Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File:                     bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier:          E4bz7dNKq+ZnCbSypITcZoAnr2WABkBcqD+ezaoS50s=
Subject key identifier:   DC:3A:F8:ED:48:4B:AB:D8:BF:0C:6B:F5:6E:79:8A:C6:65:45:DD:2E
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer:       /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial:       109A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number:          1084
Signing time:             Tue 06 Oct 2026 00:15:14 +0000
Manifest this update:     Tue 06 Oct 2026 00:15:12 +0000
Manifest next update:     Thu 08 Oct 2026 00:15:12 +0000
Files and hashes:         1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: kP34WdimpdNVa9UFuismspuQdp12ons5qI2cO/KyvTc=)
                          2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: WXieplFZITfSrjqjGpIkNzx7vsKf/31zVrHjFuUH5j4=)
                          3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: 6KxNllccFl5UCK+IGZyhCatSKHDy54CHiCvi7y8S9Wo=)
                          4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: F4i+2pecUhgcF+gygFFlyaDemPqaRSU2tPuKYUBXKKQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 Oct 2026 00:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4250 (0x109a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
        Validity
            Not Before: Oct  6 00:15:12 2026 GMT
            Not After : Oct  8 00:15:12 2026 GMT
        Subject: CN=6ac43d90-010d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:18:b1:14:12:d6:f1:87:2a:e4:d0:f1:14:d5:
                    d5:35:d4:69:e1:73:de:57:37:03:6d:80:dc:65:a2:
                    b8:a8:48:66:17:45:79:33:52:0a:58:a0:3c:ff:44:
                    c0:9b:48:b2:f7:05:4a:0e:54:df:36:2e:6b:38:a4:
                    8c:48:12:81:a8:64:ff:71:eb:14:67:6d:a8:89:29:
                    52:b9:5f:0f:2d:9f:35:7c:3a:b2:a3:65:a3:24:6b:
                    05:27:85:8a:a4:df:4d:94:29:88:93:ce:58:29:db:
                    46:87:61:77:60:de:72:f2:a2:7c:d6:39:18:ea:af:
                    76:df:7a:47:d9:5a:e1:34:0d:71:5c:0f:69:4d:28:
                    8d:91:33:da:57:22:11:5c:13:9d:ec:8c:0c:eb:85:
                    17:05:72:3f:62:9d:48:1c:02:c1:77:76:1d:27:4f:
                    98:e5:86:82:27:9e:73:49:d4:54:97:a0:35:c2:dc:
                    b9:54:a2:55:84:fc:04:45:5e:28:e4:d0:4c:d2:e0:
                    8b:e5:d0:02:10:37:cf:d5:97:21:d7:03:52:7a:67:
                    20:f4:f4:85:c2:25:aa:2d:f9:3f:7e:5d:c4:bf:d3:
                    76:ca:13:ba:4d:60:4a:44:01:be:89:b8:80:a9:b3:
                    ed:38:1c:9d:0f:ec:b9:29:57:3a:90:5d:62:1a:01:
                    7f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3A:F8:ED:48:4B:AB:D8:BF:0C:6B:F5:6E:79:8A:C6:65:45:DD:2E
            X509v3 Authority Key Identifier:
                keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:8c:18:d4:f8:0a:3b:08:03:12:13:b8:d3:cd:7b:64:2c:77:
         da:52:ba:3d:7f:bb:3d:44:7c:44:b4:39:27:33:60:30:a2:db:
         d1:a1:56:3a:2d:ec:9f:61:b5:3a:f3:cf:62:cb:6e:82:4c:c6:
         4a:34:15:9a:11:34:a2:4a:29:52:2a:d5:6e:cf:d9:0b:77:8f:
         aa:92:8c:cd:8f:44:32:52:bb:03:fd:b3:97:bc:82:13:9b:37:
         17:4f:02:0c:2c:4d:8c:32:9f:00:09:84:3f:fd:10:ff:43:c5:
         46:e0:ca:02:05:aa:c3:2c:f5:52:b5:82:02:71:cc:89:c3:fe:
         b3:00:db:c1:2a:90:5f:14:91:5f:b6:7b:14:1f:4b:31:5d:ab:
         a7:fb:6c:51:7d:fd:c3:bc:99:9a:70:27:74:79:19:0c:9e:f2:
         04:9f:55:99:1d:1b:27:3a:13:9b:37:60:ce:f7:81:18:b6:e8:
         f3:77:66:57:fc:1f:6b:61:11:0b:f7:83:98:5c:e8:ad:f7:d8:
         ef:1d:18:58:da:9c:7a:42:93:76:36:2b:3a:d5:ca:0a:e8:f1:
         5e:ea:1b:14:7c:1f:1f:2b:cf:16:5c:79:dd:72:88:bf:f0:39:
         09:b1:0c:4b:5e:23:ed:e7:43:24:7b:b3:c3:3b:bd:93:cb:39:
         48:5b:c7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----