This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
File:                     9s_tdm0YWlpEFVDpcITTe-KcA-s.mft (raw, json)
Hash identifier:          P0WUXg4AMiS6unY9dxJl+EzgmrvZXxPN174dfx06xQQ=
Subject key identifier:   1F:63:A6:32:72:63:3F:20:60:E2:B6:21:89:2C:22:9C:66:02:8A:CD
Authority key identifier: F6:CF:ED:76:6D:18:5A:5A:44:15:50:E9:70:84:D3:7B:E2:9C:03:EB
Certificate issuer:       /CN=F363DDF3AF/serialNumber=F6CFED766D185A5A441550E97084D37BE29C03EB
Certificate serial:       05B8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
Manifest number:          05B7
Signing time:             Mon 08 Dec 2025 02:36:06 +0000
Manifest this update:     Mon 08 Dec 2025 02:36:05 +0000
Manifest next update:     Wed 10 Dec 2025 02:36:05 +0000
Files and hashes:         1: 9s_tdm0YWlpEFVDpcITTe-KcA-s.crl (hash: 78A7oWrJEsFJRU5424IwMfUuzd2elzc/eZgQu77JpQo=)
                          2: 4982356676DE11ECB3098D8D5A40D577.roa (hash: F+0U8dG2rCXUcTvEY7rr1zknmOkjpUBOw8pBbcMuxcw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1464 (0x5b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363DDF3AF, serialNumber=F6CFED766D185A5A441550E97084D37BE29C03EB
        Validity
            Not Before: Dec  8 02:36:05 2025 GMT
            Not After : Dec 10 02:36:05 2025 GMT
        Subject: CN=69363996-2604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f0:dd:17:10:7f:23:80:28:f8:a1:68:a7:59:
                    1f:d7:48:d6:ac:b4:36:8b:84:09:9d:55:fa:c1:a8:
                    94:0a:c9:7e:a5:6e:ec:32:1b:9e:98:df:18:7f:77:
                    57:93:22:10:f3:63:c1:2f:75:ad:73:f5:64:ba:13:
                    dc:9e:a0:4e:7e:4f:5a:f5:c7:a2:b4:78:b2:34:bb:
                    28:96:98:87:c7:10:64:49:98:76:4e:dd:58:62:dc:
                    47:6c:86:28:70:bd:e5:4c:79:0b:0c:12:06:2c:b0:
                    83:00:a8:c3:b5:12:af:57:8f:cc:78:31:21:6a:a6:
                    45:03:37:5d:ac:53:92:00:5e:3d:ed:9e:a2:6c:4f:
                    42:e7:6a:79:9e:c1:cf:35:d3:92:ac:c9:43:9a:43:
                    77:a1:7a:99:b1:fd:5f:c8:94:4c:9c:20:ce:23:ed:
                    a1:a5:7e:f8:b5:92:eb:19:c7:24:d2:67:a3:62:9f:
                    d6:50:ca:82:d8:80:2e:1f:a7:f7:d8:9f:b2:50:f1:
                    57:8d:05:a2:80:dd:ed:48:e0:73:af:76:3e:ff:bc:
                    1c:82:71:d8:7e:dc:46:65:0a:09:d4:55:5d:9b:57:
                    96:61:8a:78:f3:94:82:fc:84:07:4a:bd:92:e8:d3:
                    57:48:d9:6c:e5:3e:64:b2:98:01:59:76:2f:73:a1:
                    92:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:63:A6:32:72:63:3F:20:60:E2:B6:21:89:2C:22:9C:66:02:8A:CD
            X509v3 Authority Key Identifier:
                keyid:F6:CF:ED:76:6D:18:5A:5A:44:15:50:E9:70:84:D3:7B:E2:9C:03:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:7e:02:76:00:77:9b:af:25:56:1f:61:ed:21:b2:4b:32:33:
         59:2a:3e:f9:fa:34:d4:de:51:7e:e9:96:b9:97:05:48:79:00:
         8f:e2:13:de:d0:87:d0:aa:7b:ec:05:ac:1a:10:47:e0:d8:56:
         63:6d:de:2a:0e:71:b1:41:fb:36:f3:87:75:10:b3:a4:e3:80:
         5b:ad:cf:3f:e8:ef:86:00:ea:57:dd:b4:ff:66:6a:b8:f2:55:
         cf:e9:93:a6:ef:4e:54:0e:24:0c:f6:55:bf:cf:75:6d:e6:34:
         eb:fe:c6:1b:87:be:2d:27:00:0c:62:a0:f4:6f:f8:4a:08:a9:
         36:65:64:75:4f:c8:14:df:8d:7c:5d:d9:af:0b:c3:f5:41:fe:
         3b:a0:de:63:16:a5:42:12:c7:6f:83:5b:34:22:d7:b3:2c:74:
         57:91:39:3f:e2:28:e8:97:6b:ea:93:bb:26:d5:f8:4e:e5:a0:
         01:4b:fa:2e:4f:6a:56:ac:fd:23:70:d9:aa:19:07:77:78:2d:
         7f:da:8b:d9:87:a7:be:d9:ea:4c:4a:23:64:4e:c2:bb:54:95:
         7a:b1:d2:aa:2f:2a:ed:42:61:dd:ae:c1:40:e5:a8:75:2f:60:
         2a:fc:de:e5:a6:62:bd:28:d7:94:93:4c:b2:63:48:d9:a9:96:
         8e:14:7e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:22:40 2025 by rpki-client