This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
File:                     OCSsXuAEOe7aIaGhAQnov3bk-rg.mft (raw, json)
Hash identifier:          Zc+uc+k8hPKszGloNIAbZ1sKlU3M9Yk1O5XKbLkaTEs=
Subject key identifier:   E6:68:F0:B7:42:37:F5:17:38:E4:93:D3:DD:90:8F:46:78:BC:0E:57
Authority key identifier: 38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Certificate issuer:       /CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Certificate serial:       06A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
Manifest number:          069F
Signing time:             Mon 08 Dec 2025 02:13:15 +0000
Manifest this update:     Mon 08 Dec 2025 02:13:15 +0000
Manifest next update:     Wed 10 Dec 2025 02:13:15 +0000
Files and hashes:         1: OCSsXuAEOe7aIaGhAQnov3bk-rg.crl (hash: RHxsOGg2hjXyP34vFUbvOAsAx40X8jjN5+TXzPTLHTQ=)
                          2: 5006E70E5E3611F0893678E9DAE4EC9C.roa (hash: +o+9Z0JPTJwXWASmZEn5sX4JUlRX+byFenFDA6I4P5g=)
                          3: 26D0B8E25E3611F0887D5CE9DAE4EC9C.roa (hash: 2tu3Ld1qF49GVl2mB5JFSgh0SJACUdEbR9uP9vjP6Xk=)
                          4: A42FDE0E5E3011F0B6CA0CC4DAE4EC9C.roa (hash: Ac2nu6upq7t1gl0xBIa3qrh3jUY/VotzPxg8MIknNhA=)
                          5: F426C5DA5E3511F08C38F3E8DAE4EC9C.roa (hash: 1sDWYH3f/HWstXqg5Qsn8hl+mqkD2R6cYH7ovhfNSnY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1701 (0x6a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361ED63AF, serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
        Validity
            Not Before: Dec  8 02:13:15 2025 GMT
            Not After : Dec 10 02:13:15 2025 GMT
        Subject: CN=6936343b-56ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:27:6f:6f:6d:af:b7:1e:45:3d:66:73:a8:f5:
                    46:ec:93:19:ea:ff:a7:28:c8:4f:23:8a:ec:1d:83:
                    30:04:57:cc:fc:ec:bd:b4:bb:5b:5d:4c:30:69:e4:
                    75:ed:35:b8:fe:15:f0:e1:f5:64:e8:86:16:03:42:
                    31:dc:be:bb:e4:5b:da:8d:8e:d9:20:cc:bc:b9:e8:
                    54:4b:7c:ba:3b:11:14:c1:ca:c5:36:cd:79:c5:85:
                    c9:d3:f9:b7:07:0d:21:29:a7:f3:d4:82:19:fa:67:
                    86:5b:1a:74:f6:76:41:50:f7:16:e8:8a:0f:62:30:
                    c8:37:6f:75:2c:97:97:86:c6:5d:e0:48:f0:e5:7d:
                    1f:59:41:63:23:45:15:54:df:d6:80:80:1a:3f:31:
                    aa:60:d3:03:68:e9:e8:5b:74:e9:f6:c9:53:3c:8b:
                    6a:f6:e3:da:6b:ec:95:8d:28:c6:e4:3d:0a:e7:ac:
                    3a:e6:18:62:d2:ee:17:99:c7:34:0b:b2:5e:52:8d:
                    9c:d6:97:1c:12:b9:16:ad:98:c5:b5:5e:98:d4:01:
                    49:72:cf:71:42:fd:5f:4a:fb:cc:b8:ef:0f:ae:db:
                    b6:87:d8:41:31:de:bd:18:d6:7b:48:07:20:bd:a1:
                    0a:6a:ab:d1:87:32:e9:12:46:9f:a4:df:1e:26:30:
                    ce:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:68:F0:B7:42:37:F5:17:38:E4:93:D3:DD:90:8F:46:78:BC:0E:57
            X509v3 Authority Key Identifier:
                keyid:38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:38:5f:85:7c:13:2b:da:89:90:09:de:f1:79:22:f3:73:c8:
         33:45:67:7c:5c:33:cd:9a:d9:c0:ae:c2:d2:ed:a1:f1:4a:d6:
         bf:a9:73:54:e4:54:11:c8:aa:84:46:19:fc:f8:4a:41:d1:c5:
         35:fe:2a:a4:03:c9:69:6c:f0:53:ba:61:71:8f:45:52:7d:8b:
         0b:6a:40:ff:0f:18:7c:7a:11:7e:82:c5:e5:d1:1c:60:d6:6e:
         af:d7:44:ab:0f:0d:80:15:3b:5d:80:18:bd:fa:e6:70:50:d1:
         27:58:31:23:72:15:64:6b:e5:37:69:72:c2:9c:6c:37:26:39:
         01:48:03:ed:ae:0e:43:c7:86:47:ff:6b:fd:3a:28:4a:de:a6:
         59:57:60:c6:38:25:c0:37:da:1c:f4:e5:9e:d8:1a:8e:2e:43:
         17:65:29:5b:ad:17:16:bd:86:13:bc:c2:1c:67:ec:f1:7e:65:
         bd:3b:f6:5f:a9:0c:8b:38:1a:0a:ac:6b:85:17:69:0a:a3:35:
         f1:83:bf:14:8c:61:1a:11:bc:04:95:24:21:4a:2a:01:07:43:
         4c:b5:d2:07:13:fd:5b:a9:17:29:07:ef:6b:ac:5f:95:c2:b3:
         2f:ec:db:f6:d3:43:3c:cd:20:a8:16:93:34:7b:51:e1:61:72:
         bb:46:0e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:18:50 2025 by rpki-client