This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.mft
File:                     XugMfoiMcbMQJBh4C9bhClLRcIg.mft (raw, json)
Hash identifier:          xZi/SiDNVl92X/kAKQ3A/g9WWTY0/LgrVOuHpgGFYnA=
Subject key identifier:   FC:B8:15:6E:47:62:35:68:28:74:96:1D:8D:A3:BC:E5:67:D5:9B:0B
Authority key identifier: 5E:E8:0C:7E:88:8C:71:B3:10:24:18:78:0B:D6:E1:0A:52:D1:70:88
Certificate issuer:       /CN=F36364C2AF/serialNumber=5EE80C7E888C71B3102418780BD6E10A52D17088
Certificate serial:       0579
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XugMfoiMcbMQJBh4C9bhClLRcIg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.mft
Manifest number:          0571
Signing time:             Tue 09 Dec 2025 02:41:48 +0000
Manifest this update:     Tue 09 Dec 2025 02:41:47 +0000
Manifest next update:     Thu 11 Dec 2025 02:41:47 +0000
Files and hashes:         1: XugMfoiMcbMQJBh4C9bhClLRcIg.crl (hash: qAzDGRUdoZXwFSeC8zXtnF+gKkfc16qW9wFQdzjzX04=)
                          2: F40DF332363C11F08BDA31D8DAE4EC9C.roa (hash: tpknoYxFRYkKkestWOBfXYnFDZcfLPeGP0oSSacczQ4=)
                          3: 0285F4C0379E11F0A3CC6178DAE4EC9C.roa (hash: Ed7bn6rVqrOHanN8PnTdQBj8ZHi4l6dmkBiC3AzPA10=)
                          4: 5378F76C349511F096B3B5C7DAE4EC9C.roa (hash: HLBVldJzh2ysbRoXQEfhequ4jMArrYS5fveYMjIw02U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XugMfoiMcbMQJBh4C9bhClLRcIg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1401 (0x579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36364C2AF, serialNumber=5EE80C7E888C71B3102418780BD6E10A52D17088
        Validity
            Not Before: Dec  9 02:41:47 2025 GMT
            Not After : Dec 11 02:41:47 2025 GMT
        Subject: CN=69378c6c-0d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f6:cd:a2:55:6a:4d:54:0f:27:e9:ef:fa:38:
                    54:d1:77:a2:17:47:50:e6:13:d6:50:f0:23:ee:c9:
                    6b:08:f8:31:12:c4:aa:05:ef:e2:de:43:4f:82:f7:
                    d2:9c:c4:a3:b4:c6:27:19:89:ae:da:b5:b6:a7:b9:
                    cc:88:dd:ce:fb:2b:87:37:fe:7e:2b:62:b8:27:e5:
                    47:50:46:55:cb:a5:ad:a7:cb:24:eb:21:87:e7:8b:
                    d0:e0:2d:e1:a6:c3:07:6b:a1:4d:fe:53:ea:eb:1c:
                    b7:4e:48:1c:a9:80:6f:71:ed:3b:a9:1c:85:38:10:
                    31:b2:d0:c8:43:e9:87:1b:fa:85:b5:6f:f5:61:38:
                    44:c3:e3:6d:6d:c3:a2:99:45:08:9c:49:a5:56:6d:
                    f6:fd:75:dd:6b:74:83:dc:20:68:b5:0e:a7:41:99:
                    c1:4e:18:65:b2:36:29:9c:41:03:f9:5d:94:58:40:
                    a6:0a:90:86:73:ec:05:05:b6:ce:7f:0c:82:f1:30:
                    6a:6d:ce:19:46:3c:0e:36:b0:02:30:1c:2b:e3:42:
                    53:03:70:b2:89:c8:d9:2b:60:12:bb:29:ae:6d:ec:
                    65:ea:43:c1:7a:31:dd:10:7c:a9:c2:31:cf:0f:52:
                    39:67:7f:c5:bf:38:3c:14:1e:26:19:c4:98:b1:51:
                    b3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B8:15:6E:47:62:35:68:28:74:96:1D:8D:A3:BC:E5:67:D5:9B:0B
            X509v3 Authority Key Identifier:
                keyid:5E:E8:0C:7E:88:8C:71:B3:10:24:18:78:0B:D6:E1:0A:52:D1:70:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XugMfoiMcbMQJBh4C9bhClLRcIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:18:67:fc:c3:b0:9c:c7:57:b9:98:98:7e:bb:a1:94:ae:5e:
         dd:91:ad:4d:ba:c3:cd:ca:e9:fc:b5:18:d4:44:fb:a5:43:c8:
         81:d0:bb:bc:d1:17:58:f1:85:9f:fe:f9:0a:92:a4:55:c3:76:
         d6:14:10:92:90:80:37:d5:21:b8:da:5a:3e:d0:4f:c2:98:7b:
         c0:03:2e:87:1a:7b:4d:0e:09:f3:92:4a:8e:bb:b8:2c:72:bb:
         9f:0a:8c:76:bf:f0:c7:7c:7c:42:45:62:ea:f2:b8:8a:dc:17:
         c7:a2:ec:1e:56:84:49:e2:e6:70:d0:00:9b:0f:cd:c9:b1:4e:
         63:a1:d3:59:d3:71:0b:ed:b5:c0:be:79:a0:77:42:eb:d5:dc:
         5d:67:74:c2:03:a1:fc:71:a8:34:cc:1a:c7:82:be:a3:53:48:
         6e:6b:c8:70:4c:1f:a3:2e:5e:5c:be:9b:18:aa:5b:30:a9:16:
         70:54:2f:ea:bf:fd:e2:da:40:6b:5d:b9:84:a0:e0:63:97:e9:
         73:72:3b:b4:2d:f1:60:b8:a2:31:1c:43:4d:d3:08:38:ea:9a:
         6a:80:6e:22:28:4e:30:46:0b:50:39:27:53:42:25:6b:b0:07:
         e6:e3:ce:6b:18:f8:bb:26:8d:17:26:e1:cc:92:9d:90:68:17:
         b7:62:b9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:05:25 2025 by rpki-client