This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
File:                     Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft (raw, json)
Hash identifier:          +4Vb4E1KRdObQcAOIELEPlxtTyffOtmC+8h487Q8J7Y=
Subject key identifier:   4C:29:9C:64:E0:86:8E:40:A3:46:1E:B4:FF:BE:3F:F5:8F:D1:98:0B
Authority key identifier: 63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4
Certificate issuer:       /CN=F36F1344AF/serialNumber=63E0A90C2B2A4B42A44AD44C8570E4BFFBF75CF4
Certificate serial:       051B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
Manifest number:          0517
Signing time:             Mon 08 Dec 2025 02:49:20 +0000
Manifest this update:     Mon 08 Dec 2025 02:49:20 +0000
Manifest next update:     Wed 10 Dec 2025 02:49:20 +0000
Files and hashes:         1: Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl (hash: Q9leskLp6MM6bwjdJJ/BIjAMM2ytZzK+sW/Ohu/8XJY=)
                          2: 90A4B082F61711ECAADA17ACF1222468.roa (hash: CaEhC6ko8rU8vfgfvjdKNqBvDwiD5+5f3Laxi98D208=)
                          3: B84D6F0CF61711EC9E38A0ACF1222468.roa (hash: 2mZmU9le3XeMP1Ox8Wu5Hc79KfraT0VEEUN4L6+zeCQ=)
                          4: F05CFC3CF61711ECB1B82FADF1222468.roa (hash: Au6s2pxaSDvChW+FzABudGYSlCnH0CYLP8pI+Txi2cM=)
                          5: D83E4E26F61711EC8578F9ACF1222468.roa (hash: skbNDT3ppZgY3ou45+uEjEyueX8K01a5I/sQR4qbdro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1307 (0x51b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F1344AF, serialNumber=63E0A90C2B2A4B42A44AD44C8570E4BFFBF75CF4
        Validity
            Not Before: Dec  8 02:49:20 2025 GMT
            Not After : Dec 10 02:49:20 2025 GMT
        Subject: CN=69363cb0-9b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:18:07:1a:55:d5:4f:46:cc:87:4a:aa:c0:39:
                    ed:5d:70:98:d9:f2:44:65:23:ab:64:4c:34:51:b1:
                    03:95:17:61:e2:d7:2f:c6:42:f9:38:61:15:0c:66:
                    fe:b8:2c:37:cb:50:9a:86:66:69:18:0b:91:a0:7a:
                    af:0c:72:9a:7b:3e:8f:39:c4:91:fc:e8:46:12:83:
                    07:90:37:44:af:11:a5:ee:80:5d:8a:14:77:de:d1:
                    ee:91:89:10:a2:38:a0:b5:66:83:96:4a:fa:26:ad:
                    ab:d3:68:94:cf:d3:bc:7f:23:af:04:c8:a1:c2:dd:
                    ce:cc:ad:82:ff:9b:5b:6d:b4:39:7a:d6:25:14:60:
                    25:b1:33:cc:92:ee:97:e0:30:7b:79:ae:89:73:72:
                    0b:ca:3b:93:3a:aa:8b:fc:ad:a2:ca:79:05:58:3f:
                    1d:c2:9f:49:ed:d0:22:15:9f:4a:1d:e1:7f:a6:43:
                    b6:d0:52:5f:15:e7:0c:d7:18:6b:e6:34:8a:e9:8d:
                    9e:f8:77:27:94:7d:01:70:07:fa:4b:93:f9:1c:4a:
                    18:6d:f4:ab:9a:95:28:75:90:f5:de:7b:3d:28:06:
                    3e:a9:ed:99:9f:fa:a6:57:5e:dc:4c:8c:c4:36:94:
                    79:0a:91:2c:d7:01:8f:ee:ea:49:8d:85:7c:11:0a:
                    f6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:29:9C:64:E0:86:8E:40:A3:46:1E:B4:FF:BE:3F:F5:8F:D1:98:0B
            X509v3 Authority Key Identifier:
                keyid:63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b9:11:04:8f:c9:2b:67:8a:1d:25:51:40:41:3e:93:1f:06:
         cb:06:d2:dd:9e:04:24:af:41:c9:8e:f0:4b:46:f5:56:a2:11:
         e8:5d:cc:40:21:30:e4:52:21:77:7f:14:f6:59:3a:c2:1f:fb:
         70:1f:92:c5:32:ac:b0:ce:98:cc:da:38:06:df:9d:5f:eb:29:
         aa:29:f7:5b:b5:ea:41:a1:68:41:fc:8c:21:6c:36:52:e2:bc:
         96:44:69:e6:88:a7:77:45:79:69:aa:fa:68:65:04:c3:f4:84:
         d9:c6:df:4a:ac:5d:95:c6:d6:0e:6e:04:02:f3:64:50:60:b1:
         fc:f7:57:1c:3a:02:79:70:6b:2e:5b:24:b6:1b:10:4f:53:40:
         73:80:34:cb:d5:84:4c:e4:e3:98:78:76:b7:96:bd:18:ec:84:
         00:ae:39:4f:e7:0e:49:8c:51:eb:58:b0:6c:60:fa:b1:64:79:
         f4:7a:65:cc:76:25:b5:99:ea:32:f9:68:8d:e8:67:77:6d:7c:
         53:80:be:b4:2a:13:81:07:7d:02:46:a6:0b:c6:62:f8:65:6d:
         fd:46:5f:fc:41:20:9b:32:69:57:44:70:63:d2:7e:d6:f4:49:
         26:74:fd:19:d9:81:86:01:40:3e:c3:71:1a:47:b0:15:7e:ee:
         7d:0f:d1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:18:50 2025 by rpki-client