This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
File:                     ypQWvryVa0rVjBysHB1Gn2gzUFI.mft (raw, json)
Hash identifier:          5h9DkmCYv/dkmWqibbtINVxyXQvPECFveSB6thHehZY=
Subject key identifier:   D1:C0:91:BC:FD:E6:E7:C5:BD:60:BE:4F:D2:EA:F6:EC:71:BF:F6:EB
Authority key identifier: CA:94:16:BE:BC:95:6B:4A:D5:8C:1C:AC:1C:1D:46:9F:68:33:50:52
Certificate issuer:       /CN=F36914A7AF/serialNumber=CA9416BEBC956B4AD58C1CAC1C1D469F68335052
Certificate serial:       08EF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
Manifest number:          08ED
Signing time:             Sun 07 Dec 2025 01:37:08 +0000
Manifest this update:     Sun 07 Dec 2025 01:37:08 +0000
Manifest next update:     Tue 09 Dec 2025 01:37:08 +0000
Files and hashes:         1: ypQWvryVa0rVjBysHB1Gn2gzUFI.crl (hash: 1IVBKnAB/qlpBsG3Y1Sx4nj48Wa050S6hZqIA/oF+n0=)
                          2: 1AF2F83CFBFE11E992573048F8AEA228.roa (hash: oouCj0bsgLv2TuhXp8fmEvLXf8LLF9rpmnAY9E+k4nY=)
                          3: F6BF2196FC8111E9AC6A242CF8AEA228.roa (hash: Fd+NxiRRn35EHOCt2v/UUPEoB3ED4QaRhjwZJZVQOG4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 01:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2287 (0x8ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36914A7AF, serialNumber=CA9416BEBC956B4AD58C1CAC1C1D469F68335052
        Validity
            Not Before: Dec  7 01:37:08 2025 GMT
            Not After : Dec  9 01:37:08 2025 GMT
        Subject: CN=6934da44-70e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a8:97:18:5e:cf:38:ae:6c:0f:37:d9:15:8d:
                    25:42:3a:c7:a4:34:7d:86:ff:9b:7d:b1:40:8a:54:
                    05:d9:fa:f9:b3:3d:0a:fa:ad:ce:18:a8:8b:9e:10:
                    b2:63:11:bc:08:0d:fb:d3:41:18:77:93:8c:5f:e6:
                    94:0f:61:0e:94:17:1a:8e:ba:3e:5e:d2:90:23:80:
                    9a:9f:8c:db:ec:41:25:80:43:07:b4:30:78:20:1a:
                    e2:89:4c:9b:e6:19:8d:37:b8:1e:70:7a:b5:0d:b6:
                    60:e4:99:66:c1:a6:81:eb:91:aa:75:6f:d3:f6:a6:
                    84:3b:18:f2:93:18:4d:c3:a9:e0:c9:b0:45:96:a6:
                    97:53:99:40:50:4b:12:12:fa:4c:0b:f3:f7:7a:70:
                    0a:69:9d:dc:4b:05:0c:cc:29:86:32:7f:c7:bc:d9:
                    bf:7b:97:e2:52:e5:3b:f7:82:6d:bf:4c:6f:58:53:
                    60:6f:c9:ac:d6:ad:fa:29:14:19:4c:29:d7:39:ed:
                    c7:06:e8:97:ee:7b:4d:59:3c:94:f8:43:97:3e:59:
                    b6:12:03:b9:0f:c3:26:6c:e6:63:8f:8b:c7:dc:ae:
                    67:9c:c4:88:33:cd:55:18:64:b8:08:2e:24:c7:2c:
                    e7:86:2b:9e:5e:43:a0:5d:07:db:82:85:df:41:52:
                    36:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C0:91:BC:FD:E6:E7:C5:BD:60:BE:4F:D2:EA:F6:EC:71:BF:F6:EB
            X509v3 Authority Key Identifier:
                keyid:CA:94:16:BE:BC:95:6B:4A:D5:8C:1C:AC:1C:1D:46:9F:68:33:50:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d0:c3:e0:57:8b:1b:73:c0:4e:5b:4c:a9:90:87:22:81:ea:
         bc:04:c4:0f:02:a3:e2:88:fd:29:d5:d2:f3:4a:33:69:49:91:
         16:39:ac:5a:13:53:69:36:c1:fa:a8:79:2f:bf:f3:be:95:4b:
         3a:9d:2b:92:4d:f1:74:a0:50:5a:9b:f3:30:d2:8e:d7:0f:b0:
         99:99:cc:f0:6a:85:f2:c1:19:92:c2:a7:32:2c:73:bb:5a:8b:
         d6:4d:2b:9e:c6:08:4d:25:08:49:32:35:61:0b:92:92:d5:a0:
         26:62:cd:d1:02:64:66:b0:d0:19:f5:46:f8:60:e6:cf:e2:33:
         ac:2c:ff:a6:32:41:fe:57:e5:8b:b2:88:e7:5a:9a:02:de:a1:
         bc:6f:2a:d5:19:fe:75:68:ed:2c:4c:3d:ca:48:a1:6c:ed:a3:
         7d:2f:0f:28:d7:7d:52:c5:a2:b8:59:26:80:e0:47:c9:35:1e:
         8b:09:22:99:5e:27:dd:00:bf:20:01:dd:c5:a4:5b:f2:58:e8:
         5e:ac:3c:a2:52:40:51:d0:82:11:46:4e:13:3b:ae:0c:7a:03:
         dc:ad:f5:52:f9:80:0f:4b:79:78:63:5d:c5:89:83:4c:07:22:
         e0:e6:2c:29:77:63:b1:f9:b9:60:7f:29:2c:24:2b:f0:c2:2f:
         ea:98:a8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 01:21:26 2025 by rpki-client