This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
File:                     aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft (raw, json)
Hash identifier:          jqVIGlwynrmsgwBhf53fuKbjOLdrwDdezNH/fJQz02g=
Subject key identifier:   79:08:FB:F0:E6:64:DD:CE:01:83:F1:AB:66:A2:31:09:8D:CE:90:43
Authority key identifier: 68:8C:90:F5:23:D7:EC:F9:0E:B7:DC:98:1B:70:71:E3:83:49:31:52
Certificate issuer:       /CN=F361B835AF/serialNumber=688C90F523D7ECF90EB7DC981B7071E383493152
Certificate serial:       EE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
Manifest number:          ED
Signing time:             Wed 17 Dec 2025 04:55:19 +0000
Manifest this update:     Wed 17 Dec 2025 04:55:18 +0000
Manifest next update:     Fri 19 Dec 2025 04:55:18 +0000
Files and hashes:         1: aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl (hash: WF8S56OD3fOS1b8oiKT+CKqnPFYdoaRqZ4dFsAE3Z6I=)
                          2: ED854A8624C811F0B4D15694DAE4EC9C.roa (hash: KyIxaodmc2Nf2dSIBbZZRE5rqK1fV8FCMAMx88jtkk4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Dec 2025 04:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361B835AF, serialNumber=688C90F523D7ECF90EB7DC981B7071E383493152
        Validity
            Not Before: Dec 17 04:55:18 2025 GMT
            Not After : Dec 19 04:55:18 2025 GMT
        Subject: CN=694237b6-37c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:c3:77:f0:50:c9:aa:ee:f8:32:d2:e7:18:
                    4c:84:85:12:6a:96:ff:ae:95:2a:99:e8:0f:8b:b4:
                    56:0a:e9:4c:55:31:8a:02:5e:01:a0:2d:0b:f5:fc:
                    0b:85:9d:89:96:24:73:4e:f0:76:52:4a:e0:53:10:
                    c1:c6:fc:ef:ad:0a:27:c0:15:7c:df:56:0d:56:0e:
                    fc:e6:b0:5e:1b:1d:ff:e1:f3:c1:22:6a:72:49:eb:
                    c9:fe:38:f3:d9:9e:bb:61:d5:6d:80:8e:2f:b9:3f:
                    a1:48:69:73:7c:bb:53:e4:a1:2b:50:6a:f4:83:20:
                    f4:0d:0d:9a:c7:f4:d0:a0:28:2c:c8:5e:19:71:19:
                    7f:b4:cb:12:1e:9b:1c:c4:39:1c:8d:27:8e:e8:04:
                    2d:85:14:cc:6d:c3:13:3d:c4:16:b2:27:38:dc:68:
                    ad:e7:be:dc:f7:ea:4c:bb:41:d1:f8:7b:cc:36:9e:
                    e2:4b:15:1f:24:16:e5:13:b7:8d:5f:aa:64:b4:1f:
                    9d:a9:5b:88:3b:56:0f:1f:e2:c9:3c:96:75:60:7c:
                    2d:48:0e:1b:2c:ab:a5:7b:7e:e2:18:5f:49:97:81:
                    b0:db:3e:8a:08:6d:b0:b3:71:d2:f8:e5:3d:30:2c:
                    59:76:0e:26:6d:3b:54:4c:25:ac:c5:d9:09:ce:0e:
                    2d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:08:FB:F0:E6:64:DD:CE:01:83:F1:AB:66:A2:31:09:8D:CE:90:43
            X509v3 Authority Key Identifier:
                keyid:68:8C:90:F5:23:D7:EC:F9:0E:B7:DC:98:1B:70:71:E3:83:49:31:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e7:75:65:6c:d9:b9:73:c9:75:07:cb:e0:84:6d:fe:e7:7a:
         a5:ff:e5:29:2c:d0:22:66:ca:22:b1:90:19:4a:d4:57:64:f5:
         c9:4f:b7:11:3c:de:11:e2:d9:ab:66:b3:3e:4f:c0:7c:13:c7:
         fa:84:b1:7f:de:54:df:7d:69:2b:0a:e3:39:2d:5f:75:41:ce:
         ec:17:13:fc:96:d5:02:fd:09:bd:a3:5a:29:0a:c7:bf:a0:b0:
         d7:ad:2b:9c:7c:2f:1f:b2:39:c5:8c:49:30:1b:e8:d6:ce:6a:
         ad:b0:78:c9:91:d9:e2:13:86:23:9a:22:97:00:b2:ec:1f:41:
         a6:c9:6c:cc:89:38:ad:50:3b:58:73:d0:66:d3:b3:d7:b6:e3:
         06:a8:65:37:92:3b:21:2a:13:85:37:e8:72:2c:ec:3b:22:20:
         28:c1:59:87:43:c8:98:9e:73:6d:cb:14:5b:35:a7:f7:f8:90:
         d5:58:7c:ad:ed:39:30:15:70:d1:f1:7d:08:c4:13:cf:d2:27:
         8e:ab:37:dd:82:3c:46:d3:1a:9e:8a:c6:29:e7:e5:df:83:26:
         b9:df:dd:bf:94:d8:b6:4b:74:b6:6e:47:ba:23:de:c3:14:9c:
         f7:5c:a3:26:53:fb:03:b7:a5:da:c3:e0:33:21:2c:b1:e8:f6:
         2b:85:f2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:02:15 2025 by rpki-client