Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File: bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier: KojyCEdItenV0LS9EwIgcYZZZVMvHMXqPq9xOvxdQo4=
Subject key identifier: 19:AE:83:36:E0:C1:01:DD:07:09:B3:06:2E:4B:53:E3:91:CF:7E:6E
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer: /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial: 0EF8
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number: 0EE5
Signing time: Sat 23 Aug 2025 00:15:15 +0000
Manifest this update: Sat 23 Aug 2025 00:15:13 +0000
Manifest next update: Mon 25 Aug 2025 00:15:13 +0000
Files and hashes: 1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: gdEuaha7aXEBw4sja5DGZLa0wMBEek27ghsZm4THOO0=)
2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: rv1kEJuZHu+DX0DTMEOnscLsCZlcmBJ81z2u+ACteHw=)
3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: fI1p3DHd6xCPdYa8vbre+aWndGfIHvfHIzw56wOpGcU=)
4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: 7wnmK4TUsAQFB4aTf61zo6E0Mz2KJ5b/rgxYOI5V3nQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3832 (0xef8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Validity
Not Before: Aug 23 00:15:13 2025 GMT
Not After : Aug 25 00:15:13 2025 GMT
Subject: CN=68a90811-1d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:24:95:a7:3a:ff:6d:1f:8a:d4:0d:33:52:ee:
68:40:a1:1d:cf:8f:0b:ef:ca:ae:5f:4d:0d:36:53:
ec:cb:5f:6d:2a:f8:01:f2:0d:94:a4:2f:35:f4:94:
34:e6:0e:18:d9:6c:1b:4b:63:9e:31:0a:5a:8a:69:
ae:ad:73:99:be:3f:37:84:7f:03:d7:fc:5e:93:f6:
3d:62:74:53:20:e0:0e:33:ca:e1:ed:e0:8a:f9:1e:
1b:23:4b:f0:7e:3d:37:db:e4:67:4a:24:cb:2c:1e:
ab:40:7a:2d:db:af:ee:60:af:83:fc:4d:a0:bb:25:
81:a4:a1:e7:0c:45:c4:bc:d7:f4:0a:b8:b1:a7:36:
ac:64:31:b1:56:cb:14:f1:cb:97:fd:4d:36:52:5c:
90:42:4b:b3:1d:ac:0e:9f:0d:12:f5:e3:8f:66:f8:
28:77:09:7c:13:c9:a3:fa:83:44:20:2b:5d:8f:4f:
5d:76:0d:af:a5:52:4c:8d:8e:be:1b:fe:6c:b6:7e:
8f:20:97:92:b0:3c:2e:53:fc:b0:aa:17:d0:d2:a7:
b4:2f:a3:b4:5d:0d:b7:1d:43:cb:78:d4:e1:cd:4f:
c4:37:1c:7c:e9:03:f0:be:b5:22:07:fa:8d:e0:53:
af:ee:83:38:cb:47:5c:3a:ea:b7:a9:9e:09:79:5c:
b1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AE:83:36:E0:C1:01:DD:07:09:B3:06:2E:4B:53:E3:91:CF:7E:6E
X509v3 Authority Key Identifier:
keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:92:c7:ec:f9:65:5d:a0:25:c1:73:fd:e4:ae:05:1d:57:db:
00:ac:c1:a3:12:e4:75:70:83:ab:8f:fe:d8:58:c6:3d:1c:d9:
05:49:cd:6e:1f:e0:95:5b:4d:81:d5:e9:c2:73:10:29:e3:8c:
40:e4:ef:83:5e:e3:2c:58:08:62:aa:e9:7a:26:86:c4:93:2c:
3b:bf:b9:ee:03:f2:f9:a4:61:f1:4e:7e:57:a3:6c:50:c5:ba:
28:a1:f1:61:9b:0a:8c:1f:84:7b:10:35:43:06:2f:83:ed:e4:
de:35:16:78:01:9c:68:02:66:69:61:d9:c4:cc:af:49:02:25:
fe:2c:a2:87:a2:e6:5e:23:e0:0d:ed:1a:a5:95:5f:53:82:a5:
b6:87:98:ab:a3:15:e4:8c:8b:14:86:06:f2:7a:bc:5d:56:c1:
99:99:5e:0e:c2:47:44:93:8c:b9:e2:43:cb:10:a3:9e:fa:da:
f4:c6:14:f2:ca:bf:66:b6:e6:db:6d:d0:13:7a:3b:34:3d:98:
bc:e2:a3:47:43:ad:d9:b1:a5:ad:a3:b9:18:16:e7:c0:b6:96:
44:cf:3f:29:17:d9:f1:5f:ea:60:08:90:48:71:bd:59:3b:4a:
21:48:79:3d:d8:64:ec:61:aa:86:e3:4c:c3:b0:5e:c8:9c:fc:
b5:04:af:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:14 2025 by rpki-client