This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
File:                     yDmJhjJn0TZLxz9143zW0rf-yYc.mft (raw, json)
Hash identifier:          XTEML1p4RPtVD+BNYVAsZCOoSvGHlXUUhEISSBeQYJ8=
Subject key identifier:   D7:A1:BE:AE:63:4C:55:BE:BB:D0:D5:0B:E1:93:62:80:53:E4:F6:20
Authority key identifier: C8:39:89:86:32:67:D1:36:4B:C7:3F:75:E3:7C:D6:D2:B7:FE:C9:87
Certificate issuer:       /CN=F361F0D8AF/serialNumber=C83989863267D1364BC73F75E37CD6D2B7FEC987
Certificate serial:       46
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yDmJhjJn0TZLxz9143zW0rf-yYc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
Manifest number:          44
Signing time:             Mon 08 Dec 2025 05:16:55 +0000
Manifest this update:     Mon 08 Dec 2025 05:16:54 +0000
Manifest next update:     Wed 10 Dec 2025 05:16:54 +0000
Files and hashes:         1: yDmJhjJn0TZLxz9143zW0rf-yYc.crl (hash: PMeb3OJpfVdaud+o+yapSQrIU21DNaDVIl2jhbBd2os=)
                          2: 8FDC3D26A3BD11F0B640C8E9DAE4EC9C.roa (hash: z+EMCGVRvbS1M60Ygkphk04UU0Xnx+NfxQ7EP0ilmi0=)
                          3: 5598B34AA8D311F09951D4DFDAE4EC9C.roa (hash: ekkmLGUII3HkbjQJ5DqbrnE5zNaEvepsyMeJezGqRJY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yDmJhjJn0TZLxz9143zW0rf-yYc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F0D8AF, serialNumber=C83989863267D1364BC73F75E37CD6D2B7FEC987
        Validity
            Not Before: Dec  8 05:16:54 2025 GMT
            Not After : Dec 10 05:16:54 2025 GMT
        Subject: CN=69365f47-1f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:f3:3e:4c:98:fc:2b:a4:70:fd:d0:c5:94:
                    ca:e8:cf:fb:3d:41:42:8c:37:1f:be:0f:2b:29:1c:
                    73:60:9d:87:2f:39:bb:30:5b:04:8a:fb:80:91:dd:
                    28:35:f7:6c:7d:f2:91:75:70:c5:78:36:ff:4c:49:
                    06:b4:91:bc:df:73:4a:91:2c:0a:a2:4d:2a:f3:e2:
                    4b:7b:b3:d7:06:09:44:22:9c:da:79:a3:4e:71:d1:
                    56:48:49:23:62:76:90:2b:a1:48:1a:0e:b9:99:dc:
                    f8:b9:0f:62:82:f4:e3:80:08:6f:52:b2:c8:41:22:
                    ec:79:8b:ed:3a:25:4e:02:67:46:1c:b5:3e:5e:a4:
                    3e:49:a0:82:0c:ff:09:21:fa:58:ee:4b:d2:6b:1b:
                    83:32:73:ee:9b:13:c2:07:dc:63:c7:78:d5:3a:8d:
                    76:5a:e6:5a:cb:5a:59:cb:25:ea:ea:e3:56:07:e0:
                    56:ae:9d:da:41:b6:2a:43:ea:06:7e:b2:d7:78:5b:
                    b8:d3:bd:64:56:ed:e5:c9:bd:1f:bc:a4:6a:50:37:
                    ed:aa:8d:68:eb:b2:46:86:e6:c5:d5:67:8c:59:ad:
                    75:2b:46:41:fc:f4:e5:f1:ad:dc:39:ba:6a:0b:33:
                    c8:2f:82:69:9a:e0:53:d9:8b:68:68:67:b7:73:7d:
                    f4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A1:BE:AE:63:4C:55:BE:BB:D0:D5:0B:E1:93:62:80:53:E4:F6:20
            X509v3 Authority Key Identifier:
                keyid:C8:39:89:86:32:67:D1:36:4B:C7:3F:75:E3:7C:D6:D2:B7:FE:C9:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yDmJhjJn0TZLxz9143zW0rf-yYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:ac:c7:04:d5:65:c7:61:18:c0:b0:34:ba:ab:11:c3:c4:38:
         42:ef:73:bd:9b:a6:0e:81:2b:96:12:db:1f:d7:d3:7e:76:50:
         be:00:1c:61:2a:38:a0:67:c8:18:a7:19:c4:57:2d:ac:3c:c8:
         d1:21:96:d1:52:91:a4:01:87:4e:f1:2c:5a:f3:55:68:42:46:
         52:8b:dd:9c:5a:e8:fa:3d:50:30:f7:b2:47:e3:af:9a:cc:8b:
         6b:b0:90:c0:b5:f3:82:c6:e9:17:e4:fc:5e:37:e1:30:d7:eb:
         ee:e5:0a:d5:bf:b3:85:99:b8:37:e9:0a:b3:b3:f1:89:39:59:
         ac:6a:07:86:89:9e:eb:94:f0:4e:a0:d3:44:63:21:ef:b1:1d:
         c1:a1:8e:70:c6:84:5d:d0:a9:c5:cb:10:df:83:0f:b7:3a:2a:
         83:ab:b3:c2:ab:30:9f:a5:62:75:82:63:73:7e:bb:b4:a4:a5:
         5b:a9:2b:3f:1f:45:dc:bc:1d:7b:2d:00:58:5b:f1:3e:55:f9:
         7d:bc:af:25:6d:e2:14:74:95:14:11:93:ac:cc:a9:fd:96:f3:
         7d:75:3f:7a:5d:32:3f:95:fe:5f:69:83:63:3d:c8:95:a7:d3:
         f7:b8:3b:f4:25:a8:c4:10:c5:8f:78:03:eb:44:f8:a3:8d:30:
         9b:4e:ee:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:04:46 2025 by rpki-client