This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
File:                     xaUP22PDxb0fR0h14JTxitF-H5Y.mft (raw, json)
Hash identifier:          M6h+l53K/RAle2gxnQjGUJoV7zahXf6t1SvSccDfnmQ=
Subject key identifier:   94:F0:7A:BD:D7:A4:7B:27:83:C9:C7:AD:2F:F8:51:07:8E:F2:26:09
Authority key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Certificate issuer:       /CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Certificate serial:       02F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
Manifest number:          02EF
Signing time:             Mon 08 Dec 2025 03:55:32 +0000
Manifest this update:     Mon 08 Dec 2025 03:55:31 +0000
Manifest next update:     Wed 10 Dec 2025 03:55:31 +0000
Files and hashes:         1: xaUP22PDxb0fR0h14JTxitF-H5Y.crl (hash: DX9z+wP07coAXRvEigW3sWKyWJRYVqJ/6Kzk7bGq21Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 752 (0x2f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F7E8AF, serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
        Validity
            Not Before: Dec  8 03:55:31 2025 GMT
            Not After : Dec 10 03:55:31 2025 GMT
        Subject: CN=69364c33-76b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:08:b2:9a:9b:ac:fc:12:59:d6:d3:3b:86:8c:
                    8a:e6:20:03:27:fe:d7:7a:13:a0:bf:79:0d:8b:6a:
                    92:f7:d9:30:78:2e:51:86:d8:f5:09:0f:44:18:c7:
                    4f:ed:d1:fc:80:75:b6:c2:fb:11:69:a0:55:d4:81:
                    62:1a:b1:6f:19:6c:88:a1:6a:1f:2e:92:57:1b:4e:
                    c8:e2:01:f2:29:ef:fd:a3:13:64:02:8d:3f:84:e4:
                    f7:f2:89:b8:b5:6d:a2:11:be:3e:75:d5:02:03:a7:
                    08:84:14:ed:bd:ad:9a:b8:c5:5a:96:4d:11:a9:53:
                    68:31:28:7d:37:8e:6c:19:ed:94:6b:bf:ef:76:31:
                    3e:0d:12:86:88:db:8f:69:e8:53:50:d6:a8:8e:9e:
                    25:14:d4:2c:c5:64:2c:ce:c5:e2:55:f1:c8:4b:84:
                    9d:6a:1f:d5:ad:25:50:83:16:34:a0:a7:82:f3:64:
                    c4:07:4f:54:a1:8a:e0:cb:0d:26:ce:64:32:d2:82:
                    20:30:59:47:3d:23:6e:65:8b:d9:4d:62:65:cd:7e:
                    10:39:4c:9c:7a:ad:37:76:66:75:2c:bb:50:df:81:
                    14:bb:87:98:9f:c1:17:b0:66:6d:34:46:57:83:e0:
                    30:2c:f8:f9:5c:13:80:a8:37:06:8b:a4:74:12:e9:
                    a7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F0:7A:BD:D7:A4:7B:27:83:C9:C7:AD:2F:F8:51:07:8E:F2:26:09
            X509v3 Authority Key Identifier:
                keyid:C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f7:16:e1:db:fe:1c:fe:f8:d0:8b:f7:65:1e:4f:d9:9c:96:
         12:6f:f6:ba:88:91:f4:31:21:a2:9a:fd:bf:ba:e2:e6:a5:6a:
         95:c2:d4:64:0d:23:7a:89:1e:2e:f2:c5:30:1e:e7:04:61:b4:
         2e:99:87:fb:8c:38:38:2d:72:9e:2b:10:63:68:1f:7f:6e:81:
         7e:24:2c:e3:93:05:c1:14:a5:a3:22:62:6e:dc:2a:49:64:1f:
         37:39:66:f2:03:e8:06:12:16:0a:f5:e7:e5:7e:68:db:66:bc:
         1a:2a:e9:de:1a:d2:c6:0f:13:e2:78:71:da:3c:b3:0b:83:e6:
         73:c8:85:01:67:7b:12:89:bd:d3:4b:7f:37:c3:70:10:58:cc:
         0c:88:0b:de:5e:26:c8:61:0f:03:d5:4c:3c:ce:cf:80:ec:3c:
         72:a5:97:88:1f:d4:39:67:47:52:ac:e9:f5:52:e4:57:7d:c7:
         43:6a:ce:29:3e:36:85:17:10:6a:87:b7:b9:10:25:af:61:09:
         12:49:3f:56:b5:4c:7b:e9:52:ba:e2:fa:59:fc:0c:e5:a1:65:
         ce:71:15:14:62:14:20:ca:0a:81:8d:f5:dd:2d:e7:d4:a8:19:
         9f:a0:3e:29:a1:b6:dc:e2:5c:71:dd:f8:2b:e3:9e:e6:c5:1d:
         f8:3d:8a:ff
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUY3RThBRjExMC8GA1UEBRMoQzVBNTBGREI2M0MzQzVCRDFGNDc0ODc1RTA5NEYx
OEFEMTdFMUY5NjAeFw0yNTEyMDgwMzU1MzFaFw0yNTEyMTAwMzU1MzFaMBgxFjAU
BgNVBAMTDTY5MzY0YzMzLTc2YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcCLKam6z8ElnW0zuGjIrmIAMn/td6E6C/eQ2LapL32TB4LlGG2PUJD0QY
x0/t0fyAdbbC+xFpoFXUgWIasW8ZbIihah8uklcbTsjiAfIp7/2jE2QCjT+E5Pfy
ibi1baIRvj511QIDpwiEFO29rZq4xVqWTRGpU2gxKH03jmwZ7ZRrv+92MT4NEoaI
249p6FNQ1qiOniUU1CzFZCzOxeJV8chLhJ1qH9WtJVCDFjSgp4LzZMQHT1ShiuDL
DSbOZDLSgiAwWUc9I25li9lNYmXNfhA5TJx6rTd2ZnUsu1DfgRS7h5ifwRewZm00
RleD4DAs+PlcE4CoNwaLpHQS6adJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUlPB6
vdekeyeDycetL/hRB47yJgkwHwYDVR0jBBgwFoAUxaUP22PDxb0fR0h14JTxitF+
H5YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVGN0U4L0Q4NjgyMTEwOTZDQTExRUVBMDFCREE3M0QyNUJFNDY1L3hhVVAy
MlBEeGIwZlIwaDE0SlR4aXRGLUg1WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3hhVVAyMlBEeGIwZlIwaDE0SlR4aXRGLUg1WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUY3RTgvRDg2ODIxMTA5NkNBMTFFRUEwMUJEQTczRDI1
QkU0NjUveGFVUDIyUER4YjBmUjBoMTRKVHhpdEYtSDVZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCO9xbh2/4c/vjQi/dlHk/ZnJYSb/a6
iJH0MSGimv2/uuLmpWqVwtRkDSN6iR4u8sUwHucEYbQumYf7jDg4LXKeKxBjaB9/
boF+JCzjkwXBFKWjImJu3CpJZB83OWbyA+gGEhYK9eflfmjbZrwaKuneGtLGDxPi
eHHaPLMLg+ZzyIUBZ3sSib3TS383w3AQWMwMiAveXibIYQ8D1Uw8zs+A7DxypZeI
H9Q5Z0dSrOn1UuRXfcdDas4pPjaFFxBqh7e5ECWvYQkSST9WtUx76VK64vpZ/Azl
oWXOcRUUYhQgygqBjfXdLefUqBmfoD4pobbc4lxx3fgr457mxR34PYr/
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:21:46 2025 by rpki-client