This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
File:                     YCmqMiQ3H_80BW6mdrX5npQG208.mft (raw, json)
Hash identifier:          QRemGI/gAlaJI7yAdv4y5Yyn0fj4qyPavH2PYx/4V1w=
Subject key identifier:   10:97:39:44:C3:50:E9:74:5A:A8:31:90:B8:F3:5F:FE:4C:EC:87:96
Authority key identifier: 60:29:AA:32:24:37:1F:FF:34:05:6E:A6:76:B5:F9:9E:94:06:DB:4F
Certificate issuer:       /CN=F362BDD7AF/serialNumber=6029AA3224371FFF34056EA676B5F99E9406DB4F
Certificate serial:       01B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
Manifest number:          01B4
Signing time:             Sun 07 Dec 2025 04:34:58 +0000
Manifest this update:     Sun 07 Dec 2025 04:34:57 +0000
Manifest next update:     Tue 09 Dec 2025 04:34:57 +0000
Files and hashes:         1: YCmqMiQ3H_80BW6mdrX5npQG208.crl (hash: op3olvgON6SLDE2G3b3dchnRKhvGiQfKuwQAWK6pwGo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 04:34:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362BDD7AF, serialNumber=6029AA3224371FFF34056EA676B5F99E9406DB4F
        Validity
            Not Before: Dec  7 04:34:57 2025 GMT
            Not After : Dec  9 04:34:57 2025 GMT
        Subject: CN=693503f1-0806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9a:fa:d3:ec:1a:8b:0e:62:8b:0a:78:88:fb:
                    d6:64:92:67:76:c5:cd:2c:62:96:6d:5e:08:71:cd:
                    7f:88:e3:18:69:3a:32:c1:a2:c1:03:76:dd:9c:e8:
                    17:a8:2b:67:a2:a2:8c:d3:82:30:5e:80:bc:81:87:
                    62:df:b7:0e:d3:40:72:4f:21:de:ed:93:d9:9c:d1:
                    f7:19:bd:42:bb:a3:82:39:7c:43:0d:e0:91:9a:cb:
                    d2:ad:fb:2b:fe:c5:89:27:42:f4:c3:b0:a5:45:e0:
                    f3:71:ab:c6:83:f0:66:57:29:4a:6f:93:9b:ce:1c:
                    b3:94:87:4b:40:44:85:b3:be:48:5f:ef:3a:d1:10:
                    e7:93:a4:3b:76:4b:89:03:19:8b:fc:0a:d0:0f:3e:
                    a8:75:6f:ce:37:d3:ba:72:22:a6:1f:1b:3d:1f:ef:
                    5f:5b:a3:d3:c8:30:e5:c6:ee:3f:32:3b:41:aa:b0:
                    23:cd:07:67:2d:6f:32:9f:fc:ea:ed:50:bd:7c:21:
                    45:42:cc:31:25:60:8c:cb:d1:e6:ad:92:57:b1:3c:
                    c2:dc:73:01:05:9d:43:fc:84:ed:2e:f1:db:0e:c6:
                    de:0b:10:f0:54:91:20:1a:c4:e6:bb:e3:5a:17:fa:
                    e8:6a:0b:b8:c2:61:2d:9c:56:ef:84:38:b5:16:b3:
                    fd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:97:39:44:C3:50:E9:74:5A:A8:31:90:B8:F3:5F:FE:4C:EC:87:96
            X509v3 Authority Key Identifier:
