This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
File:                     D0ElrSzSvYs64WLz4yLl9YEEdVw.mft (raw, json)
Hash identifier:          /whlJgMYNAHrBJIgw3Ubx8pWFJ3pe9WvQnGUaTSfeN8=
Subject key identifier:   79:9F:B3:7E:9B:DF:6E:9B:2A:3C:5D:AF:23:B8:A8:9D:6B:5F:1D:0A
Authority key identifier: 0F:41:25:AD:2C:D2:BD:8B:3A:E1:62:F3:E3:22:E5:F5:81:04:75:5C
Certificate issuer:       /CN=F369E1AEAF/serialNumber=0F4125AD2CD2BD8B3AE162F3E322E5F58104755C
Certificate serial:       02DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
Manifest number:          02DB
Signing time:             Mon 08 Dec 2025 03:57:09 +0000
Manifest this update:     Mon 08 Dec 2025 03:57:08 +0000
Manifest next update:     Wed 10 Dec 2025 03:57:08 +0000
Files and hashes:         1: D0ElrSzSvYs64WLz4yLl9YEEdVw.crl (hash: VhCpdpXmN7NJ97tJPAxijgoUPeYWlEPK4dcHbd2dqBQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 732 (0x2dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E1AEAF, serialNumber=0F4125AD2CD2BD8B3AE162F3E322E5F58104755C
        Validity
            Not Before: Dec  8 03:57:08 2025 GMT
            Not After : Dec 10 03:57:08 2025 GMT
        Subject: CN=69364c95-5c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:64:ba:f0:a4:cf:84:77:b5:1d:15:2e:6a:
                    34:fe:dd:6a:2d:03:20:96:d6:f4:79:b9:96:0b:ae:
                    ed:d5:e6:ea:1c:01:9a:37:54:3d:b0:47:02:b8:83:
                    22:45:a6:8f:39:c0:89:6d:31:2e:1a:64:ab:f0:a1:
                    c3:b0:a5:f3:30:d2:f7:eb:25:84:77:4d:da:0c:10:
                    b9:48:96:73:0d:42:33:6f:ef:3d:19:9b:2f:ca:d4:
                    dd:79:8e:e2:81:bb:b5:a2:11:a5:32:79:8b:b2:22:
                    68:7c:d5:30:16:a3:8f:7a:54:2b:95:c9:37:20:1a:
                    72:b7:a5:9c:7d:4d:35:aa:00:1d:2c:1e:e1:5f:6c:
                    2f:ed:45:74:16:fd:db:f1:54:69:62:17:08:a1:dd:
                    57:1a:1d:45:bf:4d:83:b5:aa:63:db:32:94:ee:d5:
                    07:56:97:b8:46:6d:69:88:e7:dc:32:b9:7e:ab:96:
                    3b:2e:21:f4:ae:69:ab:34:0b:3c:77:e4:a8:51:a0:
                    c0:a5:0b:91:e7:72:d2:67:0d:5f:12:57:a7:86:cf:
                    5f:8a:22:25:96:d3:84:91:4d:e9:a6:96:21:63:9b:
                    f1:5a:ab:76:0f:98:d6:0b:2e:66:6a:f7:6d:24:d8:
                    5a:00:4d:d3:d7:be:dd:d3:b0:94:b8:48:f1:06:af:
                    30:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9F:B3:7E:9B:DF:6E:9B:2A:3C:5D:AF:23:B8:A8:9D:6B:5F:1D:0A
            X509v3 Authority Key Identifier:
