This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624EB2/54E13262D09511F0BF630C9DDAE4EC9C/C05XtGvXgJLD-lDlSL1u3LM0n1s.mft
File:                     C05XtGvXgJLD-lDlSL1u3LM0n1s.mft (raw, json)
Hash identifier:          1Lx9rHeME8oZ7veflpDRzykADW7zTZfe+jQua5/3XDo=
Subject key identifier:   19:B3:A1:8E:61:FA:7F:42:6E:85:CA:A0:86:1A:C1:EB:E9:E8:CB:B6
Authority key identifier: 0B:4E:57:B4:6B:D7:80:92:C3:FA:50:E5:48:BD:6E:DC:B3:34:9F:5B
Certificate issuer:       /CN=F3624EB2AF/serialNumber=0B4E57B46BD78092C3FA50E548BD6EDCB3349F5B
Certificate serial:       09
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C05XtGvXgJLD-lDlSL1u3LM0n1s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624EB2/54E13262D09511F0BF630C9DDAE4EC9C/C05XtGvXgJLD-lDlSL1u3LM0n1s.mft
Manifest number:          08
Signing time:             Tue 09 Dec 2025 05:22:58 +0000
Manifest this update:     Tue 09 Dec 2025 05:22:58 +0000
Manifest next update:     Thu 11 Dec 2025 05:22:57 +0000
Files and hashes:         1: C05XtGvXgJLD-lDlSL1u3LM0n1s.crl (hash: 2IGtCr2mgMPMfqVYq2F9KzWEX4LuRQNlkpuo9u8Pkwg=)
                          2: C22722EAD09611F08F0173A5DAE4EC9C.roa (hash: Vd4logFKEAqGSkCSMd7ENRCEMCfjdHrlqVTzEEfgnHc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624EB2/54E13262D09511F0BF630C9DDAE4EC9C/C05XtGvXgJLD-lDlSL1u3LM0n1s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624EB2/54E13262D09511F0BF630C9DDAE4EC9C/C05XtGvXgJLD-lDlSL1u3LM0n1s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/C05XtGvXgJLD-lDlSL1u3LM0n1s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 05:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624EB2AF, serialNumber=0B4E57B46BD78092C3FA50E548BD6EDCB3349F5B
        Validity
            Not Before: Dec  9 05:22:58 2025 GMT
            Not After : Dec 11 05:22:57 2025 GMT
        Subject: CN=6937b232-cff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:15:dd:2e:3d:24:82:a0:f0:bf:38:a8:fb:0a:
                    57:e3:f2:7b:ed:fd:c0:ca:62:17:8d:1b:02:c1:86:
                    e1:f5:34:2c:ab:76:5d:85:02:cf:db:84:bc:1b:79:
                    d7:92:4d:3e:d2:71:44:04:d0:ec:4c:5c:4b:6c:6c:
                    98:80:6a:f1:e3:d5:aa:8f:2c:4e:23:8d:af:30:85:
                    86:90:54:d4:42:c2:1e:a3:65:7f:af:ca:0b:b1:76:
                    00:c1:0a:7f:15:50:21:0f:22:84:c2:59:5c:90:25:
                    b9:d4:31:86:5e:e0:6e:cb:06:6c:e1:99:84:22:18:
                    4b:d2:46:5a:71:a2:2f:69:aa:d0:bd:f3:0a:79:79:
                    b9:f2:3b:07:64:d7:75:3f:29:10:d0:fd:ee:a0:23:
                    39:76:c4:10:93:1f:e1:16:00:a9:bf:04:dc:f6:5c:
                    45:fd:6e:dc:d4:e6:37:92:a5:67:66:a7:b3:20:18:
                    34:93:a1:95:93:a8:78:5f:57:02:92:22:64:51:ac:
                    54:30:1c:b1:78:2f:b7:14:e2:2a:db:4b:2a:da:f5:
                    6e:66:42:5b:b6:5b:7c:be:27:7c:c4:23:fc:8b:5b:
                    c3:b8:b1:d6:27:af:45:14:7f:b6:c4:42:f4:6b:8d:
                    f9:bb:53:75:b7:c7:d1:ba:79:cd:a1:b6:24:af:73:
                    34:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B3:A1:8E:61:FA:7F:42:6E:85:CA:A0:86:1A:C1:EB:E9:E8:CB:B6
            X509v3 Authority Key Identifier:
                keyid:0B:4E:57:B4:6B:D7:80:92:C3:FA:50:E5:48:BD:6E:DC:B3:34:9F:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624EB2/54E13262D09511F0BF630C9DDAE4EC9C/C05XtGvXgJLD-lDlSL1u3LM0n1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C05XtGvXgJLD-lDlSL1u3LM0n1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624EB2/54E13262D09511F0BF630C9DDAE4EC9C/C05XtGvXgJLD-lDlSL1u3LM0n1s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:40:55:ce:3b:d0:20:21:5a:d3:33:50:37:9c:4f:99:00:05:
         41:01:03:19:97:2c:4b:06:38:46:df:dd:56:a0:bb:44:76:8e:
         fb:bc:bf:2f:2a:d5:d0:b4:48:29:c5:83:ad:b4:7d:99:dc:e4:
         44:4e:65:a7:c6:2a:18:42:bc:53:aa:c3:54:74:96:04:cf:7f:
         fa:04:83:7b:13:5f:cf:1b:3a:78:1d:07:f7:bf:b1:ce:18:94:
         4a:2c:22:27:7b:0b:15:0f:df:36:7a:7a:2f:b8:2b:89:cc:e5:
         38:b6:bb:9b:61:69:58:f2:3a:f1:7b:7b:78:7d:74:12:e2:50:
         d7:65:3a:4d:e6:76:63:33:a2:20:34:4d:96:01:94:8c:ee:7e:
         66:c1:1c:d9:88:3c:dc:55:30:92:e6:91:2f:32:43:c8:ce:97:
         5e:62:15:32:47:54:df:9e:6e:ac:87:b8:ae:bd:68:9c:51:ac:
         01:28:4e:38:51:e3:88:6f:36:ff:50:e8:2e:ea:3d:0c:70:0e:
         ae:bf:25:25:e5:e0:5c:e7:93:02:02:eb:6b:7c:03:b7:c8:f4:
         39:35:67:f1:c7:f9:cd:9a:b6:9a:a9:a0:f5:8d:82:e5:fa:b4:
         7f:e1:e5:b0:dc:ab:7a:31:4c:11:f1:0f:38:9d:7d:63:d7:ba:
         3f:24:62:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:03:15 2025 by rpki-client