This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
File:                     B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft (raw, json)
Hash identifier:          KIOJwyZp81gqnmuFj9RTNLG45+aLKgxJ34Nw5x71c9o=
Subject key identifier:   1D:CE:4D:B2:5F:2F:90:6B:7A:B1:D7:F8:3B:35:D6:B2:55:F1:70:3D
Authority key identifier: 07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64
Certificate issuer:       /CN=F3659389AF/serialNumber=0761257DC989C67CBFE16374834CE8592168C964
Certificate serial:       0109
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
Manifest number:          0108
Signing time:             Mon 08 Dec 2025 04:53:46 +0000
Manifest this update:     Mon 08 Dec 2025 04:53:45 +0000
Manifest next update:     Wed 10 Dec 2025 04:53:45 +0000
Files and hashes:         1: B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl (hash: JKNyW5y7xR760q4456o8DT+0I3DUlUB+o5ckrKCmrnI=)
                          2: 10EAF1B40B4311F08B33AB71762E951A.roa (hash: 8dKtBcctBuIDLiDUfnBFwlKL6LP+a2nsnLbiPCcB/UI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659389AF, serialNumber=0761257DC989C67CBFE16374834CE8592168C964
        Validity
            Not Before: Dec  8 04:53:45 2025 GMT
            Not After : Dec 10 04:53:45 2025 GMT
        Subject: CN=693659da-2304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cc:18:8f:d6:b0:ef:ed:2f:13:63:7f:87:fc:
                    75:ed:fd:d1:a9:fb:b3:29:68:57:4c:7e:13:35:f5:
                    83:71:d2:15:fa:84:f0:80:0d:e4:b5:0e:36:c9:15:
                    03:5f:ff:2f:01:75:28:50:89:0f:35:8a:67:01:09:
                    c8:e8:cb:a7:75:1e:47:ed:b8:ea:75:be:dc:22:e4:
                    15:34:41:e3:9d:2b:4d:e3:47:d9:cf:03:b2:6d:55:
                    c6:3c:61:7c:d6:37:0d:e0:5f:21:5f:6d:b2:e9:dd:
                    3f:7b:e4:fb:48:fe:29:cc:e0:0c:a4:4c:ef:c3:3c:
                    8d:44:8e:bf:9e:44:5c:85:ec:eb:fe:f7:df:da:7c:
                    a5:3a:a4:e0:67:74:a6:96:de:4e:1b:f0:d6:c2:c6:
                    87:81:d5:9f:e4:b6:e8:be:9c:65:de:1d:cb:c5:b7:
                    5f:e8:3e:0c:c3:4b:7e:67:38:58:31:ac:55:62:1c:
                    dc:87:14:a3:be:6e:ee:45:b9:6d:16:e3:70:5b:84:
                    12:20:85:fb:89:a7:8e:02:2c:d4:06:30:c0:8d:65:
                    72:7b:e0:cc:f4:9d:30:45:c6:81:8e:13:48:db:a1:
                    cd:66:23:b9:ac:15:5c:c5:58:9c:47:bf:92:2a:bd:
                    9d:55:73:93:99:a6:fc:97:b7:80:13:ea:b0:7a:e9:
                    7f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CE:4D:B2:5F:2F:90:6B:7A:B1:D7:F8:3B:35:D6:B2:55:F1:70:3D
            X509v3 Authority Key Identifier:
                keyid:07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:78:18:8c:75:0e:fb:18:f9:43:e3:0f:33:39:c5:18:7a:ae:
         47:6e:db:3a:20:62:7c:a9:38:c0:d9:e0:87:c3:0d:2f:8a:c2:
         4f:2b:ec:c4:94:8b:e7:dc:ca:bb:1d:d0:59:2c:14:bf:10:b7:
         07:d0:65:f5:0c:1f:1d:1a:70:05:fa:4b:3b:43:b8:8e:48:4f:
         37:0f:78:f6:19:f2:c2:c7:86:12:f8:45:b5:35:0a:f6:a3:d5:
         15:58:74:4c:10:2f:49:2c:8e:61:d9:54:a1:86:56:4f:07:47:
         5a:a9:48:bb:7a:d5:6e:b2:fb:30:ab:a9:4d:a8:38:50:81:bc:
         d5:f0:6f:35:33:e8:b7:2f:11:d2:ca:52:e0:0d:17:5e:ad:25:
         f8:64:c6:32:15:5e:ba:42:1e:ff:65:06:a9:2c:8a:5d:27:42:
         ee:7b:77:68:62:51:b6:e8:07:0b:7a:8d:90:6f:69:d4:23:55:
         91:78:07:e0:65:4e:cd:d4:38:bb:87:17:43:82:52:a0:38:5a:
         ef:f2:a6:f0:6c:19:51:8d:33:6f:b1:f4:e6:cb:ab:b9:56:45:
         9e:58:af:43:1c:75:08:ae:c1:8f:b5:e5:00:33:9b:da:bc:fa:
         76:1c:4a:d1:64:9f:e3:06:66:c1:17:dd:8e:e7:d6:4d:d8:d7:
         92:e5:2e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:09:05 2025 by rpki-client