This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
File:                     Py4lhz-TCj4vdaXCxhVisCIN5ls.mft (raw, json)
Hash identifier:          D+getfT5PqqADWnmXGJU9OqyvugdHFyhLrrYUAZNK2o=
Subject key identifier:   63:0A:13:69:C3:6D:14:91:D2:20:A9:3A:AE:7D:7B:C0:8A:54:24:62
Authority key identifier: 3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B
Certificate issuer:       /CN=F365F31BAF/serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
Certificate serial:       0448
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
Manifest number:          0446
Signing time:             Mon 08 Dec 2025 03:11:20 +0000
Manifest this update:     Mon 08 Dec 2025 03:11:19 +0000
Manifest next update:     Wed 10 Dec 2025 03:11:19 +0000
Files and hashes:         1: Py4lhz-TCj4vdaXCxhVisCIN5ls.crl (hash: ZEwfH/ZXPUZhe7USB1o2ySA7s0wRHKxnMAaKZlBWco4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096 (0x448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F31BAF, serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
        Validity
            Not Before: Dec  8 03:11:19 2025 GMT
            Not After : Dec 10 03:11:19 2025 GMT
        Subject: CN=693641d7-93f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:94:a5:31:63:9e:93:e7:a7:20:95:09:0a:95:
                    d5:a3:04:f6:43:c6:22:de:45:8b:fd:8c:e7:71:89:
                    9e:e7:91:3b:74:d6:2d:e2:45:d8:13:21:71:f4:63:
                    d6:2b:89:c7:51:84:61:4d:f6:91:3c:b2:fa:bf:f1:
                    d2:ae:a1:6c:f3:45:29:c7:5c:79:0e:39:ac:8d:92:
                    96:f0:8d:b9:8e:9d:03:ac:e6:53:97:c0:c7:c6:e8:
                    7b:a7:63:b7:ae:fe:42:ba:52:41:51:60:ba:1a:a7:
                    76:17:91:84:a1:03:06:42:b4:84:dc:5e:0a:8c:96:
                    fb:ab:69:95:ca:61:96:f0:a3:8d:7f:ac:e6:7f:55:
                    d2:51:02:e6:15:50:19:4a:cc:8f:0c:b6:18:f2:71:
                    59:a6:66:4b:b4:20:5b:45:b3:0c:0b:0f:a2:d1:89:
                    24:3e:18:e7:21:e8:30:17:81:f2:34:92:f3:47:b2:
                    6e:b0:52:f4:80:61:1a:00:a0:11:42:4e:ed:ca:9a:
                    6f:3d:f7:77:da:46:7a:b1:7c:05:7f:d8:7f:d5:a0:
                    09:e2:6a:b3:85:c8:a9:ed:23:d0:3a:18:94:de:7f:
                    3b:bc:55:c7:d1:e3:fe:92:9a:88:c3:f6:30:e1:e5:
                    3c:ee:15:cf:7c:24:10:a7:18:b4:fe:a9:34:eb:88:
                    ce:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0A:13:69:C3:6D:14:91:D2:20:A9:3A:AE:7D:7B:C0:8A:54:24:62
            X509v3 Authority Key Identifier:
                keyid:3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:51:ce:64:81:80:38:b5:0e:f6:af:90:82:a2:c9:a5:2d:91:
         8f:db:96:20:02:42:e9:b7:f6:a8:5e:dc:05:24:cb:9c:fe:a2:
         b7:00:90:15:10:d4:e1:f4:53:25:09:10:02:9d:9f:e4:ba:cb:
         37:22:66:02:6b:4a:f4:4b:8a:9c:b1:ec:6f:08:8f:8d:12:f4:
         e6:11:fc:26:94:94:36:25:82:55:6e:7a:92:9a:70:bb:88:0a:
         55:8f:70:1f:d2:06:0a:1d:f5:a3:c0:bf:46:0f:44:64:14:f3:
         99:5c:b0:38:1a:1e:cc:a0:be:26:ff:ca:f4:f0:45:9e:75:cb:
         b7:87:51:75:41:02:62:3a:10:09:52:62:cd:27:7e:58:42:cb:
         ba:7b:cf:5d:70:3e:10:78:37:29:eb:7b:36:7a:b0:af:25:be:
         8b:b2:0e:44:4b:09:39:7f:29:29:83:ad:73:22:00:3a:ca:90:
         84:11:71:48:62:3b:c7:c5:2a:33:f1:25:47:6f:8d:64:a0:46:
         56:84:16:11:04:49:07:49:b2:a9:44:d5:36:13:18:bc:70:8d:
         0e:98:96:31:08:7b:82:08:88:f9:8d:0b:85:cf:1f:3c:32:d4:
         c6:2d:25:af:ee:95:df:99:b4:96:4e:67:d3:1b:16:dd:46:6e:
         e1:56:a6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:26:51 2025 by rpki-client