This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.mft
File:                     98YIN8gMV8TbybsBYAgwPJT7oqk.mft (raw, json)
Hash identifier:          0afQ78bi78SyNmjfQU3bgp8h8WeMPr91IY6C3KB3DPQ=
Subject key identifier:   F5:18:7E:D2:77:17:6B:8A:AE:FA:36:49:50:FC:E3:50:29:13:C3:07
Authority key identifier: F7:C6:08:37:C8:0C:57:C4:DB:C9:BB:01:60:08:30:3C:94:FB:A2:A9
Certificate issuer:       /CN=F363C4A6AF/serialNumber=F7C60837C80C57C4DBC9BB016008303C94FBA2A9
Certificate serial:       0190
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/98YIN8gMV8TbybsBYAgwPJT7oqk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.mft
Manifest number:          018F
Signing time:             Sun 21 Dec 2025 04:41:32 +0000
Manifest this update:     Sun 21 Dec 2025 04:41:31 +0000
Manifest next update:     Tue 23 Dec 2025 04:41:31 +0000
Files and hashes:         1: 98YIN8gMV8TbybsBYAgwPJT7oqk.crl (hash: PytuRJHkvOG/StQluMDDRBSB84pDHIJ6kPI4ylab5KM=)
                          2: 7DDDEAB0AD5111EFA8CB627A762E951A.roa (hash: dvM01EkOXh9FWTfE/7UMNp1k9IOWCI+KkRyoJeJVDAA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/98YIN8gMV8TbybsBYAgwPJT7oqk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C4A6AF, serialNumber=F7C60837C80C57C4DBC9BB016008303C94FBA2A9
        Validity
            Not Before: Dec 21 04:41:31 2025 GMT
            Not After : Dec 23 04:41:31 2025 GMT
        Subject: CN=69477a7c-8b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0a:32:af:dd:16:c8:e0:19:1e:5f:08:59:d6:
                    2e:6b:c4:2b:31:d5:9c:1c:73:a0:2e:60:5f:70:b2:
                    91:fd:08:fa:67:da:12:b7:4e:ef:a1:e4:21:48:eb:
                    7b:fa:43:1e:e9:13:dc:3f:b4:c4:a9:9f:e7:fc:0c:
                    87:a7:fb:9b:1f:d6:a1:e7:86:ed:a5:ef:ae:09:99:
                    10:40:68:9a:d5:c9:8b:dd:56:97:5f:56:84:8a:78:
                    79:ef:16:21:00:52:d2:27:af:5b:55:49:f6:ca:ac:
                    b9:91:98:9b:b6:61:17:88:8e:fd:51:07:61:20:3e:
                    9c:3d:71:29:2e:2a:7f:44:2d:80:1f:db:a5:b2:88:
                    18:d7:de:c4:3c:51:9a:4c:fa:ce:6b:b4:16:8f:77:
                    21:e5:9a:4d:0e:ea:09:c4:39:f2:e5:8f:e8:e0:17:
                    7e:99:35:1c:a0:38:a9:cb:01:ab:c2:66:d7:6a:0f:
                    92:c5:4e:9f:cc:48:14:1b:0c:65:87:d0:33:be:8f:
                    34:ae:b9:b2:78:d1:f1:66:d7:3f:c9:ef:e5:9c:bf:
                    fa:03:a9:2b:1c:94:ce:e3:dc:c7:34:d1:74:36:83:
                    69:cc:4a:cf:13:89:89:de:10:57:a1:1d:0b:79:a1:
                    30:bb:18:0c:4b:46:ed:a0:12:83:cc:fa:34:47:53:
                    d3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:18:7E:D2:77:17:6B:8A:AE:FA:36:49:50:FC:E3:50:29:13:C3:07
            X509v3 Authority Key Identifier:
