This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/0BDpIA7Z7cna8sP23VVz1wVhII8.mft
File:                     0BDpIA7Z7cna8sP23VVz1wVhII8.mft (raw, json)
Hash identifier:          OSQ9pv5UsFNsxQG6mAwc0jFtukXH5mV/8GtKx1ajN5c=
Subject key identifier:   95:35:79:6D:52:F5:0B:FD:8B:C2:81:E8:F6:62:F0:D8:1F:D1:45:F0
Authority key identifier: D0:10:E9:20:0E:D9:ED:C9:DA:F2:C3:F6:DD:55:73:D7:05:61:20:8F
Certificate issuer:       /CN=F362C1A2AF/serialNumber=D010E9200ED9EDC9DAF2C3F6DD5573D70561208F
Certificate serial:       03B1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0BDpIA7Z7cna8sP23VVz1wVhII8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/0BDpIA7Z7cna8sP23VVz1wVhII8.mft
Manifest number:          03AD
Signing time:             Tue 09 Dec 2025 03:32:55 +0000
Manifest this update:     Tue 09 Dec 2025 03:32:55 +0000
Manifest next update:     Thu 11 Dec 2025 03:32:55 +0000
Files and hashes:         1: 0BDpIA7Z7cna8sP23VVz1wVhII8.crl (hash: FhYEh5D6/PYRjtmVSMZEvgWL4z1aXjl/wMivi1WUH5o=)
                          2: F5CC13F6C91D11F09C8137C4DAE4EC9C.roa (hash: Hc6NVIlG1M9QoIpPQ5JKbtvG7jewJ963MN0ToYEyL5w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/0BDpIA7Z7cna8sP23VVz1wVhII8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/0BDpIA7Z7cna8sP23VVz1wVhII8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0BDpIA7Z7cna8sP23VVz1wVhII8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 03:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 945 (0x3b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362C1A2AF, serialNumber=D010E9200ED9EDC9DAF2C3F6DD5573D70561208F
        Validity
            Not Before: Dec  9 03:32:55 2025 GMT
            Not After : Dec 11 03:32:55 2025 GMT
        Subject: CN=69379867-7006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:52:89:4a:a6:32:7e:d5:9d:20:e5:46:46:22:
                    1e:6f:81:90:04:87:89:1d:02:e7:9e:b4:e4:c5:82:
                    5b:a4:0d:23:db:b8:51:d0:a0:3a:6c:c3:07:98:83:
                    6a:68:c1:f0:44:28:95:66:80:05:31:5a:6b:bb:00:
                    0c:b7:aa:de:83:d2:34:bd:56:f6:84:ca:78:e0:d4:
                    cb:a1:58:f4:78:b1:df:7d:39:10:ea:20:57:77:17:
                    f1:58:66:5f:cc:05:0c:57:a5:f2:3b:42:c5:5f:34:
                    f8:0d:a5:b6:1c:d7:48:bb:d7:68:b1:8e:cf:34:91:
                    10:a8:76:f2:7b:0b:69:60:6a:0c:1b:1c:e1:27:ac:
                    a8:18:25:09:45:20:e8:18:ea:00:1c:07:d0:b6:b8:
                    b2:5a:f0:62:47:70:44:36:d0:fb:bc:cc:59:a1:92:
                    4f:87:73:ba:21:71:df:c3:d7:84:16:c0:27:7d:f2:
                    13:c5:b8:c8:7f:40:3b:3a:6c:a1:fb:50:d5:9a:32:
                    ec:c9:9b:f2:e2:ec:75:53:4f:7e:e8:72:c9:56:5a:
                    72:9a:db:06:d2:fd:24:36:ab:46:d0:6f:59:42:67:
                    93:23:e6:42:ba:a5:5e:73:5d:f4:c5:2b:35:80:22:
                    a6:7d:81:b5:af:d2:17:6f:e6:79:31:d2:40:1e:f9:
                    ae:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:35:79:6D:52:F5:0B:FD:8B:C2:81:E8:F6:62:F0:D8:1F:D1:45:F0
            X509v3 Authority Key Identifier:
                keyid:D0:10:E9:20:0E:D9:ED:C9:DA:F2:C3:F6:DD:55:73:D7:05:61:20:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/0BDpIA7Z7cna8sP23VVz1wVhII8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0BDpIA7Z7cna8sP23VVz1wVhII8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/0BDpIA7Z7cna8sP23VVz1wVhII8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:10:52:b7:e8:1f:1f:77:4b:96:05:20:76:fa:e4:4f:fb:91:
         6e:cf:c2:24:53:1a:17:0f:10:72:dd:de:ac:9a:a9:05:73:f5:
         5a:c8:7f:09:2f:df:5b:5f:80:07:64:02:05:86:9f:95:27:54:
         81:33:ce:3f:6e:fe:63:6d:da:fc:74:4c:fb:5b:71:63:19:e2:
         8a:89:4f:d3:6a:55:99:92:33:2c:52:58:cd:59:95:97:72:ec:
         b1:21:bb:75:b5:cf:93:2e:c1:77:eb:09:98:1c:75:2b:99:65:
         be:d2:ef:90:28:dd:1d:79:21:73:21:8d:ed:b4:15:92:6f:de:
         a3:54:8b:ef:de:8b:4a:96:ae:56:ca:64:21:0b:aa:1e:73:38:
         64:83:b5:fc:89:01:d2:0e:0f:5c:e9:01:42:39:50:2f:28:fc:
         4b:fb:05:88:85:5c:31:59:08:42:d5:8a:58:82:a0:30:78:cf:
         89:e1:1f:b1:0b:31:da:6f:c2:97:c9:8a:5c:7c:1f:a3:a8:fc:
         bb:ee:a3:da:ca:43:34:42:4f:0d:2f:24:64:54:14:bd:ed:a1:
         83:78:5e:56:c7:18:70:55:bb:cf:77:31:86:e5:b8:98:57:5a:
         05:31:97:5a:50:89:7e:dd:ab:81:44:6c:bc:5f:ff:01:a2:e6:
         c6:35:e1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:32:42 2025 by rpki-client