Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File: bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier: t+BAg96v+uWqaq7oc+w9DzbcGfKo8xr4T9iUyxjrHRI=
Subject key identifier: 0E:98:72:25:9B:D1:38:3A:24:FB:D3:D5:97:FB:F0:A1:32:24:D6:80
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer: /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial: 0DDC
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number: 0DCC
Signing time: Thu 21 Nov 2024 00:15:26 +0000
Manifest this update: Thu 21 Nov 2024 00:15:19 +0000
Manifest next update: Sat 23 Nov 2024 00:15:19 +0000
Files and hashes: 1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: fR6o/vOU1MOR2P7aMWDNKdOzSzFvgydtkhUTFNvYupo=)
2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: y6mUhgbNscDF7VXjACetrZHLyKF7UflL8t5I2F09URk=)
3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: /X6T+kqg7KrHZIyH2e1vZ0ZAZ0l1WKBy7uWNh/rLbUM=)
4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: P3NsfXdO5vrMHdYhIy8uvRdjymdgUbzwN5r3J2L3w5k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:15:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3548 (0xddc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Validity
Not Before: Nov 21 00:15:19 2024 GMT
Not After : Nov 23 00:15:19 2024 GMT
Subject: CN=673e7b97-be51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ac:9d:7c:d8:11:d2:af:73:e1:55:b4:32:06:
72:74:bb:a9:e0:16:98:dc:4e:d5:b1:83:91:90:88:
19:b4:ff:8d:a3:42:87:35:00:b9:0e:4e:a0:96:d5:
80:94:11:c9:2d:0a:0b:1d:ce:76:17:29:91:3f:f3:
41:74:47:ac:9d:a2:85:4e:35:00:fb:b4:c4:9b:35:
df:50:1d:75:c1:22:c8:2d:96:ca:18:b8:5d:2e:4f:
13:8a:bc:71:c5:ea:e0:bd:4d:bc:21:96:17:88:f8:
12:75:65:c5:d5:ab:ec:23:75:30:2b:95:92:fa:7b:
72:4f:ac:db:3a:80:0b:53:a1:8c:2c:02:eb:a4:b4:
23:a9:34:ef:81:b7:52:47:97:1a:ff:dd:84:b2:a2:
81:4e:9e:66:68:78:48:e0:19:c8:92:6b:54:1d:fc:
7a:4c:6e:86:9e:a5:5c:26:13:a5:43:ed:a9:51:20:
08:81:4b:fd:4f:01:b7:3d:b7:7b:42:7c:78:27:07:
77:79:61:7f:f3:b5:f1:fa:27:cc:0a:af:a7:81:0f:
83:af:d6:0e:20:05:e1:6a:3e:5d:77:82:82:08:38:
0b:6a:f6:fa:24:ef:f2:7a:da:f3:88:a1:4a:f9:65:
19:7b:9b:d4:e1:37:a1:60:00:4d:3b:b4:93:af:1c:
4d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:98:72:25:9B:D1:38:3A:24:FB:D3:D5:97:FB:F0:A1:32:24:D6:80
X509v3 Authority Key Identifier:
keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1b:ac:47:d8:b5:4f:17:99:d5:22:87:54:8c:ae:0f:8c:75:
f4:4d:5e:c0:51:32:7f:45:12:71:94:de:ac:c5:9f:12:c6:be:
6f:75:44:b8:32:6c:da:82:a5:97:da:2d:07:bb:f0:71:4c:72:
fb:0e:af:35:40:8d:92:98:12:80:70:09:71:33:9a:43:e2:9f:
be:d7:db:8c:68:7a:33:84:6a:8c:a1:af:e5:4e:78:c9:b3:01:
fc:82:41:6b:64:a1:2c:78:93:71:f1:20:3c:55:dd:95:09:5b:
b7:04:e4:ea:df:41:85:4b:ca:84:0d:67:0f:2f:45:38:c7:6e:
06:49:04:5b:d0:3d:1a:7d:ba:78:0c:72:11:35:48:7b:66:2b:
92:8e:aa:4c:49:44:10:43:84:1f:fb:5a:be:08:6a:9d:27:12:
87:05:69:b0:ff:07:12:fd:0d:2a:cf:43:9f:1b:ad:ec:c7:7c:
8d:7b:70:c0:fa:c8:f0:47:28:d9:ff:27:ad:76:3d:30:10:a0:
32:e6:41:26:ae:08:62:ae:02:b8:c6:73:bc:8e:50:85:a3:c5:
fd:80:ec:67:2e:71:08:1a:e5:90:87:d8:07:5d:58:04:54:79:
1d:b2:d7:10:d6:a8:59:2e:46:9f:8a:f4:a1:b6:2d:b5:95:6e:
0c:5c:af:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:51 2024 by rpki-client on console-fra.rpki-client.org