This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
File:                     TiZQ4qujZbOc_hWOyk20jWQs22U.mft (raw, json)
Hash identifier:          DtsJvkNw8UeO2EQaZUys/9o1YcxWBXFycwBRU30hN4k=
Subject key identifier:   4A:86:69:FA:FC:4F:4F:44:C4:5B:5D:DE:A6:6E:E2:DC:29:F9:FC:CC
Authority key identifier: 4E:26:50:E2:AB:A3:65:B3:9C:FE:15:8E:CA:4D:B4:8D:64:2C:DB:65
Certificate issuer:       /CN=F369942EAF/serialNumber=4E2650E2ABA365B39CFE158ECA4DB48D642CDB65
Certificate serial:       0A39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
Manifest number:          0A38
Signing time:             Tue 09 Dec 2025 01:16:21 +0000
Manifest this update:     Tue 09 Dec 2025 01:16:20 +0000
Manifest next update:     Thu 11 Dec 2025 01:16:20 +0000
Files and hashes:         1: TiZQ4qujZbOc_hWOyk20jWQs22U.crl (hash: ZGSOqa/ZjbVn+/64U47+WQ6J38d6hCQct+8lrSUwqmQ=)
                          2: 234EC302FF0211E8A910092BF8AEA228.roa (hash: NOa5khrVmkhCUl9lhv8WYW52PgfD6O4eOvTJHt2DcIk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2617 (0xa39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369942EAF, serialNumber=4E2650E2ABA365B39CFE158ECA4DB48D642CDB65
        Validity
            Not Before: Dec  9 01:16:20 2025 GMT
            Not After : Dec 11 01:16:20 2025 GMT
        Subject: CN=69377865-155a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e3:e6:de:60:11:41:31:8f:b7:0a:8a:d6:23:
                    0b:e0:9c:23:49:e2:45:39:4a:44:fa:a3:40:a7:53:
                    1d:b6:0c:85:4a:62:f2:7f:a7:db:73:c2:3c:cc:65:
                    11:c9:cf:6b:b8:0c:81:e3:7b:8e:44:a5:a4:d0:3b:
                    ce:1a:c8:3c:78:37:bc:06:37:34:4c:0a:5f:ed:ff:
                    51:b2:34:40:62:ba:b3:03:2e:ff:36:a8:a5:c2:62:
                    76:8d:9a:df:1d:c1:43:47:1c:13:ca:ee:75:fc:e2:
                    14:bb:ac:54:8e:7f:06:08:a6:67:0c:09:5a:f2:67:
                    de:c6:ef:e4:f2:24:ca:c2:07:bb:4f:fc:56:23:a8:
                    ee:67:b6:1d:95:5b:f9:0e:84:2d:8e:a1:eb:85:c2:
                    21:5c:17:f3:31:98:b9:b4:bf:fd:57:13:31:8a:7b:
                    a3:9c:b1:63:c2:c4:b0:83:c5:97:7e:c6:0f:a6:b5:
                    87:da:2d:c1:bc:2a:3d:fe:5c:49:e9:68:8b:a7:64:
                    5b:d1:8a:f8:56:ec:44:78:d4:e3:76:3a:42:f2:2c:
                    90:51:cb:30:d9:43:41:55:f8:ae:6b:58:61:c3:1a:
                    ee:96:04:7e:7b:27:97:ed:9c:85:82:b0:e3:b2:32:
                    79:ef:35:23:df:22:e6:1e:aa:f9:a1:9a:ec:bd:5b:
                    05:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:86:69:FA:FC:4F:4F:44:C4:5B:5D:DE:A6:6E:E2:DC:29:F9:FC:CC
            X509v3 Authority Key Identifier:
                keyid:4E:26:50:E2:AB:A3:65:B3:9C:FE:15:8E:CA:4D:B4:8D:64:2C:DB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d0:4b:ef:fe:42:8b:c3:b9:e6:29:8c:47:35:5b:13:6a:f6:
         7c:59:26:40:05:ce:b8:2e:e8:27:b4:89:42:79:e0:12:4c:2c:
         32:cf:59:4e:3c:fd:3e:dc:4b:70:00:a2:db:25:54:74:76:a0:
         c1:b7:a7:bb:26:51:49:a0:2f:88:7b:8f:34:c7:dd:6e:81:43:
         9b:23:f3:6d:6d:30:11:5d:60:d2:b4:e1:2e:93:f3:02:8c:d9:
         6c:a8:7b:10:41:14:ab:5a:09:23:58:38:5b:76:a9:9b:f7:41:
         a2:0b:de:1c:94:40:5a:73:3c:11:68:c2:9d:b4:6c:e9:f3:a6:
         97:5a:e2:2a:0b:b0:f1:c3:f3:62:bf:ca:e7:84:72:c0:87:c6:
         c1:8d:c5:37:de:66:b1:55:68:28:c6:44:f3:a0:74:8e:21:3b:
         28:b2:23:fc:1a:68:82:49:0d:9f:62:93:31:8f:f0:17:a4:0d:
         ca:db:20:11:a2:0a:4c:7d:6f:55:91:e6:c8:d9:61:55:76:74:
         00:40:be:69:69:ee:46:c1:6e:4d:e5:65:af:62:d5:f6:0a:af:
         1f:59:70:38:da:10:ae:43:7e:93:33:0f:6b:57:73:6d:92:47:
         be:d6:69:3b:fe:af:f6:77:75:71:43:37:27:2d:91:bf:ef:4f:
         e4:13:9d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:18:28 2025 by rpki-client