This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
File:                     yLuITQS6vBYFq333lYeWBZySwmo.mft (raw, json)
Hash identifier:          4Snlk7bXRwwCHwzzK3yLFW2lK89d/HCNSXMcuTD+Hxg=
Subject key identifier:   C8:70:2C:F7:4A:B2:F9:DE:77:6C:30:9B:24:D6:D1:23:C6:19:B1:D5
Authority key identifier: C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A
Certificate issuer:       /CN=F3670369AF/serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
Certificate serial:       05AD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
Manifest number:          05AC
Signing time:             Sat 06 Dec 2025 02:37:20 +0000
Manifest this update:     Sat 06 Dec 2025 02:37:19 +0000
Manifest next update:     Mon 08 Dec 2025 02:37:19 +0000
Files and hashes:         1: yLuITQS6vBYFq333lYeWBZySwmo.crl (hash: 5X+bDH+Fh3/qJvU0fJwYnYUIkyg9aL6HTrAKpPk3oDM=)
                          2: DBE0F6EE7E8C11EC9A551E885A40D577.roa (hash: e+LkqN78DWuhBsqL8FFr5mWtusQpgR9pzmjfGcJQ5/w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1453 (0x5ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AF, serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
        Validity
            Not Before: Dec  6 02:37:19 2025 GMT
            Not After : Dec  8 02:37:19 2025 GMT
        Subject: CN=693396e0-eba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:09:b7:78:cf:9c:7e:e3:25:c8:8b:a3:89:af:
                    06:c1:5a:cb:be:bc:df:4f:3a:58:df:ed:6d:38:51:
                    4b:6f:9b:94:bf:ff:1a:68:35:0f:3a:d6:1d:8b:59:
                    10:d1:73:4d:0c:cf:2b:e4:1a:c5:82:d4:4f:e0:ac:
                    e2:04:52:0b:77:62:1c:3d:da:e4:2a:6b:b4:79:e5:
                    b5:09:da:f2:3d:c6:ba:ae:6c:92:28:0e:3f:4d:9d:
                    09:56:40:eb:01:59:97:72:f5:73:9d:a9:2d:83:2a:
                    6c:09:17:dc:cb:bc:27:cc:aa:c8:48:08:59:b9:78:
                    dd:3e:bd:0c:62:99:19:3d:7f:e8:15:d9:05:63:6d:
                    94:52:d6:53:c5:c8:37:12:c7:94:c6:3e:83:93:11:
                    0a:f4:16:8d:20:a3:1b:4c:ec:a6:1e:c7:ed:04:ad:
                    f7:66:30:4e:d9:23:04:17:10:ea:90:4c:07:22:a1:
                    09:16:23:8e:f4:2e:e0:af:2f:0a:7b:96:2d:c7:7c:
                    f2:f9:7b:71:08:9f:ed:9c:01:48:3b:58:48:f7:ac:
                    c0:26:c6:13:47:eb:b0:37:f0:f3:85:b1:05:15:a0:
                    d7:e0:22:27:8c:78:95:df:98:93:fc:98:34:98:df:
                    35:f7:00:62:86:23:db:0f:5b:38:f7:0b:9b:f9:19:
                    27:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:70:2C:F7:4A:B2:F9:DE:77:6C:30:9B:24:D6:D1:23:C6:19:B1:D5
            X509v3 Authority Key Identifier:
                keyid:C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7b:42:20:2f:d1:b4:62:37:93:68:0c:cb:f5:e5:79:dd:cb:
         e3:ea:ec:b7:e6:20:b0:57:fc:00:d3:c1:48:c3:b0:51:34:ff:
         ac:26:2b:cf:57:aa:08:49:b7:36:84:b0:64:94:3f:b9:4d:7e:
         af:18:1d:e4:bf:e8:8f:5e:d6:59:12:d3:b1:ff:21:34:35:27:
         0b:2b:ee:ce:52:61:b3:37:5c:61:e9:14:bc:44:8f:7f:b6:4b:
         7c:13:64:fb:c5:c5:c9:42:db:d3:f9:d4:e1:7d:08:2c:94:ff:
         34:63:99:61:66:39:7f:47:4e:76:9d:e2:35:c6:d4:92:44:f4:
         83:2a:27:ad:99:64:57:08:ac:7e:b7:1d:7b:a6:4f:b4:1a:84:
         4c:cb:a6:1d:82:d7:14:6c:ec:75:b8:bc:3a:57:dd:4e:70:fd:
         03:36:b8:c8:c0:47:4a:88:39:23:9e:da:f5:de:c0:e6:99:6c:
         dd:c2:5a:26:50:da:ce:46:4d:ee:63:7a:b3:ac:37:45:e5:9b:
         0b:d8:43:28:4b:31:27:97:73:3e:d0:bf:e3:77:d7:0b:17:c8:
         cc:69:48:53:73:f9:63:45:bb:46:6e:43:ce:dc:f1:dd:63:f0:
         45:c8:0e:37:de:a2:f3:98:bd:6a:cc:b1:7a:05:4a:33:0a:76:
         69:56:81:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:57:23 2025 by rpki-client