This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
File:                     zXRmXLHPyFlppqWrpHLD6irSVc4.mft (raw, json)
Hash identifier:          O8Yb1ej56lD6HVDU4290HjkaeokfodzH/JBA59bTUvY=
Subject key identifier:   84:B9:99:27:3A:89:54:A6:F4:E7:0E:8C:EC:D0:14:88:B4:64:DD:C6
Authority key identifier: CD:74:66:5C:B1:CF:C8:59:69:A6:A5:AB:A4:72:C3:EA:2A:D2:55:CE
Certificate issuer:       /CN=F369BFA8AF/serialNumber=CD74665CB1CFC85969A6A5ABA472C3EA2AD255CE
Certificate serial:       017D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
Manifest number:          017C
Signing time:             Tue 09 Dec 2025 04:45:23 +0000
Manifest this update:     Tue 09 Dec 2025 04:45:22 +0000
Manifest next update:     Thu 11 Dec 2025 04:45:22 +0000
Files and hashes:         1: zXRmXLHPyFlppqWrpHLD6irSVc4.crl (hash: DxQo++B25sY5+6zw/xbzBG/rOxXA+7VaKxfCVZfdWFE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BFA8AF, serialNumber=CD74665CB1CFC85969A6A5ABA472C3EA2AD255CE
        Validity
            Not Before: Dec  9 04:45:22 2025 GMT
            Not After : Dec 11 04:45:22 2025 GMT
        Subject: CN=6937a963-a88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fb:40:0b:cf:26:1d:d2:31:8d:66:e8:6c:77:
                    5e:33:d8:c9:54:cb:b8:38:1f:aa:80:6f:ec:10:cc:
                    c1:da:37:79:1d:78:45:af:3d:7e:ec:eb:a9:1a:f0:
                    f6:47:b6:ee:c7:03:13:1e:c5:52:9b:6c:37:5c:62:
                    1c:0c:d1:80:36:e3:f3:6c:d1:6a:c9:65:e3:21:3c:
                    37:77:94:62:ec:54:3d:a4:99:80:d6:ed:96:e9:32:
                    f3:a5:e0:d1:1b:40:b3:57:f9:c8:bd:d4:c3:a5:fc:
                    e0:ea:81:3b:93:82:31:2b:a3:d8:a6:6a:e3:c8:3e:
                    21:30:bc:8b:6c:cb:b3:c5:ce:8e:b2:59:0b:00:aa:
                    4f:4d:9a:63:1c:bf:45:12:cd:1f:d7:32:a7:02:9c:
                    6b:91:99:ac:60:b5:14:13:ea:b3:74:f6:b3:39:27:
                    2f:dd:18:ce:09:06:cd:41:9d:94:16:61:15:3f:21:
                    4e:32:04:63:d7:75:32:e4:e7:96:f1:22:ae:47:65:
                    af:d3:3e:3d:e6:6b:a4:b6:bb:94:5b:1f:66:2a:65:
                    d9:dc:86:6a:dd:20:3b:f2:2f:dd:e9:31:ff:7f:73:
                    be:7c:b7:92:0c:4e:ab:65:9c:da:9e:e2:18:19:c6:
                    12:7d:a1:5e:dd:70:95:c4:16:e7:62:d1:fc:07:49:
                    b8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B9:99:27:3A:89:54:A6:F4:E7:0E:8C:EC:D0:14:88:B4:64:DD:C6
            X509v3 Authority Key Identifier:
                keyid:CD:74:66:5C:B1:CF:C8:59:69:A6:A5:AB:A4:72:C3:EA:2A:D2:55:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:5d:bf:d0:f3:54:1d:77:08:c4:e0:9d:3f:eb:f1:46:ef:41:
         95:41:aa:de:b3:f1:e9:d2:ce:bb:01:96:02:27:e8:50:6c:06:
         cd:e1:e2:d5:d5:19:d0:66:8e:c0:98:b7:85:79:d1:d2:0c:94:
         bd:06:2d:41:2c:14:ea:5a:29:97:ef:db:c7:e6:fc:1b:21:3c:
         c3:7e:bb:32:e2:af:01:b6:59:05:1a:55:3f:2c:a4:cc:25:4e:
         5a:31:8f:cb:14:b8:95:17:8a:58:a5:50:8f:b3:fc:9b:72:e8:
         9d:2b:43:92:f8:14:05:ff:88:83:51:6b:aa:58:e6:33:a3:91:
         27:86:36:84:85:ca:0e:dd:86:b2:d4:e8:40:67:b6:b3:9f:48:
         bf:c3:46:5a:0f:8e:42:e0:c3:97:6a:28:26:60:6d:e7:53:0e:
         a3:9e:2f:cc:52:37:7d:d0:a7:9e:bd:69:9f:a5:27:1c:bd:86:
         3c:0a:ac:1e:84:00:87:7c:4a:9d:bc:ec:fe:05:81:98:b0:39:
         e7:cd:93:80:3e:6d:51:43:49:40:70:dd:80:66:ae:4b:d7:0d:
         62:7c:3c:6a:0d:b7:ce:39:27:8e:ea:b9:0f:bf:b0:cb:e5:0f:
         21:95:d9:09:44:aa:fa:5d:89:60:99:fc:67:51:08:ce:6c:22:
         f9:4a:22:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:19:14 2025 by rpki-client