This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
File:                     JBS5msCAHawVts3PjThpoMT_Gh0.mft (raw, json)
Hash identifier:          WSrn8aAI9acO3pPNw6bDUfQTzAP+YkxLc/2z1q7OJjQ=
Subject key identifier:   AF:0A:EC:AF:54:76:7E:DB:AF:F9:2E:09:71:4F:50:DB:CC:A2:B2:59
Authority key identifier: 24:14:B9:9A:C0:80:1D:AC:15:B6:CD:CF:8D:38:69:A0:C4:FF:1A:1D
Certificate issuer:       /CN=F369AFD9AF/serialNumber=2414B99AC0801DAC15B6CDCF8D3869A0C4FF1A1D
Certificate serial:       0574
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
Manifest number:          0572
Signing time:             Wed 17 Dec 2025 02:41:44 +0000
Manifest this update:     Wed 17 Dec 2025 02:41:44 +0000
Manifest next update:     Fri 19 Dec 2025 02:41:44 +0000
Files and hashes:         1: JBS5msCAHawVts3PjThpoMT_Gh0.crl (hash: fIuUxexjhAGhxvejU9ZIGFSNe4zvidjfqOR1G4QjkDE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Dec 2025 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1396 (0x574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFD9AF, serialNumber=2414B99AC0801DAC15B6CDCF8D3869A0C4FF1A1D
        Validity
            Not Before: Dec 17 02:41:44 2025 GMT
            Not After : Dec 19 02:41:44 2025 GMT
        Subject: CN=69421868-840e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c7:2c:47:8a:f1:83:fd:40:d0:a2:f5:7c:2f:
                    ca:3c:94:f9:84:db:a2:3e:a3:36:59:c1:04:c7:ca:
                    ed:09:e6:0e:91:23:6d:4c:b4:63:6d:39:f2:eb:ac:
                    80:d8:9c:f2:91:db:71:c4:8e:e0:f6:b7:22:48:c8:
                    92:90:a7:0a:a7:de:02:17:c4:ff:b1:7b:67:09:9b:
                    04:43:e6:1c:3b:e2:d3:f4:b5:a2:cb:75:f8:19:b1:
                    e6:b0:f6:0e:b8:28:00:9e:fe:cd:00:b3:3f:c8:f4:
                    21:c8:b9:59:97:5a:32:58:a7:a0:93:1d:90:ba:7b:
                    98:24:08:00:31:8a:4d:48:2a:a6:49:4a:b0:ad:5b:
                    d2:75:00:b1:94:06:dc:19:28:7d:bc:95:2b:e6:de:
                    40:b5:ad:6d:0f:f8:67:10:6d:ec:23:8f:4b:70:49:
                    7b:6b:4c:d9:f1:ee:0d:e4:7c:e7:47:45:ef:bd:7b:
                    d9:d8:47:1e:ac:38:d8:b0:16:d7:73:09:98:ab:eb:
                    25:c2:16:a8:ef:e7:e8:0c:2f:5c:7f:a9:2d:30:54:
                    09:56:21:7a:17:ba:46:f5:9f:20:f8:41:17:23:aa:
                    4f:11:41:ee:8b:48:81:21:eb:fa:a0:f3:08:d2:69:
                    4b:e0:3f:85:0a:51:e7:1b:80:ba:c7:56:14:7c:2b:
                    ea:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0A:EC:AF:54:76:7E:DB:AF:F9:2E:09:71:4F:50:DB:CC:A2:B2:59
            X509v3 Authority Key Identifier:
                keyid:24:14:B9:9A:C0:80:1D:AC:15:B6:CD:CF:8D:38:69:A0:C4:FF:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:bc:cb:43:95:9f:be:c9:d8:5f:d0:d0:fb:8d:37:fe:e6:fa:
         18:8b:03:5f:48:1d:57:34:27:a3:9d:18:42:fc:8c:4d:d6:65:
         13:63:89:45:f7:99:b2:6d:89:b6:86:1f:13:a7:2c:40:53:52:
         95:52:0d:1f:d3:a8:ca:6d:f4:86:19:36:41:37:46:c7:68:d4:
         a6:52:5b:4d:d3:29:8f:df:a8:a8:23:b1:3d:02:c9:36:c5:23:
         16:ca:f0:eb:c0:83:45:51:85:ae:6f:3e:da:09:df:26:e5:f5:
         f6:81:74:14:46:f6:fa:99:ba:68:39:6c:3d:fa:2d:5f:74:20:
         4a:03:cb:fa:f5:d1:9a:0d:4b:d7:bd:d2:44:1e:25:18:0d:1b:
         12:8b:bb:be:91:ed:a5:a7:82:fb:09:dd:34:9d:25:27:23:d7:
         79:f3:68:c9:21:be:9f:20:76:55:f7:a5:a4:2d:8a:a1:10:16:
         d4:af:bc:8f:93:ff:c3:6f:29:42:83:df:85:1c:80:42:18:b0:
         89:e8:78:e3:b9:fe:9d:df:2e:db:e9:c7:ce:94:49:b7:db:2e:
         89:f8:8d:91:f0:1f:8f:fb:7a:c8:08:f2:4a:cf:1e:7a:5d:b3:
         81:32:55:52:84:77:aa:35:95:2a:88:48:b5:40:48:ba:72:7c:
         90:7b:98:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 17:46:59 2025 by rpki-client