This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
File:                     OudkbOatVp92Fuam9v07GYa-1Bk.mft (raw, json)
Hash identifier:          PLqCscOahwUpdtWy5n58YReyF316Mc7ir0eraK0N6U4=
Subject key identifier:   6C:13:0E:1F:68:7E:45:F1:D5:1D:C8:DA:5A:E5:AB:F1:5D:9A:FF:B2
Authority key identifier: 3A:E7:64:6C:E6:AD:56:9F:76:16:E6:A6:F6:FD:3B:19:86:BE:D4:19
Certificate issuer:       /CN=F366A2B2AF/serialNumber=3AE7646CE6AD569F7616E6A6F6FD3B1986BED419
Certificate serial:       96
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
Manifest number:          93
Signing time:             Mon 08 Dec 2025 05:05:13 +0000
Manifest this update:     Mon 08 Dec 2025 05:05:12 +0000
Manifest next update:     Wed 10 Dec 2025 05:05:12 +0000
Files and hashes:         1: OudkbOatVp92Fuam9v07GYa-1Bk.crl (hash: Sgx2+qctjtWj+UBL3K2Qhba9WE9VyVgVD3h4V83SVoY=)
                          2: F8600BDE84B911F085AD04A3DAE4EC9C.roa (hash: DP8mnGerifLfSRadwXVvA2WZ6PCmE2usVrRlV28umhs=)
                          3: EF99DEAC66E711F0A50F79A4DAE4EC9C.roa (hash: 1ALkP5AE5BnLJ65DORy6a8qL9QHzH+dCAgd18lTAG+k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A2B2AF, serialNumber=3AE7646CE6AD569F7616E6A6F6FD3B1986BED419
        Validity
            Not Before: Dec  8 05:05:12 2025 GMT
            Not After : Dec 10 05:05:12 2025 GMT
        Subject: CN=69365c88-3c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:58:ac:1b:22:cb:6c:7c:4c:36:80:4a:1c:
                    10:b0:fd:3f:1f:f5:e2:7c:01:64:66:88:85:7b:97:
                    db:be:37:b1:58:68:e9:15:3f:5c:f7:0f:dd:49:66:
                    c1:63:90:97:b3:15:b5:ba:61:b2:1f:0b:c8:7b:9a:
                    75:e4:03:14:ab:3e:85:a8:13:98:a3:01:95:3f:7a:
                    82:c0:7c:08:41:4a:ee:ef:1a:1f:80:1f:bd:46:a9:
                    f1:b4:c2:5d:d2:57:a2:70:b8:04:19:93:d0:c3:7f:
                    a8:f2:0d:86:67:6b:1c:e7:44:37:38:ae:c3:53:45:
                    d1:ef:d5:64:80:59:20:0e:77:67:26:64:38:bd:8e:
                    b9:9b:88:38:6d:8d:e9:ad:74:e4:1f:78:2b:4b:b1:
                    cb:45:b7:98:26:59:31:41:82:fa:2c:d8:34:ae:3d:
                    36:72:e3:22:20:93:5f:ab:63:69:8f:64:2e:e2:18:
                    d6:11:41:8a:dd:26:cb:2a:dd:0a:9c:94:05:c7:1e:
                    62:c7:69:81:3d:b6:12:69:1e:26:03:e4:bd:b2:65:
                    02:4f:55:61:4f:ee:95:35:2d:35:f5:05:34:62:17:
                    af:7e:af:62:18:0b:07:c4:6c:83:4f:df:7e:11:f3:
                    89:e0:73:17:74:f6:e6:27:b1:59:d2:fd:ef:44:4c:
                    49:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:13:0E:1F:68:7E:45:F1:D5:1D:C8:DA:5A:E5:AB:F1:5D:9A:FF:B2
            X509v3 Authority Key Identifier:
                keyid:3A:E7:64:6C:E6:AD:56:9F:76:16:E6:A6:F6:FD:3B:19:86:BE:D4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:39:31:2b:7a:ae:f0:13:d9:fa:82:2b:99:1c:07:fc:00:3b:
         77:24:f9:de:16:0d:34:a2:cf:12:86:1e:fd:2f:8d:a7:2d:09:
         f9:fe:c3:d3:72:f5:d2:e1:00:7f:98:3d:59:95:45:26:6a:14:
         26:7b:31:4f:f3:ff:38:c9:1b:de:da:42:c5:a8:4b:64:93:ff:
         6f:a9:d8:4c:98:ad:e1:b9:27:66:3d:91:b4:e6:d6:d9:79:1f:
         6c:3a:ba:e8:ae:04:f0:87:34:e8:9f:93:11:c7:45:c7:e2:3e:
         20:5b:32:ef:3c:ec:d4:90:bc:c9:f5:6f:5c:db:7e:7c:be:cf:
         f5:b4:f2:a8:ca:ae:3e:4e:07:22:ab:83:95:a1:5c:3e:4c:31:
         61:69:b5:c1:ce:4d:e4:92:af:88:c8:a4:e1:ca:ef:96:90:08:
         18:f3:3a:f0:7d:af:98:fb:71:65:49:6a:4d:78:83:53:41:f0:
         d9:c9:57:75:13:fd:e5:27:82:1e:42:c6:3a:44:82:07:28:e8:
         03:04:3d:62:9b:16:91:f0:b7:b2:98:70:96:be:3c:20:52:b0:
         28:88:58:e3:ed:c2:c1:24:ce:64:d0:e1:c8:0b:e3:fe:da:0a:
         a1:3f:e0:44:f2:cc:0d:49:5e:0b:ba:dd:74:a3:8f:20:56:7f:
         1c:24:cf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:04:30 2025 by rpki-client