Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File:                     bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier:          pbE5SLFGeNtAvM2EnzWA3/ry6p/8iIyOSZQaUTfwp3M=
Subject key identifier:   BF:01:E4:77:CF:BE:0F:79:99:7D:37:0A:E8:02:A6:87:DE:AE:FC:EB
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer:       /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial:       1012
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number:          0FFC
Signing time:             Fri 22 May 2026 00:15:13 +0000
Manifest this update:     Fri 22 May 2026 00:15:11 +0000
Manifest next update:     Sun 24 May 2026 00:15:11 +0000
Files and hashes:         1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: UmPcdUkMk5Q/4nS5JIsQ3V1l4Qk4ei/m/DSvfX3MdaI=)
                          2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: WXieplFZITfSrjqjGpIkNzx7vsKf/31zVrHjFuUH5j4=)
                          3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: 6KxNllccFl5UCK+IGZyhCatSKHDy54CHiCvi7y8S9Wo=)
                          4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: F4i+2pecUhgcF+gygFFlyaDemPqaRSU2tPuKYUBXKKQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 May 2026 00:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4114 (0x1012)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
        Validity
            Not Before: May 22 00:15:11 2026 GMT
            Not After : May 24 00:15:11 2026 GMT
        Subject: CN=6a0fa00f-24b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:74:6d:ff:49:03:be:28:1a:df:27:bc:f6:b1:
                    40:1d:af:b0:f6:29:fe:1d:6b:c9:6b:0b:f1:fd:90:
                    26:9d:18:44:c1:ea:77:4b:d9:6f:60:df:8a:05:f1:
                    83:ee:54:d5:fe:fb:6e:f0:5a:b7:ca:47:92:ad:69:
                    38:c0:c5:16:28:46:f3:d7:86:89:83:93:3d:71:d0:
                    19:ac:d7:16:5d:a8:b8:2d:ea:b8:f9:8d:21:c6:da:
                    2c:5e:0f:7b:e7:9c:59:53:b2:5a:46:95:5d:53:9c:
                    d9:83:f7:15:90:74:db:6f:e5:d5:6d:39:57:c1:cc:
                    13:c3:1b:73:53:c3:f5:51:a8:c4:d0:c0:a6:dc:00:
                    69:97:e6:12:f9:35:c0:b5:0d:0d:32:87:76:4a:d6:
                    41:d5:b1:1c:77:56:15:d7:f4:0c:bf:36:4b:c7:4c:
                    4e:aa:0a:a3:d8:10:d3:18:f5:3a:cc:00:06:d9:2a:
                    f3:d3:09:74:22:ab:fd:f7:85:db:89:c9:5f:6a:06:
                    d9:2c:ad:b8:da:ce:ba:b4:8f:cb:bd:56:3f:42:3f:
                    5d:60:e5:96:8b:22:9c:6d:65:7c:83:b7:7e:be:6f:
                    1f:6c:6b:f2:bf:5b:0e:cb:3e:c7:ab:3f:18:28:e3:
                    a3:2c:70:95:22:f3:c8:7d:d3:7c:1c:57:15:fd:cb:
                    9a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:01:E4:77:CF:BE:0F:79:99:7D:37:0A:E8:02:A6:87:DE:AE:FC:EB
            X509v3 Authority Key Identifier:
                keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:dd:4d:e8:06:f1:63:a9:2b:33:41:ee:d4:5e:69:4d:b5:da:
         b7:91:3d:64:3f:20:15:e0:66:2d:3b:60:24:b7:d5:01:a7:0e:
         d9:80:ef:1d:b3:d4:b6:44:93:7d:b4:83:ad:69:0f:52:4a:99:
         b3:66:9e:75:a7:67:c2:7e:6a:1b:f7:71:8c:48:46:0c:d3:f7:
         63:99:1f:91:77:f7:09:7b:73:7e:25:c4:19:ef:12:56:96:9e:
         08:85:05:64:73:43:8a:19:88:38:51:4f:df:ca:87:14:b6:87:
         95:62:10:16:ae:bc:f2:a4:7b:fc:a4:38:66:21:ff:79:16:c7:
         8e:2a:e0:18:bd:81:bd:3d:f7:05:59:31:b1:2f:5b:c7:78:bf:
         5c:e0:90:9f:a3:c2:5d:5f:48:ea:77:a6:2b:31:f2:fd:12:c4:
         8b:cf:45:d8:3f:68:f6:57:7b:93:12:bd:af:78:e4:cc:75:2c:
         fd:92:20:db:46:ac:e3:d7:e0:67:c7:38:03:ec:3a:24:d8:90:
         58:16:da:8b:24:35:54:a7:a3:09:fb:71:0b:15:49:8a:3b:12:
         bd:50:bc:26:c6:3b:49:09:eb:76:e4:99:6d:33:76:2a:15:d5:
         a1:ca:34:81:fb:fe:3e:c8:ec:5c:23:c9:96:ea:42:56:94:c5:
         f0:c5:78:a7
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgICEBIwDQYJKoZIhvcNAQELBQAwTDEXMBUGA1UEAxMOQVBO
SUNUT0FGUklOSUMxMTAvBgNVBAUTKDZGMUExMDNFMTQyN0ZGMDM0ODNBQkZEOUUz
NERBQ0JFMTUyNEZGOEIwHhcNMjYwNTIyMDAxNTExWhcNMjYwNTI0MDAxNTExWjAY
MRYwFAYDVQQDEw02YTBmYTAwZi0yNGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsHRt/0kDviga3ye89rFAHa+w9in+HWvJawvx/ZAmnRhEwep3S9lv
YN+KBfGD7lTV/vtu8Fq3ykeSrWk4wMUWKEbz14aJg5M9cdAZrNcWXai4Leq4+Y0h
xtosXg9755xZU7JaRpVdU5zZg/cVkHTbb+XVbTlXwcwTwxtzU8P1UajE0MCm3ABp
l+YS+TXAtQ0NMod2StZB1bEcd1YV1/QMvzZLx0xOqgqj2BDTGPU6zAAG2Srz0wl0
Iqv994XbiclfagbZLK242s66tI/LvVY/Qj9dYOWWiyKcbWV8g7d+vm8fbGvyv1sO
yz7Hqz8YKOOjLHCVIvPIfdN8HFcV/cuaJQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FL8B5HfPvg95mX03CugCpofervzrMB8GA1UdIwQYMBaAFG8aED4UJ/8DSDq/2eNN
rL4VJP+LMA4GA1UdDwEB/wQEAwIHgDBaBgNVHR8EUzBRME+gTaBLhklyc3luYzov
L3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcG5pYy9ieG9RUGhRbl93TklP
cl9aNDAyc3ZoVWtfNHMuY3JsMHUGCCsGAQUFBwEBBGkwZzBlBggrBgEFBQcwAoZZ
cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvMDRFOEIwRDgwRjRE
MTFFMEI2NTdEODkzMTM2N0FFN0QvYXBuaWMtdG8tYWZyaW5pYy5jZXIwTwYDVR0g
AQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2ku
YWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwgZ4GCCsGAQUFBwELBIGRMIGOMFUG
CCsGAQUFBzALhklyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9h
cG5pYy9ieG9RUGhRbl93TklPcl9aNDAyc3ZoVWtfNHMubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBADbdTegG8WOpKzNB7tReaU212reRPWQ/
IBXgZi07YCS31QGnDtmA7x2z1LZEk320g61pD1JKmbNmnnWnZ8J+ahv3cYxIRgzT
92OZH5F39wl7c34lxBnvElaWngiFBWRzQ4oZiDhRT9/KhxS2h5ViEBauvPKke/yk
OGYh/3kWx44q4Bi9gb099wVZMbEvW8d4v1zgkJ+jwl1fSOp3pisx8v0SxIvPRdg/
aPZXe5MSva945Mx1LP2SINtGrOPX4GfHOAPsOiTYkFgW2oskNVSnown7cQsVSYo7
Er1QvCbGO0kJ63bkmW0zdioV1aHKNIH7/j7I7FwjyZbqQlaUxfDFeKc=
-----END CERTIFICATE-----
Generated at Fri May 22 15:16:44 2026 by rpki-client