This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File:                     bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier:          jMIsyEV5SKasq5er7YkobOwvcsAaLBXkVEaVSBIEnik=
Subject key identifier:   6E:45:C3:C7:CC:E8:5E:D7:44:F2:59:FF:02:52:2F:B3:6A:53:1B:73
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer:       /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial:       0F74
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number:          0F61
Signing time:             Tue 23 Dec 2025 00:15:15 +0000
Manifest this update:     Tue 23 Dec 2025 00:15:12 +0000
Manifest next update:     Thu 25 Dec 2025 00:15:12 +0000
Files and hashes:         1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: u/xr8xxQaZmXnzSKdjbfhemDAsnBa7xY5exwZNYasKk=)
                          2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: rv1kEJuZHu+DX0DTMEOnscLsCZlcmBJ81z2u+ACteHw=)
                          3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: fI1p3DHd6xCPdYa8vbre+aWndGfIHvfHIzw56wOpGcU=)
                          4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: 7wnmK4TUsAQFB4aTf61zo6E0Mz2KJ5b/rgxYOI5V3nQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 00:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3956 (0xf74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
        Validity
            Not Before: Dec 23 00:15:12 2025 GMT
            Not After : Dec 25 00:15:12 2025 GMT
        Subject: CN=6949df11-49a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:36:92:41:80:e6:28:cc:b2:77:b1:c7:37:57:
                    0a:38:ad:d7:c2:89:f5:93:78:29:56:bb:cf:95:fd:
                    68:39:40:3b:bc:10:c9:b7:90:1d:a7:c9:48:aa:bd:
                    1c:3f:5f:62:41:63:1d:d1:c2:b0:45:a9:b0:76:d9:
                    6a:7a:46:eb:04:2d:2b:42:4d:be:62:7b:50:be:f5:
                    5f:ae:dd:fa:8b:28:fc:c7:1e:36:9e:54:7f:01:96:
                    ae:56:80:dd:be:bd:02:6c:59:6f:07:94:b9:3b:da:
                    6f:fc:fa:1f:0d:24:79:a1:c3:85:cb:05:b6:c4:f9:
                    6b:b3:60:c7:62:62:aa:54:ed:65:f6:ae:14:4b:2e:
                    3e:8c:a6:18:6d:4a:2f:26:c9:72:9b:76:22:a3:40:
                    89:03:db:72:cb:3a:c0:1f:61:bb:0e:23:e5:c7:3f:
                    b9:3c:8c:a9:6e:29:bf:e8:da:11:e6:95:d7:38:e5:
                    fb:0d:e0:c2:f9:81:80:a4:73:3c:17:24:66:e3:3b:
                    19:9b:13:4b:13:e8:83:e5:e1:0b:37:5b:9f:3c:93:
                    3a:64:9f:fa:4f:5c:81:1e:7d:d0:b7:2f:44:ae:cc:
                    37:03:9b:c0:17:54:70:99:36:ca:8b:e7:6e:83:df:
                    ee:f7:a4:72:89:2c:02:fe:ac:1a:33:b5:58:e6:16:
                    98:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:45:C3:C7:CC:E8:5E:D7:44:F2:59:FF:02:52:2F:B3:6A:53:1B:73
            X509v3 Authority Key Identifier:
                keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d7:aa:34:5a:99:0a:0d:63:14:3a:f4:6d:57:52:d9:07:02:
         7b:87:81:24:ed:a5:b5:6c:20:5a:d9:be:b9:ec:7c:8b:45:0e:
         2a:fe:1c:e5:58:e7:5c:34:50:6a:2e:ad:1e:62:7e:ac:96:0e:
         cb:91:ff:b7:e0:d6:1b:16:fd:db:7b:23:0d:27:87:f7:59:d3:
         02:c5:47:cf:f6:ee:31:73:c8:f9:8f:23:94:58:d5:20:8f:ac:
         6f:7f:42:d2:e9:44:22:02:12:ea:66:2e:11:68:0c:55:21:0d:
         aa:a0:36:ca:b3:21:fd:03:13:87:4d:06:2a:44:06:b1:88:02:
         70:d5:cd:ed:8a:9e:e1:88:9a:f0:b6:d7:23:76:c1:49:17:2e:
         78:56:fb:5d:6d:5a:61:c7:30:fc:b6:51:79:d6:b4:cc:16:ba:
         d5:71:be:70:02:69:8a:9b:44:9c:c4:8b:f6:44:5b:22:45:74:
         42:3b:f6:e3:10:5c:67:2b:15:78:5b:18:70:8e:40:e8:a7:01:
         80:bb:53:e4:4c:f6:5a:b7:30:05:3d:85:e0:e7:cf:e5:e5:f4:
         e7:7b:a6:8f:67:32:08:19:1c:9b:64:2c:eb:1e:c7:05:3c:6e:
         15:1f:2b:86:b6:86:73:90:cc:95:c9:41:20:82:61:8b:4d:49:
         a3:3e:47:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:41:10 2025 by rpki-client