This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
File:                     ypQWvryVa0rVjBysHB1Gn2gzUFI.mft (raw, json)
Hash identifier:          6HLnkUS+vkm9oH/P7nbi+KruTqi6naV6Rdps++zRdDc=
Subject key identifier:   C3:7D:BD:9A:B5:D4:90:02:FD:B0:06:32:7C:37:BD:FD:A7:7D:2D:2C
Authority key identifier: CA:94:16:BE:BC:95:6B:4A:D5:8C:1C:AC:1C:1D:46:9F:68:33:50:52
Certificate issuer:       /CN=F36914A7AF/serialNumber=CA9416BEBC956B4AD58C1CAC1C1D469F68335052
Certificate serial:       08EC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
Manifest number:          08EA
Signing time:             Thu 04 Dec 2025 01:37:25 +0000
Manifest this update:     Thu 04 Dec 2025 01:37:24 +0000
Manifest next update:     Sat 06 Dec 2025 01:37:24 +0000
Files and hashes:         1: ypQWvryVa0rVjBysHB1Gn2gzUFI.crl (hash: iF/73ouOg3UbNaAlQWIS/L8sPjDWnYBtGQS63dram9s=)
                          2: 1AF2F83CFBFE11E992573048F8AEA228.roa (hash: oouCj0bsgLv2TuhXp8fmEvLXf8LLF9rpmnAY9E+k4nY=)
                          3: F6BF2196FC8111E9AC6A242CF8AEA228.roa (hash: Fd+NxiRRn35EHOCt2v/UUPEoB3ED4QaRhjwZJZVQOG4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 01:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2284 (0x8ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36914A7AF, serialNumber=CA9416BEBC956B4AD58C1CAC1C1D469F68335052
        Validity
            Not Before: Dec  4 01:37:24 2025 GMT
            Not After : Dec  6 01:37:24 2025 GMT
        Subject: CN=6930e5d5-ee94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:23:ab:c3:b3:a5:a0:62:82:63:1e:f5:96:e9:
                    6d:0c:8e:6d:4e:d2:2c:6b:8a:88:db:78:ba:7f:60:
                    6b:dd:97:0b:ce:3f:d3:49:77:a2:b9:df:f3:7e:1f:
                    0b:1a:6c:d3:d1:b7:63:fb:1d:0d:85:6f:f8:99:88:
                    14:f1:5d:b6:a1:68:95:82:33:65:2f:43:e3:f2:3d:
                    58:70:ff:6a:f5:a2:e3:f0:dc:c4:30:3d:39:54:ae:
                    7d:d6:5a:99:d7:d3:05:aa:41:1a:db:26:4b:d0:eb:
                    c1:ce:2e:a5:75:a5:62:73:30:e1:4a:c7:27:d0:52:
                    49:4f:78:60:24:dd:37:d6:cb:39:2f:12:7d:fb:5b:
                    ba:7f:f1:59:75:10:a1:f5:64:99:20:a0:c9:7e:93:
                    e9:5f:a1:4b:40:f0:8f:18:ff:6c:76:49:ed:f7:20:
                    b3:86:a9:e3:0e:27:0f:ad:10:48:14:3e:35:f1:76:
                    be:82:04:b8:04:29:7f:c2:e1:fa:d8:6e:ae:b9:8b:
                    de:33:92:68:b9:48:22:55:bc:26:e2:d1:f8:2b:30:
                    d6:49:5c:9f:c3:23:b8:2d:15:4d:c8:12:39:a6:a0:
                    9b:74:95:6b:b6:db:6b:2a:90:29:88:9c:7e:a9:60:
                    e6:3e:b9:ba:f9:02:37:00:96:ad:05:58:c6:83:4e:
                    37:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7D:BD:9A:B5:D4:90:02:FD:B0:06:32:7C:37:BD:FD:A7:7D:2D:2C
            X509v3 Authority Key Identifier:
                keyid:CA:94:16:BE:BC:95:6B:4A:D5:8C:1C:AC:1C:1D:46:9F:68:33:50:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3a:72:4a:54:85:22:bc:79:68:16:ff:e5:b7:3b:e5:b0:c9:
         3b:91:29:73:2f:25:61:12:b4:b0:fd:8a:63:71:46:3e:32:f2:
         bc:84:0f:38:8d:73:50:46:8b:04:73:95:86:eb:34:cb:da:94:
         46:3b:d5:29:6f:52:59:c5:c2:cc:17:a5:86:f6:c7:4c:c8:58:
         5b:37:01:73:b6:79:ab:83:13:61:67:fb:e1:44:ad:07:b1:0b:
         20:c4:72:2a:1d:ea:8e:4f:a1:b4:84:61:4a:34:e5:71:e3:c2:
         44:7f:ca:ba:1d:87:1f:d7:90:84:c4:84:5d:a9:72:27:41:ad:
         01:6a:ec:16:9d:d6:2d:6f:0a:89:36:07:93:3c:79:9e:78:b4:
         2f:2b:af:19:89:77:b5:47:89:21:26:b9:6a:20:66:89:9e:d9:
         10:53:88:3b:fc:c1:1a:2f:6c:74:60:92:90:2c:f1:e5:db:a8:
         07:a2:dd:81:a5:4f:bd:eb:01:66:ed:0e:ae:90:2a:37:23:41:
         d7:b0:3a:14:99:96:38:5d:ed:be:f9:23:c8:c3:4b:f1:36:75:
         11:1e:cd:d2:37:44:46:cf:27:2d:45:da:91:20:e5:67:f7:2b:
         1b:ed:06:e1:3f:44:88:f2:d6:02:eb:4b:66:e0:53:c5:4e:e3:
         26:ef:0c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 02:28:01 2025 by rpki-client