This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft
File:                     Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft (raw, json)
Hash identifier:          IaP6+6UivDX6ybYsWhLHGu8SWAvNUG5KRTsxArmJoDg=
Subject key identifier:   08:B1:42:58:82:D2:5A:8C:45:66:0C:38:2A:E6:02:01:91:82:BA:35
Authority key identifier: 5F:3D:45:48:D0:49:4C:B3:EB:B6:5F:B0:A7:9F:E0:99:A5:A1:2C:EA
Certificate issuer:       /CN=F362E278AF/serialNumber=5F3D4548D0494CB3EBB65FB0A79FE099A5A12CEA
Certificate serial:       C8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft
Manifest number:          C7
Signing time:             Mon 08 Dec 2025 04:57:37 +0000
Manifest this update:     Mon 08 Dec 2025 04:57:36 +0000
Manifest next update:     Wed 10 Dec 2025 04:57:36 +0000
Files and hashes:         1: Xz1FSNBJTLPrtl-wp5_gmaWhLOo.crl (hash: j/9NHyHkHZADl50wikUuup2ckKKvT4JCIwtxVn1S00Y=)
                          2: 76A1AD86424D11F089D462E9DAE4EC9C.roa (hash: 920Pq5gLXNEK7ec2oQwBasEvZAmSump0pVGWoebeoI4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E278AF, serialNumber=5F3D4548D0494CB3EBB65FB0A79FE099A5A12CEA
        Validity
            Not Before: Dec  8 04:57:36 2025 GMT
            Not After : Dec 10 04:57:36 2025 GMT
        Subject: CN=69365ac1-ada9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:da:fe:d2:98:30:a1:8b:b0:b1:74:d5:84:
                    d4:4f:19:15:f1:45:07:46:15:e7:ff:31:c2:e6:e2:
                    85:b2:c8:44:58:4c:55:c1:7f:ad:1b:46:70:71:a2:
                    4b:10:98:e3:e8:9b:47:83:49:6b:11:01:87:73:d3:
                    1c:d9:3d:2d:76:d5:21:e7:c7:09:48:1f:1b:0e:98:
                    e5:4e:56:99:b7:21:b8:8c:81:df:82:f1:8e:ac:69:
                    7d:d6:05:d9:d0:42:1b:10:c1:fa:a0:15:06:6e:cf:
                    08:e0:71:a6:3e:00:79:a5:65:3d:2d:6c:44:a2:ba:
                    a7:d5:1e:ad:ed:cf:0c:de:10:6a:f2:e4:9e:75:8b:
                    35:7a:dc:bc:05:21:02:7a:75:6e:c0:c9:00:89:14:
                    cb:ff:77:8a:3a:c9:91:9c:0f:6d:77:ec:92:60:33:
                    be:54:95:01:cc:2b:56:9e:66:00:03:54:c2:9f:96:
                    ff:0e:9b:fc:33:28:38:db:58:f5:66:28:34:aa:fe:
                    d0:c4:15:61:31:03:89:ba:d8:79:5f:14:77:b0:be:
                    11:b5:b3:db:33:d7:73:35:36:c7:cd:eb:c5:f9:c0:
                    b2:23:27:dd:ed:67:3b:a6:db:62:4c:0e:74:aa:55:
                    54:2b:45:4a:f0:b8:76:55:29:f4:55:37:37:e9:44:
                    38:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B1:42:58:82:D2:5A:8C:45:66:0C:38:2A:E6:02:01:91:82:BA:35
            X509v3 Authority Key Identifier:
                keyid:5F:3D:45:48:D0:49:4C:B3:EB:B6:5F:B0:A7:9F:E0:99:A5:A1:2C:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ff:ee:4e:e2:77:a5:66:78:ef:7b:d5:14:54:68:4a:b9:da:
         39:53:28:e4:23:27:68:2d:dd:45:41:9d:a5:66:0f:3a:c6:87:
         7a:66:82:87:97:58:e2:3e:9e:5c:d1:1c:4c:bb:14:d3:cd:fb:
         04:a8:05:63:8b:42:8b:b6:3d:c6:c7:37:13:6a:e3:52:7e:3a:
         09:fc:1d:6b:61:e4:02:aa:f1:e4:dd:4c:12:85:e8:b3:ca:42:
         b4:29:08:a2:2c:9a:64:0d:f9:7e:a6:14:d1:e1:65:ee:ee:74:
         76:a0:36:b4:9a:22:62:9f:22:e9:5a:2c:a6:01:9a:f1:ef:d9:
         45:93:3a:b3:4e:f4:2a:fd:67:f6:e1:a5:1b:63:47:e4:84:5e:
         d3:23:52:17:5f:f2:70:d4:3c:2f:d9:93:f1:28:88:f2:ef:bf:
         9b:7f:bf:fc:e7:64:f8:25:7f:3a:c2:b7:02:cb:51:e8:56:51:
         ae:01:cb:c6:54:9d:c5:fd:10:c5:ce:f7:50:17:4a:9a:a5:63:
         31:89:55:6f:6a:22:dd:71:89:59:c4:ac:9f:43:71:a9:1f:d2:
         e6:05:29:ba:cd:d7:c7:8a:c3:2b:47:f4:84:08:96:09:74:fd:
         49:20:cd:ee:04:94:a9:25:09:1a:cb:72:4d:f7:00:96:dd:b9:
         f2:a5:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:20:31 2025 by rpki-client