This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
File:                     _p4BMgoOlVJFOamGqPA_ketPwy0.mft (raw, json)
Hash identifier:          IhEGZpm98ScgfweUPYtgCH+ItJN1VLrQdVehL+kvOhM=
Subject key identifier:   90:9A:44:4F:93:1E:1B:0C:55:56:2E:7E:8B:5B:D0:43:51:94:4A:D3
Authority key identifier: FE:9E:01:32:0A:0E:95:52:45:39:A9:86:A8:F0:3F:91:EB:4F:C3:2D
Certificate issuer:       /CN=F368D658AF/serialNumber=FE9E01320A0E95524539A986A8F03F91EB4FC32D
Certificate serial:       02AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
Manifest number:          02A9
Signing time:             Tue 09 Dec 2025 04:05:18 +0000
Manifest this update:     Tue 09 Dec 2025 04:05:17 +0000
Manifest next update:     Thu 11 Dec 2025 04:05:17 +0000
Files and hashes:         1: _p4BMgoOlVJFOamGqPA_ketPwy0.crl (hash: fHwQkD4eFH3+VCIyu1R+JNXX3T6iJpZicaYZUzr+Vq8=)
                          2: 311C4904CA4B11EEB1A20B86775412E6.roa (hash: 6Jipg/U2Wzl+hCZ+uZdXwq1gTXKTDFOFMoiu2FzO3Lc=)
                          3: DC6D06E4CBEB11EEA9655CAB775412E6.roa (hash: rI3Z0thMS8kcuZHwZrlMXa6Fqk3EKGjdiGllXF+/6As=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368D658AF, serialNumber=FE9E01320A0E95524539A986A8F03F91EB4FC32D
        Validity
            Not Before: Dec  9 04:05:17 2025 GMT
            Not After : Dec 11 04:05:17 2025 GMT
        Subject: CN=69379ffe-489d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:1f:44:a7:e8:d6:a3:56:29:73:a6:a8:ee:
                    e2:0f:fc:22:6d:e8:b3:fd:cb:90:87:54:48:b1:a4:
                    0c:27:ee:86:a5:40:7b:79:80:dd:bb:09:be:93:2f:
                    ee:a1:e3:5d:93:b3:3a:18:9d:6a:d0:95:fc:54:f9:
                    48:e6:87:ec:ea:11:08:59:6c:8f:25:11:02:a9:7f:
                    c3:9c:16:e5:db:7b:cb:32:8e:44:05:5f:7b:ef:5f:
                    1d:87:ec:ce:62:79:9e:a8:93:45:f3:67:3b:81:77:
                    73:6a:86:57:10:dd:51:68:e0:b6:4f:bb:0b:6e:d9:
                    52:f2:95:64:b6:1c:2b:2e:16:b6:7d:c6:95:3a:46:
                    5a:f3:56:b8:68:83:b8:4f:3f:b5:b1:a8:3f:dc:b4:
                    cb:da:92:e7:a7:8d:0d:c1:2d:ef:39:5c:32:2a:9d:
                    d9:7b:44:78:f7:24:09:c9:4f:03:b2:5d:a6:d1:64:
                    c2:18:43:ca:59:65:a4:db:61:fa:a9:b7:2f:74:79:
                    25:c7:12:f5:b0:88:ea:b3:fb:28:d9:9a:d4:35:fe:
                    ed:a4:5f:89:96:40:95:41:54:84:26:85:44:5e:8d:
                    31:08:a6:b8:7d:ca:fd:89:51:17:80:fe:86:ae:82:
                    1e:5f:89:3a:fb:d3:4e:22:90:d0:26:c2:ef:5e:4a:
                    89:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9A:44:4F:93:1E:1B:0C:55:56:2E:7E:8B:5B:D0:43:51:94:4A:D3
            X509v3 Authority Key Identifier:
                keyid:FE:9E:01:32:0A:0E:95:52:45:39:A9:86:A8:F0:3F:91:EB:4F:C3:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:66:f5:1b:69:8b:0f:9f:c7:6e:3f:bb:42:6e:d2:d4:19:ba:
         96:57:ec:76:cd:55:9a:84:11:5b:5a:48:bf:98:bd:f4:3b:62:
         07:1d:17:df:a6:ea:0f:db:c3:68:ee:a2:60:9a:0b:40:0c:cb:
         8a:87:b7:0a:7f:50:cd:d3:23:80:5c:b2:39:d3:48:74:1d:16:
         03:9e:98:12:a6:0f:37:00:b6:00:e1:6b:e7:b0:1d:9d:59:4f:
         8f:0e:f8:d4:7e:62:dd:18:33:51:fd:86:87:1e:de:94:57:14:
         6f:45:18:1d:d0:2a:cf:41:f6:cd:09:85:ec:ea:a2:84:76:4c:
         d0:6d:a0:b4:6e:76:c7:12:46:a6:32:9d:b5:98:cf:80:d1:a0:
         41:06:5a:6a:96:1d:36:0a:1f:03:ba:d6:77:6d:b2:22:82:e5:
         1c:77:89:b9:0e:97:95:71:be:b4:54:24:65:eb:c7:6d:e7:e3:
         8f:81:cd:8b:c9:a3:ae:1e:41:90:7b:4e:dd:1c:6d:04:5d:fc:
         0d:d0:a3:cb:65:21:9f:2f:9e:d9:47:04:3d:32:de:d2:0f:be:
         8c:02:60:67:bd:e1:f5:49:74:bf:78:8c:0f:51:21:29:50:52:
         3a:53:b6:67:fd:34:cc:6d:05:39:27:18:54:bd:4d:dd:64:09:
         d2:f9:c1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:18:14 2025 by rpki-client