Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File: bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier: fLCejtnaCol+ttlAZVlDc3wQnbI/z8j4qofZUyHERWQ=
Subject key identifier: 39:22:C2:C1:05:5A:BF:E9:B6:40:FF:20:D6:92:D1:FC:67:5C:06:EC
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer: /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial: 0E6B
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number: 0E58
Signing time: Fri 04 Apr 2025 00:15:24 +0000
Manifest this update: Fri 04 Apr 2025 00:15:21 +0000
Manifest next update: Sun 06 Apr 2025 00:15:21 +0000
Files and hashes: 1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: fVcs/LkUTrDvsvgpU1JKy7enb+t5r6sqwichKm6/PH4=)
2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: rv1kEJuZHu+DX0DTMEOnscLsCZlcmBJ81z2u+ACteHw=)
3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: fI1p3DHd6xCPdYa8vbre+aWndGfIHvfHIzw56wOpGcU=)
4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: 7wnmK4TUsAQFB4aTf61zo6E0Mz2KJ5b/rgxYOI5V3nQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3691 (0xe6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=APNICTOAFRINIC
Validity
Not Before: Apr 4 00:15:21 2025 GMT
Not After : Apr 6 00:15:21 2025 GMT
Subject: CN=67ef2499-2393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e5:70:df:9d:f5:f8:26:4b:f8:95:02:3d:a8:
1a:1c:60:d7:b6:9c:92:cb:a2:59:df:e9:e4:b7:f1:
40:d8:09:97:fd:07:cb:fd:b1:be:97:cc:16:24:52:
81:60:80:46:74:c1:d5:72:9a:25:cf:cd:f8:4f:a0:
46:50:ef:2c:cf:5e:44:bc:a7:6c:1d:3b:01:ce:22:
af:87:e0:e1:1c:14:21:b1:3e:f0:d4:65:89:55:91:
f7:2f:b8:43:17:c6:bc:6f:b4:86:d0:db:be:80:28:
9c:42:76:e4:61:af:1d:d0:be:42:e6:3d:6f:12:eb:
7b:5e:e4:1a:d7:34:03:98:40:d7:16:a7:59:2f:1f:
d6:6c:11:05:88:93:f8:05:d6:66:8a:82:37:88:5b:
81:07:32:62:c4:fe:34:61:f6:ce:a6:3c:ff:74:4f:
2f:c0:5e:d1:61:c8:be:08:3b:46:c9:10:86:13:57:
ee:58:d3:ab:b1:8b:0b:95:ed:aa:6b:1a:66:cc:1d:
32:bd:1c:95:c7:6d:df:80:91:e2:25:ca:34:e3:7e:
ec:3f:3c:88:83:cb:c8:9e:ba:56:7f:fd:4c:4d:67:
ff:71:a5:2a:52:cf:2a:d6:45:d9:9d:df:55:e5:f9:
83:4f:5c:84:07:01:8c:21:16:18:7c:71:20:fa:55:
60:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:22:C2:C1:05:5A:BF:E9:B6:40:FF:20:D6:92:D1:FC:67:5C:06:EC
X509v3 Authority Key Identifier:
keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c7:36:17:3c:1c:5a:c7:e4:85:c6:ee:54:af:6a:04:39:db:
37:0f:35:27:e5:f7:11:d1:eb:d6:4b:4f:86:7c:45:07:b7:4d:
d7:8f:30:f0:35:c5:63:af:20:2f:06:8a:a7:fa:fe:d9:e6:45:
52:03:1e:a5:8e:a1:29:5b:05:47:e0:ef:61:9a:0b:87:65:85:
02:3a:fc:ba:29:df:f2:74:e9:68:9d:7a:d0:56:3b:ee:84:dc:
b8:79:88:94:5c:7a:06:68:ef:d0:84:42:c8:f9:a5:ba:8c:b3:
05:9b:cf:10:e7:0d:c3:bd:20:ce:de:94:50:b5:99:9b:b0:09:
15:ea:af:a6:9c:80:f5:91:92:f0:85:c0:38:86:62:ee:9b:a3:
25:8d:eb:99:0d:b1:52:c0:85:68:26:1e:a8:2d:b5:4a:08:f8:
60:13:2d:81:55:c9:f4:10:56:08:05:a2:da:7e:11:31:3a:f1:
1c:6f:a1:b4:34:77:9b:5b:0e:8a:14:38:fe:3e:26:e6:13:bf:
1a:f5:7f:11:c6:30:6c:21:98:31:aa:22:99:aa:56:9a:83:52:
18:cf:eb:af:7d:90:36:89:1d:e0:d9:85:1e:d5:41:85:f4:e7:
2b:60:65:5c:d4:57:b6:66:d0:22:81:82:6f:e8:bc:61:fd:e1:
cc:fd:c6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:46 2025 by rpki-client