This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
File:                     BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft (raw, json)
Hash identifier:          3+FXzF/Of/KeKjb7AK9SRDZb0hZU88+LE9n66Laongs=
Subject key identifier:   0E:18:1A:33:B0:F6:AD:9D:92:2C:37:EF:40:65:CD:AE:DF:70:D1:C2
Authority key identifier: 04:D6:CA:C2:3B:14:5B:66:ED:68:BE:D6:7F:2C:1D:87:66:5C:F5:B2
Certificate issuer:       /CN=F364DD25AF/serialNumber=04D6CAC23B145B66ED68BED67F2C1D87665CF5B2
Certificate serial:       AD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BNbKwjsUW2btaL7Wfywdh2Zc9bI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
Manifest number:          AB
Signing time:             Tue 09 Dec 2025 05:01:44 +0000
Manifest this update:     Tue 09 Dec 2025 05:01:43 +0000
Manifest next update:     Thu 11 Dec 2025 05:01:43 +0000
Files and hashes:         1: BNbKwjsUW2btaL7Wfywdh2Zc9bI.crl (hash: nDQFpEYgQ+ga60Zd3RA3y0riXroiaaY6+qeq323mbsc=)
                          2: D0193846529E11F0BBC03EB2DAE4EC9C.roa (hash: RPEdKIAKBSzqVLXcECrRATliI7vLtXP88nKKeklWY7A=)
                          3: 09F47684529F11F0AC9FA6B2DAE4EC9C.roa (hash: MdGJ3CUnVttvPq+a7aB4/HqidShiV81Q3YLvvUB2hgE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BNbKwjsUW2btaL7Wfywdh2Zc9bI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 05:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364DD25AF, serialNumber=04D6CAC23B145B66ED68BED67F2C1D87665CF5B2
        Validity
            Not Before: Dec  9 05:01:43 2025 GMT
            Not After : Dec 11 05:01:43 2025 GMT
        Subject: CN=6937ad37-2a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:97:5d:31:9f:1d:89:bd:c5:28:d8:a5:10:37:
                    34:d9:c6:02:7b:6e:20:80:1e:f6:c2:cd:9b:09:8f:
                    c8:8d:10:b6:26:8c:d3:0e:6b:02:d8:d9:de:b8:b0:
                    65:a6:1c:8c:d4:c8:af:94:49:dd:e9:89:ce:6a:20:
                    d1:da:87:a9:e6:ec:3b:52:e3:ec:d6:32:96:1a:a3:
                    20:5d:d4:f5:67:41:e9:78:c9:16:af:de:d8:56:4c:
                    c9:d9:af:72:87:d2:4e:d3:51:74:c0:1f:2c:95:f0:
                    a5:ec:db:e5:34:1a:11:bd:af:4e:51:c1:4c:c1:af:
                    5d:de:d0:72:e1:7b:85:76:eb:07:10:fc:52:c3:87:
                    bd:d8:d5:ff:f4:9e:77:ca:08:a9:4f:09:0e:da:65:
                    9c:9b:b8:74:60:b9:11:d8:e5:8b:b7:54:9d:20:79:
                    81:15:25:45:1a:c2:63:b5:58:0c:3d:14:6d:eb:db:
                    a6:00:91:35:35:7a:5e:e8:0a:be:2c:4d:15:19:7e:
                    34:2b:49:62:b4:e3:bd:c2:61:7c:74:10:e6:0c:95:
                    d1:be:6c:eb:0d:ed:fe:e1:65:eb:1d:e3:06:06:4f:
                    4a:30:36:92:36:2d:8a:ee:5b:e3:fc:9d:ad:df:ff:
                    ee:67:4a:8e:a4:0b:c7:61:14:f6:e3:e8:bc:11:99:
                    ea:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:18:1A:33:B0:F6:AD:9D:92:2C:37:EF:40:65:CD:AE:DF:70:D1:C2
            X509v3 Authority Key Identifier:
                keyid:04:D6:CA:C2:3B:14:5B:66:ED:68:BE:D6:7F:2C:1D:87:66:5C:F5:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BNbKwjsUW2btaL7Wfywdh2Zc9bI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:7e:80:a1:33:7e:2f:dd:b0:e3:b9:62:b0:83:68:0b:70:ba:
         77:21:42:66:76:2b:07:14:24:58:9f:93:f7:6c:99:48:09:e5:
         0b:95:2a:e2:1a:2b:9d:fd:55:5a:87:e4:8a:e1:cc:a0:d9:17:
         63:f2:ad:bb:85:af:f5:fb:53:11:3f:a2:58:1f:b8:53:4a:1e:
         2b:b0:72:4f:c1:35:96:89:35:c3:b6:bc:13:e8:36:00:9f:8f:
         c7:03:a7:7e:0f:93:4d:2d:c0:8b:7f:41:f0:af:01:46:96:3c:
         b6:65:e7:38:0a:8b:90:03:14:2e:02:75:a0:2b:c9:5a:e2:4e:
         f2:38:00:1c:ec:80:d3:48:54:5e:da:24:df:6a:3e:10:bb:b5:
         15:87:56:be:45:d7:41:42:06:0e:61:8d:e8:19:54:80:77:5a:
         6a:98:6a:47:03:db:be:d5:5c:7a:a9:d9:24:0c:bf:16:5a:50:
         82:42:ac:05:c4:0e:c3:dd:5b:88:9a:90:5e:80:ba:1e:07:24:
         41:c6:16:d0:06:b5:97:d0:38:ce:63:6a:7e:39:c6:85:49:64:
         d1:34:6d:b7:54:8e:af:d8:1b:d3:b2:f9:40:95:bc:3e:15:7b:
         6a:79:29:ef:43:2d:99:4a:d5:5a:43:32:50:f6:b2:e7:ba:69:
         a2:66:fc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:15:54 2025 by rpki-client