This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
File:                     hHYz30sJnBpSITpyTYxq0rIkb1U.mft (raw, json)
Hash identifier:          euiXcQJVfzvtxZB5BMgGYaXarw9H88DuohSOdNR9SJA=
Subject key identifier:   14:16:68:06:B1:E0:31:5D:A6:6C:6C:01:12:57:70:C4:04:5B:AD:5A
Authority key identifier: 84:76:33:DF:4B:09:9C:1A:52:21:3A:72:4D:8C:6A:D2:B2:24:6F:55
Certificate issuer:       /CN=F369A086AF/serialNumber=847633DF4B099C1A52213A724D8C6AD2B2246F55
Certificate serial:       03F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
Manifest number:          03F3
Signing time:             Mon 08 Dec 2025 03:22:28 +0000
Manifest this update:     Mon 08 Dec 2025 03:22:27 +0000
Manifest next update:     Wed 10 Dec 2025 03:22:27 +0000
Files and hashes:         1: hHYz30sJnBpSITpyTYxq0rIkb1U.crl (hash: 7be0PvpquxVlzva2H6apxr6tqs8wlNan1tQxLSd28ns=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1012 (0x3f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369A086AF, serialNumber=847633DF4B099C1A52213A724D8C6AD2B2246F55
        Validity
            Not Before: Dec  8 03:22:27 2025 GMT
            Not After : Dec 10 03:22:27 2025 GMT
        Subject: CN=69364474-956a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:df:e1:30:49:81:7e:7f:72:f4:c2:36:59:74:
                    74:dc:ba:1b:d3:14:e7:b9:c0:80:87:bc:dc:5a:8e:
                    de:83:51:75:fa:a2:7a:cf:03:c6:6c:16:2d:84:71:
                    7d:fa:a9:b7:32:23:d1:d7:26:7b:82:20:4a:fc:46:
                    0f:02:23:6a:ec:8e:e3:31:8d:e2:63:23:56:c3:c1:
                    72:98:b7:16:4d:d7:0f:d5:7e:de:e1:f6:ae:38:32:
                    fb:ad:29:0e:e3:fa:7c:d3:96:b0:c1:9e:0a:43:d2:
                    34:91:b9:9a:ca:ad:b7:00:94:c0:db:af:06:3b:f1:
                    53:bf:77:3d:60:7e:c3:7e:6d:27:9b:46:1c:ff:a2:
                    bc:20:b0:bc:1a:32:3c:1e:9e:a8:af:b8:24:b1:96:
                    e6:cd:77:3f:ab:1b:79:30:ae:c8:0a:bc:42:12:03:
                    38:7b:b5:af:ac:84:ab:d7:2b:ea:7f:55:ce:62:b4:
                    d7:76:81:9c:f5:cf:da:67:aa:22:34:e9:4d:5f:3a:
                    9e:d3:1e:e7:e1:1a:55:e7:9f:a4:75:22:f3:f2:b8:
                    a8:1f:a1:06:8e:a2:e9:46:2d:14:f7:e1:fa:32:bb:
                    4b:5e:11:5e:6b:97:dd:c8:97:0f:a3:e3:64:3e:8b:
                    ff:65:9a:c8:fa:1e:c5:20:3a:84:a6:06:5e:50:bc:
                    13:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:16:68:06:B1:E0:31:5D:A6:6C:6C:01:12:57:70:C4:04:5B:AD:5A
            X509v3 Authority Key Identifier:
                keyid:84:76:33:DF:4B:09:9C:1A:52:21:3A:72:4D:8C:6A:D2:B2:24:6F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f1:fc:c7:53:35:e2:7e:c8:64:f2:19:ed:55:17:70:7b:4a:
         0e:98:bd:35:d6:6a:d7:af:20:60:8f:6a:ab:14:df:ee:16:9c:
         1c:f5:45:68:51:d7:fd:39:cc:4b:49:ae:4c:e4:e3:de:92:01:
         5c:af:bc:fd:fd:d5:ce:54:bd:39:08:c4:23:e5:f4:97:4e:0e:
         7e:15:1a:4f:c0:05:ae:47:c2:94:cb:80:de:4c:a8:a8:a0:90:
         eb:27:69:47:12:09:68:ee:0b:25:a4:0a:f9:e1:4e:ab:4b:a8:
         be:8b:83:be:08:d0:c2:ba:5c:2c:f1:88:ca:f1:98:fa:d2:c0:
         4f:8e:1f:6b:74:a4:68:40:3d:d6:eb:77:4d:a4:44:cb:eb:5e:
         56:bf:11:1d:05:ab:4c:a7:18:6a:0e:c2:2a:a4:fb:21:a5:64:
         c0:1b:62:4b:6d:2d:82:19:58:cc:db:b4:ee:1f:fa:fa:76:c3:
         3f:5e:23:06:b5:91:06:26:7a:5d:73:8d:50:c8:f6:ce:de:55:
         f2:5f:e2:26:78:89:2f:15:4b:ea:f8:75:58:ce:a7:da:36:a1:
         56:dc:50:ec:35:9b:5b:c5:2a:ed:87:5e:e3:7a:62:23:93:96:
         15:c3:9d:e4:7a:da:41:2f:62:57:ca:fd:a9:84:b6:56:93:af:
         20:f9:a0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:24:32 2025 by rpki-client