This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
File:                     DV2bCS_jnIf5O8uUysP2yR0WyOs.mft (raw, json)
Hash identifier:          VkDvYQ9V+KNrOAPbThQVxo6PoI8TUc2OCE0hKhjjFlg=
Subject key identifier:   78:53:78:99:AF:67:DC:A5:0F:63:92:33:47:7C:04:79:68:06:16:54
Authority key identifier: 0D:5D:9B:09:2F:E3:9C:87:F9:3B:CB:94:CA:C3:F6:C9:1D:16:C8:EB
Certificate issuer:       /CN=F367890AAF/serialNumber=0D5D9B092FE39C87F93BCB94CAC3F6C91D16C8EB
Certificate serial:       09AD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DV2bCS_jnIf5O8uUysP2yR0WyOs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
Manifest number:          09A3
Signing time:             Sat 06 Dec 2025 01:22:55 +0000
Manifest this update:     Sat 06 Dec 2025 01:22:54 +0000
Manifest next update:     Mon 08 Dec 2025 01:22:54 +0000
Files and hashes:         1: DV2bCS_jnIf5O8uUysP2yR0WyOs.crl (hash: tHWvJTUBvV6otGHj05Tgz5VGCwTzv1VT3Pu+ELT3j5Q=)
                          2: 1CD89842944B11EA8D91181BF8AEA228.roa (hash: G8QTB1cDSlhFc1aM1m+wP1xl5Ubb7Vbu7br4H677GAs=)
                          3: 1385324820B311EA8A79CB75F8AEA228.roa (hash: E+0kaNnyaz2XaAgp2UmW3UiOevGh8K77GCjxHRNxjgk=)
                          4: 8CD6FED820B311EAAC843476F8AEA228.roa (hash: Gf1aru2E3Yggqz5sr3+VkWloIXes+1L3V6Xe+EwFJW4=)
                          5: 6C0163EC20B311EAB8D01576F8AEA228.roa (hash: qKJSwkjO0UEEtt3fvEcg777sLhnc5F/s5CDz6fXaO0M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DV2bCS_jnIf5O8uUysP2yR0WyOs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2477 (0x9ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367890AAF, serialNumber=0D5D9B092FE39C87F93BCB94CAC3F6C91D16C8EB
        Validity
            Not Before: Dec  6 01:22:54 2025 GMT
            Not After : Dec  8 01:22:54 2025 GMT
        Subject: CN=6933856f-d313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f9:67:06:3d:9d:a2:ad:b3:d4:54:85:2b:92:
                    98:44:52:d4:4c:7b:67:5d:e2:61:5f:af:b8:73:4e:
                    22:e1:aa:db:31:29:bf:15:1a:59:b6:95:07:09:61:
                    bd:e2:fc:6a:e3:6c:45:da:ac:a5:e3:46:96:8b:e9:
                    0a:a7:cb:5c:2a:18:7b:aa:c0:24:0c:25:b7:2f:1b:
                    58:9c:b1:b2:3b:80:96:af:f9:23:b9:5c:a0:db:77:
                    a5:31:a0:6a:97:89:a2:8e:d4:f9:49:41:0f:1b:60:
                    6b:a2:df:0c:22:8c:22:a8:67:90:40:8d:6d:8e:5a:
                    ef:57:79:a4:3b:a4:4a:3b:4c:05:45:46:73:fb:62:
                    a7:bd:79:8d:da:82:a4:b9:96:eb:d0:d7:2b:55:22:
                    4d:22:0f:67:4d:db:25:28:e0:45:4a:f5:08:de:e2:
                    50:90:7f:5f:5e:f5:d1:6b:8a:73:b4:96:ed:e6:32:
                    12:65:cc:60:42:ab:20:8d:1f:63:52:23:99:41:98:
                    b3:eb:80:a7:20:cf:08:c9:0d:ce:45:cd:09:e7:ba:
                    98:37:6e:2d:0a:d5:1c:91:46:48:1a:98:ff:4f:56:
                    e4:0a:f9:f1:81:dc:0f:0e:3f:63:e6:3b:2a:0c:ff:
                    7d:3b:94:79:64:41:cd:fb:43:96:42:93:8d:31:12:
                    dc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:53:78:99:AF:67:DC:A5:0F:63:92:33:47:7C:04:79:68:06:16:54
            X509v3 Authority Key Identifier:
                keyid:0D:5D:9B:09:2F:E3:9C:87:F9:3B:CB:94:CA:C3:F6:C9:1D:16:C8:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DV2bCS_jnIf5O8uUysP2yR0WyOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:f4:e7:82:8a:4f:5d:6b:5b:ee:e1:a9:a3:ef:cf:9f:a4:0d:
         ff:64:6b:d0:34:0d:fa:cf:c1:84:5e:7e:2f:e5:59:63:89:d7:
         67:6e:9b:66:36:f1:f2:5c:57:6a:18:ad:ef:77:55:7e:f4:93:
         ce:d6:da:90:95:35:3d:20:94:7c:15:91:9a:08:86:76:03:f8:
         a4:b4:e9:40:44:2d:a3:bc:96:98:e0:e9:5a:87:0c:64:f5:60:
         d4:f3:be:4b:78:46:fb:a0:28:e3:56:ef:1b:bf:95:33:66:d2:
         e5:5f:b4:9d:b4:c6:46:0c:b8:3b:ee:b2:65:20:33:a2:ba:a1:
         47:0a:b7:27:71:68:e5:3f:ea:d8:b0:2f:e7:b5:f3:7a:c7:15:
         c3:c1:75:e0:79:ad:90:75:ec:95:46:c4:69:6e:d8:b8:2c:52:
         59:fc:85:c7:f4:5b:42:14:82:53:ac:a5:b9:7b:1b:ad:06:53:
         29:e9:39:07:21:43:f5:c5:8e:57:45:5b:de:12:a4:18:05:51:
         d9:09:96:03:69:f1:9c:33:56:e2:8c:1d:03:fa:59:b7:66:45:
         dc:6b:7c:db:90:45:ee:1d:68:6c:8f:ae:08:93:db:bf:5f:03:
         6b:66:11:b1:5c:2b:27:96:1d:e5:22:48:6e:63:a0:71:f8:ad:
         80:65:42:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:48:41 2025 by rpki-client