupNM+iD+ieeKD3rMJdVoXLJrIAzfTJGvH3Xldv39oGiAmsylD2rOdVlp
yHXcND6nHwuXNytar1P/0+ALwXIMQhpny4uDZIa6hlAeU4yv8/pXMTyMmBpa/UE3
hl+sdbc+VOTDOOI2xF94J5BQYD6su6kTPOR5EAa+XsWCkKZjx1rbaC4=
-----END CERTIFICATE-----
Generated at Sun Apr 5 15:05:43 2026 by rpki-client