Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File: bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier: 51YjlTkCV3oHq829DvMVgBJVe8cpTjXiv++gT2YbHp0=
Subject key identifier: 8D:5F:E4:5A:30:37:99:CD:64:40:1B:9E:2C:37:BF:0A:6F:95:AA:F7
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer: /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial: 0F05
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number: 0EF2
Signing time: Fri 05 Sep 2025 00:15:15 +0000
Manifest this update: Fri 05 Sep 2025 00:15:12 +0000
Manifest next update: Sun 07 Sep 2025 00:15:12 +0000
Files and hashes: 1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: FZNZd3M3ZopnqQzHJQFA/dGQ0G+2D14I7Vvkhm6gwNs=)
2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: rv1kEJuZHu+DX0DTMEOnscLsCZlcmBJ81z2u+ACteHw=)
3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: fI1p3DHd6xCPdYa8vbre+aWndGfIHvfHIzw56wOpGcU=)
4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: 7wnmK4TUsAQFB4aTf61zo6E0Mz2KJ5b/rgxYOI5V3nQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Sep 2025 00:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3845 (0xf05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Validity
Not Before: Sep 5 00:15:12 2025 GMT
Not After : Sep 7 00:15:12 2025 GMT
Subject: CN=68ba2b90-b049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:c6:82:a7:9a:bb:59:0b:19:34:d1:d9:26:
e9:ba:1a:a2:24:68:a7:75:9a:e6:a6:67:40:e2:04:
08:c7:2e:2e:dc:f0:c5:5c:35:71:8e:79:62:12:ed:
29:3a:2a:2e:7c:29:39:a2:4a:f3:2b:de:ef:f1:48:
14:0a:fa:4c:ee:59:15:0d:bd:86:2c:da:f3:07:be:
06:80:47:c4:42:12:e0:db:b8:09:e0:40:2a:74:d6:
0e:70:9a:cb:3c:40:19:c0:4a:5e:5e:45:48:84:24:
a7:40:ee:6b:38:d1:ef:c6:94:45:e3:55:34:c5:93:
95:34:ec:d6:80:b1:c5:3e:bb:ac:d3:a8:88:db:09:
9d:21:1b:2d:87:89:df:e1:60:01:7f:c5:dc:d6:32:
01:4c:03:02:ea:33:fc:45:71:27:b8:4a:fb:26:16:
d2:7a:27:18:2c:be:a3:a1:d3:f1:16:48:f9:ba:db:
c5:bd:ea:cd:65:32:32:75:c0:f0:cd:c2:9d:65:5b:
14:3a:b3:a5:fb:76:b0:b8:68:d0:8a:d3:4c:d4:c7:
55:bf:ef:4e:22:b8:78:9d:8e:24:95:5c:19:92:66:
99:51:8f:e3:1e:62:7a:de:51:1b:df:bf:7a:09:4a:
9a:94:bc:59:de:8e:f4:74:fb:56:b0:e2:0c:1e:ef:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5F:E4:5A:30:37:99:CD:64:40:1B:9E:2C:37:BF:0A:6F:95:AA:F7
X509v3 Authority Key Identifier:
keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f8:72:62:ce:eb:89:57:71:a6:68:9d:38:c1:eb:ec:2a:f7:
eb:83:f5:5b:30:9c:ca:9d:2e:0e:9c:e0:75:f0:a3:fb:80:74:
1a:cc:d5:36:dc:25:46:f8:cd:fc:4e:06:06:e4:be:2c:ee:54:
27:c1:9e:0c:db:f9:bc:3a:cc:96:b1:73:ef:7a:75:b7:79:d4:
a0:31:fb:da:6b:67:22:07:b0:d5:61:32:f9:d5:c1:a3:32:d3:
8c:6c:08:cf:e1:1d:26:6d:8e:3f:73:81:84:4c:10:80:9c:1c:
52:03:ae:e2:46:21:40:79:06:02:23:59:df:d1:25:31:e9:e0:
18:e2:30:97:40:70:8a:15:3c:c9:8f:e7:11:bb:34:21:7c:d2:
60:d8:65:9e:c9:5c:35:9e:33:50:cb:f4:bb:0f:81:ab:0c:44:
4c:9a:31:ae:7c:98:81:ba:22:db:5d:d2:f4:1c:72:52:73:fb:
8f:de:27:76:01:6d:eb:21:3c:46:52:f9:45:93:01:af:3c:8b:
9c:83:6b:8e:ec:d4:e1:8c:54:1b:d5:06:98:02:58:b4:e1:17:
24:57:aa:8f:04:c5:54:65:1a:51:3e:e1:55:45:e6:9e:e6:6f:
c3:f2:a3:fe:25:eb:76:1d:a2:c1:f3:60:a3:5d:40:d0:c0:96:
5f:84:6a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:33:06 2025 by rpki-client