This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
File:                     X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft (raw, json)
Hash identifier:          MkI/Gh2mVvr+Q2zciZyRZ9SE2KDxELlUaU7bFor0v0E=
Subject key identifier:   58:58:26:77:A4:9E:90:CB:5B:38:55:56:1D:EF:8B:92:EE:1B:7B:A5
Authority key identifier: 5F:91:E3:7E:17:C4:A5:87:15:A0:1A:FF:09:29:8B:B1:6F:23:82:C6
Certificate issuer:       /CN=F362A252AF/serialNumber=5F91E37E17C4A58715A01AFF09298BB16F2382C6
Certificate serial:       0506
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
Manifest number:          0505
Signing time:             Tue 09 Dec 2025 02:52:15 +0000
Manifest this update:     Tue 09 Dec 2025 02:52:14 +0000
Manifest next update:     Thu 11 Dec 2025 02:52:14 +0000
Files and hashes:         1: X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl (hash: wgZ3Y+MRXFC/DIhwNlAaEXqpOQgMLI5zx4yup9705HY=)
                          2: 07EE873A020211EDAC199783F1222468.roa (hash: YfCMAg3Y9dxZRfFftpeSFNVqy74lmtcSUOaH6LHRzXE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1286 (0x506)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362A252AF, serialNumber=5F91E37E17C4A58715A01AFF09298BB16F2382C6
        Validity
            Not Before: Dec  9 02:52:14 2025 GMT
            Not After : Dec 11 02:52:14 2025 GMT
        Subject: CN=69378edf-d978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:7a:ac:ae:ca:54:03:0f:3f:34:30:1a:7b:
                    ed:ed:89:82:ff:da:af:d3:04:d3:3b:59:fb:ed:f4:
                    6a:d6:24:25:61:51:6a:fe:bf:7e:d6:df:2a:62:f7:
                    34:2d:dd:0c:5b:4b:f8:48:52:aa:9b:fa:44:54:34:
                    d7:d9:e0:60:d8:ac:6c:a8:e9:3a:17:ef:06:ce:96:
                    05:48:a6:b9:3b:d7:75:8c:69:10:9d:92:ff:a8:ad:
                    57:ec:45:1b:7a:0a:fd:a2:ac:87:d0:4d:2c:42:0d:
                    1d:66:7e:1c:84:4b:e9:11:49:1f:ea:13:d9:80:d8:
                    8c:f4:d1:7d:4e:47:6b:60:a7:d4:bd:da:5a:98:7d:
                    54:f5:99:f6:2c:c6:92:e4:3b:4a:6b:a3:9d:f9:d2:
                    e5:ce:d2:59:48:93:1e:18:0f:15:f4:26:92:3d:bf:
                    f3:46:57:3d:65:b2:9c:92:45:69:d4:a8:e3:12:4e:
                    db:ba:06:2a:6f:94:d4:16:89:e9:66:e3:09:9d:5c:
                    4a:08:82:74:b6:94:04:cd:6c:de:b8:a5:2e:af:35:
                    14:5e:d5:e6:9b:3f:f3:66:ca:99:53:c2:f9:bb:80:
                    05:cb:96:a7:21:85:0e:7f:19:09:6e:e2:4b:cb:3c:
                    3c:c2:88:b5:98:a4:98:e3:75:9d:c5:65:e0:8b:34:
                    32:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:58:26:77:A4:9E:90:CB:5B:38:55:56:1D:EF:8B:92:EE:1B:7B:A5
            X509v3 Authority Key Identifier:
                keyid:5F:91:E3:7E:17:C4:A5:87:15:A0:1A:FF:09:29:8B:B1:6F:23:82:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:6b:9e:e6:2e:65:1f:5a:69:e4:1c:d5:61:a2:e3:2e:41:a6:
         50:7d:b7:ae:86:76:e6:5d:f1:02:59:38:f1:35:0e:56:9d:73:
         41:e5:e8:17:e2:4f:0f:d0:95:3d:23:83:05:cf:64:83:85:2f:
         88:fc:04:39:22:2e:49:7f:25:ef:c6:5d:0a:1e:72:f0:c9:70:
         87:fb:48:df:ab:b7:ab:b8:43:0e:bf:fe:8a:42:99:b5:05:ae:
         f9:ea:53:8d:ce:0b:59:8d:e2:3e:9b:39:57:e5:49:39:98:f1:
         c4:03:77:5e:81:88:d4:67:79:02:63:d8:3f:e3:cc:9c:5e:7f:
         27:82:b9:0c:a8:67:cb:45:a5:4c:3a:58:e5:4b:39:62:74:9c:
         94:43:c3:11:89:1d:82:3b:80:e5:5c:71:a9:19:27:3c:38:d0:
         f9:aa:f4:29:7f:f5:02:cc:9c:73:26:25:e2:eb:93:f1:de:16:
         43:95:44:68:c1:5d:2f:a8:52:34:ee:e9:df:f0:8f:0a:98:16:
         0b:14:1c:b2:3a:56:43:b8:d8:0b:98:7d:72:1d:28:a4:67:86:
         7b:0d:03:04:72:4f:28:03:ce:55:2a:ac:2f:07:7e:d3:8e:46:
         80:1f:bd:18:11:ac:32:de:2b:ea:9d:63:87:6b:af:fc:c6:b1:
         18:68:5d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:18:25 2025 by rpki-client