This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.mft
File:                     M_ZYGpislU83OkcJgFDY_iv0fj0.mft (raw, json)
Hash identifier:          RXUbZTK6mxVr+bprqjG3ha8d6tn8+qxApqbvmxflp2s=
Subject key identifier:   16:82:8A:76:9E:4A:A5:1E:E3:80:F2:F0:86:D8:02:F9:70:EB:F9:9B
Authority key identifier: 33:F6:58:1A:98:AC:95:4F:37:3A:47:09:80:50:D8:FE:2B:F4:7E:3D
Certificate issuer:       /CN=F367C8F5AF/serialNumber=33F6581A98AC954F373A47098050D8FE2BF47E3D
Certificate serial:       026C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M_ZYGpislU83OkcJgFDY_iv0fj0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.mft
Manifest number:          0268
Signing time:             Tue 09 Dec 2025 04:13:04 +0000
Manifest this update:     Tue 09 Dec 2025 04:13:03 +0000
Manifest next update:     Thu 11 Dec 2025 04:13:03 +0000
Files and hashes:         1: M_ZYGpislU83OkcJgFDY_iv0fj0.crl (hash: CUdUADAwqNXySgwmAb25ovP4iLTR0Gn/0IU4WXYMarg=)
                          2: 051C1C9A3ECF11F0AB24B6BEDAE4EC9C.roa (hash: Pz/lyw5RNwEZFyUHiUisAUenkR86p2uc3aTqE70RhOU=)
                          3: 413DAB9E016D11EF96EEF801017001B1.roa (hash: jxX0GLnr3IIAZJTvWYu2iEdMlTQUIBwAJ3Bou1um83I=)
                          4: A49224C63ED011F09870CEC9DAE4EC9C.roa (hash: OSuhvI721+aNOvOxPfDiyyj7Sr9nZrCMf4kt6CXovps=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M_ZYGpislU83OkcJgFDY_iv0fj0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620 (0x26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367C8F5AF, serialNumber=33F6581A98AC954F373A47098050D8FE2BF47E3D
        Validity
            Not Before: Dec  9 04:13:03 2025 GMT
            Not After : Dec 11 04:13:03 2025 GMT
        Subject: CN=6937a1d0-a153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:7f:c3:3f:8b:47:f3:74:c0:5a:7b:52:8c:
                    cb:87:96:e2:c8:40:7b:77:13:40:31:16:3c:f8:d2:
                    ba:02:2b:0b:78:78:20:2d:62:15:b7:ea:7a:11:be:
                    58:1f:64:0c:43:30:ea:97:93:55:4a:46:f9:9c:6b:
                    ab:3c:4d:8e:b4:ad:0e:b5:17:b5:8e:62:cd:40:b0:
                    e1:f1:2b:f6:ff:2c:50:2b:62:ac:f4:93:10:b6:2a:
                    71:e4:8b:bf:9d:bd:d1:ff:8d:fd:4b:79:40:5c:f9:
                    a7:c1:34:ed:13:42:6e:e4:9e:8d:fe:59:d0:b8:f1:
                    c1:79:3c:be:f7:8d:ce:bd:ef:1b:c3:46:2d:fe:5f:
                    d2:9e:63:28:10:61:16:77:c7:de:79:4a:65:05:90:
                    07:0c:3a:ce:15:15:eb:88:93:3d:0f:a8:20:83:6a:
                    6a:a1:c4:24:22:1c:d8:fc:c6:5a:3d:75:b1:b9:2d:
                    f8:da:70:90:96:87:7b:16:f7:6d:0c:b8:79:0d:56:
                    ef:60:6f:10:c5:c8:b1:9b:1b:ba:f1:f9:5b:34:17:
                    d3:5f:c2:7c:f8:46:e2:b8:dd:c1:bf:64:81:03:7e:
                    94:28:d7:24:1e:6f:bc:58:7b:63:09:5a:3b:4d:e0:
                    5f:5a:7d:90:ec:f3:ba:71:b2:a9:20:34:b2:a1:f7:
                    a4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:82:8A:76:9E:4A:A5:1E:E3:80:F2:F0:86:D8:02:F9:70:EB:F9:9B
            X509v3 Authority Key Identifier:
                keyid:33:F6:58:1A:98:AC:95:4F:37:3A:47:09:80:50:D8:FE:2B:F4:7E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M_ZYGpislU83OkcJgFDY_iv0fj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:82:3c:44:d2:1a:d0:6d:1a:15:65:4e:33:99:48:a4:65:1f:
         b1:35:b3:59:22:e1:d3:94:e7:01:4d:da:74:f5:5f:27:83:17:
         b5:8e:e2:d6:53:a8:87:86:d1:92:62:33:15:b6:55:4b:8a:37:
         5c:80:82:d1:94:be:ab:ae:27:6f:63:09:17:43:1b:ed:e5:1a:
         92:fc:ee:4f:05:4a:0f:77:5e:a8:f6:c5:b1:e7:be:df:73:fe:
         50:f3:9a:cd:f3:2c:02:2b:7e:b7:63:c8:62:86:af:7b:79:d9:
         8d:e0:85:58:c9:5d:5c:13:21:bd:22:d9:3f:a1:68:c0:5f:40:
         5f:fb:17:6e:b2:b6:93:38:e1:6d:99:08:c5:44:08:56:23:05:
         5b:13:21:3d:4f:eb:32:65:df:12:dd:b6:34:74:f5:35:f8:d1:
         00:0f:83:88:20:ad:91:c2:b3:58:0d:a3:6d:fb:fc:dc:7e:fd:
         28:e6:d4:92:24:cb:f2:09:f7:55:b2:ec:59:33:b5:28:df:27:
         22:e3:c1:a6:3c:3c:56:96:53:c2:40:5e:56:40:99:4d:43:c0:
         77:73:06:84:c3:9b:2a:bb:83:f9:5f:5f:85:ac:99:a6:60:a0:
         d1:99:3e:bf:9c:a5:21:a7:ea:62:91:dc:1b:02:1a:43:bf:6f:
         6e:cd:1c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:17:21 2025 by rpki-client