This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
File:                     0CXaySkNvUCEbGSPrcyfxnGGtjI.mft (raw, json)
Hash identifier:          Hv2CxvOLEK2WOpwKVCj+2Q1sxtdFNjMDkYc7Yn+mIX4=
Subject key identifier:   3A:1A:41:4E:0A:40:28:9F:FC:E3:30:B7:22:66:8B:80:9C:89:88:A6
Authority key identifier: D0:25:DA:C9:29:0D:BD:40:84:6C:64:8F:AD:CC:9F:C6:71:86:B6:32
Certificate issuer:       /CN=F367B3F2AF/serialNumber=D025DAC9290DBD40846C648FADCC9FC67186B632
Certificate serial:       08DF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0CXaySkNvUCEbGSPrcyfxnGGtjI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
Manifest number:          08DE
Signing time:             Tue 09 Dec 2025 01:39:03 +0000
Manifest this update:     Tue 09 Dec 2025 01:39:03 +0000
Manifest next update:     Thu 11 Dec 2025 01:39:02 +0000
Files and hashes:         1: 0CXaySkNvUCEbGSPrcyfxnGGtjI.crl (hash: rqDeEig8a0V5+suSfvfZSXJvz2eafUo/KrG0BtnIzW8=)
                          2: C0B60E1809D611EA8CC3F860F8AEA228.roa (hash: 90ECyuBdPNmxRJAqpaW1o3jdvLDow9bMz084syJod/o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0CXaySkNvUCEbGSPrcyfxnGGtjI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2271 (0x8df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B3F2AF, serialNumber=D025DAC9290DBD40846C648FADCC9FC67186B632
        Validity
            Not Before: Dec  9 01:39:03 2025 GMT
            Not After : Dec 11 01:39:02 2025 GMT
        Subject: CN=69377db7-9228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:db:39:37:a2:04:6b:7a:d1:64:34:f7:6e:98:
                    73:62:47:e1:56:3c:a0:ad:80:c3:21:9d:d9:00:30:
                    72:3e:1d:57:24:1b:f6:e6:1c:f6:33:3e:1b:08:8d:
                    bf:f9:57:c6:aa:ee:0f:ea:d4:19:bc:42:59:fa:ae:
                    41:e4:31:70:28:5b:81:91:a2:d4:c7:d3:22:0a:fc:
                    04:5d:97:46:8c:16:92:cb:97:4c:66:eb:47:de:b3:
                    08:3b:7d:a5:0f:c2:a4:0c:8b:a2:0f:9e:23:98:8e:
                    2b:03:c1:14:6d:3e:88:b8:9d:48:32:23:f9:8b:a9:
                    27:0c:52:15:8a:c6:8f:47:5e:ec:85:5e:b8:5f:b1:
                    90:14:9b:c3:28:aa:89:79:24:02:7f:27:58:57:73:
                    75:4e:58:7d:e1:67:fa:7f:41:98:4f:67:cd:c9:e6:
                    39:57:4f:83:c2:c3:c2:38:40:98:a4:cc:d1:30:29:
                    41:1f:22:7f:96:f7:75:a3:e1:85:e1:64:10:74:71:
                    49:63:7f:a3:b1:0c:42:c0:8d:87:20:0c:63:42:30:
                    f3:35:1b:f6:15:a0:68:4d:67:a1:a3:8b:36:24:67:
                    4e:e4:02:fb:1c:71:36:42:b8:68:b8:7f:7e:fc:67:
                    63:36:8b:0d:01:46:ed:9c:3f:de:dd:a6:fb:d1:58:
                    82:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1A:41:4E:0A:40:28:9F:FC:E3:30:B7:22:66:8B:80:9C:89:88:A6
            X509v3 Authority Key Identifier:
                keyid:D0:25:DA:C9:29:0D:BD:40:84:6C:64:8F:AD:CC:9F:C6:71:86:B6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0CXaySkNvUCEbGSPrcyfxnGGtjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b8:80:c0:98:4e:e0:a7:7a:f3:c0:28:3f:c0:89:45:22:de:
         0f:7e:3a:ca:60:6a:ad:38:c0:8f:57:65:8e:e4:95:89:f8:ac:
         56:2b:75:bc:0d:11:06:9f:97:81:d7:5f:40:a8:07:28:3d:c5:
         15:be:a8:bc:b8:53:a8:88:48:72:dc:04:bf:49:20:fb:75:cc:
         b8:a7:d9:c2:3a:f1:f5:d1:aa:9b:c5:8d:35:c6:4c:13:48:87:
         9c:a3:e7:b0:ac:b7:fc:35:16:02:b2:0a:0d:70:f1:5b:ff:48:
         27:15:7e:bc:71:31:ba:0b:02:d9:ae:20:a7:c3:ba:e1:de:53:
         36:00:bf:f1:ee:83:be:41:55:f3:d2:32:46:91:d4:76:06:df:
         2b:46:0d:22:80:92:1d:2d:4f:2f:24:24:46:c8:ac:39:cf:f9:
         f1:4a:bc:68:87:8f:88:69:bc:e2:c9:ee:04:aa:6d:78:76:e5:
         94:cb:81:fa:e8:06:d2:a7:b3:5e:88:73:7d:78:70:fb:c4:e7:
         2e:1a:cb:45:ba:b3:4b:e5:ba:ca:bb:a3:ff:ff:e2:6f:d3:d6:
         a7:66:64:db:aa:50:c7:c5:6e:b3:86:ce:b8:d6:56:9b:67:59:
         06:72:21:c7:13:d9:bf:1a:e4:4f:5f:7f:59:0e:3b:3d:ac:98:
         8b:0d:4e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:18:02 2025 by rpki-client