This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
File:                     8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft (raw, json)
Hash identifier:          cRrOvMW2dLt5q6vacgML5NFnz5hesPxFBkyB9BJ4ny0=
Subject key identifier:   48:C5:52:E6:B3:E6:47:24:2D:31:65:1D:2D:7E:18:A2:F0:70:58:4B
Authority key identifier: F2:7B:93:5F:35:E0:4B:8F:EA:A3:91:0D:E5:F1:E2:D2:3C:5E:00:7B
Certificate issuer:       /CN=F3692292AF/serialNumber=F27B935F35E04B8FEAA3910DE5F1E2D23C5E007B
Certificate serial:       01A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
Manifest number:          01A8
Signing time:             Mon 08 Dec 2025 04:38:55 +0000
Manifest this update:     Mon 08 Dec 2025 04:38:54 +0000
Manifest next update:     Wed 10 Dec 2025 04:38:54 +0000
Files and hashes:         1: 8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl (hash: GLKg8tfFQ3vzQ1qWktgyVr1IG667VmoIlq9doW0nu6A=)
                          2: F56FFE86912911EFAEEF2B78762E951A.roa (hash: CXZk+/Is0OxggDK9eJOwdsU1YQzXuO6D+yTuqbBLE28=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692292AF, serialNumber=F27B935F35E04B8FEAA3910DE5F1E2D23C5E007B
        Validity
            Not Before: Dec  8 04:38:54 2025 GMT
            Not After : Dec 10 04:38:54 2025 GMT
        Subject: CN=6936565f-2a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:82:88:1c:bb:f1:ff:12:ec:8c:11:42:c0:9c:
                    36:0e:34:cd:f9:c0:09:b8:65:73:fe:e4:db:99:08:
                    6a:55:fa:14:a4:e2:5b:1b:e6:e1:8e:d8:ee:01:0c:
                    e7:87:34:43:76:85:b8:b7:67:49:f6:4c:40:5f:8e:
                    dd:32:40:6a:80:f6:61:62:86:9e:29:55:c3:a7:37:
                    7e:2a:55:9c:e6:38:21:21:39:33:21:39:bd:92:a1:
                    d4:48:d5:eb:f2:b0:55:c4:51:67:bc:1a:fe:5e:3d:
                    1a:85:11:08:cf:a2:c3:bf:40:05:5b:b0:07:40:03:
                    9b:0d:d6:94:5e:44:fa:18:57:32:7b:a2:a9:fa:74:
                    f9:ac:bd:81:20:ca:09:2a:5c:e4:b5:ef:9f:43:9f:
                    5f:c6:c5:92:47:54:97:80:df:e3:cf:eb:62:99:8f:
                    58:0b:58:f4:fa:0e:ca:05:7e:db:fd:58:59:40:2f:
                    fe:ef:e9:b7:82:7e:89:01:84:36:ec:e3:2a:40:97:
                    3c:f8:fe:3e:89:59:87:5f:8f:d4:98:81:b5:02:93:
                    61:99:e7:53:6c:67:7e:55:41:94:68:d3:28:b6:b9:
                    65:61:be:ff:7b:04:fc:51:ff:39:db:82:33:ae:60:
                    6c:b5:a4:b2:4c:10:71:2d:f3:3f:39:0c:fd:a2:ad:
                    18:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C5:52:E6:B3:E6:47:24:2D:31:65:1D:2D:7E:18:A2:F0:70:58:4B
            X509v3 Authority Key Identifier:
                keyid:F2:7B:93:5F:35:E0:4B:8F:EA:A3:91:0D:E5:F1:E2:D2:3C:5E:00:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f6:b6:f2:df:d7:b4:0f:39:a9:1d:39:2b:71:79:39:3f:6f:
         8e:c1:2e:5f:33:eb:83:f2:49:6c:9b:60:c8:4b:eb:da:b7:63:
         b9:1b:2a:f8:b2:5e:fa:07:1d:10:f0:06:90:42:6d:2c:0e:5c:
         0d:1f:f3:7b:15:c5:7c:79:1b:7c:ec:4a:23:07:9c:89:af:77:
         58:ae:c9:bf:3b:fd:18:18:ab:a9:04:37:d3:12:10:59:84:0b:
         53:87:6e:ff:7e:7f:a1:87:36:e3:68:71:28:b8:db:95:48:e0:
         6e:12:10:cb:6c:fd:8b:d4:f1:6c:3d:c5:da:fa:f9:bb:b9:96:
         9b:44:fc:e1:a7:a3:f2:f2:bd:33:73:ca:2f:3b:ff:16:c5:3f:
         fb:4e:87:25:ab:d9:69:67:a7:5f:ca:d0:d2:d8:0e:ee:f8:30:
         bf:38:49:28:59:e1:bb:de:fe:c8:f2:cf:94:98:1e:ef:7c:50:
         6a:79:63:d8:7c:cb:48:1e:e2:b7:c4:22:ed:46:16:e2:39:c2:
         09:db:ac:19:50:de:e7:71:87:ae:30:be:b1:68:44:81:51:76:
         cd:c4:8b:78:50:3c:d8:03:86:60:cf:87:12:4f:fd:68:10:c5:
         24:e2:da:3f:e0:7f:40:6c:50:64:b1:99:81:36:2f:08:0e:23:
         70:6a:c9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:07:05 2025 by rpki-client