Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File: bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier: 5qm+ynODTO90+VEhrsb63CZnIF1nAyzjg9KLxfHajzI=
Subject key identifier: DD:A0:74:E2:4D:85:88:9B:8A:AB:BD:77:32:9A:2B:62:5A:BB:F8:B5
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer: /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial: 0E82
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number: 0E6F
Signing time: Sun 27 Apr 2025 00:15:26 +0000
Manifest this update: Sun 27 Apr 2025 00:15:20 +0000
Manifest next update: Tue 29 Apr 2025 00:15:20 +0000
Files and hashes: 1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: fTGGtzVVvHCMqgo5c/BDRJAqxF2q55F6GmBFhsiAw0Q=)
2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: rv1kEJuZHu+DX0DTMEOnscLsCZlcmBJ81z2u+ACteHw=)
3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: fI1p3DHd6xCPdYa8vbre+aWndGfIHvfHIzw56wOpGcU=)
4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: 7wnmK4TUsAQFB4aTf61zo6E0Mz2KJ5b/rgxYOI5V3nQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:15:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3714 (0xe82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Validity
Not Before: Apr 27 00:15:20 2025 GMT
Not After : Apr 29 00:15:20 2025 GMT
Subject: CN=680d7718-e254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:7b:04:32:22:d0:90:8a:a7:89:ab:79:11:
52:41:3b:98:02:f3:4f:4b:e4:81:c6:e0:58:d7:ff:
2e:41:00:f3:05:b5:f7:8b:8b:6a:7f:cb:0c:96:7e:
f4:ad:c6:af:bb:01:3c:da:ed:24:9e:20:34:a2:36:
e2:15:52:5f:35:f3:fe:5e:83:52:1c:6f:a4:cf:1e:
ab:6f:18:e6:c3:0b:b0:60:63:07:4b:b4:c4:0f:8f:
04:78:3e:c9:f4:dc:56:b1:41:e0:5d:8d:c5:ea:ca:
4b:ec:86:32:3a:f4:25:4d:fe:25:3c:f6:dd:8a:47:
28:99:89:63:e2:64:e6:66:65:c8:48:46:ec:f1:bd:
98:96:e4:fd:fb:75:7c:ca:88:aa:3f:2b:6d:35:5b:
ca:e6:18:ee:de:6c:2b:5d:e6:7d:39:e3:72:05:f4:
13:84:c4:f9:d8:cd:f0:c4:3a:f7:ca:53:42:5d:3b:
7e:d5:b0:6c:3a:cf:70:ed:14:cd:88:6a:e6:3a:6f:
d2:13:48:09:3d:c7:12:ca:c5:ac:97:8b:42:f8:f5:
db:fb:35:24:60:c6:b8:4b:51:f1:c6:67:5c:90:db:
dd:7a:eb:18:b6:de:39:7a:6b:32:6d:1d:89:d4:97:
1f:e1:df:32:d9:17:99:8f:1f:c3:0f:06:8d:1b:56:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A0:74:E2:4D:85:88:9B:8A:AB:BD:77:32:9A:2B:62:5A:BB:F8:B5
X509v3 Authority Key Identifier:
keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:fd:98:c4:ea:32:d3:37:a3:43:34:20:f2:eb:2f:46:d1:5f:
89:ce:42:bb:ff:b4:62:a6:b4:60:5a:9f:9a:20:89:95:74:00:
5b:29:46:42:a1:92:f0:e0:f6:b6:66:1d:72:d8:4d:a0:7f:0f:
