This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
File:                     M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft (raw, json)
Hash identifier:          GZSR8MQP+JXxhNdFNacBZLOVwLa94SDS/UPSUgBq+CI=
Subject key identifier:   BB:B5:08:98:ED:B6:D7:84:24:C6:91:30:C5:36:6A:97:DE:88:F6:C0
Authority key identifier: 33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F
Certificate issuer:       /CN=F366828BAF/serialNumber=33D38C4411A488581697F61DBF5FB4FD358D821F
Certificate serial:       07DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
Manifest number:          07DE
Signing time:             Thu 18 Dec 2025 02:19:26 +0000
Manifest this update:     Thu 18 Dec 2025 02:19:24 +0000
Manifest next update:     Sat 20 Dec 2025 02:19:24 +0000
Files and hashes:         1: M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl (hash: 19cx4sgPHm2Ivywm/Era/6T/hQfz+2PTVXXfhwDLdXA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 00:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2014 (0x7de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366828BAF, serialNumber=33D38C4411A488581697F61DBF5FB4FD358D821F
        Validity
            Not Before: Dec 18 02:19:24 2025 GMT
            Not After : Dec 20 02:19:24 2025 GMT
        Subject: CN=694364ae-1958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:34:29:e2:ef:ff:3d:f1:e0:c1:8b:32:2c:
                    d3:1f:98:ba:58:1c:3f:95:4c:01:24:48:09:fd:e6:
                    5e:91:31:2e:3c:83:a1:81:67:43:2b:61:4f:0b:d9:
                    d2:3b:42:19:cd:d0:36:76:29:f6:d7:8f:82:95:67:
                    5c:fb:76:a2:73:1f:7b:1f:a8:e6:d1:cc:89:19:16:
                    c0:e9:44:14:db:1b:07:95:89:e9:07:66:2a:1a:4a:
                    bb:ab:0a:55:11:7a:e3:4a:cd:bd:99:5d:1e:53:1a:
                    29:7a:49:40:b5:fd:ca:b6:45:4b:21:70:6d:57:80:
                    c8:bd:64:5b:a4:aa:8a:e7:2c:ea:1b:43:f0:fa:48:
                    9b:9b:bc:02:a1:26:67:ca:6a:cc:73:9a:e2:8e:49:
                    60:6e:55:db:88:15:bb:11:25:81:ca:cb:d7:11:20:
                    52:2e:20:8e:f3:03:be:24:60:cc:ec:7f:bc:a7:58:
                    75:1b:d8:78:28:10:ee:93:94:5a:ac:d7:17:0b:fd:
                    5a:14:12:f5:42:b9:2c:c0:74:22:a3:44:74:94:5a:
                    b4:15:b0:46:26:b7:da:66:f9:7c:19:08:0d:62:74:
                    73:98:67:ae:17:67:1d:6d:61:13:0a:3c:08:3c:f8:
                    46:a7:9c:ff:df:45:f4:81:04:75:60:7d:5d:6e:f8:
                    32:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B5:08:98:ED:B6:D7:84:24:C6:91:30:C5:36:6A:97:DE:88:F6:C0
            X509v3 Authority Key Identifier:
                keyid:33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ea:51:9e:88:07:b3:16:b7:90:09:a9:dd:0e:86:3c:a0:2a:
         3c:a9:58:b0:a0:bb:54:12:49:47:01:61:b6:23:19:ce:d8:9c:
         b2:5e:45:9f:66:04:7b:4c:ec:8f:88:0c:58:12:1c:78:fd:97:
         6a:e3:3b:be:f1:f6:df:2d:fd:8e:28:45:35:5b:4b:c8:4d:6b:
         4e:70:aa:32:c5:c8:ac:d9:13:40:97:be:12:52:80:7d:0a:02:
         41:e6:d4:50:d2:17:57:ef:6b:f9:11:0a:a9:1e:1b:6e:21:d1:
         72:6d:e7:4a:c6:3d:af:56:0f:66:97:81:4d:74:39:3c:54:a4:
         ed:6a:f3:d7:53:71:f2:85:b3:95:57:d4:4e:32:bb:b8:1b:5b:
         fd:34:aa:4b:3f:7b:92:19:41:c8:85:e4:4a:0f:e1:3f:04:90:
         e4:f5:c3:a7:66:66:b4:b0:78:a3:04:cf:84:92:45:79:20:b5:
         26:b9:65:e0:e9:9d:e5:69:e3:6e:09:ff:f0:24:9a:96:16:84:
         74:6c:f4:02:d7:59:aa:86:c1:e9:86:f3:f5:45:4c:3f:0b:94:
         b9:7f:be:21:06:1e:d6:bd:62:39:3d:5f:d0:ab:8e:60:30:57:
         45:4a:97:ad:3f:68:b1:a3:a0:1a:ae:35:16:b6:64:4e:a2:69:
         dc:86:61:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 21:48:08 2025 by rpki-client