Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File: bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier: RrQjAV/R0OlCUescoVmwZFY1i++tknQiCK55bI5neG8=
Subject key identifier: B2:A9:AA:1F:9E:42:91:9A:98:30:AA:4C:DA:97:E0:9F:AC:4F:82:8E
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer: /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial: 0D14
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number: 0D04
Signing time: Mon 06 May 2024 00:10:14 +0000
Manifest this update: Mon 06 May 2024 00:10:12 +0000
Manifest next update: Wed 08 May 2024 00:10:12 +0000
Files and hashes: 1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: qT/tG49b5d1OyDp7UPwkbu+KSJp8kEaBUs97e98N2rE=)
2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: y6mUhgbNscDF7VXjACetrZHLyKF7UflL8t5I2F09URk=)
3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: /X6T+kqg7KrHZIyH2e1vZ0ZAZ0l1WKBy7uWNh/rLbUM=)
4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: P3NsfXdO5vrMHdYhIy8uvRdjymdgUbzwN5r3J2L3w5k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3348 (0xd14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Validity
Not Before: May 6 00:10:12 2024 GMT
Not After : May 8 00:10:12 2024 GMT
Subject: CN=66381fe4-4b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:65:4c:7d:9d:2c:04:e8:c9:53:45:56:f6:d8:
c2:ca:8e:e3:e4:55:d7:dd:47:56:c2:37:54:f8:92:
1c:00:f5:c7:24:7b:0a:e2:d6:88:e1:9e:7d:3a:61:
b4:74:50:65:fb:ac:a9:43:39:10:2a:40:21:86:ba:
01:ea:74:42:b0:06:63:ff:1b:38:9b:d3:fb:f0:1a:
09:be:c4:3d:36:be:fc:ea:22:88:75:1e:38:6e:83:
47:91:2c:a0:ae:84:7d:31:b3:04:41:65:e1:75:31:
48:a4:d3:d9:d1:ad:83:bd:19:a4:be:7a:63:0b:c1:
fb:5a:f2:33:63:6d:57:be:a1:1f:ab:d9:ca:8f:e9:
00:bd:01:6f:72:a8:ce:fb:f7:e0:6d:49:38:ff:fc:
62:10:d2:95:ff:78:e2:95:3b:16:a1:7a:9a:9b:c4:
1f:37:d1:8d:1c:80:56:f9:23:e9:ee:d2:a6:15:19:
ec:bd:be:c8:a3:7f:1e:45:8e:4f:21:0c:f7:ef:39:
2d:9e:dd:64:2f:ee:c3:03:d4:2b:6b:c2:7e:7d:a8:
2e:d2:92:7e:1d:c1:1c:4a:8c:6d:63:17:17:f3:08:
ac:ef:9d:a8:41:0f:8b:45:75:af:24:c0:fb:ee:59:
20:59:8d:3a:6f:ac:69:3e:70:c3:ba:83:42:85:59:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A9:AA:1F:9E:42:91:9A:98:30:AA:4C:DA:97:E0:9F:AC:4F:82:8E
X509v3 Authority Key Identifier:
keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:69:db:58:47:60:db:e8:91:79:4b:95:f1:49:ba:cc:3f:b6:
69:1c:11:d7:d6:f3:94:a5:e6:a3:8d:9b:b1:1c:53:e0:47:9d:
80:45:14:ff:4c:ab:dc:c7:6d:49:ef:9c:a9:41:ae:47:82:99:
c6:0c:e7:01:98:7a:6d:03:be:68:f8:82:80:25:87:2a:21:23:
c0:ab:30:bc:31:be:51:e7:57:b2:e3:56:3f:dd:48:72:40:ce:
67:17:e8:73:00:5d:78:56:9f:de:dd:79:6c:19:19:78:30:1a:
91:cf:ff:7c:51:28:ee:59:0d:c4:78:6f:de:db:6d:10:e5:43:
4d:2f:ed:46:73:8e:f0:a3:2b:5b:a1:27:64:dd:16:cd:16:43:
b3:ff:23:7b:f2:04:64:06:03:c3:0d:64:56:73:cb:64:73:e7:
8c:2d:fb:85:5c:3c:50:14:12:25:5e:85:51:05:44:ca:47:c7:
8a:ff:93:85:4f:48:13:a9:36:7d:13:48:c8:d2:db:07:51:3d:
36:5b:80:a8:cf:f5:cd:db:79:77:47:65:00:3b:9e:ff:44:09:
ca:e9:8e:d4:8a:69:af:a6:62:b8:ba:f5:df:6b:68:32:db:a8:
1c:4e:89:08:3e:6f:5b:af:ea:23:c4:91:29:44:e0:9a:12:3e:
d2:ed:b1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 00:47:57 2024 by rpki-client on console-ams.rpki-client.org