ff:69:06:5c:d3:81:74:f1:6c:95:64:af:f1:8a:9e:e3:0f:ca:
ef:e6:af:88:d0:15:12:c9:57:0a:12:46:a6:f3:fd:97:4e:ab:
7f:3c:68:a9:52:99:18:dc:cc:c6:ef:da:87:ec:74:32:58:3c:
25:ef:b0:52:d9:91:6a:5a:12:da:08:a3:fa:7e:73:e1:1f:c9:
bf:e2:42:12:c7:66:46:93:81:84:e3:b9:0a:a7:06:c9:50:e4:
71:40:bb:8b:89:d8:b3:1e:fa:70:84:b7:75:67:15:71:09:86:
8b:b6:f4:57:78:51:f7:05:59:f6:05:63:c9:79:c7:94:47:b7:
3a:80:5e:c6:97:10:f6:73:02:b8:ce:a5:44:46:9a:d0:10:7c:
a9:54:45:5a:e8:25:f4:52:9c:4b:46:4d:10:84:b3:cc:72:bf:
dd:e7:6f:13:b3:8d:1d:0a:6e:7e:fe:8c:71:58:5a:12:c2:d6:
38:8e:81:b0:4f:56:41:67:a8:7e:3d:de:24:c1:04:ca:c6:85:
24:7e:5b:c0
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgICDoIwDQYJKoZIhvcNAQELBQAwTDEXMBUGA1UEAxMOQVBO
SUNUT0FGUklOSUMxMTAvBgNVBAUTKDZGMUExMDNFMTQyN0ZGMDM0ODNBQkZEOUUz
NERBQ0JFMTUyNEZGOEIwHhcNMjUwNDI3MDAxNTIwWhcNMjUwNDI5MDAxNTIwWjAY
MRYwFAYDVQQDEw02ODBkNzcxOC1lMjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwXJ7BDIi0JCKp4mreRFSQTuYAvNPS+SBxuBY1/8uQQDzBbX3i4tq
f8sMln70rcavuwE82u0kniA0ojbiFVJfNfP+XoNSHG+kzx6rbxjmwwuwYGMHS7TE
D48EeD7J9NxWsUHgXY3F6spL7IYyOvQlTf4lPPbdikcomYlj4mTmZmXISEbs8b2Y
luT9+3V8yoiqPyttNVvK5hju3mwrXeZ9OeNyBfQThMT52M3wxDr3ylNCXTt+1bBs
Os9w7RTNiGrmOm/SE0gJPccSysWsl4tC+PXb+zUkYMa4S1HxxmdckNvdeusYtt45
emsybR2J1Jcf4d8y2ReZjx/DDwaNG1ZaiQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FN2gdOJNhYibiqu9dzKaK2Jau/i1MB8GA1UdIwQYMBaAFG8aED4UJ/8DSDq/2eNN
rL4VJP+LMA4GA1UdDwEB/wQEAwIHgDBaBgNVHR8EUzBRME+gTaBLhklyc3luYzov
L3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcG5pYy9ieG9RUGhRbl93TklP
cl9aNDAyc3ZoVWtfNHMuY3JsMHUGCCsGAQUFBwEBBGkwZzBlBggrBgEFBQcwAoZZ
cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvMDRFOEIwRDgwRjRE
MTFFMEI2NTdEODkzMTM2N0FFN0QvYXBuaWMtdG8tYWZyaW5pYy5jZXIwTwYDVR0g
AQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2ku
YWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwgZ4GCCsGAQUFBwELBIGRMIGOMFUG
CCsGAQUFBzALhklyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9h
cG5pYy9ieG9RUGhRbl93TklPcl9aNDAyc3ZoVWtfNHMubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBALf9mMTqMtM3o0M0IPLrL0bRX4nOQrv/
tGKmtGBan5ogiZV0AFspRkKhkvDg9rZmHXLYTaB/D/9pBlzTgXTxbJVkr/GKnuMP
yu/mr4jQFRLJVwoSRqbz/ZdOq388aKlSmRjczMbv2ofsdDJYPCXvsFLZkWpaEtoI
o/p+c+Efyb/iQhLHZkaTgYTjuQqnBslQ5HFAu4uJ2LMe+nCEt3VnFXEJhou29Fd4
UfcFWfYFY8l5x5RHtzqAXsaXEPZzArjOpURGmtAQfKlURVroJfRSnEtGTRCEs8xy
v93nbxOzjR0Kbn7+jHFYWhLC1jiOgbBPVkFnqH493iTBBMrGhSR+W8A=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:38 2025 by rpki-client on console.sobornost.net