This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
File:                     yLuITQS6vBYFq333lYeWBZySwmo.mft (raw, json)
Hash identifier:          3t5lJ4y78b6TX/aTr3Bco6O6rfFYUBhXdW0Udb2eFdc=
Subject key identifier:   14:2A:7A:3B:8B:00:A5:75:0B:14:C9:FF:19:E0:46:66:83:18:4F:81
Authority key identifier: C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A
Certificate issuer:       /CN=F3670369AF/serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
Certificate serial:       05AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
Manifest number:          05AA
Signing time:             Thu 04 Dec 2025 02:37:50 +0000
Manifest this update:     Thu 04 Dec 2025 02:37:49 +0000
Manifest next update:     Sat 06 Dec 2025 02:37:49 +0000
Files and hashes:         1: yLuITQS6vBYFq333lYeWBZySwmo.crl (hash: /UKHbxX1G7pod1ui107euSPX7MpZTwKYVlyIGG5CiCI=)
                          2: DBE0F6EE7E8C11EC9A551E885A40D577.roa (hash: e+LkqN78DWuhBsqL8FFr5mWtusQpgR9pzmjfGcJQ5/w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 02:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1451 (0x5ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AF, serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
        Validity
            Not Before: Dec  4 02:37:49 2025 GMT
            Not After : Dec  6 02:37:49 2025 GMT
        Subject: CN=6930f3fe-163f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:58:e6:6a:22:70:70:13:a3:f9:63:b6:e5:73:
                    d5:c1:b5:01:9d:98:1f:d0:eb:b3:16:40:08:bf:98:
                    65:c7:59:07:57:55:47:38:d8:54:dc:34:93:0e:66:
                    dc:bf:7a:ee:b3:f1:14:8d:9a:d4:c5:07:2b:60:6e:
                    5e:ae:b0:ce:6f:27:b6:a9:10:67:31:4e:20:3b:88:
                    0c:c6:a5:1f:cc:45:10:20:2e:1d:22:54:45:50:7e:
                    20:b1:94:3a:f5:ad:6e:9c:33:35:76:18:fb:87:2b:
                    8d:84:e1:7e:b9:d5:7a:aa:30:1d:5c:97:7c:c8:4e:
                    f0:93:12:f0:d6:22:89:8a:4d:dc:12:d7:79:c4:60:
                    8d:f4:52:6c:87:ad:2d:9c:4c:bd:ca:b8:9b:aa:ba:
                    b9:09:76:b8:37:e4:1c:14:cf:19:f6:13:33:17:ee:
                    12:19:9a:ab:89:f8:19:8b:ee:ca:1a:ac:26:f2:e5:
                    80:e3:d5:be:c4:23:e3:c6:73:8e:c3:6b:fd:cb:4e:
                    4d:ba:1d:0c:32:a1:8a:95:ac:c4:66:70:9a:9f:c5:
                    98:40:7b:39:eb:9b:52:af:00:be:86:b2:f8:f0:e9:
                    74:ae:c2:27:5b:9a:c6:04:e4:d4:e9:14:5f:6f:16:
                    65:a5:22:14:fd:df:b1:e1:3c:0f:44:8b:65:08:58:
                    c3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2A:7A:3B:8B:00:A5:75:0B:14:C9:FF:19:E0:46:66:83:18:4F:81
            X509v3 Authority Key Identifier:
                keyid:C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:52:c6:d4:6a:89:dc:d6:32:fa:f7:33:ca:4e:07:ef:18:d6:
         34:32:7c:92:b7:33:fa:6d:f0:fb:8e:14:cc:ac:0f:a6:5b:01:
         69:85:08:b9:cf:60:b3:12:73:63:36:91:b1:e4:5f:5e:00:28:
         5e:7a:2d:61:2e:d6:db:21:7d:95:eb:65:3c:ee:e2:69:b2:71:
         f9:a0:9d:f7:96:3c:aa:fe:7e:91:37:32:30:bc:99:8a:46:d6:
         6b:d0:2b:14:95:ca:5a:11:e4:a4:3b:66:20:23:1c:d6:b5:00:
         a3:49:33:9b:5c:35:34:25:10:61:a6:8e:c3:6d:66:14:46:fa:
         a4:97:e4:0d:34:48:c5:a6:4e:94:ec:53:9b:cf:5b:c8:e2:72:
         6e:3f:5e:31:67:c2:90:d8:22:c7:25:d6:83:f3:90:70:49:2b:
         de:86:15:c4:ce:23:fc:54:56:f7:85:34:30:f2:9f:22:57:50:
         7e:bf:e5:37:f6:41:a3:98:12:f8:b1:ed:b7:43:7a:49:5c:a7:
         bf:35:5f:5a:f3:1f:4f:5c:2d:c7:5f:a4:02:93:09:b9:cb:4b:
         9d:d1:1e:87:99:1b:e9:b6:16:48:44:e6:b5:1b:8d:da:b8:e2:
         02:7c:5c:6f:93:73:33:cd:2f:b2:f6:6c:45:cb:83:93:2d:6c:
         dc:25:40:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 02:29:19 2025 by rpki-client