This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
File:                     4sEXgjtyd70rre-ytXfGz5x2TY4.mft (raw, json)
Hash identifier:          Uy7t44nGXSacFjXTcdE3LO0gbVzxINrW6OhaRgNPFxQ=
Subject key identifier:   B7:D5:49:6F:E8:B5:C4:E4:FA:39:9E:68:59:20:E0:2F:D6:22:58:14
Authority key identifier: E2:C1:17:82:3B:72:77:BD:2B:AD:EF:B2:B5:77:C6:CF:9C:76:4D:8E
Certificate issuer:       /CN=F36592B4AF/serialNumber=E2C117823B7277BD2BADEFB2B577C6CF9C764D8E
Certificate serial:       03A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
Manifest number:          03A4
Signing time:             Mon 08 Dec 2025 03:33:28 +0000
Manifest this update:     Mon 08 Dec 2025 03:33:27 +0000
Manifest next update:     Wed 10 Dec 2025 03:33:27 +0000
Files and hashes:         1: 4sEXgjtyd70rre-ytXfGz5x2TY4.crl (hash: XV3/Hxzjdm63OkXPmXJo9q+10gL3XhbVtY54FLsmLZA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932 (0x3a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36592B4AF, serialNumber=E2C117823B7277BD2BADEFB2B577C6CF9C764D8E
        Validity
            Not Before: Dec  8 03:33:27 2025 GMT
            Not After : Dec 10 03:33:27 2025 GMT
        Subject: CN=69364708-49df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:01:8f:f5:09:49:3f:99:18:57:2f:b3:78:
                    36:f9:56:23:99:dc:31:30:06:7e:e6:d8:26:cb:98:
                    b2:5b:30:c0:95:ed:cb:14:77:e7:26:74:cf:0f:cf:
                    18:cf:88:66:7f:8c:4c:b5:d9:64:4f:3d:f1:e1:ea:
                    1f:4f:77:50:6b:fa:f3:2c:55:69:89:c0:a5:2d:ef:
                    bc:e7:54:ec:86:27:9f:e7:d6:1e:f6:8f:96:b1:c8:
                    5d:b0:00:8e:38:7c:f3:48:89:8e:4b:db:bc:15:25:
                    59:52:77:17:ec:10:b8:1a:d2:9d:ef:95:a2:d5:45:
                    f1:ed:3c:59:ae:ab:ca:d3:92:57:f5:81:bc:66:1a:
                    2f:36:1b:92:42:b5:a7:63:45:1f:7c:37:24:1e:f4:
                    c9:24:f7:0c:dc:35:25:4f:fa:3d:77:c2:e7:91:2c:
                    9b:8f:35:19:5e:d3:2c:d7:e4:99:a0:b6:27:7b:19:
                    13:74:da:71:67:be:67:0c:17:45:38:c3:c3:ea:62:
                    02:f9:5a:2a:f2:83:a5:e6:79:4e:11:f8:ea:6a:15:
                    14:41:02:93:48:ea:65:52:1b:69:8a:dd:af:b2:86:
                    94:96:93:0e:d0:d0:4d:75:fe:6c:3d:f0:d1:f4:18:
                    e4:35:d1:6f:23:f6:35:11:17:86:b9:9a:40:ef:52:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D5:49:6F:E8:B5:C4:E4:FA:39:9E:68:59:20:E0:2F:D6:22:58:14
            X509v3 Authority Key Identifier:
                keyid:E2:C1:17:82:3B:72:77:BD:2B:AD:EF:B2:B5:77:C6:CF:9C:76:4D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a1:6f:d3:95:6a:45:f2:dc:2b:a2:3d:98:ed:74:80:a4:e5:
         dc:74:d1:7b:ed:98:59:f3:71:c5:e2:67:30:8a:27:2e:d5:67:
         32:2f:d1:44:bc:82:6b:71:84:f5:67:96:65:d6:2e:71:d5:3e:
         de:9a:5d:2f:50:8f:d1:40:ca:b0:92:16:a4:fc:a0:9a:40:17:
         f2:59:23:c1:23:42:28:04:a2:b6:62:f2:69:21:c2:64:0c:1d:
         90:d0:db:f7:cd:72:6d:3c:06:46:20:a0:1b:5b:8a:30:f6:d3:
         b1:8d:fc:e5:15:62:9b:4d:ec:c3:44:65:ad:39:96:00:5f:7f:
         e0:d5:7e:7a:7a:8a:e2:83:04:57:6e:d6:14:6d:84:17:ed:d6:
         ce:e9:c3:ca:7f:cf:7a:be:fb:54:73:d7:71:82:c3:54:42:24:
         f1:1c:a3:ec:cc:0e:a0:53:02:95:79:fd:df:45:e0:c2:cf:1e:
         e8:1c:77:6a:40:01:38:ad:3d:d1:50:7d:ca:b2:07:6d:f9:3e:
         8a:35:a1:bc:65:51:8a:16:1d:83:d5:65:57:08:70:79:3a:88:
         88:cf:fd:94:69:27:a3:cf:b0:23:50:7e:3e:02:09:f1:6b:64:
         da:14:57:64:04:bc:2d:c1:4b:3d:fa:d3:12:b0:bc:2e:31:62:
         33:96:53:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:09:14 2025 by rpki-client