                keyid:F7:C6:08:37:C8:0C:57:C4:DB:C9:BB:01:60:08:30:3C:94:FB:A2:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/98YIN8gMV8TbybsBYAgwPJT7oqk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:58:c6:b9:75:05:9c:28:a8:96:e5:71:88:f3:06:c2:2c:b4:
         17:e9:92:a8:53:bf:40:9f:51:ce:07:78:8d:eb:7a:4e:97:d3:
         4e:e5:c7:f2:7b:30:16:bc:8b:2b:d3:6f:27:e0:84:e0:ab:2e:
         05:19:3f:7d:24:95:34:3d:12:e6:39:24:8d:5b:9d:2a:41:b1:
         d0:ad:66:cd:b5:d9:6e:e3:02:df:e4:8c:ca:55:62:ae:74:1b:
         cb:18:9c:25:68:1e:90:19:50:d0:6f:80:3d:96:fb:c7:66:bd:
         08:54:07:c4:1d:d3:3c:8a:13:10:ac:c2:4d:f4:dd:dc:13:7b:
         eb:a7:7c:fb:99:c0:43:f7:c1:38:f5:63:72:95:b4:c2:fb:82:
         e9:98:12:33:93:c9:e8:f0:bc:59:4b:79:a2:72:27:c7:22:7c:
         99:25:2b:e4:d3:5b:fd:c0:18:d8:a1:2c:83:62:f5:9f:6e:ab:
         c4:4f:83:46:7d:24:d9:e0:d1:b2:8e:3d:da:34:b6:d0:ec:fb:
         f7:ce:be:fa:27:a7:87:51:2f:14:4e:b8:26:0c:fc:18:6c:35:
         42:ec:ec:57:8b:e7:82:e0:bf:af:64:10:1f:4f:31:19:5d:7a:
         44:8d:4b:18:63:c9:24:b3:97:df:9c:07:e2:22:b8:df:ae:fa:
         f6:f2:b2:af
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0M0QTZBRjExMC8GA1UEBRMoRjdDNjA4MzdDODBDNTdDNERCQzlCQjAxNjAwODMw
M0M5NEZCQTJBOTAeFw0yNTEyMjEwNDQxMzFaFw0yNTEyMjMwNDQxMzFaMBgxFjAU
BgNVBAMTDTY5NDc3YTdjLThiNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqCjKv3RbI4BkeXwhZ1i5rxCsx1Zwcc6AuYF9wspH9CPpn2hK3Tu+h5CFI
63v6Qx7pE9w/tMSpn+f8DIen+5sf1qHnhu2l764JmRBAaJrVyYvdVpdfVoSKeHnv
FiEAUtInr1tVSfbKrLmRmJu2YReIjv1RB2EgPpw9cSkuKn9ELYAf26WyiBjX3sQ8
UZpM+s5rtBaPdyHlmk0O6gnEOfLlj+jgF36ZNRygOKnLAavCZtdqD5LFTp/MSBQb
DGWH0DO+jzSuubJ40fFm1z/J7+Wcv/oDqSsclM7j3Mc00XQ2g2nMSs8TiYneEFeh
HQt5oTC7GAxLRu2gEoPM+jRHU9PjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU9Rh+
0ncXa4qu+jZJUPzjUCkTwwcwHwYDVR0jBBgwFoAU98YIN8gMV8TbybsBYAgwPJT7
oqkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNDNEE2LzgyNTk5REY2QUQ1MDExRUZCNjk3RDY3NTc2MkU5NTFBLzk4WUlO
OGdNVjhUYnlic0JZQWd3UEpUN29xay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzk4WUlOOGdNVjhUYnlic0JZQWd3UEpUN29xay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0M0QTYvODI1OTlERjZBRDUwMTFFRkI2OTdENjc1NzYy
RTk1MUEvOThZSU44Z01WOFRieWJzQllBZ3dQSlQ3b3FrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbWMa5dQWcKKiW5XGI8wbCLLQX6ZKo
U79An1HOB3iN63pOl9NO5cfyezAWvIsr028n4ITgqy4FGT99JJU0PRLmOSSNW50q
QbHQrWbNtdlu4wLf5IzKVWKudBvLGJwlaB6QGVDQb4A9lvvHZr0IVAfEHdM8ihMQ
rMJN9N3cE3vrp3z7mcBD98E49WNylbTC+4LpmBIzk8no8LxZS3micifHInyZJSvk
01v9wBjYoSyDYvWfbqvET4NGfSTZ4NGyjj3aNLbQ7Pv3zr76J6eHUS8UTrgmDPwY
bDVC7OxXi+eC4L+vZBAfTzEZXXpEjUsYY8kks5ffnAfiIrjfrvr28rKv
-----END CERTIFICATE-----
Generated at Sun Dec 21 11:21:40 2025 by rpki-client