This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
File:                     MU_85UKRThk8fBoqA8c1dGLqGBY.mft (raw, json)
Hash identifier:          fz1VHfYuYb7uM+L6Jm+HcJsq9AtIyT/b2YcPStgmvGw=
Subject key identifier:   37:1B:DB:D2:DB:43:F1:FF:E4:71:B0:02:26:20:EB:68:C5:24:79:67
Authority key identifier: 31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
Certificate issuer:       /CN=F3668037AF/serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Certificate serial:       0DDE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
Manifest number:          0DBE
Signing time:             Mon 08 Dec 2025 01:03:09 +0000
Manifest this update:     Mon 08 Dec 2025 01:03:08 +0000
Manifest next update:     Wed 10 Dec 2025 01:03:08 +0000
Files and hashes:         1: MU_85UKRThk8fBoqA8c1dGLqGBY.crl (hash: dt6NJ1I2jURfkAHGpur8hW1JF1nC5Et0rhBwuyyLwSs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3550 (0xdde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668037AF, serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
        Validity
            Not Before: Dec  8 01:03:08 2025 GMT
            Not After : Dec 10 01:03:08 2025 GMT
        Subject: CN=693623cc-28d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:eb:6f:eb:85:ae:43:5f:e9:74:da:a2:90:13:
                    47:d8:85:c4:64:87:0c:c3:c2:5e:ef:de:80:77:96:
                    e5:93:f6:02:56:79:be:f9:0f:55:14:41:88:cd:c1:
                    2c:25:81:29:2c:db:2c:d5:f0:f8:33:41:e8:5e:79:
                    bd:c2:22:49:bc:a2:e6:cb:54:3c:01:28:14:f4:5a:
                    72:18:b8:e4:a0:67:93:fe:54:86:23:50:12:a2:d2:
                    f1:c5:ab:70:1f:aa:3b:03:08:8d:63:4a:3c:cb:83:
                    1e:ec:97:c1:0a:8c:6c:2e:61:86:9a:ad:f1:d1:7a:
                    92:33:35:3e:02:ce:71:84:e7:1f:71:18:12:a4:5d:
                    2c:18:20:5e:c2:fd:83:09:5c:9f:d0:7e:11:5f:2f:
                    b2:ef:0d:87:c0:51:dd:5f:71:30:c3:10:38:3a:59:
                    7a:5c:23:f8:48:96:30:23:2b:3e:5f:0f:66:58:21:
                    97:ab:df:55:af:5b:aa:ee:2b:63:e6:68:3b:f9:4a:
                    0f:b5:e6:84:4e:da:fd:fc:e6:82:b2:38:0e:1b:7e:
                    c7:08:88:1b:6f:11:ae:df:45:f4:14:2d:9b:fc:c8:
                    52:74:bd:78:3c:18:95:d6:7a:f9:37:7f:89:dd:2d:
                    45:54:e1:a4:38:c6:0b:64:1b:00:fb:9a:b0:cb:80:
                    69:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1B:DB:D2:DB:43:F1:FF:E4:71:B0:02:26:20:EB:68:C5:24:79:67
            X509v3 Authority Key Identifier:
                keyid:31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:41:c4:4c:82:5a:74:61:3f:77:66:0b:ce:b8:86:ad:b8:35:
         0c:38:c8:13:96:14:97:94:54:6b:6c:c1:1d:fe:f4:4e:6e:d8:
         db:ac:55:96:fc:b7:f5:5e:53:d4:a4:fb:11:28:3d:43:6c:ae:
         bf:7a:41:d6:7d:18:fa:ca:fb:06:7a:db:29:f2:51:10:f7:50:
         05:25:7f:84:01:05:42:6d:9a:0e:c6:2b:44:03:d5:e4:af:cb:
         0d:5e:c9:ad:ea:33:e4:f7:a0:80:48:63:fd:a7:38:26:df:b6:
         0a:d1:46:2c:ca:27:ae:f6:65:30:7f:a4:c1:ef:9a:e6:ff:0a:
         0f:e7:b7:76:00:ea:19:2e:09:13:32:bc:f4:ec:21:59:a5:bf:
         aa:a9:2c:dc:80:03:63:98:6c:15:82:af:e4:45:35:c8:28:ea:
         5b:2c:61:06:31:71:24:42:d5:4f:38:a6:cc:12:9e:9e:17:f8:
         05:c9:f4:71:8c:82:b4:48:dd:a1:1a:ee:e6:2f:48:ff:27:92:
         da:ee:77:b6:82:1f:3a:30:b2:eb:b5:22:cd:cc:d0:70:f4:bb:
         bc:d4:43:48:c7:71:a7:10:dc:b4:16:cd:da:bd:f2:b1:b6:29:
         81:c1:24:1f:18:f7:6a:03:ac:94:3e:2c:05:bf:a3:a3:92:61:
         76:76:ed:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:04:28 2025 by rpki-client