This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
File:                     Y2BaihJPjsom32anMaZF3MgxlJU.mft (raw, json)
Hash identifier:          O9bbBLShHYtRLDY/CgneLpnUNBpg8Y7J9UO8gDjXEEc=
Subject key identifier:   85:7B:A2:CD:84:36:CA:0A:17:CC:F2:4E:72:A0:7E:11:82:F7:0B:77
Authority key identifier: 63:60:5A:8A:12:4F:8E:CA:26:DF:66:A7:31:A6:45:DC:C8:31:94:95
Certificate issuer:       /CN=F36150C1AF/serialNumber=63605A8A124F8ECA26DF66A731A645DCC8319495
Certificate serial:       0D69
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
Manifest number:          0D69
Signing time:             Tue 09 Dec 2025 01:05:56 +0000
Manifest this update:     Tue 09 Dec 2025 01:05:55 +0000
Manifest next update:     Thu 11 Dec 2025 01:05:55 +0000
Files and hashes:         1: Y2BaihJPjsom32anMaZF3MgxlJU.crl (hash: mi+BLzu5TE8c/2Y8V8IECUw2O2UIUxlEFqCIJtnhJwk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3433 (0xd69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36150C1AF, serialNumber=63605A8A124F8ECA26DF66A731A645DCC8319495
        Validity
            Not Before: Dec  9 01:05:55 2025 GMT
            Not After : Dec 11 01:05:55 2025 GMT
        Subject: CN=693775f4-22ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:23:70:4d:4a:92:b3:fe:88:61:de:f9:03:
                    83:9e:c5:2b:e2:7c:fa:77:f3:05:2b:c3:58:4d:09:
                    10:0d:e6:70:e9:39:89:66:4c:8f:5a:d1:eb:eb:5f:
                    28:e7:80:5f:7f:b6:e8:1c:6d:13:62:17:b8:a4:cb:
                    0f:f5:f6:70:58:6f:bc:04:4a:b8:42:36:e0:a3:94:
                    ea:e1:7a:8f:32:33:97:02:df:89:31:39:11:8b:cd:
                    62:9b:85:1a:5d:d9:59:b8:f6:c6:84:da:42:c5:6a:
                    41:df:bd:6d:f3:dd:4a:59:77:51:90:ff:c5:a6:3e:
                    7d:18:6f:a7:3b:5d:52:e2:86:ac:0b:d0:3f:a8:17:
                    01:2f:70:6d:9d:f9:f3:12:6e:47:f1:6f:73:3a:45:
                    75:34:50:21:4f:5f:63:e1:39:cd:c9:60:96:c4:0f:
                    14:43:d5:4b:dc:4a:3e:b6:67:b6:19:56:ce:f3:73:
                    d8:e0:75:36:3f:21:e1:ea:8b:4a:36:f5:6c:41:cc:
                    d8:63:41:fa:5e:25:f3:e7:fc:97:a6:47:ae:eb:cc:
                    74:38:27:11:e2:71:e9:e5:08:bb:e3:87:22:09:d5:
                    d8:27:c8:d0:15:e7:31:1a:fe:c5:74:39:54:2d:a4:
                    83:9f:8e:43:2a:d7:65:29:75:5e:a8:c3:1f:0f:a5:
                    22:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7B:A2:CD:84:36:CA:0A:17:CC:F2:4E:72:A0:7E:11:82:F7:0B:77
            X509v3 Authority Key Identifier:
                keyid:63:60:5A:8A:12:4F:8E:CA:26:DF:66:A7:31:A6:45:DC:C8:31:94:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:32:5b:1f:fb:81:12:56:37:b7:29:39:7a:74:cd:a4:26:d8:
         8f:4a:fb:77:71:6b:0b:b5:bf:3b:ff:15:a9:98:25:a1:6b:fa:
         ba:03:48:d9:9b:6f:64:ef:c5:e7:59:14:a8:cf:5e:82:96:bc:
         31:63:86:58:c7:ff:b6:84:0d:48:8b:78:f9:28:af:16:10:b3:
         ea:58:bc:b2:22:76:01:a2:4f:c6:1c:1d:a5:ac:92:ac:07:5f:
         da:db:14:29:1d:c2:ee:e2:00:14:e7:c3:b2:ef:68:72:75:71:
         b3:78:19:f4:ce:e0:f1:4d:43:ce:f5:37:d8:6f:b4:95:72:4e:
         a0:3a:01:1c:21:04:2c:b5:ad:47:56:1e:9d:53:74:58:73:e3:
         9f:e0:99:7b:b9:99:a8:98:db:06:24:5d:2b:e2:95:4c:a2:30:
         b5:56:00:2d:d5:be:77:7a:04:ce:40:56:cf:6e:66:5a:75:b8:
         f9:28:78:c3:f4:d8:09:3f:da:3a:1d:00:51:8e:eb:cf:af:72:
         b7:35:e1:70:06:f0:66:e2:a8:e9:3a:bb:0c:74:5b:e0:87:cf:
         bf:51:1f:f2:cc:b1:88:29:4d:c1:ff:0d:29:0e:36:9c:aa:6e:
         c5:d4:45:3c:d1:4c:e0:7c:8e:d1:d7:d3:3b:ff:60:4c:32:d3:
         67:dd:e6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:05:35 2025 by rpki-client