This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft
File:                     VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft (raw, json)
Hash identifier:          UAgOi32ti4oCpedcrU1nQOs8ojodkD9pg4P7q0zmMtk=
Subject key identifier:   DC:E5:29:FC:74:4A:77:3B:A0:36:5D:E2:2F:38:27:F9:E1:A7:26:52
Authority key identifier: 56:92:45:ED:F8:EF:53:DD:25:E0:09:5A:12:48:5B:17:0F:10:EC:3E
Certificate issuer:       /CN=F367D0C5AF/serialNumber=569245EDF8EF53DD25E0095A12485B170F10EC3E
Certificate serial:       0442
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft
Manifest number:          043C
Signing time:             Mon 08 Dec 2025 03:13:49 +0000
Manifest this update:     Mon 08 Dec 2025 03:13:48 +0000
Manifest next update:     Wed 10 Dec 2025 03:13:48 +0000
Files and hashes:         1: VpJF7fjvU90l4AlaEkhbFw8Q7D4.crl (hash: t39olcz+NHvpGsh+PNO2IMbR8d6uQwmPNGIkCJknxaU=)
                          2: C3F993AA4FBF11EEACD401854AD9E6FC.roa (hash: I8EhRjgX/9Wi35S6e4fIvvz4/bj2O5Af3wO7EY6GkL8=)
                          3: 75D45A244FC511EEA3EDD8174AD9E6FC.roa (hash: AJ4mpEAFqwRW0zNhqToyH/o3VDekL5cnxNgO66h89sY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1090 (0x442)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367D0C5AF, serialNumber=569245EDF8EF53DD25E0095A12485B170F10EC3E
        Validity
            Not Before: Dec  8 03:13:48 2025 GMT
            Not After : Dec 10 03:13:48 2025 GMT
        Subject: CN=6936426d-4759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ba:fa:c8:60:55:a1:da:5e:f7:64:aa:f7:fd:
                    24:72:82:55:cc:2b:5c:08:66:e2:b4:e2:b1:e4:f2:
                    29:8d:7c:7c:16:d4:f3:d7:c0:4a:ba:f2:89:75:12:
                    5b:79:3c:ac:a1:9e:17:80:8d:38:2e:8b:84:4c:4b:
                    7a:96:39:94:f2:32:7a:88:e5:6b:c2:1d:72:4f:0d:
                    70:8b:ba:28:0d:ea:58:7e:05:24:05:7e:2b:80:e7:
                    a6:59:9b:40:06:84:b6:c5:99:b4:6b:17:31:b1:59:
                    dd:08:89:6b:bf:a6:7a:3e:9b:df:15:67:b4:e5:a0:
                    0c:bd:92:fb:8a:8c:a3:47:f7:3c:1c:d2:84:19:47:
                    0a:ba:06:fe:b0:ad:58:6f:85:63:e5:6b:49:0f:f8:
                    64:1d:74:b4:e2:33:cf:fd:e6:83:56:8c:5b:f8:9b:
                    19:cb:d9:99:8c:1b:8b:16:46:b7:86:4d:4c:e5:f8:
                    30:4d:ed:12:26:a3:11:30:e7:a1:4e:a4:21:90:fb:
                    ff:19:01:0d:c3:8f:0c:30:95:64:99:d6:14:be:e6:
                    81:a6:09:b7:a8:55:c6:62:9e:9a:d5:f8:14:aa:37:
                    8d:cc:ac:01:3a:89:85:66:75:fb:fb:a1:61:0e:b6:
                    cf:18:24:eb:03:a9:a9:30:a2:48:c3:d5:1d:68:f7:
                    74:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E5:29:FC:74:4A:77:3B:A0:36:5D:E2:2F:38:27:F9:E1:A7:26:52
            X509v3 Authority Key Identifier:
                keyid:56:92:45:ED:F8:EF:53:DD:25:E0:09:5A:12:48:5B:17:0F:10:EC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b6:3c:86:36:45:5e:36:0f:7e:25:31:a9:e7:e2:b6:20:e3:
         9d:5a:1d:79:78:3a:da:87:4f:bc:8e:a6:77:c2:cf:44:3f:4a:
         64:be:2d:a7:f2:32:ef:90:20:18:6a:f0:cf:c9:12:67:f4:b6:
         1a:6b:ce:8a:c2:bd:a4:7f:7a:fb:01:3a:1e:f2:d7:52:65:f3:
         28:07:04:d5:75:33:2d:ad:6e:1b:0d:3a:4b:1e:5d:78:22:42:
         9f:b2:b4:6d:26:ac:ca:21:76:d1:43:1a:ce:3d:4a:2d:3c:cd:
         6a:7f:30:56:01:b5:98:b1:bd:ec:d9:bd:1c:b3:23:71:f4:33:
         45:2b:6e:98:f2:6e:2a:da:98:97:e0:96:fc:f0:e8:b4:c6:d5:
         a0:09:67:b7:79:c6:3e:cd:a1:6d:55:66:eb:47:e0:48:8c:56:
         dc:31:26:9d:f4:14:7e:e1:fb:a7:a5:c2:02:3e:4c:8c:c6:c8:
         ef:c0:bc:3f:f9:f8:58:82:30:66:dc:da:b5:ac:ff:c4:a4:5c:
         c2:b3:02:18:d7:dd:19:c5:fb:4d:ed:20:b0:fb:1d:d6:14:26:
         0d:a5:b7:a9:ab:0f:88:fb:2f:dc:82:ab:6a:c0:14:ff:c5:9c:
         6d:7c:29:e2:a5:b2:31:f8:ff:92:01:ba:eb:3d:98:59:a1:3d:
         47:d8:73:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:10:59 2025 by rpki-client