This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
File:                     68SoUZfDK0JWOKbH5YYLWWTmV_4.mft (raw, json)
Hash identifier:          URf2yxf+hbhUb6LSqqnUdMs0nXcIj1iSl7rnau3df4A=
Subject key identifier:   E1:0D:CD:54:1B:B5:6B:E7:96:C0:8C:9A:EF:0F:7A:37:8C:7B:03:FC
Authority key identifier: EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
Certificate issuer:       /CN=F363212DAF/serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
Certificate serial:       05F5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
Manifest number:          05ED
Signing time:             Sat 06 Dec 2025 02:32:37 +0000
Manifest this update:     Sat 06 Dec 2025 02:32:36 +0000
Manifest next update:     Mon 08 Dec 2025 02:32:36 +0000
Files and hashes:         1: 68SoUZfDK0JWOKbH5YYLWWTmV_4.crl (hash: 6BHVzDatj3isPO75BwqhBWOD+O4g5f9jlFvQek/9Wy4=)
                          2: E1BA36FE532E11ECB8BC4E1DD8A014CE.roa (hash: cUhBHZ+Z4d5AZaeSFA399WQNY+kP31yeD+NHyVVFT18=)
                          3: 0193F69A532F11EC9ACDB21DD8A014CE.roa (hash: iI3TqolSTdmVetsfOW0QQOug0jNNQHUuD4Xvi/Pq7D4=)
                          4: 5C2091561C3911EFB205FD487DDC24C2.roa (hash: NKlDY276l6JOcXLF8QFggQf5j2sPub212V854yhc+iU=)
                          5: 24D701EA533111EC8641CB24D8A014CE.roa (hash: /Cg+GnqMealAZ/MM8CbfqkgM5mxpsZqxp+8Er6hjzIE=)
                          6: 4B1F6790532F11EC90C1831ED8A014CE.roa (hash: ELkepuwGqkp4OwjbpJ4s0LiN5zzQJggQYB6/QQtDAy0=)
                          7: B7D3BBC6532E11ECAD55D11CD8A014CE.roa (hash: pCw+Q0ElmqVkVeDqn8YLUNXneXlSCa0dfzrWbxPvi2o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 02:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1525 (0x5f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363212DAF, serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
        Validity
            Not Before: Dec  6 02:32:36 2025 GMT
            Not After : Dec  8 02:32:36 2025 GMT
        Subject: CN=693395c5-703e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:f6:c4:85:74:2e:e3:6f:88:f8:83:e7:e1:
                    70:7a:1a:fb:3d:d7:b9:33:9a:4e:9f:92:f4:ce:76:
                    1a:bd:cd:8e:17:eb:dc:68:f1:35:23:ed:e3:ff:3a:
                    bf:7d:38:93:31:1b:07:f9:f0:c6:02:73:80:b4:81:
                    e9:25:be:52:99:4a:2b:04:37:fe:3e:9b:64:6f:48:
                    74:62:c1:40:b2:5e:a6:1a:30:c7:24:7f:36:5d:93:
                    59:94:45:2c:89:69:0f:e5:0c:44:43:d4:16:6f:7f:
                    22:b5:0f:ce:53:1d:69:f2:17:69:34:dd:e5:09:0b:
                    a6:c6:4b:d0:af:d7:e3:c7:1d:8c:7b:09:23:15:42:
                    19:cd:40:cf:60:aa:b0:83:01:b6:db:79:b4:10:15:
                    8d:02:1d:9c:6d:e5:df:71:b6:fe:91:b1:c0:04:c4:
                    b0:73:86:de:e0:0a:f5:c2:5a:1a:79:91:56:b5:82:
                    3d:f7:18:60:6a:a7:28:3e:fe:35:19:d9:86:b7:5e:
                    1e:8b:94:6c:dc:88:75:91:02:48:95:b6:bb:fd:c4:
                    d2:92:27:3f:06:88:1b:df:0e:80:77:a4:94:2a:07:
                    6d:61:67:24:09:72:88:c9:f3:7f:d9:47:9a:43:a0:
                    1d:f6:02:aa:1b:07:ec:4f:2d:29:6a:84:a6:49:eb:
                    69:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0D:CD:54:1B:B5:6B:E7:96:C0:8C:9A:EF:0F:7A:37:8C:7B:03:FC
            X509v3 Authority Key Identifier:
                keyid:EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:05:35:3a:01:48:9f:f7:98:7f:ed:a9:98:2d:0d:da:bb:2e:
         75:31:d1:59:e8:a2:aa:68:f5:0e:59:ce:dc:e7:f9:be:67:61:
         a3:ff:46:67:60:e1:5c:ec:fd:9e:6f:41:a5:46:8a:36:6a:dd:
         82:89:8d:44:46:84:8e:d2:87:bd:70:3a:a4:49:a4:a7:d6:99:
         ef:3b:f1:f7:e5:ae:79:f5:b8:ee:bc:b2:eb:0d:3d:94:68:0b:
         4c:7c:49:03:6e:9a:6b:82:b5:97:7c:68:58:fc:75:81:23:41:
         8b:e0:61:d2:c0:f6:a5:0f:83:b9:f0:8e:03:86:d4:b0:af:09:
         07:7d:e3:8a:3c:72:8f:76:d4:cc:31:7b:b4:3e:03:19:68:b3:
         6b:ba:86:59:44:87:4e:8d:17:f6:25:00:94:08:d8:36:3b:45:
         5a:c2:f3:4a:9e:1c:e0:3b:f8:ba:ab:ef:10:47:1d:42:b0:2c:
         2d:00:b5:d0:ad:4f:ee:33:3f:96:89:30:43:fd:02:4b:31:7d:
         45:9f:19:60:06:d4:76:22:b2:47:12:e9:07:a7:ac:28:94:36:
         31:80:89:f9:43:08:02:c2:26:8b:87:36:01:3f:d1:ba:85:b9:
         23:2f:e0:f9:04:f1:43:6c:c1:34:c1:b8:0d:31:39:64:82:11:
         0e:6a:63:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:44:29 2025 by rpki-client