This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
File:                     bJsrNyrAnSupJEghWppeH0zsS-g.mft (raw, json)
Hash identifier:          qr6ZNJwtnym3qwucpdVmjOkGtVGhQMM40tyaVTxaj1U=
Subject key identifier:   EB:46:6A:00:CD:14:C6:AC:16:64:30:56:1D:38:8E:3E:E8:BF:10:D1
Authority key identifier: 6C:9B:2B:37:2A:C0:9D:2B:A9:24:48:21:5A:9A:5E:1F:4C:EC:4B:E8
Certificate issuer:       /CN=F3676F2FAF/serialNumber=6C9B2B372AC09D2BA92448215A9A5E1F4CEC4BE8
Certificate serial:       04A6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bJsrNyrAnSupJEghWppeH0zsS-g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
Manifest number:          04A5
Signing time:             Mon 08 Dec 2025 03:03:57 +0000
Manifest this update:     Mon 08 Dec 2025 03:03:57 +0000
Manifest next update:     Wed 10 Dec 2025 03:03:57 +0000
Files and hashes:         1: bJsrNyrAnSupJEghWppeH0zsS-g.crl (hash: fINohSVPBBxFjRmAKg4RxsOzfYULQ640KIA8l+DD8O0=)
                          2: 3BBFB47A4BC311ED9F58BEACF1222468.roa (hash: Bo9mawZxkmKbqi5DFrR6q3VVhH05Go5EaTiUlVdrV5Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bJsrNyrAnSupJEghWppeH0zsS-g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1190 (0x4a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676F2FAF, serialNumber=6C9B2B372AC09D2BA92448215A9A5E1F4CEC4BE8
        Validity
            Not Before: Dec  8 03:03:57 2025 GMT
            Not After : Dec 10 03:03:57 2025 GMT
        Subject: CN=6936401d-8a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:86:08:d8:d4:66:73:46:bd:15:1a:bd:77:8e:
                    3d:58:14:2b:87:a1:d2:fa:03:1a:9f:31:f4:1e:56:
                    3a:dc:c8:1a:6b:f7:9d:2e:3d:21:c5:e7:aa:4f:ea:
                    c9:49:48:0a:f4:8f:bd:96:93:0c:3c:25:b3:7a:75:
                    c9:03:70:87:4b:1e:d5:9b:52:56:5e:7d:ed:d0:3f:
                    e6:97:1f:9c:7f:ed:d8:41:57:5a:d3:62:1d:54:38:
                    bb:e4:ce:9c:1d:00:4c:0f:8d:c9:1a:b0:55:3a:00:
                    c8:40:82:2a:0d:9f:5b:8a:fe:2a:e7:56:28:5e:31:
                    18:b0:ab:05:5f:49:37:59:ec:2b:22:5c:0d:20:4e:
                    82:7d:af:f0:b0:0b:39:4b:ff:81:69:b7:6e:23:49:
                    8d:7e:c4:16:fb:b6:18:b3:b0:10:d1:5f:1a:e1:95:
                    2d:12:48:ee:5f:c3:88:03:06:44:ef:e6:c1:ab:de:
                    a2:a8:62:8a:ff:49:27:a9:ad:b5:11:01:3c:4b:1e:
                    80:12:db:d7:02:59:06:1d:f7:a3:8b:14:64:23:b8:
                    a7:1d:a8:a2:19:2f:f2:fa:9a:2c:a1:fc:f7:8f:71:
                    2e:d9:4c:23:c2:9e:a5:2a:65:06:4e:98:a4:9c:ec:
                    72:65:17:c9:de:99:52:d8:76:55:3e:2e:c5:7c:18:
                    05:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:46:6A:00:CD:14:C6:AC:16:64:30:56:1D:38:8E:3E:E8:BF:10:D1
            X509v3 Authority Key Identifier:
                keyid:6C:9B:2B:37:2A:C0:9D:2B:A9:24:48:21:5A:9A:5E:1F:4C:EC:4B:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bJsrNyrAnSupJEghWppeH0zsS-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2a:6c:a0:85:9e:eb:76:15:5c:6d:af:08:f8:63:1a:d9:78:
         05:08:ba:10:16:d0:7f:db:8b:b8:b9:ba:3e:08:78:72:1f:1f:
         a0:bb:ac:f4:ba:67:08:f3:26:a9:b3:91:f7:54:49:1a:ea:f3:
         d7:48:c7:63:2d:c1:5f:73:56:37:15:80:4a:e8:c1:43:2c:17:
         2f:dc:de:ca:fc:b5:96:de:a3:ff:15:6d:f8:70:fa:b5:d7:fc:
         58:02:6b:51:3a:28:3c:34:6f:5e:a2:35:5a:37:74:6c:85:39:
         71:b4:d8:43:49:66:e2:21:f7:75:93:60:7d:82:ef:5d:c4:16:
         d5:2c:1b:c9:dc:fb:aa:a2:1e:ef:bb:78:de:bb:6b:6b:92:de:
         9f:99:ae:84:8f:fd:0d:35:f0:25:ce:46:44:91:5b:d8:a0:64:
         e9:fc:4f:6e:3f:9a:48:20:bc:e6:cb:38:eb:b3:5b:09:e2:34:
         de:0b:bb:e5:c9:d6:2d:64:d7:2c:b9:27:93:04:71:44:a9:99:
         83:23:0e:a2:f4:df:b5:79:4b:3e:f0:09:b0:2d:9a:79:46:cd:
         e4:e4:17:a9:50:9a:60:af:99:b5:18:40:a6:df:0f:00:33:e4:
         75:1e:0c:3d:dd:b7:8b:87:97:7c:75:b7:1f:7d:05:9c:df:e8:
         e9:14:c1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:24:45 2025 by rpki-client