This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
File:                     IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft (raw, json)
Hash identifier:          HoNxXHpSVHTCOOd7fO+LKssOwfZI8ZG+fgx7uL97lIY=
Subject key identifier:   D9:07:01:C2:E5:0E:D0:CA:92:B6:56:4E:C4:78:E5:CF:15:B6:A0:93
Authority key identifier: 21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C
Certificate issuer:       /CN=F364386BAF/serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
Certificate serial:       0526
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
Manifest number:          0523
Signing time:             Mon 08 Dec 2025 02:47:43 +0000
Manifest this update:     Mon 08 Dec 2025 02:47:42 +0000
Manifest next update:     Wed 10 Dec 2025 02:47:42 +0000
Files and hashes:         1: IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl (hash: xlDGQAEK2TkVIho6uBkJm6V/113s4HvsjawEy411E7E=)
                          2: 2AE6A618901511ED97E821A8F1222468.roa (hash: l6cBhURgmoDE6HHZxn6Sr3D0gRmA3gv1jsIUfHqy/fE=)
                          3: 341444A4EE0611ECA47D4F8CF1222468.roa (hash: 5YbdNBfbmz1C6LgL/EGyM06dpl98H6mogKseSBeoHI4=)
                          4: E33731DE901411ED873666A7F1222468.roa (hash: DQCVLS0+9ICNcSNGa3FetGyRMxihYZeODa4YHrZFCDo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1318 (0x526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364386BAF, serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
        Validity
            Not Before: Dec  8 02:47:42 2025 GMT
            Not After : Dec 10 02:47:42 2025 GMT
        Subject: CN=69363c4f-84df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:75:8b:3b:5e:30:b9:47:37:29:7d:da:ad:c5:
                    13:68:4c:1b:9f:fb:2c:a0:90:e7:80:49:59:7a:50:
                    31:c3:de:4e:fb:2f:9a:4f:2e:f1:76:da:5c:de:7e:
                    60:e2:7e:03:97:bd:76:af:f3:ce:e8:9b:ea:9a:f2:
                    cd:54:03:1a:5e:3b:43:cc:b4:a3:a0:05:9d:f0:76:
                    cd:e5:8f:1c:31:7a:e8:ed:17:40:97:a1:26:d4:5e:
                    75:54:66:0e:94:14:f7:87:7b:5d:9f:9d:25:ab:3e:
                    b7:3e:8b:cc:e4:72:30:ae:87:18:01:e0:3a:90:bb:
                    6c:41:cc:8e:11:bf:7a:54:57:f2:b7:87:51:98:1f:
                    7d:9a:9c:53:7e:09:b9:f4:5b:f2:c8:8a:a9:39:3c:
                    16:ed:58:ad:03:e8:cd:ae:70:ec:b8:37:4e:08:87:
                    f1:05:2e:92:28:6a:a0:ee:c8:31:44:f8:54:7b:74:
                    fc:e4:77:98:4e:74:43:8c:e4:93:d2:73:74:fd:5a:
                    b1:b1:6d:55:c6:40:5c:a3:a1:c4:c2:ce:04:09:28:
                    d0:ad:80:3c:d2:a3:5a:ff:fb:db:bc:26:e9:f7:eb:
                    ef:e8:ce:30:de:50:ad:79:56:7f:15:d9:66:75:8c:
                    15:65:f9:d3:54:62:d3:3f:06:50:09:85:48:ed:67:
                    41:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:07:01:C2:E5:0E:D0:CA:92:B6:56:4E:C4:78:E5:CF:15:B6:A0:93
            X509v3 Authority Key Identifier:
                keyid:21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:5f:aa:df:bc:ad:6f:1e:5c:13:26:6f:8a:c9:6e:3c:87:14:
         71:f5:98:59:9f:4f:a2:50:ba:96:05:3a:ce:f6:e1:7b:8d:30:
         5a:80:26:fa:5a:c8:be:cb:c7:22:c6:f5:e0:68:ea:f8:90:96:
         10:8b:a0:38:d4:75:e3:97:0f:4e:1e:20:0c:22:49:bd:0c:dc:
         a9:74:d5:59:e5:6e:d0:96:68:d1:59:d1:01:38:16:12:33:5d:
         a1:22:cc:6d:53:ac:e5:ed:99:11:96:05:1d:04:08:8a:37:4d:
         19:bd:92:2d:29:51:e1:fb:64:f2:aa:c0:0a:56:12:6d:ab:ed:
         55:7d:a2:ef:de:69:44:b9:72:49:e9:f8:78:88:3a:51:4c:b8:
         dd:6c:32:1e:97:8c:a9:f1:6a:0b:40:61:8d:c8:a9:3f:f0:67:
         07:27:cc:ac:08:33:ab:54:03:8e:93:29:89:ec:84:20:97:2a:
         c9:54:cf:16:25:07:c1:48:be:7d:19:29:c9:62:25:c2:46:f2:
         b2:cd:8f:c8:71:cd:2b:3e:ec:49:43:e6:56:53:55:62:00:1d:
         31:5f:dd:4e:06:42:c3:86:8a:03:f7:b7:ac:3e:5a:4e:9e:e3:
         0f:5c:8c:fc:b7:23:8d:1b:5f:2d:4f:6f:bc:25:b9:00:0a:61:
         fb:4f:93:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:21:05 2025 by rpki-client