                keyid:0F:41:25:AD:2C:D2:BD:8B:3A:E1:62:F3:E3:22:E5:F5:81:04:75:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:cf:e8:d1:c7:11:2e:61:8c:04:3b:e6:66:f3:39:1d:be:b6:
         5d:ad:b2:4d:0c:27:82:06:19:90:6c:a8:d4:a3:92:3c:2e:95:
         8f:c4:6b:ce:45:77:4d:96:50:a5:f8:2b:80:38:d4:a8:d2:b7:
         66:96:f7:95:10:68:97:36:0a:08:60:09:d4:7b:f0:19:cf:78:
         d1:44:cf:45:98:dd:7b:8f:3f:af:07:18:35:93:23:1c:54:32:
         f6:57:3f:58:ba:26:1b:32:12:99:d8:fe:bb:a0:b9:05:f5:5b:
         c2:b3:e4:7a:d5:00:ed:61:b7:aa:11:b1:21:d2:86:7a:1f:a6:
         0d:8a:d7:57:00:64:d9:91:dd:40:2b:da:ec:64:06:eb:f8:66:
         71:27:c1:cd:b1:21:67:cd:8c:ac:ce:87:22:cf:57:33:70:88:
         3c:6d:60:7c:f4:3e:b7:13:17:a1:7b:09:1f:89:70:63:59:5f:
         d5:7b:ec:90:4d:31:51:e8:54:24:fc:a4:c8:82:ae:c3:c7:c2:
         58:9e:65:83:73:84:75:64:3a:9c:23:36:a2:9d:ae:07:07:3a:
         ba:70:41:b4:a8:91:eb:b8:b0:b3:31:6c:ed:be:bd:81:e8:db:
         7d:76:b9:4e:7e:69:91:e8:7e:47:ac:a8:f7:dd:90:b9:61:c5:
         27:cc:08:93
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAtwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUUxQUVBRjExMC8GA1UEBRMoMEY0MTI1QUQyQ0QyQkQ4QjNBRTE2MkYzRTMyMkU1
RjU4MTA0NzU1QzAeFw0yNTEyMDgwMzU3MDhaFw0yNTEyMTAwMzU3MDhaMBgxFjAU
BgNVBAMTDTY5MzY0Yzk1LTVjNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0zmS68KTPhHe1HRUuajT+3WotAyCW1vR5uZYLru3V5uocAZo3VD2wRwK4
gyJFpo85wIltMS4aZKvwocOwpfMw0vfrJYR3TdoMELlIlnMNQjNv7z0Zmy/K1N15
juKBu7WiEaUyeYuyImh81TAWo496VCuVyTcgGnK3pZx9TTWqAB0sHuFfbC/tRXQW
/dvxVGliFwih3VcaHUW/TYO1qmPbMpTu1QdWl7hGbWmI59wyuX6rljsuIfSuaas0
Czx35KhRoMClC5HnctJnDV8SV6eGz1+KIiWW04SRTemmliFjm/Faq3YPmNYLLmZq
920k2FoATdPXvt3TsJS4SPEGrzCLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUeZ+z
fpvfbpsqPF2vI7ionWtfHQowHwYDVR0jBBgwFoAUD0ElrSzSvYs64WLz4yLl9YEE
dVwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlFMUFFL0EzRTJFQzcyQTU2NjExRUVCRTU5OTA2QUQyNUJFNDY1L0QwRWxy
U3pTdllzNjRXTHo0eUxsOVlFRWRWdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0QwRWxyU3pTdllzNjRXTHo0eUxsOVlFRWRWdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUUxQUUvQTNFMkVDNzJBNTY2MTFFRUJFNTk5MDZBRDI1
QkU0NjUvRDBFbHJTelN2WXM2NFdMejR5TGw5WUVFZFZ3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbz+jRxxEuYYwEO+Zm8zkdvrZdrbJN
DCeCBhmQbKjUo5I8LpWPxGvORXdNllCl+CuAONSo0rdmlveVEGiXNgoIYAnUe/AZ
z3jRRM9FmN17jz+vBxg1kyMcVDL2Vz9YuiYbMhKZ2P67oLkF9VvCs+R61QDtYbeq
EbEh0oZ6H6YNitdXAGTZkd1AK9rsZAbr+GZxJ8HNsSFnzYyszociz1czcIg8bWB8
9D63ExehewkfiXBjWV/Ve+yQTTFR6FQk/KTIgq7Dx8JYnmWDc4R1ZDqcIzaina4H
Bzq6cEG0qJHruLCzMWztvr2B6Nt9drlOfmmR6H5HrKj33ZC5YcUnzAiT
-----END CERTIFICATE-----
Generated at Mon Dec 8 17:05:14 2025 by rpki-client