This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
File:                     8WD77pBHtMM9L6HZ04IBrg0Yw58.mft (raw, json)
Hash identifier:          tkzIt5JZVEkU558QKfrqU9bWyakAr4UIKkQVaaWhw58=
Subject key identifier:   3E:74:2C:1A:D1:87:B6:BC:51:57:60:CF:58:7F:B3:A7:F6:72:91:08
Authority key identifier: F1:60:FB:EE:90:47:B4:C3:3D:2F:A1:D9:D3:82:01:AE:0D:18:C3:9F
Certificate issuer:       /CN=F361C63DAF/serialNumber=F160FBEE9047B4C33D2FA1D9D38201AE0D18C39F
Certificate serial:       01CE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
Manifest number:          01CD
Signing time:             Tue 09 Dec 2025 04:35:25 +0000
Manifest this update:     Tue 09 Dec 2025 04:35:24 +0000
Manifest next update:     Thu 11 Dec 2025 04:35:24 +0000
Files and hashes:         1: 8WD77pBHtMM9L6HZ04IBrg0Yw58.crl (hash: fzvKyGigj/Z5QoHrupMa1YikzA5di4P4jvL4zMgxNEQ=)
                          2: C7ECF7DE74D211EFA2250567762E951A.roa (hash: 2JN5T3Dym/uP+aQB4QDNBNpdJtMGonjqC1jPbmHacMk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361C63DAF, serialNumber=F160FBEE9047B4C33D2FA1D9D38201AE0D18C39F
        Validity
            Not Before: Dec  9 04:35:24 2025 GMT
            Not After : Dec 11 04:35:24 2025 GMT
        Subject: CN=6937a70c-10fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:94:87:f1:3a:95:55:d8:5d:9c:86:10:46:
                    4b:b3:4b:3a:3a:a8:fa:f6:e0:f1:c1:dd:64:43:78:
                    f5:d8:5d:4c:84:5c:3c:59:61:b5:37:eb:09:66:ec:
                    92:83:ba:a4:1b:aa:5d:19:d5:19:3d:ba:92:bb:30:
                    2f:05:64:38:88:b7:de:a0:df:0f:30:26:f5:cb:a7:
                    e1:5a:29:ec:5e:cf:64:f7:53:69:3c:b5:1a:5f:0f:
                    1f:cc:74:da:85:40:da:b4:81:6e:a0:be:00:81:68:
                    c4:df:b2:94:d4:10:16:9b:e5:c7:e0:73:99:82:8e:
                    f7:a7:18:99:fe:5b:ad:10:ef:50:b7:b8:6e:95:d4:
                    9c:3b:e2:15:bc:40:5e:7f:c2:15:26:d2:15:2f:4f:
                    ba:79:77:58:21:4e:52:4a:36:2a:f3:27:08:52:e1:
                    b7:51:6b:18:75:09:24:7a:f5:82:cc:7d:1d:81:c6:
                    aa:09:ad:7d:09:bd:3d:ae:71:14:c7:eb:0a:3f:25:
                    4a:d8:a8:65:f1:4d:a5:18:d9:ff:c3:08:4b:66:73:
                    ee:d9:09:60:6e:a1:c4:1d:7c:15:a4:fc:8d:77:18:
                    7a:f2:45:d0:cb:4a:02:1b:4f:74:bf:13:b6:48:78:
                    a9:ae:18:4c:7a:85:ca:a4:2a:45:9a:2a:07:4b:99:
                    73:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:74:2C:1A:D1:87:B6:BC:51:57:60:CF:58:7F:B3:A7:F6:72:91:08
            X509v3 Authority Key Identifier:
                keyid:F1:60:FB:EE:90:47:B4:C3:3D:2F:A1:D9:D3:82:01:AE:0D:18:C3:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:97:cb:da:7d:47:cf:48:25:c8:17:c8:93:64:c6:fd:a1:b9:
         ea:0d:9a:a3:3d:0d:d9:c8:ee:68:7f:01:7b:18:25:79:e1:61:
         f1:60:7f:72:38:5f:1c:4a:c7:10:fd:50:f4:52:1b:91:2e:ea:
         34:31:59:96:61:9a:b7:fa:0b:77:ff:eb:09:2b:1c:cc:d4:fe:
         08:78:43:db:cd:5b:3c:ed:4f:29:5c:90:79:11:c4:c6:75:74:
         13:e2:a0:45:11:87:58:56:ca:ba:7b:55:8f:6e:a3:45:18:5d:
         f3:9c:c1:f2:60:da:ed:7f:97:f3:ec:a9:b7:e5:1c:a1:31:7a:
         ef:cb:3a:b2:61:47:e7:c2:49:97:63:05:e4:c1:86:74:b2:71:
         57:1a:04:5d:67:7b:dd:7c:b2:50:92:83:09:83:11:ae:0f:07:
         60:b7:d7:41:9b:62:34:9a:b8:38:33:e1:fe:13:fb:e5:af:f7:
         cb:e3:f4:e4:a3:f1:21:53:ec:5c:f3:5c:67:fa:b1:0e:7a:cc:
         71:fa:ae:e2:e0:85:33:52:87:51:b3:3c:5a:85:7c:0b:87:41:
         fc:08:ab:e9:a9:7b:c9:24:39:e7:6f:28:55:f6:11:12:72:c0:
         b2:b5:ec:52:0f:41:90:fb:5c:8f:3e:da:95:90:58:16:3c:88:
         ac:e6:b5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:18:27 2025 by rpki-client