This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
File:                     u_8lJAsgf5usxcuVSmIwmrulNl0.mft (raw, json)
Hash identifier:          TB9vI5sFvH2l5xY846eNxDPJERPjlmf31U7Df645zbg=
Subject key identifier:   86:96:18:D1:22:EF:46:6E:C7:0C:0B:FF:9D:C4:53:DB:74:FA:58:FC
Authority key identifier: BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
Certificate issuer:       /CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Certificate serial:       060F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
Manifest number:          060D
Signing time:             Mon 08 Dec 2025 02:30:11 +0000
Manifest this update:     Mon 08 Dec 2025 02:30:10 +0000
Manifest next update:     Wed 10 Dec 2025 02:30:10 +0000
Files and hashes:         1: u_8lJAsgf5usxcuVSmIwmrulNl0.crl (hash: QCcQ9vNxyragXKEuwLnyvEQzZA+Gk6L+XESHi2mkofg=)
                          2: 5C15170E7C3F11ED8559019DF1222468.roa (hash: Fnw4e2Z6mQxfu98S+Kvx8lPub/zYdBqQ2Qpl3ytsjPY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1551 (0x60f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369D48AAF, serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
        Validity
            Not Before: Dec  8 02:30:10 2025 GMT
            Not After : Dec 10 02:30:10 2025 GMT
        Subject: CN=69363833-37af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:f8:50:43:d3:1d:2e:23:d1:28:ef:4c:cd:
                    bd:73:14:b7:44:cc:24:36:e7:1e:3e:80:ec:b1:f8:
                    87:de:b8:66:44:37:02:ff:aa:40:1a:70:fd:74:cc:
                    74:97:26:8c:03:82:94:82:22:f0:fe:3e:ba:9b:22:
                    59:69:6c:33:90:c5:ff:cb:6f:76:bb:a2:d6:3b:18:
                    f1:f9:a6:e7:e2:d9:13:fe:ed:eb:41:1b:f1:fa:35:
                    7a:eb:65:bb:91:26:1c:ad:2a:f9:6b:27:0e:32:90:
                    47:9b:77:d5:1d:0d:9b:01:4a:84:a4:d2:6e:2f:6c:
                    a7:4c:94:56:50:b7:d9:5d:ab:2a:76:8c:a5:7d:89:
                    2c:fe:27:33:73:e3:fa:bf:79:d5:57:ad:04:49:e4:
                    68:50:5a:67:b6:11:d5:28:1e:96:d8:35:84:4c:bf:
                    7a:aa:86:e0:ed:b2:37:ea:0c:87:f7:c7:b8:f8:cc:
                    22:4f:94:f4:74:a6:2c:51:d7:c9:c2:91:71:3e:90:
                    5b:27:f1:cf:c9:e7:a2:1a:5f:47:59:43:2b:13:d7:
                    b5:cb:79:07:54:08:dc:b7:7e:a3:0e:75:96:2c:03:
                    1b:54:09:7e:95:47:8e:81:94:5d:d7:c9:52:ad:d5:
                    ed:11:8e:8f:05:19:46:f2:f9:49:79:18:e9:9e:85:
                    74:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:96:18:D1:22:EF:46:6E:C7:0C:0B:FF:9D:C4:53:DB:74:FA:58:FC
            X509v3 Authority Key Identifier:
                keyid:BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f4:a8:f4:93:f5:2f:49:1f:e8:ea:52:c9:0d:7b:fc:94:2e:
         18:47:bf:96:13:23:7e:bc:dc:7f:dc:c6:f5:4f:9c:bf:f5:91:
         8c:dd:6b:80:39:26:13:6c:db:4c:2c:62:d7:b6:38:33:f6:26:
         4b:44:89:2b:14:3b:d8:d3:ab:13:47:09:a6:21:2e:92:b0:89:
         94:60:a1:c9:3a:12:86:a1:36:7e:32:ae:13:2a:c1:36:1f:d0:
         bc:69:fb:28:3c:12:6b:6a:f8:04:47:37:e2:10:4f:0d:83:4f:
         a1:97:2e:d1:16:b2:d2:f5:cd:90:0b:73:79:f5:1a:22:eb:d7:
         ca:c1:0c:2a:0a:8c:3e:55:7b:80:65:3c:7b:b3:a7:4b:22:86:
         4f:c3:f1:b2:e0:f3:92:be:52:f9:aa:c8:ad:12:a6:ca:84:5f:
         63:87:2e:f5:54:b5:15:7b:c3:1d:12:4c:47:23:2b:ca:b8:20:
         08:43:3d:7e:85:c8:a8:e9:51:72:ca:8e:06:bd:7e:d1:3d:b5:
         ea:c2:b3:01:2b:61:0f:8f:73:a8:2b:0a:1f:09:0e:98:3e:35:
         6d:6a:29:fe:19:90:ed:e9:c3:1d:e4:e0:ca:d5:9c:47:a1:1e:
         84:8f:2c:f5:c3:67:e1:ef:ab:15:1a:bc:9e:56:c9:43:3f:01:
         8e:3e:ec:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:09:59 2025 by rpki-client