This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
File:                     hXm8J-c9eykQjr_zl_ts_VxrAkc.mft (raw, json)
Hash identifier:          suJJge2qWSSu5KGxF06YyG7foEmVIcx5wWWe0yLAiOk=
Subject key identifier:   D3:2F:D4:D7:0C:B5:F3:96:39:E7:26:C0:20:EB:8C:5D:44:47:B3:03
Authority key identifier: 85:79:BC:27:E7:3D:7B:29:10:8E:BF:F3:97:FB:6C:FD:5C:6B:02:47
Certificate issuer:       /CN=F3675292AF/serialNumber=8579BC27E73D7B29108EBFF397FB6CFD5C6B0247
Certificate serial:       02C1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
Manifest number:          02BC
Signing time:             Mon 08 Dec 2025 04:00:12 +0000
Manifest this update:     Mon 08 Dec 2025 04:00:11 +0000
Manifest next update:     Wed 10 Dec 2025 04:00:11 +0000
Files and hashes:         1: hXm8J-c9eykQjr_zl_ts_VxrAkc.crl (hash: G8ncIqoZOqJAxUHX+np9+bIJOOtavat2OoxfEqOQxDA=)
                          2: 0145205ABE9F11EEAB4694AB775412E6.roa (hash: nCtysz82HWpQKRVxjrkp1CPdrS4qO3BX0cqzzKNO/pQ=)
                          3: AC3D4D08BE9E11EEA64FBFAA775412E6.roa (hash: WfYokYZnTAkyut9ZfwPk7g8ZUxso2I/ndS+zQRque/A=)
                          4: 6CE0579ABE9E11EEBC7C69AA775412E6.roa (hash: kSDEs7oP+jey7M4wMBUDf1oTjGdLGimVQ2c+G5EoTkc=)
                          5: D3C327DABE9E11EE993106AB775412E6.roa (hash: JBKixCSDBI+8M+eUfX+NbM+TcRDwKlbGQLGKTvvPJkw=)
                          6: 8F2451D0BE9E11EEBA8196AA775412E6.roa (hash: 4AAd/b+kE9JKp63Wlhwua7XjTGFImGjuMiypLHiKkR8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 705 (0x2c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675292AF, serialNumber=8579BC27E73D7B29108EBFF397FB6CFD5C6B0247
        Validity
            Not Before: Dec  8 04:00:11 2025 GMT
            Not After : Dec 10 04:00:11 2025 GMT
        Subject: CN=69364d4c-9a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8e:68:ae:94:23:4f:94:3a:3c:91:24:b0:1d:
                    a6:01:fb:82:cb:0a:cc:d8:58:8b:8c:ed:6b:dc:aa:
                    44:5d:f2:19:85:4f:cd:c7:b6:f5:d3:4f:0d:50:18:
                    aa:cb:4a:3f:e4:73:6d:d9:23:5b:24:a1:11:c2:4a:
                    23:b8:84:33:09:87:5c:e0:bf:ce:79:18:42:2f:9a:
                    07:5f:01:d9:d4:4b:3c:b6:ec:b7:f7:66:3a:a4:15:
                    5c:d9:29:16:e7:fa:c3:6a:86:c1:fc:6b:76:db:10:
                    11:f9:99:ce:8d:78:44:72:5c:69:86:e1:06:f3:1b:
                    63:54:84:43:b9:15:39:fe:71:a0:5f:8e:ae:05:d2:
                    80:27:3d:7e:4d:d1:31:5c:c6:96:8a:ca:c7:21:79:
                    00:5e:8c:22:6e:22:d2:56:e2:ab:6f:04:49:73:f2:
                    62:73:a5:ab:c0:cf:f6:c6:23:b2:45:97:75:ac:ae:
                    b5:b2:85:b4:88:d2:23:84:86:80:6a:79:c5:5c:31:
                    db:d7:2c:89:de:a2:1b:a8:74:ef:f7:5a:aa:91:98:
                    fc:f2:b7:6e:50:48:c1:eb:99:6b:e9:4d:7d:cb:e4:
                    47:dc:8d:e7:48:00:fb:ff:46:08:22:0b:33:ba:ee:
                    dc:6c:2d:ad:fa:d9:c5:ee:73:e2:53:6d:92:4e:b6:
                    ce:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2F:D4:D7:0C:B5:F3:96:39:E7:26:C0:20:EB:8C:5D:44:47:B3:03
            X509v3 Authority Key Identifier:
                keyid:85:79:BC:27:E7:3D:7B:29:10:8E:BF:F3:97:FB:6C:FD:5C:6B:02:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:65:af:99:a6:a0:c4:e7:88:86:1e:45:4d:91:26:12:64:56:
         3b:17:82:15:42:22:16:c8:be:13:88:5f:52:41:94:44:e1:97:
         e9:52:03:c5:1e:32:90:1a:97:30:a3:48:c3:93:7a:26:94:10:
         9d:8c:35:a1:95:40:64:9f:3e:8e:ac:4a:81:73:4e:49:48:bb:
         5f:1f:65:ee:2b:52:79:09:ce:de:9b:44:30:3d:c0:62:91:3e:
         9e:14:02:05:fb:c0:fb:15:89:65:78:60:62:a3:6c:8a:eb:df:
         61:e9:38:2a:e7:ef:89:9f:ec:68:f7:95:f2:ee:18:7a:e0:4e:
         94:8f:8f:82:0b:71:f0:f8:90:eb:86:bd:4d:15:bf:dc:d0:4b:
         0b:bc:28:a8:59:66:be:f6:a2:1c:5c:a0:f2:52:73:90:d0:65:
         a6:15:21:54:9f:ed:10:49:5b:0e:88:66:b7:b1:e0:17:78:09:
         d9:35:c1:cb:a0:70:7a:ea:5a:3b:63:45:f4:d2:13:a9:22:7c:
         83:f5:1a:38:20:00:3b:ec:dd:f5:9d:8b:88:69:6f:1d:42:c9:
         a8:50:7f:3e:bc:7e:62:63:35:78:17:58:38:46:27:18:e4:ae:
         a4:ad:5d:75:c6:72:bd:e3:d6:84:a1:7b:a1:13:c9:c1:50:ad:
         f7:ea:22:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:20:49 2025 by rpki-client