This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
File:                     4-0KKxQeZZxFITmco8yPgYx19x0.mft (raw, json)
Hash identifier:          CGgnFA2ExLuPJNZvUb+gkEwPRpdCRc9569gJU5e3kww=
Subject key identifier:   1D:F5:C9:95:BE:EC:92:ED:0A:2F:A6:13:E2:93:8A:DB:7B:94:90:09
Authority key identifier: E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D
Certificate issuer:       /CN=F363A48BAF/serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
Certificate serial:       A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
Manifest number:          A4
Signing time:             Tue 09 Dec 2025 05:03:36 +0000
Manifest this update:     Tue 09 Dec 2025 05:03:35 +0000
Manifest next update:     Thu 11 Dec 2025 05:03:35 +0000
Files and hashes:         1: 4-0KKxQeZZxFITmco8yPgYx19x0.crl (hash: iCFJWYJfxH8n06DuPUN5vO0OYvNrT6gp7vcHCVzrdlo=)
                          2: 075271E4574811F0A7DC6D7EDAE4EC9C.roa (hash: zOGSgi/1KJ9xQcEdBGnV40++jUsJYV1/+BcJ8fXP1w8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 05:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363A48BAF, serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
        Validity
            Not Before: Dec  9 05:03:35 2025 GMT
            Not After : Dec 11 05:03:35 2025 GMT
        Subject: CN=6937ada8-4efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5a:78:2d:30:68:31:4c:5e:b1:39:da:f4:ec:
                    2f:ee:e9:61:72:c0:2c:fa:70:dd:ba:08:df:5a:16:
                    04:06:ab:b1:a4:e7:34:26:08:0d:79:62:cc:13:b1:
                    21:be:39:5a:f9:c7:b1:34:0e:a8:a2:77:e2:e5:2c:
                    52:ad:19:6c:2e:9c:b8:49:ee:51:f7:a6:2c:2e:83:
                    16:ec:37:b1:0f:53:0c:e1:b0:bd:1c:9d:0f:72:43:
                    43:00:a1:c6:ae:ad:d7:61:3b:23:6e:0f:7d:b1:7b:
                    6a:eb:d2:8f:ae:bb:0a:9f:22:80:41:1f:ca:28:0b:
                    68:36:c0:38:65:bb:51:bc:03:62:62:58:98:49:9f:
                    bb:df:0d:7f:3b:d8:ca:8b:1e:21:48:eb:1a:36:62:
                    18:90:40:7f:0b:77:3c:90:53:c7:bb:f9:29:22:2e:
                    3e:7c:3e:b6:26:6f:6f:be:ff:c4:e9:18:96:51:5c:
                    56:16:ed:e1:f7:be:75:49:53:95:8a:81:98:04:e8:
                    15:01:92:38:00:a7:dd:b2:ed:e3:4a:8f:0a:ed:d2:
                    e5:83:05:32:0f:19:de:b3:36:6e:1c:db:d4:87:15:
                    d1:f9:6c:7b:6b:a2:71:8b:53:0c:d7:54:ea:6f:6a:
                    d2:59:6e:0e:69:d4:9e:ee:5c:92:25:d7:b4:19:fd:
                    5b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F5:C9:95:BE:EC:92:ED:0A:2F:A6:13:E2:93:8A:DB:7B:94:90:09
            X509v3 Authority Key Identifier:
                keyid:E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:dd:22:09:99:17:bd:b9:3b:4a:06:67:80:09:21:16:0f:0a:
         3a:94:2a:86:54:60:99:8f:12:1c:9d:7a:90:84:15:df:61:2c:
         ea:9f:f4:6e:18:d1:f6:62:e5:07:59:20:61:54:e5:4b:82:28:
         2d:9b:af:35:c1:57:39:3d:d9:cc:aa:5b:92:45:43:d9:7e:38:
         0a:9c:f5:40:bb:d9:1a:15:7b:c5:b9:8d:75:da:1f:46:c7:b8:
         4f:dd:ce:ed:3d:6b:6e:ac:92:9c:4f:af:9b:5a:50:e3:3d:b9:
         88:fe:f6:32:37:29:26:ec:6a:17:39:aa:c1:30:72:67:81:b5:
         9e:26:08:f6:42:2a:7d:d8:f2:ef:c9:ab:04:df:97:7a:a8:a1:
         ff:fd:c9:34:16:16:d1:33:16:77:79:d4:46:26:ec:ee:da:ee:
         b9:c5:e2:39:26:de:ab:62:8d:ab:c7:95:5d:49:f0:60:5a:e4:
         2e:c1:1f:64:10:f3:7b:ee:1e:aa:b3:5b:09:5c:d5:10:5d:68:
         7e:94:d7:f6:87:93:9f:aa:b7:26:98:c8:40:a3:52:84:a3:a4:
         31:3b:8e:83:ab:ff:ad:17:53:c2:77:ed:cc:2d:55:85:27:93:
         6f:0e:3a:af:c9:cc:bf:f1:e6:c8:fc:af:53:eb:aa:a7:a4:94:
         dc:67:39:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:15:12 2025 by rpki-client