This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
File:                     aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft (raw, json)
Hash identifier:          acfT0L7MzT6DuwNLP7bUPCYaU0CUrvVzSfxDeqS9kxM=
Subject key identifier:   1B:4F:36:42:42:20:E8:9C:28:91:46:B1:87:CC:50:B3:F6:32:E6:11
Authority key identifier: 68:8C:90:F5:23:D7:EC:F9:0E:B7:DC:98:1B:70:71:E3:83:49:31:52
Certificate issuer:       /CN=F361B835AF/serialNumber=688C90F523D7ECF90EB7DC981B7071E383493152
Certificate serial:       E6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
Manifest number:          E5
Signing time:             Tue 09 Dec 2025 04:56:09 +0000
Manifest this update:     Tue 09 Dec 2025 04:56:08 +0000
Manifest next update:     Thu 11 Dec 2025 04:56:08 +0000
Files and hashes:         1: aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl (hash: ud8YATEOVhMaBpjEZ69W5+epnQjk8Uj/qfcbRQqvvXk=)
                          2: ED854A8624C811F0B4D15694DAE4EC9C.roa (hash: KyIxaodmc2Nf2dSIBbZZRE5rqK1fV8FCMAMx88jtkk4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361B835AF, serialNumber=688C90F523D7ECF90EB7DC981B7071E383493152
        Validity
            Not Before: Dec  9 04:56:08 2025 GMT
            Not After : Dec 11 04:56:08 2025 GMT
        Subject: CN=6937abe9-f7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dd:c5:77:ef:d8:e6:72:19:07:bf:04:71:8c:
                    26:d9:fb:4b:af:5f:ae:4e:b6:86:e3:00:6b:62:dd:
                    6e:51:6b:37:c9:84:56:b8:4a:cd:3e:83:a1:53:32:
                    f9:96:0c:7d:b8:54:54:dc:63:c6:a0:1b:21:7d:73:
                    48:d8:c9:bb:48:22:7f:c6:79:77:e6:7a:65:4d:11:
                    ca:3d:0f:ae:c2:ce:93:03:4b:0c:49:a5:9b:3a:13:
                    0f:35:37:9f:84:97:95:67:d9:f2:73:36:d9:fa:62:
                    63:00:db:13:14:8f:23:c4:10:44:ea:a6:ff:02:8a:
                    6e:34:64:34:21:34:6a:ff:c9:35:33:c8:8d:07:c2:
                    ca:86:b6:d9:c3:c1:11:ef:d9:0b:ce:1d:ed:ce:0a:
                    22:fe:21:39:d5:a6:5a:e9:90:15:ee:89:72:f9:30:
                    a7:04:24:1b:0f:89:fe:22:71:0d:72:29:ef:1b:13:
                    83:aa:df:83:c9:54:e8:2a:99:3d:1d:93:ea:7a:52:
                    1a:fc:8b:db:c4:37:c8:ef:25:57:48:5b:e3:f4:3e:
                    d8:e7:4a:e5:68:68:4d:a1:a3:38:a9:e7:60:44:61:
                    b6:0c:45:03:b2:78:2e:84:64:be:38:49:ab:42:f5:
                    1c:45:c6:2b:d1:5a:22:95:f1:74:7b:d4:38:3b:1e:
                    b7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4F:36:42:42:20:E8:9C:28:91:46:B1:87:CC:50:B3:F6:32:E6:11
            X509v3 Authority Key Identifier:
                keyid:68:8C:90:F5:23:D7:EC:F9:0E:B7:DC:98:1B:70:71:E3:83:49:31:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a4:83:7e:9f:33:52:af:49:33:25:76:9d:19:8c:e2:76:2d:
         50:41:dc:75:d4:23:0b:a8:4e:19:01:68:12:2b:0b:7f:80:25:
         eb:fe:61:36:8d:2f:42:54:b9:03:c5:d7:83:f2:98:b6:33:b3:
         89:5e:5a:e4:64:13:b9:60:9c:79:45:16:6a:80:9e:19:56:6d:
         c0:f0:e0:8b:44:9e:f8:6a:4e:81:0d:36:f3:cc:96:fe:c2:25:
         72:56:0f:c1:bf:f9:ed:b2:05:6d:b8:24:03:45:21:5e:e1:c6:
         d4:0b:c6:ed:10:39:65:47:e6:4b:33:a0:2e:fa:ce:48:1d:10:
         2a:7d:39:70:76:c5:aa:40:75:30:d8:ba:a6:a9:09:28:e1:d3:
         59:ce:fe:9a:9d:af:c7:ae:9d:2c:18:86:e3:66:44:ef:9a:43:
         93:47:b8:81:24:85:0e:bc:d0:71:70:dd:cc:91:f3:74:65:d6:
         83:5e:c4:3d:f9:21:05:55:04:9b:e5:e3:f7:ca:89:da:19:56:
         07:4a:1b:dd:5b:79:ec:78:14:62:91:56:9a:47:ed:25:c8:07:
         28:43:2a:20:14:a1:58:ca:14:f0:e3:77:e5:88:cf:c2:a9:92:
         b9:9e:2e:0d:a6:fd:ba:2d:2e:51:a1:2e:7d:75:d7:97:51:e6:
         82:8d:7d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:27:46 2025 by rpki-client