This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
File:                     0CXaySkNvUCEbGSPrcyfxnGGtjI.mft (raw, json)
Hash identifier:          wU4GJuq3e4BgFFLEt1DfgX0qQqH2BWvpG2UAJSxn9LQ=
Subject key identifier:   C9:92:6A:F3:8E:36:1E:E3:8C:1E:10:B2:90:C4:E4:46:E2:58:01:EE
Authority key identifier: D0:25:DA:C9:29:0D:BD:40:84:6C:64:8F:AD:CC:9F:C6:71:86:B6:32
Certificate issuer:       /CN=F367B3F2AF/serialNumber=D025DAC9290DBD40846C648FADCC9FC67186B632
Certificate serial:       08DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0CXaySkNvUCEbGSPrcyfxnGGtjI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
Manifest number:          08DD
Signing time:             Mon 08 Dec 2025 01:38:52 +0000
Manifest this update:     Mon 08 Dec 2025 01:38:51 +0000
Manifest next update:     Wed 10 Dec 2025 01:38:51 +0000
Files and hashes:         1: 0CXaySkNvUCEbGSPrcyfxnGGtjI.crl (hash: qjgC+HmBRgqt4b/uV81c5SI7OFF43oqB2ZEKqVgg884=)
                          2: C0B60E1809D611EA8CC3F860F8AEA228.roa (hash: 90ECyuBdPNmxRJAqpaW1o3jdvLDow9bMz084syJod/o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0CXaySkNvUCEbGSPrcyfxnGGtjI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2270 (0x8de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B3F2AF, serialNumber=D025DAC9290DBD40846C648FADCC9FC67186B632
        Validity
            Not Before: Dec  8 01:38:51 2025 GMT
            Not After : Dec 10 01:38:51 2025 GMT
        Subject: CN=69362c2c-fc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d8:64:dc:7d:57:d4:d2:c3:fd:e6:9d:1e:ca:
                    09:d4:c1:6d:8c:a8:c5:4a:0f:0c:11:c1:32:0e:07:
                    09:d7:0d:51:4a:6e:30:1a:26:df:ec:e6:61:27:cf:
                    23:88:6c:2d:7b:83:30:39:03:49:e6:44:c9:07:9d:
                    45:84:8c:46:94:f3:f3:a0:f4:37:15:d9:d1:f0:18:
                    2f:4a:07:a2:50:e1:cf:fd:fc:9a:d5:c5:9c:16:49:
                    98:bc:21:37:c2:37:26:2e:3e:9d:92:b6:c8:9a:b5:
                    2a:c5:82:62:93:94:9a:26:3a:9e:3d:c4:fa:28:1c:
                    e6:7d:a7:b6:7e:de:08:67:4f:8a:c2:df:e2:12:71:
                    17:a9:e3:bd:5e:72:f3:ff:ea:8f:91:e9:6f:f9:29:
                    ca:92:94:5f:7c:3e:19:4b:1f:a4:42:b3:b2:26:e1:
                    ef:b5:a9:41:2e:b9:f0:47:04:b1:a0:7a:b7:a7:50:
                    83:2a:a6:ea:f9:22:d1:48:3e:82:9f:b6:e3:0c:ec:
                    33:6d:b7:72:4c:27:d7:8c:d0:47:28:e0:f7:ac:71:
                    52:5e:35:fd:4c:b4:90:0c:dd:43:17:26:95:82:63:
                    18:af:31:a9:e5:38:e1:f2:a8:ea:f5:dc:f3:07:56:
                    91:2a:dd:d7:a2:76:aa:e6:18:dc:1e:45:91:13:2d:
                    74:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:92:6A:F3:8E:36:1E:E3:8C:1E:10:B2:90:C4:E4:46:E2:58:01:EE
            X509v3 Authority Key Identifier:
                keyid:D0:25:DA:C9:29:0D:BD:40:84:6C:64:8F:AD:CC:9F:C6:71:86:B6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0CXaySkNvUCEbGSPrcyfxnGGtjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f8:6a:11:5d:d7:a5:31:e7:9d:80:c5:5f:47:f7:9c:84:35:
         f5:e0:6b:db:c3:74:50:ea:99:39:60:24:25:8a:0c:64:ee:9f:
         0f:8f:ff:78:c9:69:e0:7e:20:91:9b:f2:48:dc:c8:67:c2:c2:
         55:de:62:0b:ca:a0:63:92:c6:8e:95:75:22:28:09:b2:de:da:
         c5:2b:58:d4:79:47:be:1c:32:50:b3:82:fa:91:f8:ed:87:c1:
         5a:cf:ae:5e:f5:b7:cf:65:c3:d6:36:50:e1:94:37:d4:09:3b:
         58:d7:09:6b:09:72:6a:21:fa:9e:d5:36:31:a6:fa:25:5d:29:
         ad:44:60:b3:ae:03:54:5b:de:8c:63:10:0d:e2:37:f7:da:6a:
         b8:a7:76:a6:3b:b1:3a:01:c1:0f:ba:11:8f:4f:49:3a:be:44:
         ed:3b:a0:73:a7:a1:81:9c:b0:fe:bc:b0:22:ba:e2:7e:03:db:
         48:f9:2f:24:02:18:f4:34:cc:ec:ec:da:79:16:de:eb:be:07:
         b6:f9:3e:d8:c4:75:57:f4:15:72:a5:c0:04:7a:ea:61:be:9b:
         e9:7d:a8:eb:ac:ea:20:9b:b9:84:a7:6f:d7:b2:84:22:a7:37:
         4b:a0:3b:3b:8e:f4:9a:b3:a1:9a:c9:b0:ab:02:f6:53:4a:f5:
         cf:25:fb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:24:45 2025 by rpki-client