This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
File:                     9rZiLcWmAFKfv9HBwPfJi_yJClA.mft (raw, json)
Hash identifier:          RNuTnpSPME0nl6FalU3JMtmHXDYQD/v8edvL2LxXU4M=
Subject key identifier:   61:6D:DC:7A:D8:39:18:14:69:8F:8C:2C:B3:92:CB:F9:34:16:DA:9D
Authority key identifier: F6:B6:62:2D:C5:A6:00:52:9F:BF:D1:C1:C0:F7:C9:8B:FC:89:0A:50
Certificate issuer:       /CN=F366BE85AF/serialNumber=F6B6622DC5A600529FBFD1C1C0F7C98BFC890A50
Certificate serial:       014E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9rZiLcWmAFKfv9HBwPfJi_yJClA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
Manifest number:          014C
Signing time:             Thu 04 Dec 2025 04:48:18 +0000
Manifest this update:     Thu 04 Dec 2025 04:48:17 +0000
Manifest next update:     Sat 06 Dec 2025 04:48:17 +0000
Files and hashes:         1: 9rZiLcWmAFKfv9HBwPfJi_yJClA.crl (hash: tN9eDZppDhDVwbghwsEqnFBP+OIvOwIqkdcEcnbkVt4=)
                          2: 0138B876D29211EF9CA02783762E951A.roa (hash: 9Qo2BZpMY9XAgQ8sDtXz6FwY6T65u4EtYgo8ZKdICJA=)
                          3: 48197A8CD29211EF9C4B9D83762E951A.roa (hash: mZ9kRI2tetEX+zkrcuQdcEIANnKP7GMoF4oNcGCNj88=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9rZiLcWmAFKfv9HBwPfJi_yJClA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 04:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366BE85AF, serialNumber=F6B6622DC5A600529FBFD1C1C0F7C98BFC890A50
        Validity
            Not Before: Dec  4 04:48:17 2025 GMT
            Not After : Dec  6 04:48:17 2025 GMT
        Subject: CN=69311292-2fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:1b:39:0f:4e:46:87:4a:7d:0d:72:03:44:
                    10:cf:bf:76:ea:b2:06:d6:1d:b1:93:e0:eb:db:28:
                    3b:4d:12:ef:0a:a8:df:35:14:04:7d:ee:39:9b:19:
                    ce:96:93:63:20:8e:02:07:52:cb:88:54:48:6b:f0:
                    62:1d:58:da:21:82:b1:8c:90:d0:a4:d9:5f:96:59:
                    3b:a7:87:76:ca:a2:ca:88:6a:f3:cc:cf:ef:d6:0d:
                    dd:f3:b6:8a:1c:cf:c4:36:f6:5b:a3:a6:19:ee:6d:
                    a3:a6:01:6b:79:15:8d:07:4d:c6:58:c8:06:47:70:
                    af:db:b5:89:b4:51:85:d7:84:80:96:33:ea:4e:ed:
                    ca:52:8b:3e:10:46:47:ca:8a:35:b3:9d:c6:cf:31:
                    5c:58:7d:3a:95:f3:29:da:e7:9d:92:6b:80:ab:e6:
                    8b:f7:9a:00:9c:f8:23:f8:3f:d3:d9:d5:c7:c0:c7:
                    2d:17:7e:06:5f:32:37:49:97:9e:6f:43:61:7e:82:
                    ac:56:ba:44:b3:a5:ba:1f:cb:52:33:52:bf:ac:79:
                    f9:cc:22:bd:7e:b1:05:31:eb:a7:6f:a6:f6:09:0b:
                    0f:e0:ef:b0:fc:fa:1c:30:17:c0:24:30:88:60:9a:
                    ca:42:a8:6c:d9:c0:0a:0d:ca:eb:95:80:84:f8:92:
                    81:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6D:DC:7A:D8:39:18:14:69:8F:8C:2C:B3:92:CB:F9:34:16:DA:9D
            X509v3 Authority Key Identifier:
                keyid:F6:B6:62:2D:C5:A6:00:52:9F:BF:D1:C1:C0:F7:C9:8B:FC:89:0A:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9rZiLcWmAFKfv9HBwPfJi_yJClA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:41:ef:87:61:2f:60:11:20:66:71:38:1c:28:73:f4:87:32:
         c1:b6:e2:fb:a4:22:78:b5:78:af:6c:3b:ed:87:de:1e:fa:68:
         5b:8a:97:0e:ba:fe:34:e9:8f:4e:6c:0c:57:60:96:41:99:a4:
         eb:a8:e8:e3:e3:bb:7a:63:59:9c:c3:e4:7a:28:91:2d:6a:6d:
         24:21:6b:d0:65:6b:d1:5e:3d:92:15:9b:e3:77:8a:3e:7d:32:
         ce:85:db:69:20:78:7d:9a:fe:c4:84:1b:82:dc:40:5f:12:f9:
         eb:76:6a:9f:73:a8:29:43:6b:ab:66:8f:e5:7a:a7:f0:59:c8:
         77:ad:2b:01:cc:44:0e:21:98:33:af:e6:e8:b7:13:cb:aa:e3:
         28:fe:43:14:d4:56:71:d6:b6:ae:9e:b6:7a:ae:d8:3c:e2:5b:
         81:11:56:4e:27:65:ea:8a:11:60:e2:53:54:c3:4c:4a:dc:b4:
         c9:76:4a:ef:18:e0:f3:0b:96:73:b1:46:f6:64:e1:01:d4:1e:
         4f:79:97:f5:23:ae:b7:7f:3f:87:43:43:c1:f4:ea:1c:ac:06:
         5a:61:9f:4e:b2:d0:d5:d4:dc:7f:80:24:5a:12:66:41:40:71:
         4e:e6:eb:da:ad:21:8c:ca:c5:ad:19:1f:7b:cf:b5:87:c6:48:
         23:fe:04:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 02:27:30 2025 by rpki-client