This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
File:                     BgFTVgEyf0M_jYQnIExQlCCErVY.mft (raw, json)
Hash identifier:          3h8sd+nu9eEKegNTn9zdrumKwusEV0GVaZuHFS5R4MU=
Subject key identifier:   A5:15:A3:CD:71:BA:2C:11:EF:AC:6B:ED:36:AF:2A:63:65:27:01:E2
Authority key identifier: 06:01:53:56:01:32:7F:43:3F:8D:84:27:20:4C:50:94:20:84:AD:56
Certificate issuer:       /CN=F367676CAF/serialNumber=0601535601327F433F8D8427204C50942084AD56
Certificate serial:       039D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
Manifest number:          0397
Signing time:             Sun 07 Dec 2025 03:34:23 +0000
Manifest this update:     Sun 07 Dec 2025 03:34:22 +0000
Manifest next update:     Tue 09 Dec 2025 03:34:22 +0000
Files and hashes:         1: BgFTVgEyf0M_jYQnIExQlCCErVY.crl (hash: jm7VfRR7SPoM3noyh2HFRljiknWJ/Pu9L3KVrnY2nVk=)
                          2: B4157BCEC51811EEA71E2955775412E6.roa (hash: +8B3PetXXdBYl4xVysjBuEdmB8tCvNT4URtK1ryNHXo=)
                          3: 9B15553CC51711EE865F7453775412E6.roa (hash: B4szk6C0WLymXGOq975zsN9fUPmrwwcdkQwfSngmA8Q=)
                          4: D7ED7CFCC51511EE85F58D50775412E6.roa (hash: QAA9COkPZwe9PTmNfwL5wojLGp+HtJSiqKQk5ypGdaw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 03:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925 (0x39d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367676CAF, serialNumber=0601535601327F433F8D8427204C50942084AD56
        Validity
            Not Before: Dec  7 03:34:22 2025 GMT
            Not After : Dec  9 03:34:22 2025 GMT
        Subject: CN=6934f5bf-15b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:29:a2:df:3c:c9:6b:32:1f:90:a0:69:2d:
                    97:37:5d:2f:68:c2:d2:82:37:22:68:c0:75:2d:6e:
                    7c:6f:a1:93:70:5a:65:65:45:71:d9:0e:63:86:fa:
                    58:c0:0a:12:30:f5:28:6e:36:3a:07:40:da:aa:1e:
                    e0:43:f2:79:c5:5f:3c:da:23:0c:cd:98:82:43:af:
                    3b:28:06:08:fd:90:78:d4:45:4f:68:b0:0d:05:16:
                    56:3f:da:63:68:52:2a:54:79:9c:81:b9:b2:bf:e7:
                    fd:5c:17:2d:56:9b:45:39:c3:6b:f5:06:6e:22:ea:
                    81:21:0f:1e:b6:20:ed:89:e2:54:a3:77:0e:b2:e6:
                    18:16:bf:e3:bc:7b:fa:d9:40:d6:27:3f:72:d7:d8:
                    65:c6:0e:61:98:b4:5d:35:67:67:7a:8d:cf:93:3c:
                    85:c0:5b:8d:7d:87:f6:b2:c7:6d:80:55:57:62:54:
                    3f:c8:cf:99:ae:37:e0:23:37:98:68:98:a5:14:9f:
                    20:c7:38:98:65:e4:20:3c:e0:38:0f:d4:44:f7:49:
                    f5:d8:fd:80:83:e1:b0:07:33:46:22:ba:f4:fa:d2:
                    dc:89:41:1b:ca:66:8b:0d:5d:ee:88:c9:f1:91:9f:
                    56:ff:22:d8:26:ea:bd:31:ed:df:7a:70:17:e3:7b:
                    2c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:15:A3:CD:71:BA:2C:11:EF:AC:6B:ED:36:AF:2A:63:65:27:01:E2
            X509v3 Authority Key Identifier:
                keyid:06:01:53:56:01:32:7F:43:3F:8D:84:27:20:4C:50:94:20:84:AD:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:64:d6:47:bf:8a:c7:8d:5f:87:86:4b:5c:66:a9:75:77:56:
         6f:aa:f2:7b:41:b4:c5:98:01:5c:07:dd:b1:b2:08:a7:51:cd:
         17:1f:c4:a3:3f:8a:b1:9a:92:af:7a:27:35:b6:23:32:9a:17:
         e5:c8:d3:5c:04:70:e8:b2:fc:16:20:da:d5:28:0d:84:3d:21:
         4c:c3:82:f9:e1:57:19:a2:74:94:d9:54:5e:f5:8c:25:5c:0f:
         7c:c1:9c:d6:20:c5:49:d0:70:80:e9:81:62:2f:bc:ce:28:33:
         c3:5e:fc:cc:95:5b:a1:79:d2:3b:50:b7:f6:11:33:e2:ff:66:
         c0:e9:cd:aa:45:79:37:0e:8e:1d:9d:dd:a0:a5:20:6e:33:b5:
         7d:24:e2:59:18:0f:ac:85:3f:e0:f7:16:3a:d2:b0:e4:f8:b2:
         06:11:14:9b:9d:95:90:5a:34:fd:e9:3b:e1:49:c4:be:c2:ad:
         b1:01:ef:d0:6d:d8:24:02:1b:e7:ca:a1:c4:c0:8d:e5:7e:00:
         2e:70:a8:57:4e:4e:40:e4:8b:ee:91:f5:a0:e8:90:6d:33:0f:
         7f:a9:1b:5a:e6:5c:7f:1b:7d:10:61:0f:e8:0b:44:96:f4:81:
         00:30:e2:97:48:d8:86:1d:a6:bd:49:42:1c:c3:53:6b:8e:f7:
         67:1b:e3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 03:58:58 2025 by rpki-client