Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File: bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier: femQByf3w3nid5j1uisc1m1vi9TECQ5k4ByI0l3VLbs=
Subject key identifier: 9F:3B:2E:0B:3A:1C:08:DC:08:85:AA:AD:72:4E:8D:6B:CB:39:D5:52
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer: /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial: 0E90
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number: 0E7D
Signing time: Sun 11 May 2025 00:15:29 +0000
Manifest this update: Sun 11 May 2025 00:15:21 +0000
Manifest next update: Tue 13 May 2025 00:15:21 +0000
Files and hashes: 1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: AJRET0Uczic9OilQPAIIrJ5epNmegkkxk5PIvCmf2W0=)
2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: rv1kEJuZHu+DX0DTMEOnscLsCZlcmBJ81z2u+ACteHw=)
3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: fI1p3DHd6xCPdYa8vbre+aWndGfIHvfHIzw56wOpGcU=)
4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: 7wnmK4TUsAQFB4aTf61zo6E0Mz2KJ5b/rgxYOI5V3nQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3728 (0xe90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Validity
Not Before: May 11 00:15:21 2025 GMT
Not After : May 13 00:15:21 2025 GMT
Subject: CN=681fec1a-3a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:a2:e0:28:96:8e:44:d2:8c:56:9c:9d:75:
2c:3c:78:89:e6:f0:e7:ad:f6:85:fb:2c:9d:6a:d9:
f6:6c:6a:95:41:4e:bb:ad:f8:0c:d9:6a:79:c4:cf:
ce:f9:52:53:97:54:da:b2:f9:7b:94:c5:94:26:9e:
84:a5:f5:63:5e:a3:95:e5:ba:0a:6e:b4:4b:3c:fd:
4d:3b:06:2b:2a:ac:7c:77:db:6b:d5:c4:e3:2a:99:
34:65:8f:10:99:33:ba:0f:6c:24:5f:ca:f6:d8:4f:
aa:88:51:b8:e2:23:93:9a:15:6a:78:07:33:84:be:
12:13:aa:b4:9c:ea:72:d3:07:78:ba:f9:5b:24:4a:
d8:fd:13:44:5d:bf:df:3f:10:83:1a:56:c9:dc:dd:
b1:4b:71:df:6f:b8:1a:ec:58:f9:49:b6:54:33:b7:
79:3b:7b:b1:a0:8f:e3:49:e3:4c:16:01:69:ea:fc:
94:d6:bc:a9:1d:a4:c5:57:cb:dd:78:fa:bd:75:0f:
e4:3f:0d:57:87:78:70:4f:68:90:95:b4:ec:98:aa:
eb:65:3d:af:ca:2a:32:97:5f:d5:78:23:a6:22:28:
b1:4c:e4:53:24:9d:b2:c5:cd:90:db:38:a5:82:28:
5c:9a:30:34:35:7f:e5:ef:f5:05:18:83:e4:2f:c3:
4f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3B:2E:0B:3A:1C:08:DC:08:85:AA:AD:72:4E:8D:6B:CB:39:D5:52
X509v3 Authority Key Identifier:
keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:75:46:49:fe:b5:65:71:8e:50:7d:6d:05:50:cc:4a:86:75:
51:4a:7b:5c:ff:2c:3c:87:3e:c9:9e:7d:4d:0c:7f:eb:0a:5a:
64:b5:27:3d:58:fe:27:39:88:d1:6f:cb:c1:8f:64:0a:36:5c:
19:6b:3e:f8:08:29:bc:3c:37:52:9a:37:2f:11:cc:02:5a:8a:
20:d6:55:c3:8c:75:eb:10:52:77:34:a6:08:37:d1:d3:60:f0:
41:1b:d2:38:54:b1:f1:a2:b1:5d:84:e6:07:1c:56:76:ab:bd:
87:60:7b:a6:76:6b:99:f8:0d:d3:8b:c9:57:a2:7a:18:a3:5d:
0e:6e:62:83:1b:83:30:07:09:3f:e2:83:a3:5a:36:16:dc:01:
90:d0:75:d6:dd:c7:34:3d:d7:80:f0:1b:34:f9:fa:ca:6d:ae:
db:3e:2d:4b:a6:88:e3:53:7e:3a:cf:c9:2c:73:57:9b:e3:74:
50:49:69:9f:45:4f:c5:2f:fb:fd:f7:b2:c0:4f:5c:a8:82:85:
c6:6f:91:1e:38:b0:dd:66:21:49:dd:32:07:53:5b:9d:28:dd:
48:db:37:b4:87:2a:2c:92:93:3c:a6:7b:cd:5e:45:fc:7f:d0:
0a:b7:d1:c8:d6:e9:ef:f1:f2:ca:08:b1:47:1f:9a:22:93:82:
6f:b3:36:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:52:11 2025 by rpki-client