This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.mft
File:                     AsRM7WthmrGkBPztNQKx2WhIMp4.mft (raw, json)
Hash identifier:          2wMUEr2Q5mTHKK9Iaomr+rZerunul6rBwOBAThDfYuQ=
Subject key identifier:   CF:C8:08:D7:FD:94:B2:56:DB:20:9E:6B:B2:9F:8A:EC:6C:04:44:DC
Authority key identifier: 02:C4:4C:ED:6B:61:9A:B1:A4:04:FC:ED:35:02:B1:D9:68:48:32:9E
Certificate issuer:       /CN=F365F086AF/serialNumber=02C44CED6B619AB1A404FCED3502B1D96848329E
Certificate serial:       0329
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AsRM7WthmrGkBPztNQKx2WhIMp4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.mft
Manifest number:          0326
Signing time:             Sat 06 Dec 2025 03:49:11 +0000
Manifest this update:     Sat 06 Dec 2025 03:49:10 +0000
Manifest next update:     Mon 08 Dec 2025 03:49:10 +0000
Files and hashes:         1: AsRM7WthmrGkBPztNQKx2WhIMp4.crl (hash: J5pmFNjwmU5USN4nx9zxMVDp9k/gdSOREJ/Y9LiMa88=)
                          2: 859462CC6CC311EE8EFBB4784AD9E6FC.roa (hash: sQU9LffxBvSsgmgcwizGIhPdQKBe5eoXX4AMZgFSru4=)
                          3: D16CB6506CC211EEAE1488764AD9E6FC.roa (hash: 8W8MLoaZGdQj+poYAqkXMgXc2YN4jz1pc8HUUsTYfXk=)
                          4: DD015D826CC111EE88677D734AD9E6FC.roa (hash: qWeL/3G03cESkK0lfpuTmBLiPLwBFByixPyVGD+RD2k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AsRM7WthmrGkBPztNQKx2WhIMp4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 03:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809 (0x329)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F086AF, serialNumber=02C44CED6B619AB1A404FCED3502B1D96848329E
        Validity
            Not Before: Dec  6 03:49:10 2025 GMT
            Not After : Dec  8 03:49:10 2025 GMT
        Subject: CN=6933a7b7-b335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4c:a4:3e:9d:9b:11:e4:59:5d:ac:e8:9b:57:
                    e2:fb:51:9a:0a:15:60:62:f1:3b:16:51:79:30:aa:
                    b5:47:2d:75:19:a1:c5:21:0f:7e:10:83:bb:8c:23:
                    af:cc:7c:88:d2:51:50:f2:ea:fe:b3:da:9d:bb:b1:
                    82:a9:d6:fb:56:8b:01:5f:40:6e:ff:5c:5c:9c:54:
                    a6:d2:b2:6e:1b:b4:91:16:a6:3c:aa:09:79:fd:ec:
                    41:48:8e:b2:10:84:80:25:80:32:cb:b8:bf:2b:66:
                    12:29:5f:e7:3c:90:7c:22:51:bc:61:3d:04:dc:b6:
                    03:3c:12:3e:85:c6:01:8f:31:e7:f9:bb:29:eb:ae:
                    7c:09:6d:27:45:a0:e7:df:37:08:d9:41:f8:85:14:
                    ff:cc:b2:cf:07:c0:d0:71:78:b7:c8:3e:75:94:58:
                    d8:07:54:4d:33:fb:3f:b2:aa:b6:bf:0a:fa:c3:c3:
                    14:32:84:33:61:b0:8d:05:50:06:cf:12:7a:1c:2e:
                    8a:5c:bf:75:2f:2d:a1:37:73:c2:4a:88:e7:84:96:
                    88:b6:2b:3a:2d:17:54:c2:59:17:7f:37:7f:c4:fa:
                    69:e7:1c:15:9b:b8:cd:e3:1f:3c:94:c5:d6:15:d3:
                    16:30:a7:77:a6:0e:bc:46:6d:d5:63:a2:83:0f:82:
                    23:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C8:08:D7:FD:94:B2:56:DB:20:9E:6B:B2:9F:8A:EC:6C:04:44:DC
            X509v3 Authority Key Identifier:
                keyid:02:C4:4C:ED:6B:61:9A:B1:A4:04:FC:ED:35:02:B1:D9:68:48:32:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AsRM7WthmrGkBPztNQKx2WhIMp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:31:b0:5f:9f:6f:c7:a5:9d:a4:5e:08:ae:90:a6:d2:8a:f0:
         68:e1:36:ac:f4:46:69:f6:ca:74:d0:69:f1:3e:f7:43:1e:2a:
         22:1d:5b:0b:7b:79:55:fd:67:88:af:da:aa:14:7d:f8:80:b2:
         5a:82:df:e2:e7:76:a8:04:6e:19:58:51:fc:d3:60:7f:4f:ba:
         b0:92:c8:ca:70:62:c5:f5:2b:c2:91:09:b4:fd:1f:11:e6:d5:
         cf:dd:27:26:c3:c3:4f:eb:ee:c2:a4:06:83:06:69:e0:39:a4:
         e2:4a:14:12:3c:de:c3:ed:e2:f7:fe:7a:c8:0b:36:61:cd:d9:
         a1:5d:cd:5f:cd:22:c4:01:db:cb:a1:28:f4:7e:ff:2f:95:21:
         7b:d8:58:ab:12:df:34:a7:59:3e:45:a7:38:b2:17:a1:bb:76:
         b4:d8:7f:c9:8e:27:2e:e5:40:19:e6:95:42:dd:01:94:db:47:
         f1:56:ee:22:0d:a5:45:e2:78:58:bf:c7:3d:c8:0c:dc:a4:9d:
         92:d5:63:80:ec:92:0b:c2:80:54:eb:0b:71:13:4c:0b:b8:43:
         25:9f:2c:09:cb:e0:3b:53:d5:c4:94:93:2b:6b:c0:b7:59:a9:
         15:0a:1d:a7:f8:52:85:6c:ff:e3:c6:01:da:65:26:fb:86:aa:
         ac:6c:f9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:10:29 2025 by rpki-client