This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
File:                     9rZiLcWmAFKfv9HBwPfJi_yJClA.mft (raw, json)
Hash identifier:          SaN7p/c2dzqIbh2ChE8W55opgrdGkRc84P8hdGcmQcA=
Subject key identifier:   47:53:E7:CB:7D:C5:8F:0F:EB:8F:2D:4F:86:79:8E:BD:54:93:5E:80
Authority key identifier: F6:B6:62:2D:C5:A6:00:52:9F:BF:D1:C1:C0:F7:C9:8B:FC:89:0A:50
Certificate issuer:       /CN=F366BE85AF/serialNumber=F6B6622DC5A600529FBFD1C1C0F7C98BFC890A50
Certificate serial:       0152
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9rZiLcWmAFKfv9HBwPfJi_yJClA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
Manifest number:          0150
Signing time:             Mon 08 Dec 2025 04:46:41 +0000
Manifest this update:     Mon 08 Dec 2025 04:46:41 +0000
Manifest next update:     Wed 10 Dec 2025 04:46:41 +0000
Files and hashes:         1: 9rZiLcWmAFKfv9HBwPfJi_yJClA.crl (hash: KRPyWPsGFfonUXUNg4ivgZqvaqZsdRRWyrg2pxD3bxA=)
                          2: 0138B876D29211EF9CA02783762E951A.roa (hash: 9Qo2BZpMY9XAgQ8sDtXz6FwY6T65u4EtYgo8ZKdICJA=)
                          3: 48197A8CD29211EF9C4B9D83762E951A.roa (hash: mZ9kRI2tetEX+zkrcuQdcEIANnKP7GMoF4oNcGCNj88=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9rZiLcWmAFKfv9HBwPfJi_yJClA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366BE85AF, serialNumber=F6B6622DC5A600529FBFD1C1C0F7C98BFC890A50
        Validity
            Not Before: Dec  8 04:46:41 2025 GMT
            Not After : Dec 10 04:46:41 2025 GMT
        Subject: CN=69365831-2f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c1:39:45:cb:40:6d:0c:df:44:c3:5b:a6:45:
                    29:f7:06:16:23:83:56:50:c3:44:57:c1:db:5f:e9:
                    59:89:29:4c:56:32:f5:cf:ba:08:3c:e4:a1:c6:e3:
                    43:30:72:5c:27:5b:23:5f:5e:2e:d4:44:f5:f7:94:
                    93:30:cb:52:40:4a:f9:19:92:03:58:cf:4c:1a:be:
                    3c:d8:27:12:35:d6:e9:e1:e8:d2:b7:72:d9:e7:fe:
                    f9:74:b9:d1:10:25:27:f6:d0:27:ab:2f:61:46:9c:
                    82:24:61:32:e1:3f:af:2a:d1:a1:e0:c1:26:64:f8:
                    c2:08:c7:34:07:44:df:57:2c:9b:81:d6:8a:52:00:
                    9a:1b:37:ba:ed:a4:fe:30:68:44:38:fe:11:0a:12:
                    cf:19:e0:a7:5e:a0:e2:95:1a:d1:39:96:33:17:ef:
                    ca:9f:43:b4:d8:ec:af:fd:1d:b2:9d:51:7a:36:13:
                    7e:82:51:1d:31:59:3c:6d:08:02:36:4b:ec:9b:69:
                    a5:a1:c6:73:ce:83:9f:e1:9a:91:65:1f:72:d2:eb:
                    ae:1d:35:62:fc:b0:35:44:8f:31:51:1c:c7:ff:1d:
                    80:d3:d6:a6:99:cc:cd:55:6c:42:97:ba:b4:c3:db:
                    3a:45:7a:e4:e4:e5:11:f4:2e:de:2a:02:f4:1c:1a:
                    02:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:53:E7:CB:7D:C5:8F:0F:EB:8F:2D:4F:86:79:8E:BD:54:93:5E:80
            X509v3 Authority Key Identifier:
                keyid:F6:B6:62:2D:C5:A6:00:52:9F:BF:D1:C1:C0:F7:C9:8B:FC:89:0A:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9rZiLcWmAFKfv9HBwPfJi_yJClA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:9a:b9:cb:3e:22:b6:98:e5:29:45:99:e3:ed:f2:b5:ee:2c:
         88:40:c7:06:e9:d0:b8:ac:06:6f:8f:55:70:58:3d:fb:24:dc:
         a4:3b:10:88:da:55:f2:3a:20:5d:1e:f9:d8:a2:05:c2:60:59:
         b6:2d:72:4c:31:e8:06:9d:40:ac:ed:80:b4:f0:7e:40:22:b2:
         e3:09:bf:81:3c:87:93:89:92:66:2f:a5:18:d5:b8:e7:31:28:
         ab:a7:15:6e:41:13:e9:ba:21:6d:c6:18:01:2c:49:3f:4a:d3:
         e5:0d:42:86:24:01:10:4c:7c:04:ed:cd:e4:bb:df:46:a9:10:
         b5:fd:41:a8:82:91:7c:d7:22:e4:9c:9b:3f:10:4c:9f:e8:d4:
         ac:2c:27:88:88:bc:ed:9e:23:3d:1e:48:dd:8a:9c:38:77:3d:
         f4:19:6c:79:75:22:73:4a:7c:e4:f0:db:dc:bf:67:7f:54:f6:
         59:a4:49:9b:18:8c:c7:21:d2:6a:1f:26:75:95:17:67:d5:18:
         99:09:87:8b:79:72:97:e7:c1:c8:6b:32:03:da:70:63:dd:9f:
         b0:c3:fb:dd:ff:54:fe:34:a9:fe:5f:24:9f:f0:b8:05:91:95:
         67:fe:bf:45:b8:b1:04:ef:86:81:29:d5:6f:b1:2e:06:68:79:
         ad:81:04:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 09:09:04 2025 by rpki-client