Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File:                     bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier:          22eztRwWTPvVwZKZu5Nmq8+ea+nel3ZZ0R4EHE1UZ6U=
Subject key identifier:   80:72:E4:E0:44:C3:59:6A:C3:29:13:64:12:51:59:7D:87:AA:9D:4F
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer:       /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial:       0E2C
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number:          0E19
Signing time:             Fri 31 Jan 2025 00:15:25 +0000
Manifest this update:     Fri 31 Jan 2025 00:15:19 +0000
Manifest next update:     Sun 02 Feb 2025 00:15:19 +0000
Files and hashes:         1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: tyBLB4n3sruQO37TADCmlDf/qHZFsuqJBmc6VwtSY7Q=)
                          2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: rv1kEJuZHu+DX0DTMEOnscLsCZlcmBJ81z2u+ACteHw=)
                          3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: fI1p3DHd6xCPdYa8vbre+aWndGfIHvfHIzw56wOpGcU=)
                          4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: 7wnmK4TUsAQFB4aTf61zo6E0Mz2KJ5b/rgxYOI5V3nQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3628 (0xe2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
        Validity
            Not Before: Jan 31 00:15:19 2025 GMT
            Not After : Feb  2 00:15:19 2025 GMT
        Subject: CN=679c1617-06fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:5f:ab:95:5a:81:37:c7:51:d0:57:c2:c6:
                    47:94:f2:ce:3c:a2:ca:f1:d4:8f:bd:9c:6b:96:47:
                    96:a0:34:d0:17:04:46:1f:44:11:3b:b3:63:6a:02:
                    2a:d2:5e:3d:8d:a8:65:91:d2:31:54:0f:64:f3:ec:
                    ba:8a:69:17:5e:fa:c0:29:43:c8:e7:8a:5a:f2:51:
                    d8:b8:db:65:be:7c:11:e4:81:bd:e2:30:d7:a5:ae:
                    1e:be:7f:67:f0:7b:1f:59:3c:ef:4c:b0:58:c1:d8:
                    75:6c:56:f6:00:5f:46:7c:8f:c8:f8:6d:7d:bb:7a:
                    df:99:c1:a7:ec:69:1e:07:4b:0c:7c:f5:3c:2a:fc:
                    47:1a:23:3a:0d:d0:0a:b0:02:0a:5c:fd:66:5c:87:
                    19:54:8f:8f:1d:3d:f4:68:a5:81:d1:16:68:37:90:
                    30:9d:d6:fd:3b:a5:e1:93:85:85:a7:33:de:74:71:
                    9b:d7:6c:03:6e:71:7d:96:b9:10:31:6e:28:7d:af:
                    88:3e:0e:66:17:77:93:f8:a9:78:a4:6d:3d:29:47:
                    81:f0:2f:8c:49:9a:1a:76:f4:06:c9:93:a8:b4:9c:
                    31:20:27:a9:c4:97:dd:8c:80:90:82:bf:d3:eb:00:
                    1f:78:bf:e6:28:d6:b2:3f:62:c1:8a:42:e8:e8:dd:
                    93:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:72:E4:E0:44:C3:59:6A:C3:29:13:64:12:51:59:7D:87:AA:9D:4F
            X509v3 Authority Key Identifier:
                keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b0:3b:4c:15:07:20:61:a7:15:0f:1f:7b:01:9c:4a:d8:e5:
         9a:f5:d1:53:7e:a6:7b:64:cf:ab:df:05:e0:af:01:17:86:e9:
         b1:1d:2a:0e:c3:59:51:f9:5d:dc:97:0c:4b:0b:ab:cd:7e:bf:
         84:88:f7:02:6a:31:8d:4d:f5:ff:d5:0a:2a:eb:ed:52:77:19:
         66:2f:06:b8:74:ab:7c:00:d9:76:86:ed:64:68:80:43:0a:a1:
         8f:65:29:97:49:25:fb:fb:05:d6:d8:35:58:5b:00:1d:1d:35:
         c0:11:c5:40:37:93:22:e9:60:cf:cd:33:32:45:ad:40:2b:9d:
         cd:57:5a:71:2e:e0:d7:5e:97:b1:dd:c5:a5:d1:e9:89:a2:4f:
         e0:bf:06:59:c2:3f:79:55:48:f6:bc:11:30:ed:31:37:5d:c3:
         ed:f9:2c:44:cf:52:6c:96:7e:de:e5:6d:01:fc:f5:83:85:52:
         1e:1a:ae:40:60:ef:c7:55:05:f6:c5:20:9d:ac:cd:b0:80:d8:
         e7:a6:d7:c6:e2:94:aa:e6:24:ce:4e:fd:d1:55:3e:e2:02:ff:
         ef:0d:0e:49:8d:50:ce:ec:90:65:b1:76:af:80:d4:00:08:3d:
         5d:fb:24:22:69:5d:6e:85:7e:ef:54:2f:ce:c5:03:17:37:76:
         1b:70:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:38 2025 by rpki-client