This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
File:                     8WD77pBHtMM9L6HZ04IBrg0Yw58.mft (raw, json)
Hash identifier:          KN/v/6Qg6AbyinxHvMruCv/hibmEc+t6vvK5LtM+E2I=
Subject key identifier:   EC:D6:9B:E7:09:18:7C:21:F5:FB:69:45:EE:3E:C9:B5:5B:B4:73:01
Authority key identifier: F1:60:FB:EE:90:47:B4:C3:3D:2F:A1:D9:D3:82:01:AE:0D:18:C3:9F
Certificate issuer:       /CN=F361C63DAF/serialNumber=F160FBEE9047B4C33D2FA1D9D38201AE0D18C39F
Certificate serial:       01CD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
Manifest number:          01CC
Signing time:             Mon 08 Dec 2025 04:33:49 +0000
Manifest this update:     Mon 08 Dec 2025 04:33:48 +0000
Manifest next update:     Wed 10 Dec 2025 04:33:48 +0000
Files and hashes:         1: 8WD77pBHtMM9L6HZ04IBrg0Yw58.crl (hash: aYYK7tgM8kK9qpH/ph52H8Ct+jeJWTj+oAEPuqbk8zg=)
                          2: C7ECF7DE74D211EFA2250567762E951A.roa (hash: 2JN5T3Dym/uP+aQB4QDNBNpdJtMGonjqC1jPbmHacMk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361C63DAF, serialNumber=F160FBEE9047B4C33D2FA1D9D38201AE0D18C39F
        Validity
            Not Before: Dec  8 04:33:48 2025 GMT
            Not After : Dec 10 04:33:48 2025 GMT
        Subject: CN=6936552d-11b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c3:48:9d:1b:f8:89:0b:a4:a7:70:b9:f3:b5:
                    15:8b:0c:f1:71:e7:38:7a:17:ef:53:a4:fb:aa:55:
                    74:07:45:44:71:0d:95:66:8d:97:e4:87:e5:6c:f8:
                    05:fd:14:c0:46:c6:94:cd:ff:d6:8b:c1:fc:10:45:
                    4f:02:b7:46:22:e3:4f:2b:1b:98:aa:26:37:cf:94:
                    93:a2:b6:12:f7:1a:e4:b5:fd:53:d6:35:45:47:c5:
                    fc:34:ec:1a:30:40:ee:43:05:e8:e8:64:87:66:f7:
                    9e:95:67:38:ef:8b:69:de:99:cd:8f:81:dc:8b:3b:
                    59:da:b8:07:44:eb:8e:83:3a:43:8a:9b:4e:2b:4d:
                    70:7c:de:93:9d:fc:cf:e7:d2:18:19:38:ed:ea:61:
                    7a:6b:af:b3:16:f4:94:e2:22:c3:f8:ab:fa:59:4f:
                    24:c5:5a:bd:ed:b4:80:49:2e:f7:51:7d:ab:f9:ca:
                    96:f8:91:7e:ca:90:69:fd:6d:a3:d8:bb:2f:27:68:
                    1f:d9:c9:30:94:9f:c2:92:0f:aa:2e:de:97:fc:90:
                    89:03:03:1f:da:e4:11:9c:10:43:c6:0b:ab:6a:55:
                    ab:53:28:66:c1:a1:ca:bf:ed:c8:23:e4:1f:b4:e5:
                    dd:ff:75:fb:b2:a5:e0:af:25:55:d0:a0:5d:b2:f3:
                    97:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D6:9B:E7:09:18:7C:21:F5:FB:69:45:EE:3E:C9:B5:5B:B4:73:01
            X509v3 Authority Key Identifier:
                keyid:F1:60:FB:EE:90:47:B4:C3:3D:2F:A1:D9:D3:82:01:AE:0D:18:C3:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:2d:56:ed:9c:03:c8:0a:5b:48:76:62:59:e7:c0:ee:74:07:
         61:bb:19:40:a7:2a:6d:cc:3f:2b:e9:da:6f:66:47:51:f7:3c:
         84:b3:12:4f:67:52:d1:d9:99:51:f7:20:41:c3:f1:fa:e1:8e:
         77:d2:35:5c:a8:3a:e6:9e:e2:b9:e4:44:72:f4:1e:8d:3e:7f:
         31:85:53:df:4e:54:af:d1:32:12:5a:30:25:f7:76:ab:03:37:
         af:4c:98:41:41:89:98:50:02:ac:fb:6f:be:e7:51:95:80:f6:
         99:86:bf:ec:59:85:d1:95:b0:e9:1f:95:39:d2:01:ac:5f:12:
         ad:15:0f:3d:df:e7:f8:dd:aa:0b:4a:48:cb:76:86:87:a3:52:
         54:1b:07:9a:15:4f:e0:01:99:a5:41:f9:13:8a:47:6e:e1:be:
         f3:0b:57:40:9b:a6:28:aa:28:ce:d1:11:69:2b:3a:1b:c3:a1:
         d6:52:42:8e:a9:9f:63:71:c8:53:48:5e:48:cd:8a:45:b0:55:
         48:1b:54:ef:93:76:68:96:21:99:37:b9:b1:26:f8:05:6c:f9:
         05:a2:6e:04:a9:11:01:38:08:29:2c:0c:22:79:7e:22:ce:18:
         7e:5b:ea:81:38:b6:86:77:9e:5b:1a:96:eb:70:4d:c2:dd:d1:
         0c:7d:fd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:27:30 2025 by rpki-client