Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File:                     bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier:          vVwm+qH2ndNN5dIX13DqoH7p/H7MjSdQffWD4/VonTo=
Subject key identifier:   D7:65:14:DD:40:2C:0B:63:34:E7:AC:3E:56:C1:72:A6:84:28:20:8F
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer:       /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial:       106C
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number:          1056
Signing time:             Thu 20 Aug 2026 00:15:13 +0000
Manifest this update:     Thu 20 Aug 2026 00:15:11 +0000
Manifest next update:     Sat 22 Aug 2026 00:15:11 +0000
Files and hashes:         1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: 72xF883TCBNEWeO9bGrEnAdaW4XFBEBFDzVWj8Th/oc=)
                          2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: WXieplFZITfSrjqjGpIkNzx7vsKf/31zVrHjFuUH5j4=)
                          3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: 6KxNllccFl5UCK+IGZyhCatSKHDy54CHiCvi7y8S9Wo=)
                          4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: F4i+2pecUhgcF+gygFFlyaDemPqaRSU2tPuKYUBXKKQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 22 Aug 2026 00:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4204 (0x106c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
        Validity
            Not Before: Aug 20 00:15:11 2026 GMT
            Not After : Aug 22 00:15:11 2026 GMT
        Subject: CN=6a86470f-abb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:51:66:9c:b5:25:71:57:2e:a3:79:db:f4:59:
                    3a:f4:4a:85:66:a7:c8:10:6d:f5:f2:7e:5c:01:f7:
                    cf:e1:c2:9a:58:f2:64:cf:da:bc:16:05:b0:6a:81:
                    f1:e1:6d:00:72:75:72:0f:3e:f0:ba:4b:0f:77:0f:
                    cb:82:0e:7f:17:da:ef:c8:f4:ce:6a:8e:45:42:15:
                    c5:61:11:fe:da:58:2e:a5:49:74:0e:e0:d0:f0:58:
                    74:be:ef:b8:fc:c8:94:6d:03:25:4b:74:12:7e:ec:
                    d7:59:19:c0:88:04:b8:a4:16:89:d1:86:1c:c8:3e:
                    a4:36:c1:a3:42:2b:ab:b4:5f:c4:11:e9:39:b2:a9:
                    d6:a2:e3:4c:fe:c1:ee:57:f3:c2:2a:4c:1c:5c:cb:
                    37:37:2d:d3:13:80:8c:35:a9:35:dc:af:59:dc:8d:
                    7b:f6:8e:23:b9:1b:f3:41:2a:11:17:12:07:c1:2f:
                    40:fc:3d:bd:2e:d0:aa:85:0b:10:f6:87:65:01:7d:
                    8f:5b:ac:0a:7f:61:f5:a7:68:5c:c4:91:e7:e7:90:
                    f9:8b:ff:7f:73:01:d6:53:eb:29:e4:90:b1:79:70:
                    cf:40:c8:af:e0:a5:bf:1f:db:85:d6:20:59:5e:30:
                    86:2c:c6:b1:6f:b2:15:29:8a:bf:c6:9f:36:2f:0e:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:65:14:DD:40:2C:0B:63:34:E7:AC:3E:56:C1:72:A6:84:28:20:8F
            X509v3 Authority Key Identifier:
                keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a2:29:ba:e8:16:c6:4a:01:f5:07:7d:e3:24:c1:1b:c7:8a:
         d2:41:90:f5:7a:93:ed:16:c1:3a:44:56:9e:32:fc:59:0b:bf:
         c1:b3:2a:c5:b2:ba:36:3f:b8:39:f3:f8:87:c3:2e:d2:3b:75:
         a1:fb:66:52:1e:6d:45:e3:1a:39:55:3b:20:18:05:93:04:91:
         a7:26:9c:26:37:6f:e5:07:e8:96:d8:81:c3:6d:99:9b:ad:c3:
         21:bd:e3:e5:ac:e0:44:ad:50:ad:ac:07:a0:61:c9:f8:58:df:
         3b:01:b2:8b:32:d3:2e:c3:14:99:3e:32:9d:bd:85:11:58:29:
         d7:f5:b5:2c:d2:d9:49:4d:be:2a:b5:d9:76:db:93:8b:47:32:
         ae:fd:e2:87:23:e7:f8:9e:8f:a9:2a:56:27:7e:7b:e0:67:48:
         38:3a:32:e5:36:b7:36:ba:63:dc:46:6f:13:2b:d5:a9:bf:3c:
         7d:2e:b6:f6:53:69:97:36:7a:d8:33:4b:be:bc:26:83:81:22:
         46:ce:87:e8:c7:db:c0:3c:55:26:c3:8e:94:14:09:96:df:2a:
         6a:91:55:a3:f5:0b:61:84:1e:9f:0b:c2:02:88:b9:83:a1:f4:
         ba:de:ee:13:2d:d5:69:a2:24:d4:79:58:a0:a7:98:b5:24:db:
         d6:b3:59:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:42:40 2026 by rpki-client