This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
File:                     UsjVbfSu4mPoplESmKYZzpjIrA4.mft (raw, json)
Hash identifier:          tv8EeH/quTs/kYtQKRLIr14P05p8auGWzsXxEDJJVG4=
Subject key identifier:   A2:54:51:78:2E:BA:66:4D:E9:65:F1:17:79:51:94:D6:D9:00:DA:92
Authority key identifier: 52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E
Certificate issuer:       /CN=F365BF9EAF/serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
Certificate serial:       0409
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
Manifest number:          0409
Signing time:             Sat 20 Dec 2025 03:22:15 +0000
Manifest this update:     Sat 20 Dec 2025 03:22:14 +0000
Manifest next update:     Mon 22 Dec 2025 03:22:14 +0000
Files and hashes:         1: UsjVbfSu4mPoplESmKYZzpjIrA4.crl (hash: VUUzFml5ddJlc6ZKDOQATTPcvEM8Tc2t21M4mXaTRAE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1033 (0x409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BF9EAF, serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
        Validity
            Not Before: Dec 20 03:22:14 2025 GMT
            Not After : Dec 22 03:22:14 2025 GMT
        Subject: CN=69461667-02ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:ef:b8:05:10:3b:a2:c6:a8:6f:cb:ff:9f:
                    bb:45:ee:5e:28:d0:c4:47:72:c2:32:ef:60:b7:2f:
                    af:8d:3a:aa:b9:fd:0f:69:39:ce:65:fe:1f:c4:5f:
                    38:10:64:3d:e8:1a:aa:fe:cc:c7:f9:79:bf:1e:b8:
                    ba:7d:0b:7c:ca:57:7a:dc:4d:8a:53:6c:a5:14:de:
                    fa:b6:74:f2:ed:32:11:0b:63:78:59:b1:7f:22:32:
                    52:a0:75:6c:4c:f0:f1:9a:14:01:61:0b:04:d4:cd:
                    6c:ce:59:dc:b7:c2:17:ef:ca:6d:c5:57:67:ea:47:
                    34:07:1a:98:ef:03:0f:83:2f:bc:fd:cc:cc:0e:e4:
                    f2:db:f6:d6:2b:7b:98:01:54:94:bf:c0:f2:ea:d2:
                    d6:0f:59:fb:35:d9:48:90:1f:b0:ae:38:48:f4:9d:
                    2f:95:d0:69:c4:08:0b:b8:1e:da:5d:ec:47:d7:40:
                    10:95:36:c4:8f:78:e6:72:09:10:94:b8:e9:79:2c:
                    75:4c:be:9e:c1:ea:f2:d0:a0:f4:87:a7:6e:a8:fd:
                    51:84:8e:b0:45:7f:4b:c6:1f:8d:1e:18:ee:25:61:
                    3e:44:f2:a2:40:1d:99:59:01:10:c1:51:9e:f0:14:
                    60:0e:87:b9:9d:21:0d:86:31:5e:66:f1:35:2e:f5:
                    a2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:54:51:78:2E:BA:66:4D:E9:65:F1:17:79:51:94:D6:D9:00:DA:92
            X509v3 Authority Key Identifier:
                keyid:52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ea:6b:ee:74:ec:5b:9a:52:37:1b:69:f7:c4:6e:8f:ed:a7:
         99:be:43:4c:ae:85:9d:e8:e8:82:b7:9b:45:68:04:fc:48:62:
         ad:de:03:0a:24:e3:5e:cf:06:05:b9:84:bd:29:63:77:04:f8:
         10:4b:82:39:34:42:bf:75:fe:45:9d:d1:8b:56:c1:53:e4:5e:
         cb:c1:05:63:14:89:d6:24:8b:4f:39:c6:8a:00:36:41:3e:6e:
         7c:c9:60:c4:a5:45:23:93:41:d8:50:35:3a:8e:ad:a4:22:3f:
         00:6f:12:78:ae:b2:ca:cf:40:9d:78:ce:fb:cb:ad:aa:c3:59:
         a3:94:09:ad:70:71:33:bc:09:cc:21:79:0e:0e:1d:67:1c:1a:
         eb:86:9b:d9:88:49:2f:bf:61:c9:87:fc:83:49:9f:ec:d0:f6:
         b6:2c:96:13:c2:51:e8:86:12:e0:01:e9:e4:ab:2f:b8:23:21:
         06:7e:00:f6:fc:48:6f:f3:26:a2:0f:f8:c0:6d:fa:89:b1:c1:
         c8:cb:7c:a9:40:5e:0e:62:90:7d:fb:eb:a0:a0:19:e2:3a:db:
         a7:b5:39:1c:a4:74:e1:af:89:bc:38:9b:e3:53:78:7e:56:1c:
         e8:21:bf:0f:04:df:c7:e1:7f:02:0e:a8:0b:62:b1:98:ec:52:
         72:15:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:55:13 2025 by rpki-client