This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366351B/4665A9F0ACA011EDAF100DF7F1222468/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.mft
File:                     Z4miVHJtAx5ZtGthtKyqhRv6Ld8.mft (raw, json)
Hash identifier:          hV/TTgn6pUFbaDW/60E/P+8AEycGB7Ym1I6sgXuLUS0=
Subject key identifier:   DD:26:88:85:F5:36:03:E5:C9:32:7B:EE:11:3F:C5:0D:54:F6:80:89
Authority key identifier: 67:89:A2:54:72:6D:03:1E:59:B4:6B:61:B4:AC:AA:85:1B:FA:2D:DF
Certificate issuer:       /CN=F366351BAF/serialNumber=6789A254726D031E59B46B61B4ACAA851BFA2DDF
Certificate serial:       0427
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366351B/4665A9F0ACA011EDAF100DF7F1222468/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.mft
Manifest number:          0426
Signing time:             Tue 09 Dec 2025 03:16:54 +0000
Manifest this update:     Tue 09 Dec 2025 03:16:53 +0000
Manifest next update:     Thu 11 Dec 2025 03:16:53 +0000
Files and hashes:         1: Z4miVHJtAx5ZtGthtKyqhRv6Ld8.crl (hash: AMJcd7TCEbDjmWrCYcgoS73eah0DWCz17TSaGkLbWcU=)
                          2: 27AA2D78ACA111EDB32660F9F1222468.roa (hash: aFi9RZ2jR17q9wqzUvxZqHWXbSaW+vzPZaKbsAiYUDM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366351B/4665A9F0ACA011EDAF100DF7F1222468/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366351B/4665A9F0ACA011EDAF100DF7F1222468/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 03:16:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1063 (0x427)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366351BAF, serialNumber=6789A254726D031E59B46B61B4ACAA851BFA2DDF
        Validity
            Not Before: Dec  9 03:16:53 2025 GMT
            Not After : Dec 11 03:16:53 2025 GMT
        Subject: CN=693794a6-66e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ec:55:76:29:2e:c9:26:43:e6:60:57:e7:d8:
                    51:63:41:07:78:bd:4d:99:85:f4:cf:b8:7b:bb:c0:
                    5b:44:74:06:47:fa:49:5f:ce:9b:37:67:ed:03:3e:
                    9e:43:d5:11:f9:d8:1f:e9:00:87:16:dd:20:7f:44:
                    65:89:6a:8e:a5:49:b7:35:02:84:90:12:61:37:55:
                    c7:4b:27:00:4d:2f:a0:84:d7:85:08:14:9b:d5:c7:
                    ee:ee:44:8c:8e:28:73:66:49:57:4c:3b:8d:81:e7:
                    d3:69:67:f1:d1:18:6f:ef:45:33:95:78:e1:18:99:
                    94:c1:cf:27:aa:3c:ef:8a:11:c8:88:22:43:07:80:
                    87:b2:08:ef:54:00:2c:93:ed:96:14:ae:97:2e:d6:
                    80:03:b7:df:92:a9:cd:a0:0e:05:73:1a:b4:25:2e:
                    65:28:50:c7:7b:f3:25:84:bc:40:c0:36:22:a8:ff:
                    e4:dc:6d:f7:05:71:86:1c:86:43:35:b8:24:35:bc:
                    5f:67:86:ae:53:f6:93:d5:7e:16:fb:c5:25:33:8d:
                    ea:5e:a6:9a:a6:bd:c9:c6:9b:8a:c7:9e:a7:e4:8c:
                    8d:43:6f:fb:00:5f:9a:26:9c:a4:bf:29:3a:d0:c9:
                    d3:5c:a3:e1:5e:02:92:1f:fe:1a:94:81:b8:e7:b8:
                    f1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:26:88:85:F5:36:03:E5:C9:32:7B:EE:11:3F:C5:0D:54:F6:80:89
            X509v3 Authority Key Identifier:
                keyid:67:89:A2:54:72:6D:03:1E:59:B4:6B:61:B4:AC:AA:85:1B:FA:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366351B/4665A9F0ACA011EDAF100DF7F1222468/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366351B/4665A9F0ACA011EDAF100DF7F1222468/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:54:83:fc:35:01:9f:16:01:36:40:39:04:1c:2b:52:a1:04:
         75:59:60:13:48:a1:36:c2:57:c8:2f:ea:ba:43:ac:a5:b0:43:
         5e:c1:33:91:06:a0:9a:fd:04:81:67:15:f7:9c:2e:7f:fd:1d:
         ec:6e:5c:6a:92:a3:bf:54:22:bf:fe:e1:9c:d3:a8:10:24:55:
         59:0e:b2:01:64:82:4c:3f:63:55:d1:52:e3:8c:cb:10:d2:98:
         79:eb:f3:13:a7:52:f4:67:d0:b3:64:62:8e:81:eb:9b:43:db:
         fb:c4:83:c6:84:2d:85:7a:94:fc:8f:9a:22:e7:ab:4d:17:1e:
         24:22:ab:41:b4:81:6f:e0:c9:97:16:14:9b:e4:64:e3:4d:45:
         c5:c8:68:1e:54:09:80:d3:e9:2b:a9:54:ed:83:13:73:29:64:
         0f:28:1c:17:89:7d:00:39:29:ff:06:24:49:76:e7:9c:4b:2d:
         b5:b5:1d:a2:ad:a7:fe:0f:95:c6:1b:0d:53:5e:e7:e8:f2:c5:
         0b:5e:92:af:03:48:f7:84:0d:0c:a8:88:52:16:94:8a:3e:cc:
         5e:05:60:86:0e:80:93:23:b7:5c:f7:e0:a8:0e:79:c9:03:25:
         dd:93:bb:64:a3:69:ff:56:0b:61:f2:39:05:02:86:be:75:9c:
         dd:95:ec:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:22:26 2025 by rpki-client