Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File: bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier: u+7IVqWH+UwvKbIPJi/0FYXk1qsNhCkG/qtlT8fmRXc=
Subject key identifier: 52:49:3F:86:0B:82:77:73:BD:56:0C:A4:65:14:4B:50:22:12:0E:EF
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer: /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial: 0EC5
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number: 0EB2
Signing time: Thu 03 Jul 2025 00:15:13 +0000
Manifest this update: Thu 03 Jul 2025 00:15:11 +0000
Manifest next update: Sat 05 Jul 2025 00:15:11 +0000
Files and hashes: 1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: nh0gylMMSZMgxmTcji/CAEUAWV59A1/4hpe9xD/4e28=)
2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: rv1kEJuZHu+DX0DTMEOnscLsCZlcmBJ81z2u+ACteHw=)
3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: fI1p3DHd6xCPdYa8vbre+aWndGfIHvfHIzw56wOpGcU=)
4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: 7wnmK4TUsAQFB4aTf61zo6E0Mz2KJ5b/rgxYOI5V3nQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3781 (0xec5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Validity
Not Before: Jul 3 00:15:11 2025 GMT
Not After : Jul 5 00:15:11 2025 GMT
Subject: CN=6865cb8f-e684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:73:2e:c0:c7:7c:01:a4:80:8f:d4:b0:bb:
56:10:33:d7:76:df:92:4a:89:a5:0d:be:c1:7c:85:
6a:75:c4:8e:88:23:86:53:2a:16:0f:d4:65:df:a5:
e8:a5:76:8c:27:bc:f1:29:65:c5:93:79:73:1f:72:
6f:0c:f6:96:e3:87:a7:46:a6:e9:f6:43:fc:7e:0f:
01:ba:f9:89:92:6c:be:14:31:07:fb:4b:f2:d8:08:
0c:53:ff:61:be:3f:ad:fc:48:3a:72:c1:a4:69:4e:
be:a2:68:e9:7b:5c:9f:27:2c:fd:b9:a5:74:04:9f:
2f:1d:84:e5:59:0a:38:52:89:b8:60:e3:d3:7f:07:
70:d8:c2:a7:56:ab:8f:1a:6b:db:06:e0:58:7a:e2:
5c:1f:b4:71:48:14:76:73:36:9d:ad:3b:04:00:37:
56:d5:8f:22:c1:6a:f5:28:ff:6b:bf:e7:5b:0d:64:
3c:a8:ec:9f:cd:c7:16:26:ab:e0:ca:2f:c1:7f:5c:
4e:d5:e7:66:7e:67:83:ae:d1:94:25:42:87:aa:94:
96:36:31:41:46:c4:d9:3a:ef:bf:57:8d:84:e9:9c:
83:e3:5a:e9:a7:59:64:f8:9a:dc:09:2b:56:74:e6:
74:71:f3:d1:5c:df:c0:17:0d:e9:d2:2e:5d:e0:a9:
b6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:49:3F:86:0B:82:77:73:BD:56:0C:A4:65:14:4B:50:22:12:0E:EF
X509v3 Authority Key Identifier:
keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:91:34:cf:fb:ce:c5:93:14:dd:40:59:6d:46:6b:82:b7:aa:
9d:2a:8f:cc:8b:46:60:b6:ff:9b:df:cf:39:45:87:41:58:05:
32:e8:56:c5:fc:8d:e7:0b:b4:c4:2c:56:f2:e4:55:c3:b5:04:
88:34:f1:c4:36:61:a7:81:c1:3c:d4:88:53:d9:6a:9b:d9:1b:
09:3c:62:29:53:ed:2c:e8:8e:e9:53:ba:f2:bb:10:63:f9:91:
53:f9:38:9d:ae:87:21:84:a1:a1:79:a4:18:fd:af:72:e2:fb:
63:8a:22:fd:84:2e:7f:3a:26:15:02:3e:92:f7:8d:92:33:3c:
0b:f5:d8:11:d8:10:a0:b9:ea:f7:56:bb:00:d0:bb:09:c8:e6:
76:22:e6:dc:09:77:7e:c9:84:c9:bd:75:ed:d4:71:a1:ab:22:
13:ec:d5:62:2f:11:34:f0:cb:bf:70:87:1e:18:b7:8d:74:23:
33:3d:ae:31:de:e3:ad:f3:e1:4c:22:59:79:0a:a9:4b:a0:e5:
8d:39:2f:40:b9:49:d2:8c:72:cf:95:e9:93:63:78:8e:2a:5d:
99:bd:ca:c3:1d:1b:d6:24:81:e6:59:da:22:13:4f:20:51:77:
0d:49:49:76:f2:09:f6:f8:3a:83:45:c2:71:9f:42:2b:28:aa:
b4:0b:db:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:03:20 2025 by rpki-client