This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft
File:                     Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft (raw, json)
Hash identifier:          jNMlj5YNtmi3gXZXUDMm7fIPdXMYfnMpo/rFUbN5iAs=
Subject key identifier:   19:AE:FF:55:CB:AD:01:A2:EF:12:DF:81:4C:AE:45:0D:ED:F4:50:C3
Authority key identifier: 22:CD:6F:18:77:75:C2:3E:27:51:5B:2F:E3:80:82:E4:BF:EA:8F:F4
Certificate issuer:       /CN=F365AA12AF/serialNumber=22CD6F187775C23E27515B2FE38082E4BFEA8FF4
Certificate serial:       06A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Is1vGHd1wj4nUVsv44CC5L_qj_Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft
Manifest number:          06A8
Signing time:             Mon 08 Dec 2025 02:10:12 +0000
Manifest this update:     Mon 08 Dec 2025 02:10:11 +0000
Manifest next update:     Wed 10 Dec 2025 02:10:11 +0000
Files and hashes:         1: Is1vGHd1wj4nUVsv44CC5L_qj_Q.crl (hash: iIRJ4k6lbqiruf01eXYc15dissfNjrrN0cNh95qt6Ew=)
                          2: B663D9A8C37B11EB8DB89456F8AEA228.roa (hash: BanY5OoiK/H0UyDozciFZEgNwlpeFk96ik1kdsHY5gM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Is1vGHd1wj4nUVsv44CC5L_qj_Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1705 (0x6a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365AA12AF, serialNumber=22CD6F187775C23E27515B2FE38082E4BFEA8FF4
        Validity
            Not Before: Dec  8 02:10:11 2025 GMT
            Not After : Dec 10 02:10:11 2025 GMT
        Subject: CN=69363383-d151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:13:68:b7:41:bf:f4:53:58:ff:70:57:5b:85:
                    9b:82:3d:ec:64:dc:b1:39:56:64:48:f7:92:fe:a1:
                    15:b8:b2:3d:46:e1:80:0e:bd:97:56:f2:26:51:88:
                    f8:2c:0f:30:4f:26:fb:b7:1d:cd:c6:96:e4:53:07:
                    0e:5d:1d:2d:d3:7e:46:fc:c1:07:ed:58:d7:80:1d:
                    29:45:e4:86:26:9d:49:ba:9d:a3:65:bd:9a:57:94:
                    ed:ee:8d:e1:aa:72:9a:b5:88:6c:f7:d8:3e:4b:be:
                    19:21:94:98:08:cf:d1:c9:19:83:e4:4d:77:8e:66:
                    8c:83:ec:75:3a:fe:d0:75:a6:68:76:d2:7e:75:7a:
                    9d:9f:07:0a:b5:6c:64:79:c6:43:f2:e2:96:b9:b6:
                    50:b8:a4:9e:b4:40:bb:63:b9:bb:8a:84:19:08:26:
                    95:e3:56:a4:ab:8a:09:15:8d:52:3a:65:d0:55:f1:
                    21:48:e0:62:63:0c:e0:0d:a2:8f:f0:ba:e8:81:a5:
                    f5:78:c4:8a:4d:a3:65:b9:10:3a:29:bc:f0:30:65:
                    15:39:16:d8:43:c5:24:c7:75:28:81:14:df:13:64:
                    53:13:d8:fc:e0:4c:60:99:bf:25:3f:06:83:7d:c4:
                    a8:7a:53:64:9b:84:3e:1c:be:0f:00:ac:59:4c:82:
                    1d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AE:FF:55:CB:AD:01:A2:EF:12:DF:81:4C:AE:45:0D:ED:F4:50:C3
            X509v3 Authority Key Identifier:
                keyid:22:CD:6F:18:77:75:C2:3E:27:51:5B:2F:E3:80:82:E4:BF:EA:8F:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Is1vGHd1wj4nUVsv44CC5L_qj_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:85:1e:0a:a8:22:df:93:31:c1:60:5b:72:72:37:85:48:f9:
         a2:92:af:50:99:9b:95:38:41:c0:bd:f2:ff:63:f4:f9:5b:ae:
         78:18:f3:e9:4c:af:12:b7:4c:96:2b:f2:c9:c7:20:3f:e4:23:
         e1:83:67:67:e9:7b:21:c0:00:11:ca:8a:53:0c:f6:7f:20:46:
         4b:96:9b:08:0f:81:ca:eb:d3:9d:fc:2d:e4:b3:24:c0:ad:93:
         6b:5b:8a:c1:56:1f:20:af:1a:c4:c9:24:8e:97:a1:62:59:93:
         10:c3:a6:a8:dc:ba:cd:9e:e1:f8:2e:76:5c:30:23:4d:2d:c9:
         6b:e2:b1:92:e1:da:e0:81:ae:e7:8e:b2:2d:ee:8f:12:93:0d:
         d9:0f:b5:1a:c6:55:5b:96:a3:bb:0f:1c:1a:4c:35:69:36:0c:
         ae:a2:5a:91:76:dd:e4:dc:8a:9e:fd:26:45:93:4d:a1:0b:dc:
         c9:85:e7:d8:3c:89:a4:85:88:b5:09:c2:ff:9e:7c:59:87:00:
         c5:cf:e2:9e:e7:d0:bd:78:8f:93:c4:1e:15:b3:26:97:94:ca:
         37:e4:5d:72:c5:e0:91:a5:be:9c:08:61:9d:6f:04:29:d1:0b:
         76:e8:89:bc:a8:a8:da:a7:2f:03:8e:ad:99:97:e6:14:a9:2b:
         55:0e:1a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:04:29 2025 by rpki-client