This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
File:                     zjU-BgcibJUeYP1ogM7M-5jSvEg.mft (raw, json)
Hash identifier:          Awb0/mFpQhnbyToqezw0wYWv1eQ24fMp5dCGN6iP0GA=
Subject key identifier:   DC:47:1C:7F:B0:82:73:CE:D5:7A:86:CA:25:4F:BA:B5:7A:A4:2D:20
Authority key identifier: CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48
Certificate issuer:       /CN=F362EFF3AF/serialNumber=CE353E0607226C951E60FD6880CECCFB98D2BC48
Certificate serial:       03CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
Manifest number:          03C8
Signing time:             Mon 08 Dec 2025 03:27:09 +0000
Manifest this update:     Mon 08 Dec 2025 03:27:08 +0000
Manifest next update:     Wed 10 Dec 2025 03:27:08 +0000
Files and hashes:         1: zjU-BgcibJUeYP1ogM7M-5jSvEg.crl (hash: NG+EG2YBFZLOXlhjH3PH9KQpvN7aGFcYjn81p+EC/Yw=)
                          2: 6C2FB170FFA811EDB10BF6814AD9E6FC.roa (hash: lBXXLwdkJTr+JXNn+pD+2aYKlgsMQpQ0R3v3F5qO+ns=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 970 (0x3ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362EFF3AF, serialNumber=CE353E0607226C951E60FD6880CECCFB98D2BC48
        Validity
            Not Before: Dec  8 03:27:08 2025 GMT
            Not After : Dec 10 03:27:08 2025 GMT
        Subject: CN=6936458d-aaa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:61:15:fd:62:d3:f8:3a:c7:a6:d1:6c:37:
                    4a:69:c4:d2:99:ca:2c:4c:e0:a5:31:e9:eb:10:4d:
                    e2:4f:ae:a9:32:18:b6:f8:01:50:bc:48:77:80:34:
                    bc:da:26:df:8a:03:4d:d0:eb:f3:06:56:13:57:ec:
                    ac:57:cc:6d:38:77:c0:ca:e8:88:0c:b6:e3:2c:ae:
                    9b:77:b7:83:02:76:c7:d2:ff:7b:67:82:e2:83:67:
                    7b:c6:f0:d3:a8:73:3e:d2:0a:2b:63:f1:40:d4:50:
                    aa:a7:fa:ad:bd:ee:b2:3a:be:cf:83:5f:dd:09:21:
                    5e:2e:83:30:e4:b5:c2:7b:8b:c1:14:5d:32:8b:be:
                    a4:df:e2:2a:58:b3:a3:85:08:1f:18:a7:eb:fc:fb:
                    7c:eb:84:f4:81:cd:a4:07:3e:50:ec:fd:c9:b5:ba:
                    af:90:7e:1b:c7:58:12:cf:af:c9:a1:92:33:c8:d3:
                    c6:78:a0:a7:a5:52:7d:22:24:bb:9b:89:78:8b:78:
                    74:b0:87:fe:f8:be:42:7b:d5:c2:eb:6c:84:f8:82:
                    e4:f9:d7:c9:73:5b:bb:da:ae:e7:89:99:34:27:57:
                    10:3f:33:a4:d5:7e:88:d2:ee:d0:a4:46:ee:31:cb:
                    8b:20:0a:6e:d5:f1:87:a2:24:53:21:42:bb:e8:1a:
                    f9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:47:1C:7F:B0:82:73:CE:D5:7A:86:CA:25:4F:BA:B5:7A:A4:2D:20
            X509v3 Authority Key Identifier:
                keyid:CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7a:bc:21:07:1f:c7:37:6f:7b:11:46:9c:f3:bd:09:92:d2:
         96:ba:75:5f:50:8d:17:8a:34:aa:72:29:4e:61:2f:87:9e:5d:
         e4:fc:35:22:75:67:b2:67:0c:10:c1:0d:be:37:6e:e4:25:1b:
         74:58:e2:32:c9:13:7e:98:e1:6c:05:cf:eb:25:fa:56:2b:e2:
         d4:e5:e5:b1:c0:d6:b2:32:d8:94:94:ef:47:bb:a7:48:d9:4c:
         04:2c:8f:98:2e:bb:1a:bc:6f:cd:6b:b1:b1:02:72:1b:81:58:
         a9:ae:22:31:0a:cc:56:c9:1a:76:ad:3a:ac:ce:7f:9c:34:4a:
         b4:b5:45:5f:f3:da:c4:e1:92:d6:4f:cc:bf:6e:ee:6f:41:d6:
         b2:ac:f6:2e:19:72:34:a5:49:ec:f5:a8:f2:03:93:44:21:d7:
         f7:91:db:dd:01:a1:50:b8:8c:ba:2f:c5:f1:64:99:74:e6:4e:
         96:72:b2:16:13:01:fb:6a:af:f9:bf:09:c2:de:76:c7:bd:46:
         2e:da:b6:0a:f3:40:f8:9f:85:73:75:85:7b:56:98:0b:f1:d9:
         7d:d5:45:45:a5:e0:3e:5e:18:7a:f4:0f:31:48:89:38:b7:0b:
         0a:69:10:04:f4:80:30:72:f9:6c:e2:1b:df:9a:44:d1:ce:32:
         ae:c0:80:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:10:00 2025 by rpki-client