This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.mft
File:                     OGKY2dDrccqQ9IahYTSvE2HSccg.mft (raw, json)
Hash identifier:          yODoXY375Lnv649uXU8GmFxozPJvul2fQkNlTmQP7H8=
Subject key identifier:   94:4E:94:A7:E7:4C:A0:F2:D6:0A:07:51:8F:91:93:52:24:34:37:53
Authority key identifier: 38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
Certificate issuer:       /CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Certificate serial:       0729
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.mft
Manifest number:          0719
Signing time:             Mon 08 Dec 2025 02:01:36 +0000
Manifest this update:     Mon 08 Dec 2025 02:01:36 +0000
Manifest next update:     Wed 10 Dec 2025 02:01:36 +0000
Files and hashes:         1: OGKY2dDrccqQ9IahYTSvE2HSccg.crl (hash: CXgHv7Qfz8iZND/eS5mKD6jg6DIJ8mC/GjGYoSxOHs0=)
                          2: 93497D1A4C2611EFB22D3094762E951A.roa (hash: VZHe+souUw5aWOV71j+5Y+w4oxLPzuiUD+rog51iDBY=)
                          3: 6774FF984C2611EFAB787290762E951A.roa (hash: 0dIOFSVxQkLwHxAoSEdUvKLHLyqgqQBcdK0Lf04L/TI=)
                          4: FDEB70D44C2511EF8146B08F762E951A.roa (hash: YfjMYIsbDX25SzCOYvPBuiMEogU2K4oEpLmtCkvxr6M=)
                          5: 24334B044C2611EFB6131890762E951A.roa (hash: /PBSUrG2kmaQYOQ7rAIFdSZtAvLFjg1IMKGRzA5SlyU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1833 (0x729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366D2C6AF, serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
        Validity
            Not Before: Dec  8 02:01:36 2025 GMT
            Not After : Dec 10 02:01:36 2025 GMT
        Subject: CN=69363180-8904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4c:99:f6:b5:d6:5c:21:33:f3:b2:7f:5c:2d:
                    db:45:e0:61:bf:e8:6d:d2:2b:15:44:16:87:2b:6b:
                    21:08:3c:64:c4:a3:14:fc:34:52:30:25:05:c6:08:
                    96:bb:12:13:b1:78:b6:68:c8:55:11:9b:da:b2:6e:
                    9b:9a:73:06:20:b7:98:fc:aa:88:94:59:ab:d1:f3:
                    65:47:34:8e:05:f2:d2:c6:e7:83:c8:28:7c:59:29:
                    d9:71:fc:9f:cd:f2:7e:43:79:77:59:a8:92:6b:7a:
                    6e:6a:66:85:ec:49:54:20:fb:59:18:88:f7:1c:37:
                    a5:f9:62:4b:7b:c0:b4:45:a7:ff:78:0e:8d:5e:44:
                    ec:a9:47:fa:64:15:6a:bf:fb:9a:c1:a3:cb:df:71:
                    e9:62:04:95:ba:27:7c:72:40:ea:e1:08:c8:f6:86:
                    03:d6:33:c2:54:7f:5b:92:bc:22:e3:73:2b:e6:8d:
                    03:6c:63:01:06:e5:a6:bf:a0:1d:10:fd:59:49:9d:
                    eb:44:94:a9:73:0a:b6:59:ca:df:16:4d:45:a2:19:
                    9b:4a:3b:d2:e9:f3:19:e0:76:ff:8a:19:f5:3f:dd:
                    fe:65:bd:73:ad:29:67:a2:d3:8b:28:e7:50:d8:5d:
                    1d:bf:3b:25:ff:b0:7f:4f:e8:47:bf:3c:15:88:72:
                    51:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4E:94:A7:E7:4C:A0:F2:D6:0A:07:51:8F:91:93:52:24:34:37:53
            X509v3 Authority Key Identifier:
                keyid:38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:1e:cd:84:9e:a0:93:bf:7b:0a:05:2b:be:3a:2b:fe:11:1b:
         bc:72:28:63:21:2a:cb:15:99:57:9d:d2:2c:59:16:e5:0b:23:
         e4:a7:60:b2:2f:6e:49:94:e5:1b:63:71:76:0c:7a:d7:5a:11:
         0a:cc:8f:c8:69:fe:fd:12:90:e7:3b:79:67:b2:5e:91:ef:03:
         6d:fb:3e:13:c4:7c:fe:1a:8d:50:15:ac:fe:97:a0:38:0f:43:
         0a:bb:9e:e4:cc:d5:5f:bb:7c:60:29:04:1d:71:c1:86:c2:38:
         68:65:9b:c1:f5:3a:fb:7b:23:c1:f1:19:ea:32:7d:f4:65:9f:
         17:15:58:9d:e1:7f:7e:50:30:2e:20:23:d4:44:da:52:b8:2e:
         d2:97:75:4f:09:a9:55:4d:44:2e:44:f8:6e:9f:b7:08:1b:4e:
         43:1d:93:d3:42:c9:22:e0:63:45:40:e6:98:18:ef:8b:9d:71:
         0e:f7:ea:74:ad:ae:de:ec:6a:2b:c5:9c:f4:f8:09:56:48:f5:
         d6:55:87:a2:60:54:a8:a5:84:15:56:6f:39:5b:ad:51:5f:23:
         36:94:56:a0:32:41:52:e3:71:bf:6a:7c:b9:a3:f1:49:93:d6:
         38:5b:65:40:cb:9f:cf:64:a0:0b:4f:f4:2b:c1:c8:79:78:44:
         e6:b1:64:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:04:48 2025 by rpki-client