Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File: bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier: Bb+VAA2Wl6MgPmaacOOgnh/Q2V+T9IJTiuYXbIvWlVA=
Subject key identifier: F1:DB:76:1B:E6:29:8A:AE:52:45:E4:36:43:61:A0:AB:73:9E:A1:F8
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer: /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial: 0EA8
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number: 0E95
Signing time: Wed 04 Jun 2025 00:15:29 +0000
Manifest this update: Wed 04 Jun 2025 00:15:21 +0000
Manifest next update: Fri 06 Jun 2025 00:15:21 +0000
Files and hashes: 1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: bKXS28xGfXi8ablXdVLkn3hmiiKj8mqGpRytV9zfJwM=)
2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: rv1kEJuZHu+DX0DTMEOnscLsCZlcmBJ81z2u+ACteHw=)
3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: fI1p3DHd6xCPdYa8vbre+aWndGfIHvfHIzw56wOpGcU=)
4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: 7wnmK4TUsAQFB4aTf61zo6E0Mz2KJ5b/rgxYOI5V3nQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3752 (0xea8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Validity
Not Before: Jun 4 00:15:21 2025 GMT
Not After : Jun 6 00:15:21 2025 GMT
Subject: CN=683f901a-ab9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:8d:a7:bd:d8:97:91:53:2c:f0:53:1b:d0:
ef:14:43:5f:b3:9e:51:f1:be:84:c8:db:a0:ef:e0:
d1:0b:88:28:b5:8e:91:ef:43:a0:e0:c7:93:45:14:
39:2e:26:51:0d:96:15:a7:09:15:ae:6d:21:0f:30:
1e:01:e0:b8:c0:9f:05:46:b3:52:32:d0:a9:ed:ef:
00:f3:4a:1d:5b:30:f5:48:ce:d8:f6:7c:a7:80:c0:
f1:7f:a8:03:0b:e5:9c:0d:86:69:d6:b5:ab:61:ea:
dc:14:58:09:dd:fe:3a:36:ea:79:55:13:27:be:71:
aa:6c:09:04:ff:e0:4a:63:1b:6b:4a:79:04:ce:92:
40:1d:07:34:e7:28:56:9e:94:6e:88:95:50:df:2e:
80:38:e2:58:d5:fc:a5:f4:28:f2:fd:c9:fb:54:4f:
81:aa:51:36:96:48:b6:24:82:96:7f:b6:35:f1:58:
a3:2c:bc:b0:ff:80:03:d2:9f:c6:2e:6e:e7:3c:98:
00:77:ac:df:cc:e9:e3:48:f3:3c:6b:ed:11:53:ec:
42:95:2d:eb:55:ae:63:24:39:5d:3d:16:c8:3b:51:
1a:88:81:18:60:8a:78:ee:80:b7:4a:27:5c:a6:24:
68:bd:a7:c1:68:0f:48:e9:ea:de:17:28:7e:11:a2:
39:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DB:76:1B:E6:29:8A:AE:52:45:E4:36:43:61:A0:AB:73:9E:A1:F8
X509v3 Authority Key Identifier:
keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:55:4f:89:2d:64:be:75:08:1c:91:ae:c7:38:79:e1:3c:ba:
c6:91:59:e2:ac:07:ef:1a:44:02:a5:ee:a2:cc:31:fc:c6:32:
b1:7b:3d:18:99:eb:22:23:00:ad:53:a7:4e:2a:3c:dd:41:2f:
8a:b1:88:40:6a:3f:cd:77:4e:2a:91:8b:e7:1f:21:5a:53:0c:
01:fb:4e:17:cf:bc:15:fc:9b:49:9e:ec:5d:84:e9:6a:2d:9f:
15:c8:1d:74:98:f4:88:42:55:aa:55:cf:5b:d6:3a:ae:e4:d2:
34:bb:63:94:b9:ac:0f:d4:5d:0c:c9:fe:20:f3:ce:7f:69:00:
b4:0f:b4:ef:5a:2a:e1:9f:8e:0b:74:18:88:49:70:ae:ef:a4:
1e:03:e7:d8:f0:50:2f:c1:e9:f1:a5:e0:64:46:87:0f:b6:11:
36:8f:4a:47:da:0e:0e:ba:30:d2:a5:4b:bf:94:d6:72:f6:c7:
7b:b8:8d:8b:fe:93:87:bb:7d:10:6f:bb:37:bd:5b:8b:9f:c9:
1d:a4:f3:4d:63:ed:80:b3:97:6e:f8:92:6e:9e:83:2e:9b:87:
36:5d:11:e5:d9:76:72:50:b0:c9:22:f4:73:3f:d4:70:84:19:
15:d9:df:e6:81:52:39:62:74:a6:8d:5f:a8:d0:a9:8d:44:2d:
8f:58:7f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:12:03 2025 by rpki-client