                keyid:60:29:AA:32:24:37:1F:FF:34:05:6E:A6:76:B5:F9:9E:94:06:DB:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:bb:23:7b:65:88:59:8d:81:4c:88:d6:ad:fe:c9:9a:04:ca:
         3b:8d:90:f1:7d:b8:3a:a1:58:7b:7a:ff:c0:28:4a:72:54:bd:
         7b:d1:ab:74:e8:4e:72:0d:c9:06:dd:03:71:1f:93:f3:3c:30:
         f8:b2:6e:e7:a6:a3:a7:b7:28:bc:b5:cf:ef:7f:43:9e:d5:71:
         9c:94:7a:df:2c:e5:4d:97:8b:64:6d:03:7a:9e:70:71:5f:06:
         8a:2e:cc:2b:48:96:6b:79:a2:eb:e9:5c:46:5c:40:86:24:bf:
         31:6b:70:25:44:6c:e4:26:8b:b9:94:a2:d3:a5:f3:4e:98:9f:
         bb:c8:e4:4f:62:dc:9d:75:df:87:c3:72:0f:5c:b6:a7:87:59:
         ff:91:b4:0a:ef:f6:86:5b:17:90:fb:dd:9f:16:59:c5:d9:ef:
         e4:76:16:b0:8b:df:46:41:1d:96:47:b0:9d:d8:49:8d:d2:06:
         fc:cf:84:9f:43:d6:9a:d4:37:0a:1d:3a:9c:19:f8:5f:90:02:
         ee:da:80:53:c0:47:94:bc:fa:e2:08:23:23:ce:e0:1d:9d:b2:
         52:c4:9b:d4:b9:2f:36:c9:32:ce:bb:96:66:84:b9:be:2d:d3:
         6a:cd:3c:75:bf:35:ac:62:bb:5c:ad:34:05:49:15:56:31:0e:
         5d:e5:59:26
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkJERDdBRjExMC8GA1UEBRMoNjAyOUFBMzIyNDM3MUZGRjM0MDU2RUE2NzZCNUY5
OUU5NDA2REI0RjAeFw0yNTEyMDcwNDM0NTdaFw0yNTEyMDkwNDM0NTdaMBgxFjAU
BgNVBAMTDTY5MzUwM2YxLTA4MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCimvrT7BqLDmKLCniI+9Zkkmd2xc0sYpZtXghxzX+I4xhpOjLBosEDdt2c
6BeoK2eioozTgjBegLyBh2Lftw7TQHJPId7tk9mc0fcZvUK7o4I5fEMN4JGay9Kt
+yv+xYknQvTDsKVF4PNxq8aD8GZXKUpvk5vOHLOUh0tARIWzvkhf7zrREOeTpDt2
S4kDGYv8CtAPPqh1b84307pyIqYfGz0f719bo9PIMOXG7j8yO0GqsCPNB2ctbzKf
/OrtUL18IUVCzDElYIzL0eatklexPMLccwEFnUP8hO0u8dsOxt4LEPBUkSAaxOa7
41oX+uhqC7jCYS2cVu+EOLUWs/2PAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUEJc5
RMNQ6XRaqDGQuPNf/kzsh5YwHwYDVR0jBBgwFoAUYCmqMiQ3H/80BW6mdrX5npQG
208wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJCREQ3L0VGNEQyQjA2ODU2MTExRUZBNTY3MEQ5RDc2MkU5NTFBL1lDbXFN
aVEzSF84MEJXNm1kclg1bnBRRzIwOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lDbXFNaVEzSF84MEJXNm1kclg1bnBRRzIwOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkJERDcvRUY0RDJCMDY4NTYxMTFFRkE1NjcwRDlENzYy
RTk1MUEvWUNtcU1pUTNIXzgwQlc2bWRyWDVucFFHMjA4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKuyN7ZYhZjYFMiNat/smaBMo7jZDx
fbg6oVh7ev/AKEpyVL170at06E5yDckG3QNxH5PzPDD4sm7npqOntyi8tc/vf0Oe
1XGclHrfLOVNl4tkbQN6nnBxXwaKLswrSJZreaLr6VxGXECGJL8xa3AlRGzkJou5
lKLTpfNOmJ+7yORPYtyddd+Hw3IPXLanh1n/kbQK7/aGWxeQ+92fFlnF2e/kdhaw
i99GQR2WR7Cd2EmN0gb8z4SfQ9aa1DcKHTqcGfhfkALu2oBTwEeUvPriCCMjzuAd
nbJSxJvUuS82yTLOu5ZmhLm+LdNqzTx1vzWsYrtcrTQFSRVWMQ5d5Vkm
-----END CERTIFICATE-----
Generated at Mon Dec 8 03:57:29 2025 by rpki-client