This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.mft
File:                     M_ZYGpislU83OkcJgFDY_iv0fj0.mft (raw, json)
Hash identifier:          XJKjOt0UanF0CBpAkkiu2vivswSi164LeJn5OjQQd68=
Subject key identifier:   0E:A9:5A:A6:55:34:34:D1:BC:5E:47:15:12:B1:E1:F5:B6:AC:93:5D
Authority key identifier: 33:F6:58:1A:98:AC:95:4F:37:3A:47:09:80:50:D8:FE:2B:F4:7E:3D
Certificate issuer:       /CN=F367C8F5AF/serialNumber=33F6581A98AC954F373A47098050D8FE2BF47E3D
Certificate serial:       0275
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M_ZYGpislU83OkcJgFDY_iv0fj0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.mft
Manifest number:          0271
Signing time:             Thu 18 Dec 2025 06:25:53 +0000
Manifest this update:     Thu 18 Dec 2025 06:25:52 +0000
Manifest next update:     Sat 20 Dec 2025 06:25:52 +0000
Files and hashes:         1: M_ZYGpislU83OkcJgFDY_iv0fj0.crl (hash: A72e9TaSXhWSN1erXHMMA8Z+551Qw/Or1T67GrfrfTE=)
                          2: 051C1C9A3ECF11F0AB24B6BEDAE4EC9C.roa (hash: Pz/lyw5RNwEZFyUHiUisAUenkR86p2uc3aTqE70RhOU=)
                          3: 413DAB9E016D11EF96EEF801017001B1.roa (hash: jxX0GLnr3IIAZJTvWYu2iEdMlTQUIBwAJ3Bou1um83I=)
                          4: A49224C63ED011F09870CEC9DAE4EC9C.roa (hash: OSuhvI721+aNOvOxPfDiyyj7Sr9nZrCMf4kt6CXovps=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M_ZYGpislU83OkcJgFDY_iv0fj0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 00:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367C8F5AF, serialNumber=33F6581A98AC954F373A47098050D8FE2BF47E3D
        Validity
            Not Before: Dec 18 06:25:52 2025 GMT
            Not After : Dec 20 06:25:52 2025 GMT
        Subject: CN=69439e71-33b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:b4:ec:c6:a0:16:9f:e5:bc:c4:d7:f2:f2:
                    16:1f:e0:bb:bf:37:73:e2:05:8d:6b:8d:99:a3:b0:
                    27:77:92:da:f4:e4:c8:aa:62:a5:e0:28:be:3f:d4:
                    8a:85:e6:4f:55:fc:a4:b9:eb:96:02:71:fd:e3:5d:
                    b6:cc:24:b0:fb:81:08:99:29:42:a0:1e:61:d5:a6:
                    ae:3c:0e:41:6f:1d:64:a8:44:5f:9e:89:d2:60:f8:
                    07:f5:3a:32:a5:cc:57:12:ea:5e:47:a1:fb:08:cf:
                    4c:ff:97:f5:80:36:4f:44:f8:55:07:bd:0a:c7:58:
                    45:f5:d8:d9:4a:35:79:d9:7f:37:90:3f:24:b2:e2:
                    de:74:85:67:63:d7:50:03:4f:3a:fb:9b:2f:f9:73:
                    7a:24:c3:15:66:22:27:5a:9f:e6:a1:58:4e:2f:de:
                    57:4d:9c:9c:5b:27:26:74:1e:f5:ad:75:04:92:88:
                    6d:d5:73:ef:26:d2:97:15:86:d9:64:cb:b7:2b:57:
                    62:6e:fb:dd:bc:33:b2:47:8f:4f:9d:27:7e:ac:33:
                    e1:26:85:13:8e:d6:9e:e8:10:b2:7f:43:0c:f9:54:
                    54:85:1c:19:a2:d8:37:c0:f9:bc:63:eb:34:aa:02:
                    b2:d8:0c:f9:fb:c5:bb:a1:03:2d:30:c3:0a:62:65:
                    ea:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A9:5A:A6:55:34:34:D1:BC:5E:47:15:12:B1:E1:F5:B6:AC:93:5D
            X509v3 Authority Key Identifier:
                keyid:33:F6:58:1A:98:AC:95:4F:37:3A:47:09:80:50:D8:FE:2B:F4:7E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M_ZYGpislU83OkcJgFDY_iv0fj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:32:63:5f:5a:92:dd:25:1c:1d:9a:9a:bb:84:bf:35:84:af:
         14:95:a6:02:3b:1c:ec:41:6d:01:e6:9c:b5:09:85:73:6e:23:
         42:da:d9:2f:84:fe:cf:21:59:4a:ab:cc:4e:5d:cd:dc:6f:86:
         4f:24:5c:5d:7d:69:40:d9:5c:59:62:c4:c5:a5:53:9a:44:a5:
         92:2b:7b:7f:94:ba:b2:12:cb:fd:23:41:6a:c2:2e:88:69:65:
         e0:3e:1e:70:16:60:da:22:29:5e:0a:2c:bd:ba:8c:f4:bf:c7:
         e0:78:77:91:80:67:c2:f3:39:4d:a0:a2:1e:90:ad:4c:23:33:
         bc:a1:3b:9c:e1:97:3d:00:a2:22:54:99:99:8e:c9:1a:5b:01:
         cd:1e:48:07:b6:bc:fc:9c:1c:ce:1c:ee:27:0a:8a:b0:9a:49:
         b9:f0:c0:f2:e9:77:0a:e7:ba:78:60:1c:78:e1:94:c4:75:6a:
         48:b7:69:97:81:13:09:93:17:f9:5e:5c:a9:be:d9:01:d4:3e:
         54:cb:65:95:60:76:87:d6:94:35:1a:c6:73:73:8c:15:8b:75:
         5d:85:e2:98:3e:d7:7e:53:0e:ea:2d:87:c9:77:57:73:e6:36:
         d0:5d:50:3b:05:b5:bf:f3:67:bb:25:95:94:a1:5a:c5:4c:02:
         69:43:f2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 00:54:38 2025 by rpki-client