This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
File:                     8F9eT4U_K8znmCtaZOAuRn1NY3k.mft (raw, json)
Hash identifier:          3GW+UxVujW0XcZ5UoKh84qan5YaQmIblDG/92KvNyzc=
Subject key identifier:   21:15:E8:11:73:A7:AA:6F:54:62:96:EE:61:D7:ED:34:5C:B2:DB:B4
Authority key identifier: F0:5F:5E:4F:85:3F:2B:CC:E7:98:2B:5A:64:E0:2E:46:7D:4D:63:79
Certificate issuer:       /CN=F368CD07AF/serialNumber=F05F5E4F853F2BCCE7982B5A64E02E467D4D6379
Certificate serial:       01B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
Manifest number:          01B1
Signing time:             Mon 08 Dec 2025 04:38:06 +0000
Manifest this update:     Mon 08 Dec 2025 04:38:05 +0000
Manifest next update:     Wed 10 Dec 2025 04:38:05 +0000
Files and hashes:         1: 8F9eT4U_K8znmCtaZOAuRn1NY3k.crl (hash: GAVvqoBGX/FHaA9GVzEIQwkB1X7LIrFJodR4GY01fxA=)
                          2: 0587256289A811EF93AD2A50762E951A.roa (hash: 6JhA3S1UqVY6eY/SMX4lyeIJmn8FI+S8y3sFftIT63s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368CD07AF, serialNumber=F05F5E4F853F2BCCE7982B5A64E02E467D4D6379
        Validity
            Not Before: Dec  8 04:38:05 2025 GMT
            Not After : Dec 10 04:38:05 2025 GMT
        Subject: CN=6936562e-ac9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:db:bd:89:2d:5a:04:c5:2f:ae:05:ba:6f:
                    3b:d5:20:a4:f4:ef:88:8a:1b:13:00:f6:9f:8d:59:
                    a2:e4:5b:fc:ed:57:83:39:94:a9:eb:5b:1b:94:49:
                    41:2c:7f:bb:80:cb:db:a0:16:52:ae:e1:c5:8d:c3:
                    66:c2:72:eb:5f:b5:ca:45:12:2e:2e:8a:cb:6b:a1:
                    43:7f:26:92:11:28:7f:93:58:4e:09:ae:3c:01:36:
                    9f:99:d3:95:e6:df:7a:b4:24:3e:96:e9:c3:1a:ac:
                    ef:12:54:84:d0:4b:af:bd:89:8f:2c:47:a6:17:eb:
                    7a:84:35:cc:f9:7c:23:15:7b:17:bd:c6:99:3f:62:
                    cb:f1:f2:c5:bf:7b:e8:31:41:50:38:59:4d:d3:92:
                    9b:72:0c:c1:82:fe:45:a3:f0:cb:ef:1e:c8:8e:7e:
                    00:c2:17:71:5e:0a:04:c2:39:7c:c4:27:bc:8b:17:
                    ac:57:e6:5d:63:bf:09:d0:da:6d:43:f9:26:fe:46:
                    36:61:9b:6d:28:fe:a5:89:4b:90:a7:50:76:fc:ce:
                    fe:1a:ea:1a:e4:21:68:e6:6f:d6:58:8c:1d:75:22:
                    a0:08:5e:99:a3:f6:25:a4:cb:1e:36:8a:3e:38:f8:
                    ed:3b:67:f2:c9:dc:0b:05:9b:a1:6f:93:f4:ca:32:
                    0c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:15:E8:11:73:A7:AA:6F:54:62:96:EE:61:D7:ED:34:5C:B2:DB:B4
            X509v3 Authority Key Identifier:
                keyid:F0:5F:5E:4F:85:3F:2B:CC:E7:98:2B:5A:64:E0:2E:46:7D:4D:63:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ea:9f:50:e8:2d:28:98:e5:a5:3f:0c:8a:0b:cd:0d:f4:77:
         85:12:64:0f:f8:94:92:00:1a:24:7d:95:2d:f4:fe:e2:4e:de:
         32:7a:76:aa:e3:8c:61:56:33:b8:04:cb:15:fc:0b:c4:34:0b:
         21:dc:f3:b2:1f:0f:6a:d4:b0:79:8c:1f:88:65:89:92:69:41:
         84:90:f3:4c:3d:1d:54:cc:5f:8b:82:30:93:ad:aa:0e:37:22:
         6f:86:b1:ca:3e:a2:dd:83:11:aa:0d:73:0f:f8:99:56:20:6c:
         55:bd:8e:27:a4:cd:f4:00:e7:b2:49:64:c6:89:41:af:f8:6c:
         84:68:b7:d5:1f:8e:79:68:54:cf:29:02:95:e8:af:23:30:89:
         d8:eb:d3:fe:da:3f:a1:d7:a7:9c:ec:22:05:ab:cf:9c:15:ee:
         52:7b:3c:d8:e5:32:13:22:d2:40:27:3f:91:8d:8e:52:7f:fa:
         0e:4f:6b:92:c5:a3:0d:84:41:74:21:77:c6:cb:9d:aa:02:0e:
         42:47:36:56:f9:1b:49:8f:d6:71:c5:6b:b4:1d:bf:b5:c8:42:
         74:4a:95:51:0e:cd:d7:d4:37:19:17:26:5d:c6:5d:48:f6:8d:
         24:a0:22:c5:54:08:f7:e6:84:e9:dd:5c:47:bd:c6:d1:32:4a:
         58:20:32:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:05:14 2025 by rpki-client