This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
File:                     yS6IWCfGdhnhMXVwMBfERC3f6s8.mft (raw, json)
Hash identifier:          FKq+dYOI9pza5ZBNY39pqC6O3oEBKDXFNOEarplk5VI=
Subject key identifier:   5E:56:4D:4A:11:FC:82:19:94:31:19:0F:73:A1:9F:1B:29:D5:C1:C4
Authority key identifier: C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF
Certificate issuer:       /CN=F369F058AF/serialNumber=C92E885827C67619E13175703017C4442DDFEACF
Certificate serial:       09DA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
Manifest number:          09D3
Signing time:             Sun 07 Dec 2025 01:17:18 +0000
Manifest this update:     Sun 07 Dec 2025 01:17:17 +0000
Manifest next update:     Tue 09 Dec 2025 01:17:17 +0000
Files and hashes:         1: yS6IWCfGdhnhMXVwMBfERC3f6s8.crl (hash: tQ4AZ13YOWigbxp2Unh0LfrnyVGVahcpssHOR5AuPyM=)
                          2: F3961630123611EF80C92C51017001B1.roa (hash: P7zmLDBytjro0KKIgTEyZppS7BdxrGwBEJ1mm2r94Gc=)
                          3: 04605838361A11F0B9F961F3DAE4EC9C.roa (hash: r+y3Fw+81AAFIoIiHOQuOaDuH+WDZZZ3ri/u6RsXKpg=)
                          4: 25843EB0123711EFB5C1A851017001B1.roa (hash: 5Dbg0It6Gnjot6cZHpwak5GthbHzIipbWJ6mhVVl1e8=)
                          5: 32FAEFC2361B11F0B2EA437CDAE4EC9C.roa (hash: 22FqTrSwm7BxiKIiscjIzYYBmw1MfLawSBgcnxT4pB4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 01:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2522 (0x9da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F058AF, serialNumber=C92E885827C67619E13175703017C4442DDFEACF
        Validity
            Not Before: Dec  7 01:17:17 2025 GMT
            Not After : Dec  9 01:17:17 2025 GMT
        Subject: CN=6934d59e-67c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:77:97:bc:ce:b1:ad:b2:25:e9:52:c3:1e:
                    e4:3e:b7:49:5b:6a:5b:cd:db:6d:35:38:e3:30:a4:
                    84:0f:aa:66:85:6c:0e:df:f0:d8:b9:4b:08:8a:6a:
                    37:ec:a3:77:c6:b1:23:cc:66:b6:0d:2b:75:dc:ae:
                    18:69:b6:39:fd:02:1a:38:1e:6f:c8:b2:08:ac:74:
                    9e:68:45:4d:80:b6:58:a3:cb:6e:99:e7:fe:80:6c:
                    7a:1d:eb:aa:64:d7:55:f1:55:fd:ad:28:53:5b:58:
                    85:b9:d2:49:a3:b6:ea:21:58:4f:50:18:d8:41:80:
                    bd:d6:91:d8:a4:d3:e8:91:bf:66:1a:ef:74:ce:53:
                    3f:13:2b:f4:11:10:b9:94:5d:4e:4f:4e:0e:10:27:
                    1c:88:40:da:0c:63:d6:ac:d2:44:83:89:38:1f:12:
                    84:10:5f:8c:47:e7:c1:26:fa:97:d8:89:6d:c5:6a:
                    ce:2e:d3:9e:6e:98:fc:6b:8e:08:8d:7e:33:a0:ce:
                    7b:4c:4f:fc:ff:b3:fd:24:ab:46:2b:13:7c:c1:5c:
                    d0:49:6d:54:f7:28:a3:47:cc:eb:5f:55:fb:60:5c:
                    8f:cf:3a:5d:95:32:5f:f7:4f:d7:f2:28:9d:37:60:
                    99:9b:98:1f:38:fe:bc:1d:3f:cd:6a:67:2d:c4:fd:
                    bd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:56:4D:4A:11:FC:82:19:94:31:19:0F:73:A1:9F:1B:29:D5:C1:C4
            X509v3 Authority Key Identifier:
                keyid:C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:8f:10:d9:b0:ec:8b:8c:ef:77:94:a4:64:d0:ab:7c:07:b2:
         21:15:97:ed:77:1b:de:6b:49:34:40:f0:20:b3:e2:9a:94:0b:
         54:55:83:ee:1b:8b:72:db:ff:cb:4d:1d:af:8d:b8:7c:36:1a:
         14:5b:0c:f8:8f:4d:09:5c:ac:1e:30:ba:d8:57:7c:2d:52:25:
         d9:16:23:a6:9d:62:44:e8:0b:01:ed:09:37:2e:76:7b:62:ba:
         6e:ee:9b:84:80:51:e2:00:5a:86:b2:eb:ea:71:74:d6:d4:82:
         88:e5:f3:15:0c:f0:87:fe:b6:d3:5d:59:c4:3e:f2:be:4f:b4:
         81:cd:0c:96:9b:3f:fe:ee:f4:ed:a3:af:f3:a5:f6:4a:86:f6:
         87:aa:12:b0:05:87:bf:fe:54:c3:01:6d:a9:d1:dc:c4:5f:bd:
         7a:9b:ad:25:d0:8c:17:54:1c:93:98:75:da:46:d9:93:ac:e4:
         4b:6b:b7:11:7d:33:20:25:fc:fa:4d:af:66:4b:ad:c9:f6:eb:
         fd:43:79:13:3f:cc:67:12:b1:35:9d:2c:a6:aa:53:1c:94:54:
         7e:6a:e5:20:ce:08:13:bc:1c:b8:e7:3c:4d:15:be:cf:96:d7:
         c7:cf:89:63:12:61:25:b0:11:da:50:9a:ab:1a:f7:48:39:5f:
         a9:04:6b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 18:29:57 2025 by rpki-client