This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft
File:                     SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft (raw, json)
Hash identifier:          35OPUR+I5VFye8tUln5nbhh1ycH+8zzFemO/iFDbsk0=
Subject key identifier:   B2:60:5E:37:16:94:0F:B0:B9:6A:7A:76:ED:D4:4D:59:44:6D:17:C1
Authority key identifier: 48:51:D1:82:FA:16:FD:73:BD:77:14:54:F2:0D:99:FC:95:86:20:5F
Certificate issuer:       /CN=F367DA9BAF/serialNumber=4851D182FA16FD73BD771454F20D99FC9586205F
Certificate serial:       0447
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft
Manifest number:          0446
Signing time:             Mon 08 Dec 2025 03:10:42 +0000
Manifest this update:     Mon 08 Dec 2025 03:10:41 +0000
Manifest next update:     Wed 10 Dec 2025 03:10:41 +0000
Files and hashes:         1: SFHRgvoW_XO9dxRU8g2Z_JWGIF8.crl (hash: f+HIGLzson9XtIBgNzffkx+ZpBV9Wiie9ApvSQUQQkE=)
                          2: 46F0B40CABC211ED9ACEA683F1222468.roa (hash: gMJyXLKD9QP+OLiQjsuXWN3MuSsqyBtsebI9uk9Cd8I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1095 (0x447)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DA9BAF, serialNumber=4851D182FA16FD73BD771454F20D99FC9586205F
        Validity
            Not Before: Dec  8 03:10:41 2025 GMT
            Not After : Dec 10 03:10:41 2025 GMT
        Subject: CN=693641b2-a346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:58:64:62:1f:b7:00:97:af:a4:d7:63:39:69:
                    c0:2e:1e:f3:dd:04:11:e4:0b:7f:34:49:d3:cd:cb:
                    fe:80:11:58:46:d0:be:e5:4d:a9:0a:d0:00:86:39:
                    33:40:4f:2e:e9:0d:1a:5a:b8:02:17:c3:c0:b9:a1:
                    5d:9f:48:d9:3e:b8:1c:89:e1:03:f9:8d:46:96:21:
                    56:db:f0:f7:51:bb:90:e2:e3:6d:26:60:c8:93:a1:
                    fe:81:a0:3a:e5:92:3e:51:2d:c5:5d:ac:dd:a5:0f:
                    11:0b:37:36:09:54:0f:6a:a0:18:f2:b1:60:62:3d:
                    9b:cf:3b:58:24:b6:0e:2a:6d:3f:67:25:a8:1e:13:
                    c1:c9:f0:0a:18:1c:2d:b5:d5:57:06:a6:de:64:e1:
                    77:32:fb:63:a0:2b:e1:05:74:2c:de:4a:6f:56:04:
                    fb:31:38:9d:dd:88:f9:3e:5e:52:c9:c1:18:cc:6e:
                    cd:5a:fc:f4:4a:71:7b:6c:51:1e:49:a7:d7:64:8c:
                    f2:8f:3e:b8:27:1c:e9:71:bb:72:82:2f:4d:8d:8b:
                    5d:eb:2c:07:cb:5d:61:2c:6f:de:ca:60:28:f7:20:
                    8c:56:0c:a9:0a:d8:0a:74:3c:48:f0:68:bc:6a:f7:
                    e7:2e:b1:98:84:9a:e1:4c:cf:ec:73:49:6b:16:17:
                    b5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:60:5E:37:16:94:0F:B0:B9:6A:7A:76:ED:D4:4D:59:44:6D:17:C1
            X509v3 Authority Key Identifier:
                keyid:48:51:D1:82:FA:16:FD:73:BD:77:14:54:F2:0D:99:FC:95:86:20:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:4e:53:72:ab:97:36:b5:36:0b:13:7c:df:17:74:93:ec:9a:
         21:e5:ef:78:14:5f:cb:be:66:21:fa:e7:ba:1f:5b:2d:8c:3b:
         e8:a6:b0:c6:ed:b0:f9:38:c7:e3:b1:b1:1a:57:54:9a:a7:a6:
         af:cc:65:c9:e4:63:73:ca:f8:f1:69:5a:65:32:4f:15:ab:25:
         55:e5:30:67:76:b6:83:46:81:59:63:b7:29:1e:b2:a9:48:6f:
         69:f4:f6:b1:ba:7e:9b:52:21:3f:b8:44:77:64:3f:b7:6e:7e:
         df:36:e5:a6:ce:70:3c:27:43:7f:96:78:02:02:c4:ee:03:5f:
         ca:92:03:b2:1d:21:26:e2:ec:c2:f2:63:8a:76:94:58:6f:ac:
         4a:89:da:b4:0e:4f:12:22:3e:0a:a7:d4:63:9d:6b:06:ab:8e:
         63:49:d5:0e:67:97:45:16:a1:f9:0d:c0:f3:02:96:5c:2e:99:
         2b:7b:73:13:e9:cd:b9:22:c3:96:c0:82:1f:2e:80:04:4f:ab:
         eb:ac:4b:f9:5a:8c:0a:a1:30:ba:60:8a:d7:e9:32:fd:5d:35:
         86:c9:d7:a5:cc:e9:6f:80:ca:57:97:e8:24:f9:56:04:9b:ac:
         d0:04:a3:59:4d:cc:6f:b1:19:0c:77:d1:e8:d0:ab:35:13:15:
         72:25:00:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:21:58 2025 by rpki-client