Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File: bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier: tijUrs1TZHlDctEoGeRu/N+l7ukvUF02CtZngjo4D84=
Subject key identifier: 13:62:F8:12:04:BD:61:8B:AE:47:E2:FB:84:50:BD:7B:E9:E8:0C:23
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer: /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial: 0FBE
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number: 0FA8
Signing time: Sun 01 Mar 2026 00:15:15 +0000
Manifest this update: Sun 01 Mar 2026 00:15:12 +0000
Manifest next update: Tue 03 Mar 2026 00:15:12 +0000
Files and hashes: 1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: RUb9M0jwLZ6fTFr1S/QubIvdY+T4SooFOAEcLfcKtIQ=)
2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: WXieplFZITfSrjqjGpIkNzx7vsKf/31zVrHjFuUH5j4=)
3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: 6KxNllccFl5UCK+IGZyhCatSKHDy54CHiCvi7y8S9Wo=)
4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: F4i+2pecUhgcF+gygFFlyaDemPqaRSU2tPuKYUBXKKQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4030 (0xfbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Validity
Not Before: Mar 1 00:15:12 2026 GMT
Not After : Mar 3 00:15:12 2026 GMT
Subject: CN=69a38510-ff1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a0:17:4d:98:5b:6a:95:d5:3b:a7:5a:74:32:
9a:72:b2:72:ac:6b:16:d0:d7:24:14:dc:cb:5a:a7:
9a:0d:60:bf:04:c6:68:86:5a:9b:25:36:6c:11:28:
33:7b:0f:13:28:55:e9:0a:64:ec:94:19:19:6a:18:
12:f5:2d:b1:8d:dd:7d:82:c7:54:27:c3:e8:82:ad:
08:34:a6:82:e3:0c:25:0d:07:9a:86:74:e6:66:92:
20:77:d8:a7:f7:fa:23:21:17:db:b8:ff:fd:ec:6f:
94:79:9b:03:4e:33:75:6d:c1:cf:7a:c7:82:9b:ba:
24:f1:b2:2d:89:23:e8:b0:27:d7:a2:da:5e:00:e7:
28:d4:51:58:b7:93:cd:51:90:7d:a4:2a:6e:37:7d:
1d:a1:bb:61:47:a5:ad:c7:95:13:e7:ff:ad:6b:a3:
a0:24:5c:c7:9f:55:11:4e:95:75:96:1b:49:1f:03:
4a:35:d6:e5:46:c0:cd:1a:d7:53:74:f6:5d:12:49:
8f:92:51:ac:13:53:08:72:b3:28:2b:d2:ea:aa:d6:
6e:51:d1:1f:9a:1c:fa:e3:8d:78:31:21:27:45:0e:
0c:2e:c9:e4:33:30:28:f2:3a:3c:3b:05:d5:46:b1:
c7:e8:18:f1:f9:60:44:96:ce:6b:9c:b8:b7:09:8f:
01:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:62:F8:12:04:BD:61:8B:AE:47:E2:FB:84:50:BD:7B:E9:E8:0C:23
X509v3 Authority Key Identifier:
keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:91:e8:ce:6f:06:a9:60:55:72:8f:24:e4:2c:45:53:ec:78:
8d:c4:03:bd:63:00:ef:32:07:10:69:9f:3b:38:e5:bc:8f:b2:
83:d8:46:48:1f:e7:ab:3e:44:bf:61:b5:dc:a9:1e:90:ab:eb:
42:23:a9:9e:c1:d3:67:d1:ae:e1:ec:f8:ed:ce:e6:28:ce:ea:
99:97:54:ee:28:b0:48:89:04:37:8c:e7:9e:00:80:27:14:5d:
2d:ba:d9:5d:86:88:c0:c7:fe:da:08:f1:f1:ef:9d:2c:e5:d0:
00:0e:95:dd:08:ae:c7:f3:cc:10:80:58:77:92:ce:28:fa:8b:
51:e4:5d:61:19:3b:db:68:8c:22:99:ee:49:b3:28:06:67:2d:
31:2f:e8:a5:f3:ad:7e:38:70:66:5c:52:a9:51:06:da:ea:c8:
58:fc:ac:be:fc:9c:67:87:3a:fe:c6:22:ee:f5:d6:9f:23:42:
20:7c:76:9d:7c:f2:a0:bf:03:ee:70:fa:78:87:b0:6e:24:3e:
57:96:de:ef:8e:d9:29:6c:6b:aa:96:60:df:f1:27:13:c1:40:
7f:57:e2:d8:8c:d2:51:8c:79:0d:e7:f3:2f:60:c0:fc:9e:85:
8c:83:da:00:cf:12:e8:2e:75:19:57:0e:00:f2:b5:e5:17:1c:
d7:90:c4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:06 2026 by rpki-client