Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File: bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier: UBN8/ZUlvioqPPbDRg/jh8gMlJW67yEO3LdEr7Cxotk=
Subject key identifier: 74:D1:72:C1:0C:71:1C:59:F7:10:5A:0C:0B:15:8A:FA:C1:DC:C8:B0
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer: /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial: 0E85
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number: 0E72
Signing time: Wed 30 Apr 2025 00:15:26 +0000
Manifest this update: Wed 30 Apr 2025 00:15:20 +0000
Manifest next update: Fri 02 May 2025 00:15:20 +0000
Files and hashes: 1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: r/x3KLuBQAyW3E3IrYCLxJTwIafYsMh+/1/C2qHFT8c=)
2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: rv1kEJuZHu+DX0DTMEOnscLsCZlcmBJ81z2u+ACteHw=)
3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: fI1p3DHd6xCPdYa8vbre+aWndGfIHvfHIzw56wOpGcU=)
4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: 7wnmK4TUsAQFB4aTf61zo6E0Mz2KJ5b/rgxYOI5V3nQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 02 May 2025 00:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3717 (0xe85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Validity
Not Before: Apr 30 00:15:20 2025 GMT
Not After : May 2 00:15:20 2025 GMT
Subject: CN=68116b98-b73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fe:ca:15:44:db:29:7b:a9:bb:1a:f2:54:a2:
01:df:33:b4:55:f0:c9:ac:60:c5:bb:e0:d6:64:94:
87:07:64:2e:77:7d:b9:f1:cb:40:76:b9:8c:fd:06:
65:33:fb:ee:21:00:51:54:2e:24:fa:d3:8d:b9:a2:
bc:6e:d6:02:01:35:c3:94:d7:70:fd:24:42:d0:db:
ba:47:5d:a3:f0:a3:d6:35:bd:1d:a5:76:57:6c:41:
27:13:2d:40:bb:f7:ff:1c:95:50:3c:61:10:0d:ff:
71:08:62:a9:58:2d:0f:03:cc:6f:f0:5e:3e:44:b1:
15:4e:e7:77:82:53:8d:26:67:c4:61:15:a7:b1:a0:
23:78:71:11:0d:33:d0:09:a5:86:13:19:69:27:5d:
7b:7d:63:77:75:6e:c5:2c:06:2b:79:0b:e3:20:f9:
b2:f2:96:3a:1c:4f:9d:f2:35:3b:5c:a2:f7:b1:7e:
dc:5d:2c:d4:18:53:cd:8c:5c:57:f3:d1:03:92:9c:
ae:5e:18:a6:44:52:01:b9:f8:a8:00:16:73:75:90:
62:6b:0d:e5:2a:8e:b9:1b:d6:49:4e:35:c4:ae:10:
27:1a:64:03:6d:57:43:72:28:1a:61:8a:2a:1c:4b:
09:f5:8c:1d:2d:f9:55:92:a1:e0:72:3b:c8:d8:92:
28:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D1:72:C1:0C:71:1C:59:F7:10:5A:0C:0B:15:8A:FA:C1:DC:C8:B0
X509v3 Authority Key Identifier:
keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2a:3e:6e:3d:2b:c8:1d:38:b2:5e:6c:7b:48:35:0d:35:ab:
58:30:69:f3:08:41:cf:7c:e4:46:fd:af:b3:af:fe:8b:37:84:
70:25:f7:c1:b9:7a:52:73:ae:da:21:28:5d:b6:84:2a:00:19:
7a:39:b3:1d:7a:79:37:ec:15:f9:8b:ff:63:31:27:dd:03:27:
9d:72:b6:65:f8:82:d0:c6:02:33:c6:d1:fa:13:01:b3:78:df:
67:b6:8e:66:37:02:8e:89:49:2f:fc:b1:49:e1:ba:ab:cb:f6:
b4:5a:7f:7d:07:57:c2:da:dd:7f:48:0e:72:f6:0e:2e:c3:a0:
2b:9b:8b:62:0c:14:ad:da:20:11:7c:1b:63:55:58:94:2a:b9:
99:2e:48:ce:13:1a:60:66:f9:7c:c4:0a:d8:8a:1a:fd:76:38:
b0:87:30:34:ae:be:12:ed:37:de:1e:fb:92:e6:1a:83:9e:f6:
98:ee:3c:5c:8f:69:21:6d:8b:06:bb:2a:80:6f:b0:34:ed:eb:
f3:0e:82:47:da:a3:f3:99:bc:b3:ec:e8:4f:3b:81:f2:89:7e:
38:d2:e3:ba:94:05:c1:b7:a0:f6:03:8b:f3:00:e6:b5:2d:9d:
a0:90:61:e2:cd:11:d7:91:a4:02:e7:14:dc:e3:cf:c5:33:ae:
83:0b:a1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:55:13 2025 by rpki-client