This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
File:                     X8N97OtwCLunQTR4RbdrR2d66mk.mft (raw, json)
Hash identifier:          1m/omrc8rJUdcD0DUDRsdbFqHC3kAJrndFRTnFRkQU4=
Subject key identifier:   AD:87:7F:4A:FF:F6:56:E4:FB:1F:1D:1D:4A:90:CF:49:39:65:DB:01
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Certificate issuer:       /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial:       032C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
Manifest number:          0326
Signing time:             Tue 09 Dec 2025 03:49:54 +0000
Manifest this update:     Tue 09 Dec 2025 03:49:53 +0000
Manifest next update:     Thu 11 Dec 2025 03:49:53 +0000
Files and hashes:         1: X8N97OtwCLunQTR4RbdrR2d66mk.crl (hash: 4F5F9Y3zGLoXpDhjb6oH2RXDTbfulyZSkucR3TkH/MY=)
                          2: 6DA5A2565FD511EFA88ABB88762E951A.roa (hash: ro2wQBC/RLqE0zVlMpswfR5i9xWzti7o20ft60EsccY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 03:49:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 812 (0x32c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650567AF, serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
        Validity
            Not Before: Dec  9 03:49:53 2025 GMT
            Not After : Dec 11 03:49:53 2025 GMT
        Subject: CN=69379c62-46f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cc:0f:15:49:37:df:e5:fd:49:31:ae:01:d0:
                    89:e7:65:85:9c:f4:fb:aa:47:ff:9e:10:15:fd:35:
                    25:e6:20:a6:34:70:c7:eb:29:29:ef:f7:2c:2c:4b:
                    dd:a3:c1:a8:d2:67:6e:19:2b:9a:15:8a:90:4c:93:
                    d6:45:a7:34:87:d3:c7:56:26:28:23:fa:a4:c4:e2:
                    0b:e1:72:3c:14:5c:c4:c6:7f:f4:30:ad:08:0c:3f:
                    e9:39:69:b6:01:69:67:53:24:59:a9:85:06:74:df:
                    78:52:ae:54:e2:8d:85:11:31:c9:1b:eb:4e:f0:71:
                    8d:b4:e8:0b:22:26:9d:2e:b0:0e:5d:51:5c:5d:75:
                    da:fb:47:53:a7:77:f6:e9:7e:0e:e5:33:6d:42:da:
                    2b:d7:7a:0d:ea:b0:c9:3f:6a:d7:d2:c6:d6:55:6a:
                    ac:62:4b:9f:e5:c2:5f:ae:33:37:44:30:02:4d:fb:
                    3b:be:f4:d5:cc:39:e9:a3:fe:52:bd:ea:22:98:ae:
                    24:86:d3:9b:7e:0d:23:a9:c3:44:da:fa:b6:e7:aa:
                    a1:a7:ec:3a:81:0e:37:c9:b1:00:88:c0:5a:4a:01:
                    6f:8b:26:3a:e3:ca:44:c8:6e:0d:12:b5:5a:7a:56:
                    0f:02:2d:92:bb:0d:da:8a:9a:f4:06:03:41:bd:15:
                    8c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:87:7F:4A:FF:F6:56:E4:FB:1F:1D:1D:4A:90:CF:49:39:65:DB:01
            X509v3 Authority Key Identifier:
                keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:77:ed:18:a6:35:8b:b0:9b:0c:a3:a6:d6:d8:08:15:f3:a2:
         e3:b5:e5:ae:13:de:a1:fa:41:2a:78:ec:7f:49:46:84:d4:54:
         4c:2d:3c:a1:c7:05:f0:82:71:f1:b2:8a:a6:70:f3:6c:e8:dc:
         3b:8b:b6:f0:22:10:ee:c2:aa:4d:52:20:29:c8:4b:f5:9b:2d:
         73:51:10:07:83:f8:9a:45:9c:92:89:b7:ba:04:20:4c:b7:1b:
         ad:07:91:4f:d0:6e:e2:22:0c:9e:dd:f2:49:77:ed:86:9b:be:
         01:c2:26:bc:da:7c:19:45:4b:e2:44:f0:39:01:6a:c5:d1:94:
         fb:e5:fc:c7:96:b7:22:ea:69:91:18:55:40:a5:61:6f:ca:cd:
         d0:fa:d5:2e:24:65:dd:2f:90:b7:55:5c:f1:da:1d:6e:07:c4:
         d5:e4:34:39:80:79:77:af:61:2e:cd:84:e9:aa:e1:ee:f2:ea:
         a6:fb:40:c6:0b:2e:8a:89:33:89:fa:c9:22:b8:e2:87:6c:8e:
         a1:b2:24:38:70:e6:03:4e:3d:07:7d:34:a1:3b:e4:e4:fc:91:
         38:62:f2:31:e0:66:20:12:1b:8c:a3:54:64:6c:1e:83:f5:d0:
         58:58:0d:af:14:78:af:8a:4d:af:fb:fd:c2:90:97:2a:f4:ed:
         29:22:9e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:05:53 2025 by rpki-client