This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
File:                     OudkbOatVp92Fuam9v07GYa-1Bk.mft (raw, json)
Hash identifier:          CEuOaQtrdSpT/H+aEZC95+9Xbz20/WSSkUzmVI50sHo=
Subject key identifier:   CF:F6:63:17:D1:E8:3D:11:58:2E:9E:8D:CE:F0:01:FE:83:A1:44:B5
Authority key identifier: 3A:E7:64:6C:E6:AD:56:9F:76:16:E6:A6:F6:FD:3B:19:86:BE:D4:19
Certificate issuer:       /CN=F366A2B2AF/serialNumber=3AE7646CE6AD569F7616E6A6F6FD3B1986BED419
Certificate serial:       97
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
Manifest number:          94
Signing time:             Tue 09 Dec 2025 05:06:54 +0000
Manifest this update:     Tue 09 Dec 2025 05:06:53 +0000
Manifest next update:     Thu 11 Dec 2025 05:06:53 +0000
Files and hashes:         1: OudkbOatVp92Fuam9v07GYa-1Bk.crl (hash: cyMVZ892X15/GYJ7HCyVroM498ZZMRpY69Hl3I2BHTs=)
                          2: F8600BDE84B911F085AD04A3DAE4EC9C.roa (hash: DP8mnGerifLfSRadwXVvA2WZ6PCmE2usVrRlV28umhs=)
                          3: EF99DEAC66E711F0A50F79A4DAE4EC9C.roa (hash: 1ALkP5AE5BnLJ65DORy6a8qL9QHzH+dCAgd18lTAG+k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 05:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A2B2AF, serialNumber=3AE7646CE6AD569F7616E6A6F6FD3B1986BED419
        Validity
            Not Before: Dec  9 05:06:53 2025 GMT
            Not After : Dec 11 05:06:53 2025 GMT
        Subject: CN=6937ae6d-05a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f7:10:8c:e8:bd:39:51:60:65:d6:4d:3f:d3:
                    1e:55:c3:a8:ba:24:17:39:63:f4:1c:c8:a9:86:42:
                    58:69:6c:ae:21:a0:22:5a:c2:6a:d9:3f:2c:e5:aa:
                    8c:70:7c:69:cc:d0:91:00:9b:35:d1:6b:07:78:c2:
                    d8:55:ce:0d:cc:a8:3e:e7:db:fc:87:6f:e5:d1:dd:
                    e3:91:cd:56:ef:d2:42:d7:16:36:10:db:21:ce:47:
                    1b:98:b6:b0:8d:0e:bd:f3:d3:f5:4f:fe:50:8f:b3:
                    2f:36:93:4a:ed:44:8c:9b:a5:b3:4f:47:e0:96:5c:
                    37:06:fa:d4:e0:c5:4b:81:b2:60:c5:2b:69:12:25:
                    be:20:22:08:c1:c9:f4:c8:35:5f:62:bb:e9:38:91:
                    fd:c3:85:31:15:35:e0:1b:8f:9e:a3:b9:d5:b3:e3:
                    4b:d1:80:e5:a9:0b:6f:d4:71:13:fb:f5:2d:19:61:
                    4d:ec:64:e9:ce:96:99:d6:d2:23:d3:b7:c9:96:d2:
                    a2:5a:43:14:9d:3b:cf:28:76:07:eb:96:86:87:81:
                    15:06:56:56:87:91:44:6c:ba:e8:74:fb:32:f4:d0:
                    c1:49:8e:dd:13:c9:c2:5b:35:04:df:27:d6:ac:f5:
                    e4:d5:60:9a:ca:99:6c:30:0f:4c:07:da:32:cc:11:
                    b1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F6:63:17:D1:E8:3D:11:58:2E:9E:8D:CE:F0:01:FE:83:A1:44:B5
            X509v3 Authority Key Identifier:
                keyid:3A:E7:64:6C:E6:AD:56:9F:76:16:E6:A6:F6:FD:3B:19:86:BE:D4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:01:ba:0a:22:55:4b:7a:3e:53:99:2e:02:4c:7e:e5:32:c7:
         55:47:fd:62:a6:59:f9:9c:e1:8e:58:30:2e:85:16:00:8d:2c:
         1f:14:92:66:f6:71:61:09:29:15:12:2d:2b:ce:07:8e:f9:2e:
         c5:eb:70:1a:65:61:1a:7e:78:58:7f:ae:1d:78:ba:79:3d:49:
         05:6f:ee:95:1a:14:95:89:fa:e5:c8:97:8b:5b:c0:94:6f:f7:
         c4:f3:11:79:53:2d:01:f8:ed:37:d3:69:d9:b4:24:b4:52:f2:
         c3:04:4d:79:75:f6:3e:a7:12:4a:6f:e3:8d:ca:1d:d2:66:84:
         c6:bd:1e:62:27:4d:5f:cb:34:4d:cc:96:ac:7a:48:62:ee:46:
         7c:40:71:96:c8:67:e8:13:46:ec:f5:f7:91:b1:a8:ac:e3:48:
         8e:f8:56:1f:03:dd:80:2d:e8:d9:7c:1a:de:06:d1:98:af:5e:
         ea:4c:d9:f5:34:1b:27:01:49:26:3e:81:cd:a2:a2:36:80:d0:
         b3:2a:02:41:91:5f:d0:62:04:44:fa:4e:e2:3d:20:9d:75:7b:
         e8:1c:77:a9:e4:b4:7b:c1:a6:6e:ac:fc:58:46:57:5d:31:21:
         6c:73:5c:fd:43:20:4f:5a:03:73:98:b8:ce:9f:09:a8:c6:52:
         77:ea:8d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:20:33 2025 by rpki-client