Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File: bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier: 4Oql8BtmAZq+2oNxWXwjDhlXE9vUc5+C/k/UZ0vxfg0=
Subject key identifier: AB:AB:61:AD:FF:9C:B5:92:2C:42:2F:97:27:8C:DE:B8:88:F0:86:61
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer: /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial: 0EED
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number: 0EDA
Signing time: Tue 12 Aug 2025 00:15:28 +0000
Manifest this update: Tue 12 Aug 2025 00:15:25 +0000
Manifest next update: Thu 14 Aug 2025 00:15:25 +0000
Files and hashes: 1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: TO2+W6gXTyoKC+3gz9RkaXXoujNnqiFxV/Csvv48sQQ=)
2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: rv1kEJuZHu+DX0DTMEOnscLsCZlcmBJ81z2u+ACteHw=)
3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: fI1p3DHd6xCPdYa8vbre+aWndGfIHvfHIzw56wOpGcU=)
4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: 7wnmK4TUsAQFB4aTf61zo6E0Mz2KJ5b/rgxYOI5V3nQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 Aug 2025 00:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3821 (0xeed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Validity
Not Before: Aug 12 00:15:25 2025 GMT
Not After : Aug 14 00:15:25 2025 GMT
Subject: CN=689a879e-1353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c5:79:e7:c6:aa:a3:39:a1:e9:e4:f1:d7:09:
37:20:68:44:a9:fc:ca:08:9c:f1:9b:22:57:41:77:
e2:e8:c7:0c:c3:88:08:a8:13:55:e8:9b:b2:3f:99:
ae:62:4f:72:3e:8e:82:d0:5b:aa:4e:77:96:29:2d:
c9:57:b8:6c:10:41:30:1a:81:65:9b:67:4a:4b:91:
f2:e7:08:64:d0:2a:3b:dd:09:cb:f3:02:f8:58:96:
e8:f9:84:64:85:a1:9b:81:83:23:1b:0b:4e:cc:ad:
a7:ad:e2:68:4c:83:da:b9:6b:ca:01:dd:a6:7a:ac:
aa:08:6c:ee:ac:f0:a0:4f:7b:a0:2b:e3:11:df:c9:
43:fd:81:1f:89:c5:79:52:84:55:b2:80:35:1e:2d:
52:8c:5d:38:80:4b:ff:90:7d:31:36:fd:1c:9f:14:
23:45:2d:d4:bb:b2:07:89:f9:27:93:8d:f1:9a:38:
bd:26:8b:19:44:13:bb:93:51:00:f8:ac:b7:b3:81:
21:73:5a:1f:57:23:43:0b:eb:fe:1d:5a:be:c7:5b:
d1:a1:d1:13:24:3a:3e:a4:f3:fd:29:36:57:f7:2a:
73:a5:83:fc:92:63:af:cc:af:15:e8:02:ca:1f:a2:
be:8b:1f:b6:42:a3:51:4f:f5:6f:a7:2c:61:d0:84:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AB:61:AD:FF:9C:B5:92:2C:42:2F:97:27:8C:DE:B8:88:F0:86:61
X509v3 Authority Key Identifier:
keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:92:f3:be:1b:34:67:89:c2:b5:3f:6d:7b:4e:6f:51:e2:8d:
d9:27:60:8e:4a:5c:86:92:6b:ef:88:99:8b:30:29:4f:b0:67:
e4:0b:f2:f5:a6:c5:67:6e:bf:ec:50:ed:aa:23:f4:1f:31:91:
69:f9:8b:35:28:13:10:51:7f:60:9a:7c:75:01:88:e7:cf:a8:
43:af:62:42:07:27:72:4a:05:79:1a:7a:4a:d2:a2:12:67:e9:
6d:25:42:f1:94:f7:7e:06:db:1e:fc:cb:3b:2b:cf:43:40:6b:
d1:b6:d8:b0:68:79:25:7c:7c:e3:1f:4b:44:4f:dc:e0:19:4e:
39:57:8d:53:75:b9:89:e5:3e:be:45:eb:be:03:17:54:f6:66:
d8:19:c6:cf:36:bb:f9:b2:4e:e4:b1:e4:f1:4d:0c:cb:ab:68:
ff:0b:c4:ab:fc:27:f7:48:2d:75:c1:32:19:1a:0d:6d:09:64:
31:94:a9:92:79:c9:a6:1e:eb:a9:39:33:12:a6:81:8d:60:57:
eb:81:7e:2a:02:a3:f1:da:da:b7:0f:6c:68:c2:b7:8e:b5:12:
5c:b0:04:5f:52:29:0f:d5:ee:ac:b9:2e:1d:c1:8f:65:48:0b:
87:19:fd:0f:c4:da:8b:1f:c0:64:fe:67:4e:e8:13:39:62:35:
c2:87:de:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:40:09 2025 by rpki-client