This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
File:                     hXm8J-c9eykQjr_zl_ts_VxrAkc.mft (raw, json)
Hash identifier:          p7pcmIs+Pl4sWxcQEvJBPFRcOIBY8OuirQ0Dk4pKIMY=
Subject key identifier:   56:48:6F:18:0F:6B:E7:14:AE:ED:9A:D7:42:00:4A:EA:55:D0:6F:42
Authority key identifier: 85:79:BC:27:E7:3D:7B:29:10:8E:BF:F3:97:FB:6C:FD:5C:6B:02:47
Certificate issuer:       /CN=F3675292AF/serialNumber=8579BC27E73D7B29108EBFF397FB6CFD5C6B0247
Certificate serial:       02CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
Manifest number:          02C7
Signing time:             Fri 19 Dec 2025 04:01:28 +0000
Manifest this update:     Fri 19 Dec 2025 04:01:27 +0000
Manifest next update:     Sun 21 Dec 2025 04:01:27 +0000
Files and hashes:         1: hXm8J-c9eykQjr_zl_ts_VxrAkc.crl (hash: Taq9HqzNdaA0V7XSk5BDmVMmFgIoSNpkfzPlzIGQ+2U=)
                          2: 0145205ABE9F11EEAB4694AB775412E6.roa (hash: nCtysz82HWpQKRVxjrkp1CPdrS4qO3BX0cqzzKNO/pQ=)
                          3: AC3D4D08BE9E11EEA64FBFAA775412E6.roa (hash: WfYokYZnTAkyut9ZfwPk7g8ZUxso2I/ndS+zQRque/A=)
                          4: 6CE0579ABE9E11EEBC7C69AA775412E6.roa (hash: kSDEs7oP+jey7M4wMBUDf1oTjGdLGimVQ2c+G5EoTkc=)
                          5: D3C327DABE9E11EE993106AB775412E6.roa (hash: JBKixCSDBI+8M+eUfX+NbM+TcRDwKlbGQLGKTvvPJkw=)
                          6: 8F2451D0BE9E11EEBA8196AA775412E6.roa (hash: 4AAd/b+kE9JKp63Wlhwua7XjTGFImGjuMiypLHiKkR8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 716 (0x2cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675292AF, serialNumber=8579BC27E73D7B29108EBFF397FB6CFD5C6B0247
        Validity
            Not Before: Dec 19 04:01:27 2025 GMT
            Not After : Dec 21 04:01:27 2025 GMT
        Subject: CN=6944ce18-6a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1c:84:3a:d1:fb:9b:2c:24:26:9a:41:ac:13:
                    8c:cd:09:b0:5a:76:d6:7e:85:ea:3d:7f:a0:ae:aa:
                    3d:29:61:69:7f:44:3f:41:c2:cc:9a:68:04:e8:9d:
                    f4:6b:71:85:4f:be:90:3b:a4:38:e8:33:4e:5b:4e:
                    da:18:2a:3d:93:3e:f8:f9:cc:e6:d2:bc:e8:53:2f:
                    48:f6:39:05:8d:5e:60:ae:f3:61:2c:fe:88:38:03:
                    df:3b:59:7a:02:5b:b1:72:c5:00:a2:4a:f8:af:10:
                    66:fd:65:11:7f:cc:f1:32:7b:f4:7c:88:82:a6:43:
                    10:ce:a2:9f:02:f8:7e:1f:ae:0f:6e:69:10:5e:a7:
                    94:ba:e8:75:82:fe:e6:a3:87:1d:0b:62:a5:1c:82:
                    56:59:f7:77:8f:67:74:a4:22:d5:57:65:dc:3e:ae:
                    3d:67:9c:f8:bf:d8:3e:67:33:00:72:46:a4:23:69:
                    2a:cb:2b:db:f3:ae:53:fd:8f:27:83:0e:c8:72:2d:
                    6d:20:81:b4:4e:a2:6e:31:a6:e8:b7:9c:1a:de:95:
                    11:4a:6b:b5:db:88:83:e5:df:46:7e:a9:c2:16:22:
                    d5:20:25:05:27:77:c9:74:69:a8:20:0a:4d:af:35:
                    a5:c1:5c:71:ba:65:5c:7a:17:fc:06:15:fc:58:89:
                    88:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:48:6F:18:0F:6B:E7:14:AE:ED:9A:D7:42:00:4A:EA:55:D0:6F:42
            X509v3 Authority Key Identifier:
                keyid:85:79:BC:27:E7:3D:7B:29:10:8E:BF:F3:97:FB:6C:FD:5C:6B:02:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:9a:bb:9e:9c:b7:77:d2:eb:73:55:87:8e:13:ef:6e:4f:e9:
         7b:95:fe:ab:87:a5:03:6f:bb:00:2d:ec:01:e8:ab:3d:41:8b:
         ca:d8:34:8d:ac:6d:bb:69:e6:a4:f5:4f:93:58:26:84:0b:65:
         0c:fa:76:8b:86:16:7f:e9:ec:1f:14:4a:7b:2b:07:06:ee:b4:
         b2:72:8d:03:8e:31:b2:eb:00:50:b3:16:08:66:dd:82:3e:c4:
         32:b4:44:47:83:a8:9c:7e:c6:aa:1d:4e:e8:9f:fd:b6:7f:2e:
         75:50:59:96:e1:8b:91:51:03:60:cc:c0:29:d9:45:8d:8c:03:
         87:2f:a7:f1:98:bb:4d:1e:2e:e2:ef:29:7e:e6:5b:c6:11:12:
         9d:20:02:f9:61:d2:e0:e2:58:0f:03:50:9d:88:40:e8:3b:b7:
         ba:a4:5f:5d:42:ff:69:93:70:19:4a:75:93:e3:44:37:b9:0d:
         1b:96:43:2b:a6:ce:15:8a:6a:93:d7:15:ef:45:78:3c:7b:79:
         c1:52:f1:17:26:e5:80:91:78:08:29:d4:86:a1:8d:95:e8:42:
         10:47:10:0f:dd:07:95:e8:b8:54:c4:00:3b:8d:3d:14:3a:d9:
         0d:b7:30:ab:a4:1e:6c:ad:d5:90:b3:58:64:b4:f0:71:c1:11:
         e1:92:ff:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:39:04 2025 by rpki-client