This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
File:                     yRNvElsMvwHLUu8Ona1pO53hebE.mft (raw, json)
Hash identifier:          IylbP+g5aWLrM00jOzYedfQ977zA6pX69oRp+wwYtqs=
Subject key identifier:   FA:24:AC:DB:1F:AC:6F:37:FD:80:67:B3:06:A6:49:24:53:28:D4:55
Authority key identifier: C9:13:6F:12:5B:0C:BF:01:CB:52:EF:0E:9D:AD:69:3B:9D:E1:79:B1
Certificate issuer:       /CN=F369F5CBAF/serialNumber=C9136F125B0CBF01CB52EF0E9DAD693B9DE179B1
Certificate serial:       01DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yRNvElsMvwHLUu8Ona1pO53hebE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
Manifest number:          01DC
Signing time:             Mon 08 Dec 2025 04:29:55 +0000
Manifest this update:     Mon 08 Dec 2025 04:29:55 +0000
Manifest next update:     Wed 10 Dec 2025 04:29:55 +0000
Files and hashes:         1: yRNvElsMvwHLUu8Ona1pO53hebE.crl (hash: khuS3R9sHBbTQlQnbx2MgPoEGjPgP8IoCeK1ppGQfng=)
                          2: DAA13BB269C211EF87DB5478762E951A.roa (hash: Y1C12JjUCRZB6miS2tftf7tn5FoqQq5MI2tzdSPlKmM=)
                          3: 6902F9DC69DB11EFB4D7CE8D762E951A.roa (hash: bWiMdJKsCZRqY9/D/tP0KK4vV03plvkNcR9SdfYbiCw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yRNvElsMvwHLUu8Ona1pO53hebE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F5CBAF, serialNumber=C9136F125B0CBF01CB52EF0E9DAD693B9DE179B1
        Validity
            Not Before: Dec  8 04:29:55 2025 GMT
            Not After : Dec 10 04:29:55 2025 GMT
        Subject: CN=69365443-5613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:6a:52:e4:7a:07:a7:03:3a:84:05:b8:c9:
                    83:0a:ce:4d:cc:7a:d5:f2:a0:16:a7:96:5f:9d:92:
                    f6:e8:79:bb:90:2a:5f:f0:6b:6a:f4:aa:30:25:f5:
                    f9:70:26:1e:21:e3:57:4a:a3:95:f6:29:cc:c6:c4:
                    28:35:e7:20:7f:f6:4d:ae:6e:a4:ef:6d:7a:f9:d0:
                    3f:a8:04:59:61:54:99:3f:68:7f:8a:f1:4e:50:72:
                    a4:fb:89:1d:60:38:bb:57:ed:a4:83:73:8d:51:2c:
                    18:31:98:a2:64:f5:10:df:ff:f1:32:6a:37:d5:76:
                    fc:60:dc:9e:5d:8a:6c:cf:bc:55:00:75:04:b0:06:
                    51:b4:33:c5:c2:9d:0b:ac:f2:b5:d0:5a:d9:58:fa:
                    3f:06:9a:90:e6:ee:a5:e7:e9:77:b7:03:aa:29:7d:
                    fb:2b:30:40:9e:0b:71:8a:8c:4b:7f:a8:ff:2a:98:
                    9c:c3:43:9e:88:79:2c:84:dd:43:5a:a2:73:e9:24:
                    eb:1f:c1:cc:d5:b6:44:a8:31:c2:50:1c:22:8a:44:
                    54:6f:14:38:fc:af:65:34:a4:5b:15:07:6a:ad:42:
                    f0:06:70:8b:a8:c0:08:38:80:7d:65:34:fc:de:24:
                    53:d8:78:7f:39:d6:ce:64:a1:7a:d4:fc:78:71:bd:
                    2b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:24:AC:DB:1F:AC:6F:37:FD:80:67:B3:06:A6:49:24:53:28:D4:55
            X509v3 Authority Key Identifier:
                keyid:C9:13:6F:12:5B:0C:BF:01:CB:52:EF:0E:9D:AD:69:3B:9D:E1:79:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yRNvElsMvwHLUu8Ona1pO53hebE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3f:29:1b:74:41:1e:68:e6:98:a2:6d:1a:0c:f4:b7:df:73:
         07:c4:3d:38:43:0c:1e:6f:b1:84:38:de:91:39:74:52:9f:69:
         6c:92:9d:1d:c9:3b:cf:16:b3:8c:7a:e3:f6:66:28:82:e4:65:
         d1:6d:8b:ff:99:22:2c:b4:ab:98:0d:e1:77:38:b6:97:40:70:
         35:87:9b:ed:f8:20:62:f5:9d:93:90:ae:19:d8:75:88:f2:8d:
         b2:b1:5d:bd:ba:0c:dd:1a:27:c2:bf:1c:12:6f:5e:03:4a:4f:
         21:ce:a8:28:8a:a8:43:1d:e0:11:8e:40:4e:d6:4e:6c:6e:38:
         e7:08:b1:3f:7b:50:3f:a9:2c:1c:3a:c0:21:26:3f:73:b2:0a:
         cc:6f:2c:bd:e6:8a:61:f6:52:30:0c:2f:a3:c1:75:79:eb:d5:
         2f:c8:fa:67:4b:b7:32:84:95:2a:b5:5e:a5:78:13:7f:93:63:
         86:10:4a:53:9c:e3:4e:1d:10:d3:5f:97:6c:95:39:d8:db:14:
         88:b9:4a:e9:55:a5:8b:13:0c:6e:2b:6d:e2:7c:ce:7e:90:64:
         02:81:99:ef:d9:5b:84:28:f0:ce:d6:fb:43:a3:1b:d0:47:e0:
         9d:00:4b:da:d2:f6:0d:1a:58:92:a8:20:c2:ce:0d:d2:c4:a5:
         56:de:2b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:07:05 2025 by rpki-client