This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
File:                     IlhakHPb2Nx6VQRFf_nceJcpdE4.mft (raw, json)
Hash identifier:          7+8wXGori25L/AfPykCq1FdKvtmUxs8E1fC+OGG9l54=
Subject key identifier:   72:4E:28:ED:31:38:FE:EC:2D:AE:DA:50:2D:E1:8D:07:8B:8E:CF:3B
Authority key identifier: 22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E
Certificate issuer:       /CN=F363CC24AF/serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
Certificate serial:       047E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
Manifest number:          047B
Signing time:             Thu 04 Dec 2025 03:07:58 +0000
Manifest this update:     Thu 04 Dec 2025 03:07:57 +0000
Manifest next update:     Sat 06 Dec 2025 03:07:57 +0000
Files and hashes:         1: IlhakHPb2Nx6VQRFf_nceJcpdE4.crl (hash: 85J1tr0k6xfGoUAScxmVdVEAHTE4Rp0UF0vOJ05BHfo=)
                          2: C77901BE410D11F0A96504DADAE4EC9C.roa (hash: h5Q5khYZzTnat8k7l8n6jpmEewInGfW9hyutxls28Qc=)
                          3: 224FE6786CD311EDB88049ABF1222468.roa (hash: ngBqwzoWf1U22IRdw9sMrCAgllF9dt3JOK+klM8EtcI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 03:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1150 (0x47e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363CC24AF, serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
        Validity
            Not Before: Dec  4 03:07:57 2025 GMT
            Not After : Dec  6 03:07:57 2025 GMT
        Subject: CN=6930fb0e-4d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:de:32:04:d8:c3:c4:a1:7c:9d:bf:83:c0:
                    35:1c:01:d2:e2:a4:f9:47:79:7b:db:5c:a5:c2:e7:
                    1c:71:c4:5e:f7:5d:40:4b:99:8d:53:4e:08:21:7f:
                    a9:15:97:9a:18:93:00:2e:55:7a:79:ff:e8:70:d7:
                    fc:7a:43:89:30:bb:dc:d9:cd:27:84:d4:9a:39:80:
                    e2:db:95:3b:ab:60:e4:22:dc:18:45:3a:78:2a:02:
                    96:32:e7:35:d3:71:bd:b8:74:ba:1c:e4:f3:c8:23:
                    56:a8:26:d3:d9:59:fd:ae:09:6c:b8:91:cd:47:5a:
                    9e:4e:fa:05:32:00:f4:b7:6b:73:ff:14:7d:7d:1e:
                    e2:b6:46:d7:38:6f:fe:b2:a6:19:ee:45:19:04:3f:
                    37:b1:b6:1e:6a:63:d5:17:16:9a:cc:74:53:00:74:
                    e5:24:c9:97:3e:56:b9:f6:eb:3f:69:49:2d:77:e1:
                    3e:3e:4d:4c:9e:77:7b:e0:ca:20:5d:5e:21:12:ad:
                    25:88:e9:bd:be:db:de:b8:d4:86:c4:7c:cf:2d:67:
                    71:0e:de:39:17:c2:f5:fa:1d:38:a6:34:43:aa:10:
                    5c:e5:07:25:99:01:10:c1:ad:ec:dd:fa:2f:7d:48:
                    90:04:a9:5f:c4:3b:d1:e5:47:20:60:11:41:8e:b1:
                    71:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4E:28:ED:31:38:FE:EC:2D:AE:DA:50:2D:E1:8D:07:8B:8E:CF:3B
            X509v3 Authority Key Identifier:
                keyid:22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:56:56:0f:14:9e:26:20:09:c2:b6:9a:bf:39:1d:b0:7a:04:
         bc:72:fe:a5:52:04:3f:1f:dd:1d:fa:49:92:43:da:7b:e3:a2:
         d9:6e:9d:56:96:93:dc:bf:a9:74:3a:4d:d3:ba:ec:a9:27:0a:
         dd:ac:92:e6:15:ff:b9:95:59:81:99:fb:68:85:2b:23:df:77:
         c8:67:04:0c:1b:c7:41:1e:4c:ef:7b:e9:44:96:b7:73:92:d0:
         b8:44:c5:7a:65:18:32:dc:3a:7b:39:2e:1e:b2:9f:58:8a:4c:
         45:33:85:f4:00:e3:38:93:ad:a2:8d:ca:2a:34:88:97:c9:e0:
         b3:04:83:50:95:24:29:63:fd:47:14:3c:e9:ba:7d:52:78:fc:
         99:be:6e:a6:c4:60:16:ea:70:e8:a0:59:b3:5a:20:96:c9:b4:
         9a:0b:27:db:08:98:15:28:fa:d2:a3:72:ae:31:7e:d3:77:dc:
         cb:63:03:a9:10:47:87:28:48:f1:82:8d:79:6c:1c:4c:76:17:
         36:04:61:b0:1d:83:63:03:e4:55:58:11:6a:88:04:61:7b:a0:
         2f:c8:b7:0b:9c:b5:0e:aa:19:8c:e5:41:b8:ed:7d:2a:32:ac:
         2b:e8:67:1f:1f:b4:a5:fa:b7:ac:73:59:26:6e:60:37:c3:db:
         ca:3b:02:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 02:26:39 2025 by rpki-client