This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
File:                     M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft (raw, json)
Hash identifier:          +/KDUbv98d1/S59YKxENF5934dREloSdKGzRdzGZUHI=
Subject key identifier:   A5:7B:68:5B:12:BF:2C:D0:FB:90:EA:79:DF:FB:7A:A0:EA:B1:8F:D8
Authority key identifier: 33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F
Certificate issuer:       /CN=F366828BAF/serialNumber=33D38C4411A488581697F61DBF5FB4FD358D821F
Certificate serial:       07D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
Manifest number:          07D4
Signing time:             Mon 08 Dec 2025 01:53:24 +0000
Manifest this update:     Mon 08 Dec 2025 01:53:23 +0000
Manifest next update:     Wed 10 Dec 2025 01:53:23 +0000
Files and hashes:         1: M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl (hash: i1yMEK78W0Yf8boDYUeZJBv4MlzKNxUQlChN+teLMTU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2004 (0x7d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366828BAF, serialNumber=33D38C4411A488581697F61DBF5FB4FD358D821F
        Validity
            Not Before: Dec  8 01:53:23 2025 GMT
            Not After : Dec 10 01:53:23 2025 GMT
        Subject: CN=69362f94-a715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:28:ce:a6:66:b8:49:25:a3:d2:0c:35:a6:c2:
                    38:97:b0:90:49:e8:4c:28:95:51:ba:e8:44:67:05:
                    43:44:bc:f3:0b:aa:88:66:85:20:9c:c4:c1:e7:07:
                    76:22:1a:38:cd:4c:cd:41:ee:89:31:4e:47:22:13:
                    42:b6:9c:62:1b:b9:0b:c4:db:c6:97:36:eb:cb:cb:
                    34:06:2d:02:f3:5e:1e:09:23:4d:99:9c:06:58:46:
                    d9:35:08:3d:4c:84:45:aa:f5:9b:de:fe:5f:5a:3a:
                    bb:86:9a:ea:77:89:8e:cd:54:5f:e7:2a:a5:de:0a:
                    c1:0a:ba:ff:56:75:15:93:76:77:63:87:2f:6c:1d:
                    fe:1e:7f:32:86:52:78:fc:4e:d4:f5:4f:7f:63:4c:
                    d4:16:aa:2c:70:84:99:02:08:29:32:a0:c6:10:51:
                    22:06:4a:df:3c:69:e4:32:a1:55:c2:f7:16:74:43:
                    80:32:98:b2:00:27:e2:fa:f0:26:ee:2e:23:e0:f0:
                    0b:12:21:e4:d8:3c:ee:0b:bc:8e:f8:e3:e7:6c:92:
                    be:1b:65:d1:a3:3f:e9:79:12:d0:e6:ce:4e:35:f7:
                    e5:2d:4d:b0:d2:60:b1:88:e7:0e:16:b3:90:48:8a:
                    38:40:f6:3d:69:bc:0c:c1:22:9a:65:6e:d4:27:df:
                    e0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7B:68:5B:12:BF:2C:D0:FB:90:EA:79:DF:FB:7A:A0:EA:B1:8F:D8
            X509v3 Authority Key Identifier:
                keyid:33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:36:90:37:35:33:fc:78:f2:78:04:5f:d2:87:88:f8:19:4c:
         ed:49:d0:28:5b:b0:b4:51:ff:2b:6c:be:b3:b1:f1:8c:65:df:
         bf:83:b6:ea:b4:d1:dc:60:2f:81:75:ea:63:cd:69:24:90:4a:
         9f:f9:ed:40:5a:c4:d1:e1:c6:5b:62:61:20:7a:b0:14:d8:e0:
         a6:bd:1d:64:42:66:b7:1c:18:4d:bb:fa:60:27:ae:6e:24:66:
         59:30:e3:9b:d3:60:49:14:80:f7:04:4a:16:2e:8e:bc:7d:49:
         c9:7e:69:60:d5:8a:d8:a7:25:89:bf:0a:f3:27:6c:e9:9e:37:
         71:dc:8f:ee:83:b7:1b:50:d9:71:17:b5:b2:2f:bb:f6:ea:cc:
         a5:93:82:59:16:58:e6:a2:7d:5b:b8:8e:44:a6:7a:d0:0b:35:
         dd:5e:1f:04:89:dc:0e:4c:fa:25:2a:3f:d3:75:6f:08:bb:c7:
         04:12:78:95:6f:5b:ac:dc:56:03:ee:b9:d4:28:e4:3a:cc:48:
         09:ae:9c:52:47:1f:ae:b5:61:38:1b:b4:04:44:82:db:d9:83:
         3a:03:e7:4e:e3:21:f2:a8:1c:ff:e0:24:e7:91:94:28:c6:d0:
         cf:86:96:ae:b3:3f:c5:c6:bd:08:3e:ef:19:44:ff:2f:3f:bf:
         2b:01:d5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:22:57 2025 by rpki-client