This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
File:                     UsjVbfSu4mPoplESmKYZzpjIrA4.mft (raw, json)
Hash identifier:          ms/bFiJwN/IXiQxIHpsvqiyijQBdHrTRFoo0cAaxO4o=
Subject key identifier:   F3:B2:EF:1E:6E:AA:0F:FF:49:96:02:F4:9A:36:D9:EB:3A:12:2C:F2
Authority key identifier: 52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E
Certificate issuer:       /CN=F365BF9EAF/serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
Certificate serial:       03FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
Manifest number:          03FC
Signing time:             Sun 07 Dec 2025 03:20:26 +0000
Manifest this update:     Sun 07 Dec 2025 03:20:25 +0000
Manifest next update:     Tue 09 Dec 2025 03:20:25 +0000
Files and hashes:         1: UsjVbfSu4mPoplESmKYZzpjIrA4.crl (hash: FPwo5FbnkW6b5zC7Tl/DrDRiJdLJ1Wl41nDQ1YwHqjA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 03:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1020 (0x3fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BF9EAF, serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
        Validity
            Not Before: Dec  7 03:20:25 2025 GMT
            Not After : Dec  9 03:20:25 2025 GMT
        Subject: CN=6934f27a-bc3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e6:13:ec:64:11:37:df:46:55:5d:57:ee:49:
                    6b:bb:7c:d9:4c:ff:e8:48:a9:64:c8:12:39:96:da:
                    f8:8e:89:f0:74:04:f8:96:c5:71:9e:a7:4c:d6:c8:
                    c5:20:fc:0f:85:ae:08:6e:d0:36:c6:81:27:7f:d3:
                    ea:65:5e:13:d4:5f:c4:d5:82:e5:80:6b:1b:90:62:
                    71:8a:42:38:0d:a4:6c:1b:b7:f5:48:63:c2:4c:b3:
                    12:ed:0f:f9:53:f2:97:bd:8b:63:f1:21:2b:39:2c:
                    97:e9:be:c5:c7:cb:a9:de:22:51:f2:9c:dc:17:de:
                    5f:93:ed:d2:a6:de:dc:91:50:48:21:44:8d:6e:f8:
                    88:7d:34:3f:c4:23:6a:7e:b9:e4:06:cd:c2:ea:b6:
                    e2:54:cd:0a:42:10:ef:10:80:07:57:bc:33:07:8c:
                    2a:fb:08:4e:2f:84:79:ec:5e:b8:c8:f3:d4:e0:e0:
                    1d:07:0c:d6:c0:75:f7:b8:5a:4f:68:4f:d8:26:ee:
                    32:dd:be:cc:4f:07:b9:8a:f6:cb:2c:db:89:f9:af:
                    49:33:36:56:42:2d:58:f3:c9:25:cf:c8:3c:c6:80:
                    18:85:cf:14:77:d6:26:50:fb:a1:94:3a:67:e3:95:
                    50:55:b3:79:f6:2d:33:06:af:16:22:37:46:6c:cf:
                    d8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B2:EF:1E:6E:AA:0F:FF:49:96:02:F4:9A:36:D9:EB:3A:12:2C:F2
            X509v3 Authority Key Identifier:
                keyid:52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0d:f2:e2:d3:cb:33:44:a0:52:01:d9:bb:3a:f4:86:b6:90:
         b4:3e:e5:01:4b:cb:6a:10:59:0c:49:36:57:55:a2:03:1d:79:
         31:bb:c2:e3:33:b9:b3:13:e3:f5:cf:7f:06:98:0c:bc:f6:16:
         9f:81:69:7b:57:27:2a:7f:99:5a:77:5a:29:6c:86:31:6d:7c:
         d7:42:c0:43:18:1d:83:be:ac:75:ac:cf:cd:e7:ae:5d:88:15:
         2a:7b:71:19:de:ec:c4:3f:3f:88:ab:f9:e0:88:3f:15:e1:3e:
         e3:30:02:c3:e3:45:49:35:50:ec:57:fe:d8:bb:9e:47:92:6b:
         6e:d8:a5:db:ed:81:83:a0:cf:e0:01:af:cd:b9:58:4b:e5:f9:
         d8:3e:5f:02:c4:dd:97:9a:aa:1f:b7:b5:07:82:dc:62:b6:da:
         de:64:ba:62:df:1d:7e:e4:93:dd:ab:e5:58:b1:74:96:6c:59:
         6f:a8:4b:b3:a4:71:4b:0d:bb:3a:98:31:d6:56:83:c5:d4:c8:
         8b:82:f8:58:49:ce:42:28:7f:6d:07:ea:5b:e6:37:b7:f3:b4:
         27:ec:90:db:4f:51:2d:e8:15:1b:5f:15:31:3c:d7:fe:cf:00:
         44:4f:7c:c7:f7:eb:7f:3e:7a:a2:ad:e3:79:84:6a:67:ef:cf:
         82:d6:8b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 03:57:50 2025 by rpki-client