This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
File:                     wrcqDttgGOuk7XzTA12xMvRJwB0.mft (raw, json)
Hash identifier:          AwyU7CaPVHczd/jUoYW35/ER11uGmyy0P5rOjOwsxbk=
Subject key identifier:   63:8E:8A:AC:43:5D:90:25:FC:BF:8D:64:57:4B:71:A4:5B:8F:AC:1E
Authority key identifier: C2:B7:2A:0E:DB:60:18:EB:A4:ED:7C:D3:03:5D:B1:32:F4:49:C0:1D
Certificate issuer:       /CN=F368948BAF/serialNumber=C2B72A0EDB6018EBA4ED7CD3035DB132F449C01D
Certificate serial:       0184
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wrcqDttgGOuk7XzTA12xMvRJwB0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
Manifest number:          0181
Signing time:             Tue 09 Dec 2025 04:45:11 +0000
Manifest this update:     Tue 09 Dec 2025 04:45:10 +0000
Manifest next update:     Thu 11 Dec 2025 04:45:10 +0000
Files and hashes:         1: wrcqDttgGOuk7XzTA12xMvRJwB0.crl (hash: NnmqQHRLfJ5wcIJByJHq6RzYiT54eYJRB4y++Fa0LUk=)
                          2: 2B39C894B3A811EFB417EA70762E951A.roa (hash: JbNHPWtSF1vQZDwXPX2JIdA3ze8jlLo9getuU4tbAN4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wrcqDttgGOuk7XzTA12xMvRJwB0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368948BAF, serialNumber=C2B72A0EDB6018EBA4ED7CD3035DB132F449C01D
        Validity
            Not Before: Dec  9 04:45:10 2025 GMT
            Not After : Dec 11 04:45:10 2025 GMT
        Subject: CN=6937a957-61d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5c:19:c7:a6:d9:20:2a:25:2f:a2:53:4f:a8:
                    f4:fb:52:9d:1c:74:fd:ae:29:b6:92:19:bf:b4:eb:
                    52:bd:1a:36:4f:dd:18:f3:36:86:eb:9f:bc:fe:29:
                    c3:f6:a7:47:5d:04:c5:c2:02:fc:2d:ef:0d:7e:01:
                    d7:b7:12:87:6d:38:96:cf:ec:8c:7e:63:52:e4:1a:
                    02:f5:72:6f:62:75:96:80:50:3d:69:13:5b:b2:2b:
                    8e:05:35:ba:16:12:ca:88:fe:1c:27:29:76:6c:cc:
                    02:ce:fd:54:c5:73:a8:cf:82:22:51:8f:90:bd:22:
                    f8:43:3d:98:05:d3:5a:67:15:e4:b7:73:8d:1e:75:
                    a0:3d:99:b1:52:ff:81:d7:88:70:d4:2e:36:21:03:
                    95:9f:1e:77:c1:2e:4d:46:66:54:05:78:8f:17:aa:
                    6c:67:16:7e:55:bc:06:bd:70:a0:3a:b3:7e:b8:35:
                    06:dc:a6:d3:85:fa:ce:c0:cf:fa:ce:af:fe:97:ce:
                    35:39:45:70:b6:cc:3f:b7:0b:a0:24:eb:3f:6b:d2:
                    59:39:73:bd:94:1a:ad:de:a0:0e:82:d5:2d:8c:a4:
                    bf:90:b9:c9:0b:31:7f:e2:bb:a0:0d:7f:e4:f8:fe:
                    37:d1:70:d8:14:f1:4c:f5:8c:35:a5:f9:7f:ff:57:
                    97:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8E:8A:AC:43:5D:90:25:FC:BF:8D:64:57:4B:71:A4:5B:8F:AC:1E
            X509v3 Authority Key Identifier:
                keyid:C2:B7:2A:0E:DB:60:18:EB:A4:ED:7C:D3:03:5D:B1:32:F4:49:C0:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wrcqDttgGOuk7XzTA12xMvRJwB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e2:43:f2:59:f6:77:e8:13:15:6b:38:0b:a1:8f:e1:de:c4:
         90:38:57:57:be:b5:18:75:5d:b9:16:92:d2:8c:47:d8:81:86:
         14:ae:e5:cf:f1:88:cc:42:9b:de:21:71:3b:71:a1:bd:9e:f3:
         07:99:9c:a4:e0:5e:dc:76:80:bf:c2:8c:cb:bc:52:49:a0:dc:
         ea:db:34:ce:c5:c7:ba:36:c7:10:4b:cc:01:0c:7d:e7:35:ee:
         78:d2:e2:57:7a:de:e1:88:f3:f2:12:b5:16:6e:cf:83:a4:ca:
         69:58:d5:04:79:83:17:4c:01:7e:eb:ca:33:89:30:46:71:0c:
         34:19:92:fe:4a:43:a9:5e:7c:6b:06:52:08:85:d9:fc:31:9b:
         78:cb:a1:79:51:c3:26:67:a0:27:2b:5b:e2:df:48:9f:3e:d8:
         ca:8f:77:43:9a:d5:a0:6f:f8:b4:07:ba:98:75:5d:d3:fc:1f:
         9b:9b:2f:75:34:b1:01:da:f3:55:02:32:5a:fc:b0:6f:37:9d:
         20:8e:7e:8a:2a:65:15:d0:5a:ad:56:48:89:54:01:d9:77:72:
         17:a7:1f:70:3d:4c:96:b5:87:99:77:89:f5:58:c4:d8:25:a4:
         20:6f:1f:4d:24:83:fa:5d:77:eb:c8:dc:7f:fb:e8:5d:31:d1:
         13:93:5d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:18:25 2025 by rpki-client