This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
File:                     j1A71XPOETUXzWtM-jdKYvFeEsE.mft (raw, json)
Hash identifier:          x9HOUrb+rD8s66mhueiTi5/kmxVvcVtiaf2SxLlirD8=
Subject key identifier:   51:BB:25:AE:64:40:64:65:45:D4:50:FC:0D:04:4B:17:CB:C4:3D:70
Authority key identifier: 8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
Certificate issuer:       /CN=F364AE44AF/serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Certificate serial:       06C9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
Manifest number:          06C4
Signing time:             Mon 08 Dec 2025 02:07:44 +0000
Manifest this update:     Mon 08 Dec 2025 02:07:43 +0000
Manifest next update:     Wed 10 Dec 2025 02:07:43 +0000
Files and hashes:         1: j1A71XPOETUXzWtM-jdKYvFeEsE.crl (hash: FjOaftH/aAaVqpiXbKxd6jjE74p0dG8LfStAC8YH6m4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1737 (0x6c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364AE44AF, serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
        Validity
            Not Before: Dec  8 02:07:43 2025 GMT
            Not After : Dec 10 02:07:43 2025 GMT
        Subject: CN=693632f0-7fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:28:ca:fe:15:05:d3:78:30:b1:fc:8a:b8:76:
                    e9:14:5e:90:ce:75:83:4a:5b:3f:78:78:1c:77:73:
                    df:80:05:90:bd:88:12:c6:29:8a:e3:f0:d1:f3:45:
                    c6:0e:46:ca:bb:48:c4:c7:06:bd:cf:72:1e:4e:93:
                    b7:4d:19:d1:4c:e3:f7:0b:fb:8d:49:d7:16:32:68:
                    ae:f8:cd:63:c8:01:97:5c:d2:45:b4:38:74:dc:45:
                    19:9c:b8:ac:02:10:5d:c6:03:5e:b4:06:2e:27:6a:
                    7f:2d:68:5e:c0:7d:ca:e5:a7:6d:03:f9:05:90:c3:
                    6e:c5:dd:5f:3a:c8:28:84:0d:fd:fb:79:e5:21:d8:
                    46:83:6c:f2:82:b4:28:29:c5:cb:01:d0:9f:33:84:
                    b4:67:28:22:d9:9a:46:c2:fe:76:c3:ba:56:e2:27:
                    91:a1:5f:5f:2d:33:65:6c:12:84:e4:2e:58:37:86:
                    64:50:9f:09:00:f9:a7:a4:e5:8f:6e:94:df:e9:91:
                    61:9a:87:51:17:e8:4d:08:2a:0e:83:c5:c7:bd:a3:
                    fd:3e:14:dc:70:8e:64:6c:84:6c:82:fd:9b:15:5f:
                    8d:03:8f:a5:e8:2d:f0:19:b5:be:a7:92:7d:1e:da:
                    c1:ea:c4:a7:58:f6:5b:58:bd:78:ef:55:ff:f7:60:
                    f0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BB:25:AE:64:40:64:65:45:D4:50:FC:0D:04:4B:17:CB:C4:3D:70
            X509v3 Authority Key Identifier:
                keyid:8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:fe:80:dc:6b:aa:df:8e:2d:36:09:33:60:95:51:ed:22:79:
         31:15:cb:37:f7:38:ae:94:51:20:b1:fa:76:90:f4:59:0c:e1:
         2e:94:d3:9a:9f:c6:10:0d:27:45:8d:12:27:5d:b4:af:43:94:
         b5:4f:91:ce:30:1b:90:a5:26:47:86:7b:50:28:c2:b2:87:c7:
         fd:d2:42:1a:08:ba:0c:7a:fa:00:d6:5b:d3:99:14:d6:69:eb:
         97:0a:08:95:34:db:0a:6c:1e:68:15:85:b8:5b:bc:a4:bf:c8:
         1c:2a:5e:19:ad:23:b1:5a:cd:cc:49:ec:fa:3c:ae:7f:94:b2:
         65:96:85:5b:9f:c7:39:89:dd:5e:e5:a5:72:79:6d:f4:77:0c:
         30:8f:41:99:f4:4a:d3:b8:c2:1e:6a:dc:74:e3:7c:d3:24:46:
         0d:aa:14:b7:09:e8:cd:2c:e3:59:89:32:90:96:da:03:68:22:
         e5:40:5e:9d:96:91:86:c7:59:12:55:eb:3c:de:1a:aa:9f:bc:
         cd:5e:16:a7:57:e7:58:08:24:b9:62:69:73:71:3d:bc:09:f7:
         69:e8:72:44:ce:d8:13:47:73:9b:ff:84:e3:35:20:40:cb:9d:
         16:f8:15:39:fc:71:7d:82:d2:f0:05:b8:b9:4a:ed:f3:e0:8d:
         64:dd:58:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:13:20 2025 by rpki-client