This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
File:                     LWxhNdlQPaoy1mWGoi7WGSlcar8.mft (raw, json)
Hash identifier:          8GrKnPv9DpJcEqZM+8yCMqEdKXVsTKnwGjVQJjYJWVY=
Subject key identifier:   85:FA:82:80:99:C7:95:77:20:2B:24:9A:DA:F5:8A:C2:8E:E1:CA:5E
Authority key identifier: 2D:6C:61:35:D9:50:3D:AA:32:D6:65:86:A2:2E:D6:19:29:5C:6A:BF
Certificate issuer:       /CN=F367FE62AF/serialNumber=2D6C6135D9503DAA32D66586A22ED619295C6ABF
Certificate serial:       0660
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
Manifest number:          065F
Signing time:             Mon 08 Dec 2025 02:20:01 +0000
Manifest this update:     Mon 08 Dec 2025 02:20:00 +0000
Manifest next update:     Wed 10 Dec 2025 02:20:00 +0000
Files and hashes:         1: LWxhNdlQPaoy1mWGoi7WGSlcar8.crl (hash: eqKDeS3cvzJqENMDcR1u1fWLqlhJstdOWhKMZmfeWlY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1632 (0x660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FE62AF, serialNumber=2D6C6135D9503DAA32D66586A22ED619295C6ABF
        Validity
            Not Before: Dec  8 02:20:00 2025 GMT
            Not After : Dec 10 02:20:00 2025 GMT
        Subject: CN=693635d1-cfb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:12:47:ec:56:47:a4:4c:0d:cd:51:7c:34:24:
                    64:d4:16:52:ea:0f:da:dd:bd:17:1b:d8:3a:71:aa:
                    d7:45:96:50:37:05:5f:51:b3:64:b0:2e:6e:70:26:
                    33:1b:64:8d:db:c7:17:93:62:48:dc:56:38:b3:52:
                    a3:93:95:f3:0b:03:2c:7a:71:98:86:80:53:c6:99:
                    80:56:6a:13:4c:2d:52:eb:2b:e7:a6:cf:20:c4:f3:
                    82:e8:da:8a:3e:6a:d7:82:8c:e0:c0:40:81:a8:cc:
                    bf:9b:93:80:24:73:60:66:bd:14:70:bf:ee:0f:5e:
                    ab:71:3d:16:f8:30:5e:d0:ec:16:cf:bf:1a:92:62:
                    b0:81:41:7c:0e:16:8b:f2:f3:c1:f0:41:44:06:db:
                    70:d8:cd:74:74:87:da:a3:45:87:30:ba:04:28:fb:
                    f6:d3:1d:df:43:48:9c:3d:a7:11:04:00:d4:1e:3f:
                    91:e2:ca:7d:fc:a1:18:bb:df:5b:07:5b:b2:47:3d:
                    b8:8b:25:83:0f:4a:3c:dc:df:0f:42:b8:0f:8a:a0:
                    f6:e3:cd:d0:85:63:35:8c:ef:d6:3c:9d:0d:2f:1e:
                    ef:bb:be:6b:79:7a:18:e3:fa:b4:d7:42:82:74:03:
                    9b:ca:59:f3:bf:0f:42:35:34:fa:de:3e:16:b4:5c:
                    3a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FA:82:80:99:C7:95:77:20:2B:24:9A:DA:F5:8A:C2:8E:E1:CA:5E
            X509v3 Authority Key Identifier:
