This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
File:                     Py4lhz-TCj4vdaXCxhVisCIN5ls.mft (raw, json)
Hash identifier:          VcyAk7v+YgOrdU40va+9R0M+3fUg7lG3ofi0dJ++T2Y=
Subject key identifier:   FB:2A:13:14:04:C6:98:06:A4:36:86:06:CC:B5:11:E7:BF:66:D9:8C
Authority key identifier: 3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B
Certificate issuer:       /CN=F365F31BAF/serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
Certificate serial:       0450
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
Manifest number:          044E
Signing time:             Tue 16 Dec 2025 03:13:40 +0000
Manifest this update:     Tue 16 Dec 2025 03:13:39 +0000
Manifest next update:     Thu 18 Dec 2025 03:13:39 +0000
Files and hashes:         1: Py4lhz-TCj4vdaXCxhVisCIN5ls.crl (hash: rRU0Ewd/qqp4s8aQleO9KDlC16g7PSSylEC1aH9WHBs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Dec 2025 00:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1104 (0x450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F31BAF, serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
        Validity
            Not Before: Dec 16 03:13:39 2025 GMT
            Not After : Dec 18 03:13:39 2025 GMT
        Subject: CN=6940ce64-e766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b9:9f:bf:d8:b9:8c:ee:9b:68:92:4b:42:6d:
                    c7:90:27:98:2b:45:76:36:2c:f7:ba:6d:35:b4:3b:
                    f1:fb:dd:32:9b:c5:05:6e:ba:e4:98:67:f9:de:91:
                    29:7a:d6:4b:59:35:b8:a6:ba:e8:80:98:f9:4e:43:
                    0e:dd:5a:af:43:61:2e:94:86:ce:82:a8:f2:62:b0:
                    43:f3:9f:91:18:5e:1d:ca:ef:7f:4c:7c:bd:b2:57:
                    7c:df:31:d7:1a:93:22:16:a8:f7:a3:3b:94:24:b6:
                    1e:be:34:b0:00:4c:46:e7:86:07:28:6f:f6:f6:b2:
                    70:b3:c1:6d:65:cf:6b:0c:6b:ff:d9:03:4d:be:c7:
                    ae:38:cb:c3:23:73:f0:a4:e1:b6:31:5c:33:0d:68:
                    32:c1:19:c5:c0:04:c1:5c:2d:a4:75:29:b5:ef:b4:
                    a8:da:77:b7:19:06:f4:37:d4:94:eb:cc:5e:1f:0b:
                    c2:a8:88:b3:84:44:60:af:c4:79:51:23:e6:5a:c3:
                    65:f6:32:75:84:17:eb:51:5f:de:42:ce:03:32:95:
                    73:d1:98:04:15:09:23:1b:11:06:47:4d:a9:f1:da:
                    46:cb:da:bf:17:bb:8b:e9:14:62:39:7f:ac:4a:33:
                    58:13:2b:5d:13:d0:83:bb:a8:a7:f2:a8:be:2a:83:
                    6e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2A:13:14:04:C6:98:06:A4:36:86:06:CC:B5:11:E7:BF:66:D9:8C
            X509v3 Authority Key Identifier:
                keyid:3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:cb:29:72:62:2d:7c:1f:cd:b7:67:2e:a5:49:71:4c:b4:2a:
         5b:13:94:d3:59:55:94:b6:57:8c:51:77:2d:08:10:c2:77:99:
         2d:6b:e4:e2:90:cd:8f:36:e5:d3:7f:b9:8a:79:f9:95:d7:51:
         78:be:62:2c:3b:fc:3a:ab:62:90:d3:d2:0b:b1:6f:f9:ad:12:
         37:c1:c4:db:d7:5d:9a:52:c5:68:ba:f7:c1:78:9f:ec:3a:2a:
         cb:d2:76:c9:15:71:85:11:96:b3:27:3a:a7:95:08:cb:75:56:
         82:39:f2:1b:26:b3:9b:8e:5c:37:3c:41:35:0b:45:3a:4d:d3:
         31:f0:89:85:61:4e:86:d2:47:a4:0d:6c:2d:10:31:a4:16:32:
         df:2f:a4:e3:ef:e8:ca:4e:68:a9:b9:71:6f:a6:bd:b8:89:88:
         fc:9d:ed:a1:97:0c:9a:84:c5:95:4b:c1:31:1d:c4:f5:10:c0:
         6d:c4:c7:47:22:84:75:db:45:d8:67:3d:29:db:53:3d:0f:cc:
         8d:a9:87:47:51:ad:fe:7a:c7:3c:28:15:cc:8c:4d:29:ff:b7:
         eb:b5:9c:a0:ab:ad:41:b4:1f:b6:13:94:21:27:7e:20:29:00:
         0a:4f:8f:3b:cc:72:d7:a0:f5:b7:c6:f1:54:cc:21:3f:c7:74:
         5c:e3:b0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:35:21 2025 by rpki-client