This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
File:                     glG2X8_012csmHWQ58DLZJ1EwhI.mft (raw, json)
Hash identifier:          6eb8HptneogbgbpFRaroS8ZMTKbXPpQdU2zMn0HTcUQ=
Subject key identifier:   D5:14:85:08:44:C6:A5:50:18:A3:A0:E0:F4:F5:C8:D9:F5:09:BE:9A
Authority key identifier: 82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12
Certificate issuer:       /CN=F365E03DAF/serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
Certificate serial:       04D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
Manifest number:          04D1
Signing time:             Thu 04 Dec 2025 02:57:42 +0000
Manifest this update:     Thu 04 Dec 2025 02:57:41 +0000
Manifest next update:     Sat 06 Dec 2025 02:57:41 +0000
Files and hashes:         1: glG2X8_012csmHWQ58DLZJ1EwhI.crl (hash: uiLEgIWAvlrBKr0j3/1VJ7BRIcknK3QbUp2xkibeM00=)
                          2: 63024F1E28B611ED8CF5BD8AF1222468.roa (hash: 4ljd9pI9G7HxkQ3CSXE8wSNVbsWYc0or91A3WwVt9x0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 02:57:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235 (0x4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E03DAF, serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
        Validity
            Not Before: Dec  4 02:57:41 2025 GMT
            Not After : Dec  6 02:57:41 2025 GMT
        Subject: CN=6930f8a6-eb3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:e2:05:d0:b3:81:2d:96:b7:e8:14:1f:06:
                    24:ea:af:a3:27:de:28:dd:9f:c9:4e:56:3b:54:27:
                    63:83:8b:77:29:e5:ea:57:35:37:d9:2a:1a:ad:00:
                    a5:bc:1e:04:b7:e7:2f:70:0e:17:8c:0c:09:8b:20:
                    98:08:92:4c:c4:1e:3f:81:63:b3:55:a0:36:b0:d1:
                    f7:7c:58:74:c4:cb:73:52:98:74:36:e9:17:3a:ec:
                    c4:24:4b:d9:39:37:8a:56:6c:34:66:0c:79:5b:c1:
                    70:0e:0d:bd:e3:40:39:1d:c1:44:e6:32:87:30:18:
                    e7:5f:90:78:4c:16:6f:ee:aa:fc:b4:f8:94:f8:07:
                    7c:2e:4b:d2:38:df:99:14:17:90:25:99:1f:f6:ad:
                    d4:b6:95:15:30:e4:5b:1a:58:92:7a:fd:fd:bf:b0:
                    03:dc:16:68:eb:b7:1b:df:be:d1:20:54:1f:e3:b6:
                    44:5b:8c:92:5f:ff:51:64:50:03:3d:69:42:3f:24:
                    d5:32:29:e4:d9:8e:e3:83:fa:f5:be:fd:9c:91:83:
                    51:ce:2a:2f:f7:6c:9f:80:32:eb:32:d6:59:10:0a:
                    65:e4:af:f6:3f:ee:82:8f:35:86:24:17:90:01:12:
                    8a:d3:2b:6d:f5:28:2b:1c:76:69:7a:ec:f0:c8:6d:
                    62:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:14:85:08:44:C6:A5:50:18:A3:A0:E0:F4:F5:C8:D9:F5:09:BE:9A
            X509v3 Authority Key Identifier:
                keyid:82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b0:b1:fa:bf:6c:af:74:40:1a:6e:19:c3:be:4a:d8:d8:f2:
         6b:56:b8:a6:e2:8c:5a:83:f8:9f:8c:09:10:98:13:37:0a:dc:
         46:18:47:9c:b9:ce:58:49:9e:7a:db:64:a7:4d:1c:a6:a1:fc:
         0a:d6:3b:cc:b5:07:fa:3b:a6:82:88:57:fd:56:51:79:a3:82:
         e6:31:fa:65:cc:e7:5e:4f:a4:1a:eb:0c:90:28:32:f4:99:3d:
         26:42:c7:33:2b:a2:cc:96:b2:2a:1f:d7:9a:f5:dd:4e:06:90:
         f8:9f:3a:b1:dc:65:a4:05:18:27:af:d2:39:93:67:af:74:0b:
         53:9a:b1:8b:bd:ae:67:06:b1:30:07:b9:5b:e7:37:c3:4a:16:
         5c:fb:a7:13:b1:48:a6:09:36:17:c9:a9:fe:23:f6:65:63:52:
         e1:9c:fd:ea:9f:a2:00:23:87:d8:9c:78:8c:d6:fb:e2:7b:39:
         24:ec:a1:b7:07:fe:bc:55:ef:3f:a7:40:a0:ba:cd:cf:70:1a:
         47:08:a6:ba:e2:96:2b:89:c1:34:3a:77:ec:41:b2:1c:22:9a:
         f9:36:dc:dd:b5:81:18:d5:73:3d:9c:d2:06:77:46:1e:a1:9c:
         2d:ee:e4:dc:22:ff:a7:a1:40:b7:94:14:ae:8d:3e:3e:5d:ca:
         14:81:f4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 02:27:23 2025 by rpki-client