This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
File:                     IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft (raw, json)
Hash identifier:          DfvX+Txx1aebFzU7QgYFuYNRgIsAw8J73YiigIAOda0=
Subject key identifier:   C0:D7:35:08:73:92:DF:16:BD:2D:86:9C:D9:FC:89:FC:FC:6A:0E:F6
Authority key identifier: 21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C
Certificate issuer:       /CN=F364386BAF/serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
Certificate serial:       0527
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
Manifest number:          0524
Signing time:             Tue 09 Dec 2025 02:48:21 +0000
Manifest this update:     Tue 09 Dec 2025 02:48:21 +0000
Manifest next update:     Thu 11 Dec 2025 02:48:21 +0000
Files and hashes:         1: IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl (hash: 8O/Z/S/3fyJnsE62ZqTSDE+kBlQsWcrTAOY66gztVLM=)
                          2: 2AE6A618901511ED97E821A8F1222468.roa (hash: l6cBhURgmoDE6HHZxn6Sr3D0gRmA3gv1jsIUfHqy/fE=)
                          3: 341444A4EE0611ECA47D4F8CF1222468.roa (hash: 5YbdNBfbmz1C6LgL/EGyM06dpl98H6mogKseSBeoHI4=)
                          4: E33731DE901411ED873666A7F1222468.roa (hash: DQCVLS0+9ICNcSNGa3FetGyRMxihYZeODa4YHrZFCDo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 02:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1319 (0x527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364386BAF, serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
        Validity
            Not Before: Dec  9 02:48:21 2025 GMT
            Not After : Dec 11 02:48:21 2025 GMT
        Subject: CN=69378df5-6049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bc:a9:e6:49:a9:cb:38:69:08:eb:28:8c:45:
                    63:bc:40:82:9e:f5:2b:56:72:35:93:34:4e:11:2f:
                    52:fd:b7:dc:34:a1:f9:d6:31:1f:68:42:50:76:ce:
                    0a:f3:e5:31:55:c3:78:71:1f:d0:08:ff:28:b6:47:
                    1d:ca:ef:c7:08:c2:87:a2:5c:2a:1e:49:9b:6a:4c:
                    ad:1a:44:55:6c:27:a1:87:15:a8:b9:e1:ef:73:c3:
                    fb:00:8a:af:00:39:74:88:a7:7d:77:8a:bf:8e:f7:
                    5d:93:d3:8a:a3:51:bc:be:11:56:54:33:26:12:6b:
                    c8:4e:71:7e:61:03:7f:81:51:00:97:a3:b9:d9:23:
                    ba:85:e9:d1:7c:f6:98:7c:7e:d7:21:4d:19:15:72:
                    0a:f6:11:9f:d2:2d:f7:f2:f5:ec:f9:a0:5d:89:2b:
                    25:cd:24:b5:75:bb:ec:50:74:d8:2c:0c:c7:6b:cd:
                    a8:fe:d5:14:c8:5a:a0:13:24:d0:4b:ee:e5:86:e3:
                    19:1b:8d:16:3d:d3:ab:4e:42:88:17:86:13:8f:47:
                    33:d4:c3:ad:a5:d9:04:b4:d0:39:80:11:94:1c:26:
                    95:77:34:bd:0f:9e:7a:c3:97:b7:ed:26:a6:3e:a7:
                    6f:49:d5:69:48:61:be:a4:9e:ba:0d:30:fb:f2:24:
                    c8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D7:35:08:73:92:DF:16:BD:2D:86:9C:D9:FC:89:FC:FC:6A:0E:F6
            X509v3 Authority Key Identifier:
                keyid:21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d4:93:af:58:f6:53:a0:28:7a:40:60:d1:9a:f0:3e:dc:40:
         93:97:dd:17:ef:c6:e4:3f:3d:bd:4f:99:37:8f:fd:01:33:45:
         dd:af:c6:c0:dc:14:5c:d5:96:aa:0f:ce:38:dc:29:08:70:41:
         46:a0:99:e3:e2:9d:39:ed:49:f7:ae:93:49:8d:95:27:49:2f:
         4f:3b:cf:45:8c:16:78:f5:a8:03:57:b2:a9:fe:08:a8:4a:66:
         11:0a:93:b7:bb:1d:fc:b0:68:8c:52:cc:28:13:22:13:a9:f1:
         dc:ba:05:5b:6a:6c:2e:a6:04:58:07:28:94:27:a3:d2:19:9a:
         7b:70:3e:1f:36:15:04:a8:33:15:37:af:72:7e:d9:71:63:f1:
         83:df:54:17:c3:c1:f5:f4:57:4f:3f:46:66:85:5b:32:1b:0f:
         68:43:dc:b0:6d:d4:9d:0c:99:48:3b:b4:c6:b7:a7:df:d8:dd:
         0a:1d:a3:bc:16:40:d0:2e:44:f3:49:8b:e9:19:4f:d4:db:b6:
         43:f2:d1:87:77:c1:39:d0:15:cd:d5:70:cd:ab:19:b0:5b:5a:
         e3:03:f9:bf:f7:ef:90:d0:11:91:56:f5:71:9d:a7:4f:8e:80:
         58:83:df:36:c6:fd:22:22:99:96:33:7c:31:d1:0f:87:93:cb:
         65:ff:e5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:06:16 2025 by rpki-client