This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.mft
File:                     4LRXYprC1N58lOp7iBVXQdHsICQ.mft (raw, json)
Hash identifier:          6d+jwwOwv2MYeHcxD6pGdgnki5VBv3CUfH6/BoFZbtM=
Subject key identifier:   BB:D0:CB:F6:26:DB:36:92:4B:0F:98:F4:A7:94:73:C7:A8:F1:E8:7F
Authority key identifier: E0:B4:57:62:9A:C2:D4:DE:7C:94:EA:7B:88:15:57:41:D1:EC:20:24
Certificate issuer:       /CN=F362C7E9AF/serialNumber=E0B457629AC2D4DE7C94EA7B88155741D1EC2024
Certificate serial:       091E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4LRXYprC1N58lOp7iBVXQdHsICQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.mft
Manifest number:          091C
Signing time:             Tue 23 Dec 2025 01:37:00 +0000
Manifest this update:     Tue 23 Dec 2025 01:36:59 +0000
Manifest next update:     Thu 25 Dec 2025 01:36:59 +0000
Files and hashes:         1: 4LRXYprC1N58lOp7iBVXQdHsICQ.crl (hash: C4KfIUExbNS66f2X+jWDMfDws/aF9nNivyzvPgkXZNI=)
                          2: 2884757819CD11EB87E05161F8AEA228.roa (hash: X8Z+sDfjTQw5oHRkEhvTL56Af9mBZCpbG6XhOgOsrcM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4LRXYprC1N58lOp7iBVXQdHsICQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2334 (0x91e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362C7E9AF, serialNumber=E0B457629AC2D4DE7C94EA7B88155741D1EC2024
        Validity
            Not Before: Dec 23 01:36:59 2025 GMT
            Not After : Dec 25 01:36:59 2025 GMT
        Subject: CN=6949f23c-06db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7a:96:1f:77:5a:9d:ab:6f:67:f8:d1:c9:c7:
                    15:88:43:12:f3:a6:21:3b:c1:cf:48:27:29:47:ee:
                    8a:38:1f:85:fd:c9:4f:4e:ea:d4:20:36:4f:b5:99:
                    0d:f3:77:2c:a3:26:33:bc:5d:46:f1:88:d1:fe:be:
                    89:ce:a6:af:4f:b4:ae:34:85:10:55:85:7d:9e:18:
                    b7:33:10:3d:92:84:00:46:86:79:4f:8a:51:dc:4c:
                    d9:78:4d:5c:9b:3d:91:c5:92:af:20:ac:6a:c7:4a:
                    1d:5d:dd:fc:c6:66:cc:65:9f:3b:8a:33:78:fe:07:
                    c4:65:6c:fe:9f:8e:86:76:e6:34:be:bc:74:08:ef:
                    78:ab:3e:18:e7:d4:11:51:14:a0:0d:97:12:54:e3:
                    f6:e2:b5:77:24:7f:84:9b:7c:63:f8:46:e1:6f:d7:
                    1a:7e:cb:07:b7:c0:e4:66:c5:20:67:c9:2d:96:b6:
                    e4:04:3a:8c:df:27:bd:5e:7f:df:d4:7e:39:30:03:
                    43:b8:92:d5:8a:7a:04:6c:04:34:8f:09:2e:e7:f5:
                    40:41:75:da:17:8e:1a:36:ec:40:59:89:2a:7a:17:
                    58:fe:65:c4:82:17:25:25:e0:5d:5f:04:b6:67:ca:
                    3e:de:54:71:85:34:e3:09:9f:7e:4f:67:5f:85:29:
                    c6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D0:CB:F6:26:DB:36:92:4B:0F:98:F4:A7:94:73:C7:A8:F1:E8:7F