                keyid:2D:6C:61:35:D9:50:3D:AA:32:D6:65:86:A2:2E:D6:19:29:5C:6A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:e1:91:48:92:b1:45:4e:1c:2a:ab:c3:c2:0e:3a:d5:91:f0:
         9d:36:b9:a9:a0:80:df:e0:51:74:be:0f:71:51:df:5c:22:87:
         cf:65:e7:55:ea:dd:6c:93:cf:e4:70:77:be:23:d3:b2:c9:88:
         19:07:a9:61:8b:0b:30:b0:c8:b8:6b:38:59:bc:45:e6:12:43:
         7d:28:de:1b:1f:32:b5:a0:aa:70:1b:2c:98:f8:d3:e8:bf:28:
         23:74:ab:98:37:68:82:42:8f:15:f9:84:e0:09:c2:a6:e3:a2:
         e4:07:dc:0f:8d:33:ec:14:79:01:6b:d7:fe:4a:f8:dd:fc:44:
         4c:ba:1e:10:4b:48:77:18:47:41:45:fc:12:2e:14:83:7d:01:
         09:23:e7:df:f2:e5:fd:73:c4:78:b7:e7:9b:58:f9:b3:b6:12:
         c3:45:67:b3:bb:46:23:7c:85:e7:ec:45:68:d4:a1:fc:af:22:
         68:2d:81:35:aa:28:8b:06:45:de:bb:8c:c0:8b:d7:9d:3e:cf:
         3a:e0:38:1d:4f:0f:ba:66:6a:69:ed:95:ef:68:48:36:81:1b:
         c0:a7:42:ae:38:56:94:ef:53:9b:4f:2a:9c:da:9b:8c:ef:be:
         b0:fc:9b:42:9b:f7:da:d0:6c:95:9a:27:c2:d9:c7:7c:15:13:
         30:bf:ff:62
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBmAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0ZFNjJBRjExMC8GA1UEBRMoMkQ2QzYxMzVEOTUwM0RBQTMyRDY2NTg2QTIyRUQ2
MTkyOTVDNkFCRjAeFw0yNTEyMDgwMjIwMDBaFw0yNTEyMTAwMjIwMDBaMBgxFjAU
BgNVBAMTDTY5MzYzNWQxLWNmYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCgEkfsVkekTA3NUXw0JGTUFlLqD9rdvRcb2DpxqtdFllA3BV9Rs2SwLm5w
JjMbZI3bxxeTYkjcVjizUqOTlfMLAyx6cZiGgFPGmYBWahNMLVLrK+emzyDE84Lo
2oo+ateCjODAQIGozL+bk4Akc2BmvRRwv+4PXqtxPRb4MF7Q7BbPvxqSYrCBQXwO
Fovy88HwQUQG23DYzXR0h9qjRYcwugQo+/bTHd9DSJw9pxEEANQeP5Hiyn38oRi7
31sHW7JHPbiLJYMPSjzc3w9CuA+KoPbjzdCFYzWM79Y8nQ0vHu+7vmt5ehjj+rTX
QoJ0A5vKWfO/D0I1NPrePha0XDrXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUhfqC
gJnHlXcgKySa2vWKwo7hyl4wHwYDVR0jBBgwFoAULWxhNdlQPaoy1mWGoi7WGSlc
ar8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdGRTYyL0ZFNUEzMDc4RjQ4NTExRUI5MjBBQzgzREQ4QTAxNENFL0xXeGhO
ZGxRUGFveTFtV0dvaTdXR1NsY2FyOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xXeGhOZGxRUGFveTFtV0dvaTdXR1NsY2FyOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0ZFNjIvRkU1QTMwNzhGNDg1MTFFQjkyMEFDODNERDhB
MDE0Q0UvTFd4aE5kbFFQYW95MW1XR29pN1dHU2xjYXI4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCN4ZFIkrFFThwqq8PCDjrVkfCdNrmp
oIDf4FF0vg9xUd9cIofPZedV6t1sk8/kcHe+I9OyyYgZB6lhiwswsMi4azhZvEXm
EkN9KN4bHzK1oKpwGyyY+NPovygjdKuYN2iCQo8V+YTgCcKm46LkB9wPjTPsFHkB
a9f+Svjd/ERMuh4QS0h3GEdBRfwSLhSDfQEJI+ff8uX9c8R4t+ebWPmzthLDRWez
u0YjfIXn7EVo1KH8ryJoLYE1qiiLBkXeu4zAi9edPs864DgdTw+6Zmpp7ZXvaEg2
gRvAp0KuOFaU71ObTyqc2puM776w/JtCm/fa0GyVmifC2cd8FRMwv/9i
-----END CERTIFICATE-----
Generated at Mon Dec 8 06:40:11 2025 by rpki-client