This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361E6A3/ACF48D3886B811E9BEC99C2BF8AEA228/B6SJ-Z5KU9gpK_PE0U46I483Y34.mft
File:                     B6SJ-Z5KU9gpK_PE0U46I483Y34.mft (raw, json)
Hash identifier:          hxe6LXkIQHIr9ZOLVtjqk5T7Raphf1ojmykIRN9GMiE=
Subject key identifier:   47:3E:E9:90:D1:0C:EA:A8:4D:6B:F3:5F:4D:89:BE:05:64:9F:5E:4B
Authority key identifier: 07:A4:89:F9:9E:4A:53:D8:29:2B:F3:C4:D1:4E:3A:23:8F:37:63:7E
Certificate issuer:       /CN=F361E6A3AF/serialNumber=07A489F99E4A53D8292BF3C4D14E3A238F37637E
Certificate serial:       098A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B6SJ-Z5KU9gpK_PE0U46I483Y34.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361E6A3/ACF48D3886B811E9BEC99C2BF8AEA228/B6SJ-Z5KU9gpK_PE0U46I483Y34.mft
Manifest number:          0988
Signing time:             Tue 09 Dec 2025 01:25:19 +0000
Manifest this update:     Tue 09 Dec 2025 01:25:18 +0000
Manifest next update:     Thu 11 Dec 2025 01:25:18 +0000
Files and hashes:         1: B6SJ-Z5KU9gpK_PE0U46I483Y34.crl (hash: +DBJg+4EmpfimFMCaNNuwXHarDiDqfw10o5SzDIk37w=)
                          2: B057C81ACCDD11EBB3F8311FF8AEA228.roa (hash: XsaZQ1iHiPfZpeHMaTa/sXXH/fra2bwnbJZiPEVgZbs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361E6A3/ACF48D3886B811E9BEC99C2BF8AEA228/B6SJ-Z5KU9gpK_PE0U46I483Y34.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361E6A3/ACF48D3886B811E9BEC99C2BF8AEA228/B6SJ-Z5KU9gpK_PE0U46I483Y34.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B6SJ-Z5KU9gpK_PE0U46I483Y34.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2442 (0x98a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361E6A3AF, serialNumber=07A489F99E4A53D8292BF3C4D14E3A238F37637E
        Validity
            Not Before: Dec  9 01:25:18 2025 GMT
            Not After : Dec 11 01:25:18 2025 GMT
        Subject: CN=69377a7f-6d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:f6:d0:17:5e:98:32:26:4b:a2:24:03:b1:
                    58:0a:de:2b:47:0d:a6:9a:29:61:e6:f5:2d:f9:8e:
                    c6:78:79:1b:81:90:30:e8:d6:98:52:48:bb:ca:7f:
                    4b:d3:27:13:eb:65:44:96:0c:43:ec:42:e2:e3:a1:
                    5d:17:98:d5:1e:5c:d8:57:3c:6c:75:b7:cc:a0:38:
                    08:90:bb:6f:52:1e:b4:d1:cc:b9:27:e0:13:77:9b:
                    ef:95:d9:77:85:60:7a:a8:fe:0b:ef:34:a0:14:79:
                    48:95:e4:2e:f6:25:47:2d:2d:f2:a1:82:24:34:c9:
                    1a:06:b3:ba:19:bc:00:fc:f9:71:0a:53:88:84:87:
                    e5:f5:17:69:7b:81:c9:23:a5:51:5f:1a:c0:ad:06:
                    6b:40:da:a0:50:97:be:b1:14:40:6f:89:0c:4e:15:
                    c6:7d:7f:76:08:9e:da:aa:60:e6:72:1e:d0:4b:da:
                    f5:bb:42:84:74:fe:4a:7d:04:e2:2e:87:64:56:6c:
                    c8:9b:af:28:10:ac:ce:c8:c7:97:e2:a1:2d:16:bf:
                    a5:5e:41:1e:59:74:ec:b2:6f:dd:28:9e:b4:30:3b:
                    b3:5b:79:97:12:52:91:a5:28:7a:f7:3d:ee:5e:98:
                    8a:fc:a6:70:e7:2e:56:ef:9c:a5:1a:32:96:c9:48:
                    22:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3E:E9:90:D1:0C:EA:A8:4D:6B:F3:5F:4D:89:BE:05:64:9F:5E:4B
            X509v3 Authority Key Identifier:
                keyid:07:A4:89:F9:9E:4A:53:D8:29:2B:F3:C4:D1:4E:3A:23:8F:37:63:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361E6A3/ACF48D3886B811E9BEC99C2BF8AEA228/B6SJ-Z5KU9gpK_PE0U46I483Y34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B6SJ-Z5KU9gpK_PE0U46I483Y34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E6A3/ACF48D3886B811E9BEC99C2BF8AEA228/B6SJ-Z5KU9gpK_PE0U46I483Y34.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d4:10:47:55:fc:9b:91:f7:f4:31:1e:f4:86:6b:49:b6:bb:
         09:99:f4:32:21:95:a0:a5:75:a1:5b:b7:e0:da:2f:5b:fd:b1:
         10:14:96:ef:25:72:d4:88:bf:14:d2:f9:e7:f5:38:12:54:4a:
         cd:7f:9c:35:2b:1d:4f:31:f9:32:9d:62:52:c4:9e:ad:27:c2:
         81:d2:99:3d:6e:5f:9b:18:ef:5e:1a:c9:08:a0:f4:41:56:4a:
         47:60:f9:4b:ea:3f:22:f5:ea:37:35:77:9b:d4:a7:46:45:bc:
         d0:75:53:58:35:54:db:3f:5a:8a:18:3e:b3:9d:f3:6d:43:27:
         a4:b3:56:a6:6a:d6:33:98:37:b1:16:b9:60:b4:b7:e0:90:ce:
         34:34:d5:65:d0:b0:26:07:b0:80:2e:5a:5e:50:59:e0:c1:08:
         e7:b7:22:08:05:19:7a:d8:c8:04:9b:26:db:af:70:de:fa:30:
         23:1f:67:58:9e:4e:06:cc:3c:4b:46:33:ea:f9:cb:2e:16:e9:
         e4:9e:9a:e8:75:f0:82:2d:e4:81:24:19:d6:96:db:2b:9f:c2:
         3b:10:ae:7f:16:2e:1e:cb:c3:43:62:e7:e4:86:a4:4d:ea:87:
         0c:93:8b:28:34:26:bb:ea:2e:dc:73:ad:4b:e0:d7:fe:49:29:
         3b:57:0d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:18:06 2025 by rpki-client