This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.mft
File:                     ccZPWbtr45jRfw--bFw8IxxOFXg.mft (raw, json)
Hash identifier:          QVont1fLB6bNgffNrik6cFjprDBIWNuhtR13R9Q9svo=
Subject key identifier:   D7:04:F5:49:DA:71:2B:A7:CF:A9:61:C1:37:89:32:1B:1C:5F:14:5D
Authority key identifier: 71:C6:4F:59:BB:6B:E3:98:D1:7F:0F:BE:6C:5C:3C:23:1C:4E:15:78
Certificate issuer:       /CN=F369E201AF/serialNumber=71C64F59BB6BE398D17F0FBE6C5C3C231C4E1578
Certificate serial:       01B5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ccZPWbtr45jRfw--bFw8IxxOFXg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.mft
Manifest number:          01B4
Signing time:             Sun 07 Dec 2025 04:36:28 +0000
Manifest this update:     Sun 07 Dec 2025 04:36:27 +0000
Manifest next update:     Tue 09 Dec 2025 04:36:27 +0000
Files and hashes:         1: ccZPWbtr45jRfw--bFw8IxxOFXg.crl (hash: t4WSzElJIf/gFxMHPBAO6yqHCumpgK228VC9IDVqKDA=)
                          2: E469911A873811EF820368B1762E951A.roa (hash: qS04r/6eawg5wkoo0hUF/y/Lc2S12pQmIndE2YUbUMw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ccZPWbtr45jRfw--bFw8IxxOFXg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 04:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437 (0x1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E201AF, serialNumber=71C64F59BB6BE398D17F0FBE6C5C3C231C4E1578
        Validity
            Not Before: Dec  7 04:36:27 2025 GMT
            Not After : Dec  9 04:36:27 2025 GMT
        Subject: CN=6935044c-8865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:9c:4f:06:f8:27:cb:3c:d1:7d:9f:69:32:
                    30:8d:75:9c:7f:b6:03:68:e6:69:29:8c:2f:4e:92:
                    f2:b4:0b:08:ef:6f:55:98:e5:8e:6e:62:05:c4:7c:
                    bf:9b:92:54:d9:1b:64:67:45:a1:79:a4:d8:f9:3e:
                    5b:f5:e4:fc:40:34:9a:3d:17:93:01:05:42:3c:7a:
                    ba:55:67:dd:f1:ea:35:32:26:b8:da:08:18:cb:bb:
                    19:55:5c:a1:10:ce:54:bf:b7:3b:cd:6e:1a:31:6d:
                    14:02:dd:ce:36:ed:04:e8:00:2f:0a:f0:1c:45:f2:
                    57:70:ce:17:e3:e0:1e:56:3f:d1:ec:05:42:d1:f7:
                    54:23:cb:35:75:4f:90:f3:07:dc:1c:93:67:63:10:
                    6f:14:de:1e:24:5a:06:36:94:4f:3d:cf:cf:91:e5:
                    8a:87:da:89:82:d5:63:3e:f8:8d:cc:21:f9:ae:4f:
                    1e:5b:43:08:2d:86:25:5e:0f:f5:5e:c5:95:68:f2:
                    9a:b7:16:d0:a3:21:a4:b9:6f:81:dc:84:11:f8:2b:
                    90:da:43:53:20:98:ea:13:87:30:34:4e:f5:33:43:
                    76:0f:62:bb:90:f0:df:38:7f:41:82:de:ad:8c:b3:
                    d6:77:bf:69:7e:52:ea:6d:92:88:59:06:fa:85:9c:
                    df:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:04:F5:49:DA:71:2B:A7:CF:A9:61:C1:37:89:32:1B:1C:5F:14:5D
            X509v3 Authority Key Identifier:
                keyid:71:C6:4F:59:BB:6B:E3:98:D1:7F:0F:BE:6C:5C:3C:23:1C:4E:15:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ccZPWbtr45jRfw--bFw8IxxOFXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:3f:dd:f3:9c:f2:ea:7d:53:45:ce:e3:8f:1c:77:a6:d9:4e:
         9c:8c:5c:5b:68:d1:4c:a4:57:01:80:a8:84:f2:78:b4:9c:c4:
         4d:d3:aa:3a:53:21:db:98:93:2c:f2:d8:f5:f9:31:da:0a:82:
         2d:d4:a5:28:75:5b:1b:ff:c2:d7:a7:3f:ce:20:33:78:68:8c:
         09:28:a7:da:06:ed:c0:e1:dc:0e:33:0f:30:31:10:7c:5d:7d:
         75:ad:af:c5:04:b9:1a:4a:4e:91:4b:d3:ae:9a:b2:00:de:6f:
         be:39:47:be:3c:05:f6:41:a1:0c:e0:a2:c7:36:28:23:43:d1:
         64:d0:14:de:c0:c8:73:6d:3d:7e:44:21:d5:5b:8b:ab:b2:5f:
         b6:9c:29:6c:33:31:7a:a2:08:e9:6e:ab:b3:92:35:97:b3:e7:
         44:f3:49:08:04:8d:d2:f9:29:d3:9e:00:f6:0e:f7:3e:bc:ec:
         a4:7f:cd:25:48:6b:c5:1e:df:d3:8c:d4:45:ee:e1:c8:0a:74:
         1e:d3:86:d7:35:a3:28:8a:7d:20:ab:64:93:20:27:e9:36:22:
         0e:95:73:79:e7:b6:63:29:7c:b2:ed:5f:b5:04:5a:79:75:ea:
         db:e8:5e:02:72:1d:15:c4:16:36:d1:97:3f:06:a7:24:9b:74:
         69:85:07:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 04:01:18 2025 by rpki-client