This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
File:                     vt43u99rvceiMipfCQ-A63EfBnk.mft (raw, json)
Hash identifier:          EMNjGb5LBqkSyFQR+Ms9EuljcqkNuj6FUC+alECXkO4=
Subject key identifier:   D7:6E:30:16:25:08:48:AA:95:FD:6A:C4:36:6A:25:0F:87:3D:0C:69
Authority key identifier: BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79
Certificate issuer:       /CN=F365B37DAF/serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
Certificate serial:       0374
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
Manifest number:          0374
Signing time:             Mon 08 Dec 2025 03:38:59 +0000
Manifest this update:     Mon 08 Dec 2025 03:38:58 +0000
Manifest next update:     Wed 10 Dec 2025 03:38:58 +0000
Files and hashes:         1: vt43u99rvceiMipfCQ-A63EfBnk.crl (hash: e1h824KMyAw3yGk3MoMh6JLGEOO+IzvpWmaoTRJNb6c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884 (0x374)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365B37DAF, serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
        Validity
            Not Before: Dec  8 03:38:58 2025 GMT
            Not After : Dec 10 03:38:58 2025 GMT
        Subject: CN=69364853-837d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6d:89:e9:99:5a:e0:ed:5c:1a:69:af:d4:8d:
                    fc:42:dd:dd:5f:95:c6:5c:e7:97:96:6f:8d:46:38:
                    d5:5f:8e:eb:af:57:f2:36:e8:4f:3c:89:53:6e:51:
                    38:57:dd:3c:4b:d8:f5:15:3e:52:bf:26:3d:e8:cc:
                    65:e8:e8:3f:96:a3:a8:cb:0b:46:b8:f4:d8:19:1a:
                    57:4a:51:50:0c:5b:4f:23:af:7e:e0:0b:a3:dc:6e:
                    22:34:2c:3f:b4:26:be:d7:7d:6c:ae:85:3a:fd:36:
                    28:37:5e:44:29:c6:13:6e:0c:ab:ec:33:5c:2b:79:
                    70:5c:b1:61:aa:86:46:22:8d:7b:51:b7:c8:60:9d:
                    28:f6:84:ee:c5:ca:14:91:2a:7c:9e:dd:e7:0e:e6:
                    9d:5a:d4:b2:ef:66:3d:46:75:dd:12:9f:8e:9a:3f:
                    c1:89:2e:5e:49:f3:eb:e8:d3:7f:02:98:ff:b8:84:
                    10:c9:d6:64:c5:23:30:57:ce:d4:be:69:ff:cf:a6:
                    1a:f2:5c:e8:e1:07:ca:a5:8f:2d:9f:ae:b4:dc:81:
                    11:20:86:5e:a0:74:c1:8a:91:0e:86:80:af:42:24:
                    4d:37:e0:c9:bb:4d:12:9e:cb:dc:65:c8:d2:f0:ef:
                    e1:7f:1e:47:74:cc:27:b4:a6:a9:c7:c2:59:19:16:
                    e3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6E:30:16:25:08:48:AA:95:FD:6A:C4:36:6A:25:0F:87:3D:0C:69
            X509v3 Authority Key Identifier:
                keyid:BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:fa:fb:2e:8b:b4:0f:7e:5f:4d:fd:60:10:6c:51:33:64:19:
         6f:b9:cc:94:a5:37:b3:ae:f4:14:ff:8f:5e:96:35:f9:ea:dd:
         5b:40:66:18:e0:ba:a6:71:35:f7:76:e2:41:91:85:3f:13:13:
         7d:0a:ae:48:ed:cb:bc:81:fe:91:a3:e4:c1:25:6b:9f:01:ec:
         22:4f:c8:28:bd:ab:3c:e8:c2:01:0a:67:ad:ec:b5:d2:62:2b:
         ef:ca:d8:bb:0f:5f:4d:c1:ba:30:86:ef:93:b4:2f:b6:a9:3f:
         74:c4:e9:3f:d7:5f:50:fd:25:e2:f2:dc:c4:46:bb:cd:a8:a1:
         1a:d5:82:34:d0:22:75:a6:2e:14:5f:fe:55:68:45:ef:83:9b:
         0b:73:78:70:ac:4f:ad:5e:28:4d:51:70:6c:aa:ab:69:2f:33:
         c2:25:11:3b:42:d3:03:f6:e8:be:bd:64:45:8c:8c:02:0e:18:
         dc:4d:62:fb:7a:40:7c:d7:5c:d7:52:8f:2a:ff:6c:d6:58:ca:
         2b:bc:3c:66:87:ce:18:9b:98:a5:2b:48:4c:c1:9f:92:c9:5e:
         e5:0b:34:03:2d:52:97:09:5e:ff:61:52:f4:da:d6:20:35:a8:
         4b:7f:4a:bc:4d:d2:b4:bc:b5:b0:28:79:62:5e:52:29:b2:1c:
         e2:2b:19:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:13:20 2025 by rpki-client