Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File: bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier: r58+novVzhRCPseuGNympzytGrZXou16J6HoTj3h5QM=
Subject key identifier: C0:39:B2:7A:DA:C5:AB:FC:26:90:34:9A:D1:BC:66:50:61:2D:36:01
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer: /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial: 0ED6
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number: 0EC3
Signing time: Sun 20 Jul 2025 00:15:14 +0000
Manifest this update: Sun 20 Jul 2025 00:15:12 +0000
Manifest next update: Tue 22 Jul 2025 00:15:12 +0000
Files and hashes: 1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: Tov96hkZiWyA3C1GpyoPDavV4vn+okizp9CjVJEwuQQ=)
2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: rv1kEJuZHu+DX0DTMEOnscLsCZlcmBJ81z2u+ACteHw=)
3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: fI1p3DHd6xCPdYa8vbre+aWndGfIHvfHIzw56wOpGcU=)
4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: 7wnmK4TUsAQFB4aTf61zo6E0Mz2KJ5b/rgxYOI5V3nQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3798 (0xed6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Validity
Not Before: Jul 20 00:15:12 2025 GMT
Not After : Jul 22 00:15:12 2025 GMT
Subject: CN=687c3510-b4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:77:02:a5:1b:6a:17:0b:9e:7e:d3:8a:db:e2:
09:ad:db:fb:e4:dc:1e:8f:c2:e9:97:a1:a7:4a:1e:
85:70:77:d7:17:7e:0e:26:5a:3e:a9:5a:57:57:89:
f1:21:f1:6d:81:02:4b:5c:13:9d:5c:fe:4f:e5:d5:
e5:3e:92:0c:3e:a8:38:42:40:38:91:c3:5f:11:35:
27:67:d3:57:fa:ea:aa:7f:b7:52:55:9d:ef:69:f9:
81:b7:d8:3b:6b:b5:95:8c:42:0f:7a:a2:89:e3:88:
82:58:72:dc:46:d3:11:65:85:cb:67:f7:1a:ab:2c:
50:16:1c:14:39:6f:46:9a:d3:2e:07:73:f4:af:84:
b6:af:94:35:67:cb:01:c3:3c:c5:d1:0c:e0:ee:4a:
66:21:c2:4d:0d:4a:52:cb:cb:78:30:25:8a:77:31:
d8:69:be:24:b2:39:1a:76:af:96:29:76:c2:89:19:
67:e7:6d:12:5b:29:ed:e2:8e:4a:37:3f:8b:f6:68:
01:1e:de:21:23:1f:23:01:c2:a9:bd:c8:93:76:a6:
ce:eb:12:2a:f3:03:11:49:9f:61:df:45:ff:55:5c:
c9:eb:2f:e0:10:93:36:db:82:a0:fe:2b:b2:79:e1:
31:63:50:03:d0:fd:7e:a2:81:dd:a1:19:0b:c6:7a:
a5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:39:B2:7A:DA:C5:AB:FC:26:90:34:9A:D1:BC:66:50:61:2D:36:01
X509v3 Authority Key Identifier:
keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:6f:c4:f2:41:9c:34:e8:58:67:15:22:d0:87:dd:8e:79:04:
b5:e2:4b:8a:83:bf:33:40:29:4a:90:26:09:0b:42:3f:ca:1b:
41:26:b2:37:4b:d4:66:75:33:23:a1:c0:21:ae:a2:c8:4e:35:
56:ae:a0:67:c4:db:43:f5:9d:36:1c:0c:e0:4e:0b:a9:37:c7:
79:2e:d7:27:d9:83:05:58:c6:2a:fd:fd:69:b0:33:9f:90:58:
da:85:5b:ea:b4:8f:3d:72:54:95:8d:a6:01:7a:1f:6e:e9:65:
bf:90:57:c6:27:b4:bf:5b:8b:e8:05:48:08:dd:29:69:97:e3:
01:ab:16:8e:65:81:bd:55:43:41:7d:59:56:67:c7:eb:61:59:
80:7d:6c:39:e1:d4:69:a6:38:4c:71:42:c0:fd:41:7d:19:b9:
00:16:6f:1e:7d:2b:8c:ce:4b:b9:d6:56:25:f4:e9:f3:33:b6:
a9:fe:66:08:b8:d2:7d:6c:ae:77:8d:73:0a:f9:79:21:5e:d3:
9c:06:94:80:a9:d9:da:91:f9:ed:9e:23:4b:97:b5:18:27:ad:
42:8d:60:40:3e:49:12:56:24:03:04:da:fc:29:ed:a2:77:82:
d5:15:de:1e:0f:38:3b:30:a6:db:46:b6:d7:6a:1d:67:88:2b:
b9:3c:83:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 03:34:21 2025 by rpki-client