            X509v3 Authority Key Identifier:
                keyid:E0:B4:57:62:9A:C2:D4:DE:7C:94:EA:7B:88:15:57:41:D1:EC:20:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4LRXYprC1N58lOp7iBVXQdHsICQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ae:6b:d5:2d:f4:ef:e4:a0:90:c5:9c:c2:e4:f5:1f:8b:4d:
         b9:b7:6a:73:b6:f0:ab:a0:21:54:97:a7:a7:8a:a3:3c:0c:a7:
         d7:3a:1c:6e:e4:8b:1a:41:b5:55:c3:1c:30:4d:ef:56:e5:34:
         d1:24:5e:20:2d:1b:3a:71:6d:2b:65:6e:f4:1d:43:92:68:6a:
         43:03:15:ce:61:31:87:b7:e0:48:d6:1a:5c:97:f5:94:3e:d5:
         b3:86:03:2d:56:2b:c0:26:89:c9:09:6f:04:ec:b6:d9:e5:5d:
         22:46:81:8d:61:9f:b0:b3:ce:b1:98:8e:24:a6:1b:40:87:bc:
         b1:f5:eb:ed:5e:06:a3:cc:c5:cd:ce:84:9b:a7:02:52:2f:f6:
         b5:ec:06:49:10:0d:d0:41:6a:f4:5c:b0:3a:81:3b:72:a4:c0:
         e2:6b:83:af:a5:a2:9a:1b:a4:35:0f:f5:40:17:b8:19:63:86:
         a0:c5:e9:e4:7c:08:29:82:09:39:9c:53:79:79:3b:6f:9e:d6:
         05:57:39:8f:74:09:fd:b9:f8:5c:9b:86:a7:7d:f7:8a:69:70:
         04:49:84:d2:1b:90:d0:39:64:94:7a:51:f7:74:da:a2:a2:cb:
         93:f5:b1:ec:bc:6c:e9:a5:5e:8a:d6:08:7f:5d:f7:bb:f7:9b:
         79:98:ef:f8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCR4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkM3RTlBRjExMC8GA1UEBRMoRTBCNDU3NjI5QUMyRDRERTdDOTRFQTdCODgxNTU3
NDFEMUVDMjAyNDAeFw0yNTEyMjMwMTM2NTlaFw0yNTEyMjUwMTM2NTlaMBgxFjAU
BgNVBAMTDTY5NDlmMjNjLTA2ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVepYfd1qdq29n+NHJxxWIQxLzpiE7wc9IJylH7oo4H4X9yU9O6tQgNk+1
mQ3zdyyjJjO8XUbxiNH+vonOpq9PtK40hRBVhX2eGLczED2ShABGhnlPilHcTNl4
TVybPZHFkq8grGrHSh1d3fzGZsxlnzuKM3j+B8RlbP6fjoZ25jS+vHQI73irPhjn
1BFRFKANlxJU4/bitXckf4SbfGP4RuFv1xp+ywe3wORmxSBnyS2WtuQEOozfJ71e
f9/UfjkwA0O4ktWKegRsBDSPCS7n9UBBddoXjho27EBZiSp6F1j+ZcSCFyUl4F1f
BLZnyj7eVHGFNOMJn35PZ1+FKcZ3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUu9DL
9ibbNpJLD5j0p5Rzx6jx6H8wHwYDVR0jBBgwFoAU4LRXYprC1N58lOp7iBVXQdHs
ICQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJDN0U5L0Y2NDkxMDZDRThEODExRTk4NkIwQjA0MEY4QUVBMjI4LzRMUlhZ
cHJDMU41OGxPcDdpQlZYUWRIc0lDUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRMUlhZcHJDMU41OGxPcDdpQlZYUWRIc0lDUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkM3RTkvRjY0OTEwNkNFOEQ4MTFFOTg2QjBCMDQwRjhB
RUEyMjgvNExSWFlwckMxTjU4bE9wN2lCVlhRZEhzSUNRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBprmvVLfTv5KCQxZzC5PUfi025t2pz
tvCroCFUl6eniqM8DKfXOhxu5IsaQbVVwxwwTe9W5TTRJF4gLRs6cW0rZW70HUOS
aGpDAxXOYTGHt+BI1hpcl/WUPtWzhgMtVivAJonJCW8E7LbZ5V0iRoGNYZ+ws86x
mI4kphtAh7yx9evtXgajzMXNzoSbpwJSL/a17AZJEA3QQWr0XLA6gTtypMDia4Ov
paKaG6Q1D/VAF7gZY4agxenkfAgpggk5nFN5eTtvntYFVzmPdAn9ufhcm4anffeK
aXAESYTSG5DQOWSUelH3dNqiosuT9bHsvGzppV6K1gh/Xfe795t5mO/4
-----END CERTIFICATE-----
Generated at Tue Dec 23 08:43:00 2025 by rpki-client