This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
File:                     4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft (raw, json)
Hash identifier:          SSpocvBKJy2BvpG/cSSD4ZDgwHTTpseiyhmfMrySitI=
Subject key identifier:   75:CD:56:6E:B4:F7:23:27:41:CD:4B:83:03:EE:21:6C:5D:4B:84:B4
Authority key identifier: E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F
Certificate issuer:       /CN=F367FC4FAF/serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
Certificate serial:       0D70
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
Manifest number:          0D6F
Signing time:             Sun 07 Dec 2025 01:05:00 +0000
Manifest this update:     Sun 07 Dec 2025 01:04:59 +0000
Manifest next update:     Tue 09 Dec 2025 01:04:59 +0000
Files and hashes:         1: 4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl (hash: HpmZZ5shzJUXErQv0MKf+jtq2B3AiR/ABh7eJMlMl44=)
                          2: 0DE9F16080D011E6B7882016F8AEA228.roa (hash: lapNENqbec9IiREVadsxyCzDqZnzkWBnbMRTRH0mwYI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3440 (0xd70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC4FAF, serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
        Validity
            Not Before: Dec  7 01:04:59 2025 GMT
            Not After : Dec  9 01:04:59 2025 GMT
        Subject: CN=6934d2bc-a354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:da:cd:e7:20:cc:cd:ab:37:fb:62:34:b0:92:
                    c7:d8:13:b5:27:7b:d2:f1:df:99:8d:36:06:1a:80:
                    4c:a8:fa:fd:5e:50:4f:33:e7:02:40:d3:78:a5:d5:
                    7f:e5:db:86:c9:42:e9:12:74:2e:b8:78:a0:64:48:
                    76:c9:39:0a:91:b0:02:b0:0c:58:f1:8c:2b:c0:e3:
                    e6:00:d6:17:bb:1a:16:79:78:5d:79:e8:40:0f:7f:
                    c7:26:1b:fb:41:b9:cf:af:e5:b3:bf:6d:6d:07:9b:
                    04:1d:ba:84:57:24:5e:60:b0:81:e8:06:29:1a:67:
                    22:21:35:7d:0c:55:60:92:fb:87:a0:f2:ac:c5:8f:
                    d2:b2:b9:9d:9a:b8:34:fb:b4:40:35:1a:a2:3b:3a:
                    32:be:b3:1c:97:59:89:f1:c1:9e:af:b1:6e:79:84:
                    a9:68:7b:87:a8:e8:6a:9c:27:60:e7:c2:0f:57:bb:
                    39:d2:fe:6d:31:aa:b2:4c:96:ee:d2:7e:5a:4f:95:
                    04:f2:f1:9a:8f:0c:c1:b5:15:c3:c9:0c:c6:fa:54:
                    77:3b:3a:29:89:3c:c8:4d:27:43:24:2c:1a:1f:b5:
                    4b:d4:2c:7e:0e:a2:52:55:9e:a7:60:f1:1c:44:cd:
                    e2:0a:2a:64:07:51:0f:a2:7e:7b:44:3b:a3:a9:58:
                    48:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CD:56:6E:B4:F7:23:27:41:CD:4B:83:03:EE:21:6C:5D:4B:84:B4
            X509v3 Authority Key Identifier:
                keyid:E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1c:53:4c:8f:fe:80:c2:e9:55:93:e0:88:03:ec:85:75:64:
         8e:25:5c:d7:56:50:97:d2:79:0d:eb:67:bd:86:9c:00:e9:3c:
         81:6e:71:97:fd:ab:96:43:ef:d4:e6:b8:c8:14:2e:03:2f:7f:
         72:b6:31:9d:cd:9b:6c:7a:70:47:0b:05:d5:af:8e:71:39:62:
         08:bf:db:73:26:fc:08:b9:43:27:0e:8f:97:cc:da:02:9d:9c:
         6f:8d:52:2e:c5:2e:cc:f2:04:e2:bf:d0:57:10:c4:ea:ff:01:
         a9:79:f8:d6:76:14:fa:31:75:0c:c0:fb:0e:31:a4:4b:ab:b0:
         a1:73:61:a4:eb:af:93:aa:e0:50:00:1b:0f:d4:38:55:a4:e3:
         3e:c8:19:13:df:10:1e:4f:70:f7:a1:d5:b4:92:9f:e0:e9:c7:
         8e:95:1f:84:50:b6:6d:ad:3e:53:d9:2d:56:5e:9a:94:25:25:
         63:90:97:1f:d1:22:30:d4:31:b8:e1:fd:19:19:62:62:c2:c2:
         4c:1a:4a:cf:f7:c0:42:70:fa:dd:46:f6:c2:8d:2c:1c:e5:3a:
         32:ed:57:53:44:c0:50:10:1e:81:53:67:5a:8e:a5:9f:06:aa:
         c7:0d:39:61:9f:c4:c8:e2:c9:44:7c:a5:36:fb:d6:af:71:ae:
         a4:f2:3d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:02:01 2025 by rpki-client