This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
File:                     HD250CDCm_5JEPoUqlAU9gSkJn8.mft (raw, json)
Hash identifier:          MpLD6tBBcGJojQzN/0dWnl6BYbkLluzOTOaxj4NXzTw=
Subject key identifier:   1A:BA:EE:56:C9:BB:44:FD:4E:1C:BF:F5:83:5B:22:81:01:CC:E6:92
Authority key identifier: 1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F
Certificate issuer:       /CN=F369E2BDAF/serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
Certificate serial:       0883
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
Manifest number:          087D
Signing time:             Tue 09 Dec 2025 01:42:29 +0000
Manifest this update:     Tue 09 Dec 2025 01:42:28 +0000
Manifest next update:     Thu 11 Dec 2025 01:42:28 +0000
Files and hashes:         1: HD250CDCm_5JEPoUqlAU9gSkJn8.crl (hash: w9vj6DpQ3QAvex0wvsEqb1UpgOtjdSMrw8itTxoO/Zs=)
                          2: CDF0081C70F711EAA281FF20F8AEA228.roa (hash: fFYrreAZo5U4KWtK7vRj8cUH2mjucnzUUJT2VrDYVDc=)
                          3: 57DC8B94594311EAB1EE2E61F8AEA228.roa (hash: 9IdSgdrivSza8u+XWxxC8YvqMBQsdLiCPyERfG7cngg=)
                          4: A936AAF870F711EA8C00D420F8AEA228.roa (hash: h7Qbm3X2TCVgdgM0/cTt4WYwz33KdG8jIAvDj0CvfDA=)
                          5: EC2721A870F711EA94C12321F8AEA228.roa (hash: H0RK+OL9qt2hdg5NTBlkcYhhkAHhYl2IgSl91pWodCw=)
                          6: 8A7230BA70F711EAB773C020F8AEA228.roa (hash: +UY6ocsMAssEaQx/2vFU1pZTXFT3vRCaWp9MYhngoW4=)
                          7: 34EC88D2594311EAB19C1B61F8AEA228.roa (hash: YNJO/Fu0d3uU51SAVuG+ftYS08KKoUW6lE8R11S/eF8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2179 (0x883)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E2BDAF, serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
        Validity
            Not Before: Dec  9 01:42:28 2025 GMT
            Not After : Dec 11 01:42:28 2025 GMT
        Subject: CN=69377e85-f5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:b1:f1:fa:c4:f2:3e:a3:5f:af:b7:5f:b6:
                    83:63:95:14:59:bd:b2:bb:7a:d2:3b:1e:ff:7a:82:
                    5e:3a:7f:29:25:17:a4:6d:89:b7:34:fe:55:2c:04:
                    c8:f7:e1:13:57:93:83:dd:50:6c:d0:19:64:de:42:
                    f5:bb:60:49:9c:23:cb:66:ad:ff:e6:ea:b2:92:1c:
                    4b:af:68:7c:3c:c1:a0:ae:38:db:ab:4d:af:22:b6:
                    52:df:82:b4:b0:f8:38:c1:10:d5:62:cd:30:df:7f:
                    e7:60:ba:c0:b1:47:fc:88:7f:2f:04:c5:16:f6:4a:
                    82:ae:99:ed:f8:4c:09:05:48:7e:bb:52:c8:78:00:
                    69:74:88:2c:dd:7c:88:c0:15:e8:33:a9:b3:53:89:
                    7e:1b:69:53:21:18:d6:30:33:76:10:3a:ef:cd:b8:
                    d1:7a:04:3d:c3:30:05:bd:50:69:17:31:8a:ab:c0:
                    0d:d8:ab:c2:c0:43:bc:e5:02:ac:bc:a5:de:44:cf:
                    5d:52:b7:2e:92:04:73:7e:23:5c:4b:04:cc:be:a3:
                    5d:08:41:d0:60:18:85:a0:13:d0:95:a1:7d:e4:fc:
                    1c:b6:3a:88:c7:d9:c3:84:b6:a6:13:b4:70:aa:01:
                    1c:95:fe:3b:3d:9e:1e:eb:03:24:c7:da:c8:0d:ff:
                    dc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BA:EE:56:C9:BB:44:FD:4E:1C:BF:F5:83:5B:22:81:01:CC:E6:92
            X509v3 Authority Key Identifier:
                keyid:1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:6a:d1:be:73:8b:1b:8f:1a:43:ca:b7:06:74:ed:38:94:f2:
         64:24:83:a2:0f:2c:e8:5f:fc:ac:66:50:0b:98:2f:e0:ba:78:
         f1:5e:ec:d8:de:3f:f0:7a:af:82:95:d3:00:b1:3a:db:c4:c6:
         48:64:7d:93:b9:d6:34:1e:87:66:8b:ae:38:3a:25:29:e0:8d:
         59:12:e1:52:22:cd:70:5f:34:97:5a:0b:ae:ec:ac:2c:56:1c:
         e5:8d:bf:c5:54:ff:e2:e7:c6:ac:84:d7:3f:96:69:6c:ba:12:
         2c:12:f3:0b:be:21:aa:b1:12:8d:0a:ac:9b:b4:89:68:29:87:
         2a:2d:8d:a6:fd:86:7f:50:62:b9:ba:c1:b8:c4:e7:5f:26:69:
         4a:b4:dd:09:6b:70:3d:14:c7:37:a7:b0:05:b6:3b:4e:d5:81:
         de:ee:88:44:a1:b7:e8:1b:70:05:2b:12:58:93:6d:09:ff:26:
         5f:d5:88:fb:b5:b2:e5:c0:70:34:7e:99:d4:7c:38:5e:e9:3c:
         1f:24:ef:cc:58:44:2a:7e:d0:f6:7f:f0:3e:d6:e9:65:d4:86:
         ac:71:da:a0:23:8f:b8:6e:5c:49:d6:7e:b5:ff:13:0a:40:71:
         2b:d9:a5:86:9e:56:ee:f1:8e:6a:02:a6:b2:60:5d:77:4e:02:
         b3:b0:ea:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:05:35 2025 by rpki-client