This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
File:                     X-MxcqYILFSryRHxn1edSf2AmBQ.mft (raw, json)
Hash identifier:          UnmKLEig431DbC18GojykLYFDnvQeFt9c2ZJ8du2/0E=
Subject key identifier:   8E:31:73:4D:30:BF:9A:F2:82:61:6F:BB:9A:05:67:A8:E1:C6:EE:F1
Authority key identifier: 5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14
Certificate issuer:       /CN=F3690793AF/serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
Certificate serial:       06D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
Manifest number:          06D0
Signing time:             Mon 08 Dec 2025 02:06:31 +0000
Manifest this update:     Mon 08 Dec 2025 02:06:30 +0000
Manifest next update:     Wed 10 Dec 2025 02:06:30 +0000
Files and hashes:         1: X-MxcqYILFSryRHxn1edSf2AmBQ.crl (hash: n1nH1rd2p7NzwN7vBcLWJwY00aQeBqrHzOV3IMnVsnE=)
                          2: AEEE236EC67911EEAD12F8AE775412E6.roa (hash: T0oca2AEcgFcrK1PsYZJPTBdlzaX1LQylDi6J2hgcIM=)
                          3: 74F314B2C67911EEB6CAC8AE775412E6.roa (hash: yQ5Y5mos3jGJ876UZawgqxeARaqaofzDLCBHBUrxZE4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1748 (0x6d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690793AF, serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
        Validity
            Not Before: Dec  8 02:06:30 2025 GMT
            Not After : Dec 10 02:06:30 2025 GMT
        Subject: CN=693632a6-cea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:a5:5a:4a:f9:cd:7d:7e:d4:b1:8c:46:7a:
                    57:1a:da:ae:5d:7d:96:c5:e5:e7:c0:f9:47:ef:98:
                    8b:81:58:44:f8:11:fd:98:34:3d:af:de:d0:18:9a:
                    a2:47:5a:ff:75:ff:96:65:78:35:97:d0:e1:aa:35:
                    81:00:90:d3:a5:0e:8c:28:9c:85:c5:43:f9:35:eb:
                    e9:59:bb:5e:f6:2e:3a:1d:bf:c5:88:32:49:35:bb:
                    20:d0:12:6a:9b:bf:67:0c:02:2a:8e:7a:e1:45:1e:
                    6a:17:76:d3:37:67:25:0c:1f:44:fa:be:07:b0:f2:
                    af:08:de:ac:17:b5:15:85:e1:37:8f:2d:b5:f3:59:
                    47:a3:14:bc:06:41:3c:14:42:22:32:2d:35:d4:16:
                    68:ad:d8:4c:f2:f6:f4:66:9f:bf:2c:b5:83:05:e3:
                    02:b7:95:81:02:0d:c8:a4:47:84:e3:5e:47:55:dd:
                    fd:17:6f:93:2c:9c:68:e4:60:d5:0c:34:52:c8:3e:
                    23:c9:c3:01:5a:ab:f1:6e:51:4a:4b:d9:b4:fa:cf:
                    6a:2c:83:49:ad:44:24:af:44:91:00:f6:c6:64:96:
                    14:b3:e1:83:d7:0c:12:b1:bd:93:ad:20:f5:03:c0:
                    b7:32:8d:fc:4e:5a:fc:26:0f:82:94:6a:03:e5:38:
                    b1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:31:73:4D:30:BF:9A:F2:82:61:6F:BB:9A:05:67:A8:E1:C6:EE:F1
            X509v3 Authority Key Identifier:
                keyid:5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:06:71:4d:4c:9a:02:6f:8b:0e:5d:ee:7d:f7:61:12:83:21:
         cc:5b:5f:ab:a0:72:4a:17:a1:8c:ba:1d:39:66:68:a6:47:7e:
         e0:7b:1e:fb:69:93:a6:01:6d:db:cf:1b:01:52:7d:4c:b5:d6:
         01:a2:94:cb:68:c2:f4:de:1e:bf:7d:3b:ea:eb:ad:db:26:07:
         95:d6:34:29:64:b2:10:80:17:21:55:f5:f7:2e:c9:cb:19:ba:
         26:d2:58:c2:d3:0c:8b:96:f2:09:60:d8:d4:cb:7a:9d:c3:20:
         44:2b:6c:06:3d:81:d6:88:f3:39:ca:3b:03:5c:22:a4:88:2c:
         4a:96:b3:9d:52:08:cb:b0:9f:08:c6:a5:71:a5:5f:78:b0:e9:
         7a:41:bd:68:e5:03:6d:c3:7a:7c:1f:36:27:2a:37:d9:03:01:
         7c:aa:bf:96:dc:b5:88:75:57:dd:5c:29:88:98:a7:59:25:73:
         b3:b4:46:06:67:e3:a8:dd:81:cf:b9:fd:8c:43:f1:b3:ec:26:
         4b:5c:23:ad:8a:4f:84:99:31:1e:5e:59:25:d0:f1:bf:6a:ca:
         9a:68:61:ad:24:85:09:75:ef:10:f8:23:90:6f:f3:b0:55:82:
         ec:92:e1:f3:23:73:eb:2b:05:8b:f1:e1:f4:14:c5:a2:1d:53:
         b7:9f:81:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:18:49 2025 by rpki-client