This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
File:                     4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft (raw, json)
Hash identifier:          L4JOXWWW+WmrAjxXhfFmT2MdUWqaMLwncfTiu5+el2s=
Subject key identifier:   A3:B3:95:26:D7:A7:58:F0:BB:83:63:95:FD:11:7F:6A:52:56:95:8A
Authority key identifier: E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F
Certificate issuer:       /CN=F367FC4FAF/serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
Certificate serial:       0D6E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
Manifest number:          0D6D
Signing time:             Fri 05 Dec 2025 01:06:17 +0000
Manifest this update:     Fri 05 Dec 2025 01:06:16 +0000
Manifest next update:     Sun 07 Dec 2025 01:06:16 +0000
Files and hashes:         1: 4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl (hash: tACurYMhDYZUmf9sL0wRblNO9ShF9zHY61Fi8DRjy7I=)
                          2: 0DE9F16080D011E6B7882016F8AEA228.roa (hash: lapNENqbec9IiREVadsxyCzDqZnzkWBnbMRTRH0mwYI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Dec 2025 00:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3438 (0xd6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC4FAF, serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
        Validity
            Not Before: Dec  5 01:06:16 2025 GMT
            Not After : Dec  7 01:06:16 2025 GMT
        Subject: CN=69323008-1a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:df:3c:80:cf:5b:3c:75:72:0d:9a:41:3d:
                    84:1f:f6:12:ae:ea:62:ee:55:b3:16:b4:df:7c:f1:
                    d9:c9:f7:5d:fd:40:3e:45:b0:a4:b9:53:95:2a:e5:
                    ea:ee:e2:a8:7e:07:fb:b4:ab:ac:2c:5c:b8:8c:d2:
                    37:95:d7:25:d7:49:06:5c:b7:65:07:ff:7b:c7:09:
                    46:16:7b:92:9b:5a:6e:ec:b7:a0:3a:c1:09:6a:8b:
                    f2:18:f4:23:e8:dd:37:e9:8b:c2:44:a5:6c:2e:fc:
                    01:f7:a1:0d:33:96:d0:55:80:84:b8:7b:09:2d:b9:
                    9c:8d:25:67:b1:16:1b:37:dd:6a:ad:e0:b5:81:48:
                    f2:1d:44:c6:91:19:c3:7e:ae:f9:2c:5e:f6:89:cf:
                    10:46:8e:1d:18:ff:c1:e9:6e:70:c5:ec:14:d0:bd:
                    40:2a:70:91:29:62:0f:cc:7b:1a:b9:b1:87:71:35:
                    29:ac:13:ec:e1:9c:7f:10:f3:76:5c:b4:a9:8b:1b:
                    53:dd:97:bc:86:2a:c3:77:e4:c8:26:ab:53:21:cf:
                    2b:0e:72:b8:56:bf:48:26:bb:6e:d0:56:fe:6a:b1:
                    2f:60:3c:51:df:5c:8f:73:73:04:69:c4:78:1d:f9:
                    94:de:db:d2:da:67:60:ff:fd:9e:86:e0:31:f9:a9:
                    b9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B3:95:26:D7:A7:58:F0:BB:83:63:95:FD:11:7F:6A:52:56:95:8A
            X509v3 Authority Key Identifier:
                keyid:E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f1:e9:82:4e:b3:84:94:86:d5:04:46:b8:a0:dc:34:47:1c:
         13:5e:f1:32:29:9f:74:1e:f7:5f:26:35:fc:0f:f8:d0:0d:0d:
         73:dc:d2:2c:96:ad:a5:93:16:f1:2b:b6:36:45:27:38:cd:e8:
         91:03:83:ee:c2:bf:bd:3e:53:10:6f:51:57:6f:c2:8e:4f:44:
         d5:40:e3:3c:48:79:f8:48:40:a1:50:13:8d:6e:0b:33:af:b6:
         58:6d:26:7b:39:af:84:f2:dc:a6:fa:4c:b7:10:a1:cd:c7:83:
         1d:f4:9f:90:62:f5:48:25:34:4c:75:9d:16:8d:1b:2c:b9:04:
         09:45:9c:2b:8b:d9:ea:a6:e2:47:02:48:92:45:2e:20:fa:a7:
         56:a7:8b:c6:a7:9f:9d:9d:8c:22:2e:27:ea:3e:a6:06:6b:af:
         57:89:6c:06:78:7f:c3:e6:15:26:e7:8c:ec:f8:f3:62:d3:98:
         af:03:c1:9f:a5:57:d6:7b:1a:02:98:d5:34:35:ee:16:48:1d:
         4e:88:ba:2e:65:53:29:2c:6f:1a:e9:82:13:d4:ae:96:5f:0f:
         43:a3:d6:cd:55:c2:56:63:b0:05:e6:15:5e:4a:9c:bf:95:67:
         e4:85:fe:7d:17:e1:a6:25:66:14:32:e1:35:ae:ca:41:57:ec:
         c7:9c:36:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 02:29:16 2025 by rpki-client