This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
File:                     yS6IWCfGdhnhMXVwMBfERC3f6s8.mft (raw, json)
Hash identifier:          0cv49YJanYki2lqfUEn5e3OcMnUz7h1zVUTjCBnB84g=
Subject key identifier:   C0:38:34:E0:D9:76:38:F0:12:0D:60:C0:E7:C3:24:49:E7:2B:56:B2
Authority key identifier: C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF
Certificate issuer:       /CN=F369F058AF/serialNumber=C92E885827C67619E13175703017C4442DDFEACF
Certificate serial:       09E9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
Manifest number:          09E2
Signing time:             Mon 22 Dec 2025 01:17:22 +0000
Manifest this update:     Mon 22 Dec 2025 01:17:22 +0000
Manifest next update:     Wed 24 Dec 2025 01:17:22 +0000
Files and hashes:         1: yS6IWCfGdhnhMXVwMBfERC3f6s8.crl (hash: bH/mN5k4cmH+84mMrM2N+I8/nu4w0iUFrWZZdM7HkZs=)
                          2: F3961630123611EF80C92C51017001B1.roa (hash: P7zmLDBytjro0KKIgTEyZppS7BdxrGwBEJ1mm2r94Gc=)
                          3: 04605838361A11F0B9F961F3DAE4EC9C.roa (hash: r+y3Fw+81AAFIoIiHOQuOaDuH+WDZZZ3ri/u6RsXKpg=)
                          4: 25843EB0123711EFB5C1A851017001B1.roa (hash: 5Dbg0It6Gnjot6cZHpwak5GthbHzIipbWJ6mhVVl1e8=)
                          5: 32FAEFC2361B11F0B2EA437CDAE4EC9C.roa (hash: 22FqTrSwm7BxiKIiscjIzYYBmw1MfLawSBgcnxT4pB4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 24 Dec 2025 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2537 (0x9e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F058AF, serialNumber=C92E885827C67619E13175703017C4442DDFEACF
        Validity
            Not Before: Dec 22 01:17:22 2025 GMT
            Not After : Dec 24 01:17:22 2025 GMT
        Subject: CN=69489c22-83f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:20:50:ce:c4:3a:77:db:60:a5:ae:15:0b:2d:
                    86:8a:b1:f6:55:c0:5c:d6:f4:87:2f:48:a7:37:d9:
                    8b:6f:d6:d5:91:d2:ee:58:84:88:a7:48:a0:1c:62:
                    be:d9:b3:6c:ae:4b:7a:3f:c0:0d:a4:b8:51:70:db:
                    43:c4:da:3b:b1:ec:f0:d4:5b:ec:54:81:f8:02:25:
                    d8:47:5c:e9:7f:17:47:84:67:88:4e:e6:b9:46:64:
                    4e:79:e0:a1:e9:0e:2f:84:49:5c:35:db:dc:4c:62:
                    36:f5:29:33:ea:dc:40:4d:97:90:ef:57:e0:fb:19:
                    40:95:c6:75:2e:78:65:90:f8:38:66:ea:0e:e4:75:
                    28:1b:37:37:ac:b9:e1:cc:b7:b8:9d:3c:ff:6b:21:
                    4f:60:f6:2f:2b:41:5a:22:76:d3:99:a2:34:1f:33:
                    10:08:57:cb:f1:ed:43:29:21:2c:f8:d4:b8:cd:99:
                    9d:99:86:21:84:b0:98:6b:be:71:2d:c5:45:ca:b3:
                    b6:3e:2a:55:78:f8:5f:e9:64:db:88:f0:66:1c:e6:
                    cd:a8:29:23:98:7a:a7:ee:61:19:2a:44:db:f4:e7:
                    ed:ca:4c:9f:35:b4:69:ff:60:a4:cf:6a:2b:38:6e:
                    0b:e7:68:f3:29:16:30:eb:42:ec:b2:7a:bd:c4:0b:
                    18:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:38:34:E0:D9:76:38:F0:12:0D:60:C0:E7:C3:24:49:E7:2B:56:B2
            X509v3 Authority Key Identifier:
                keyid:C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ec:23:ee:ea:6d:51:40:1a:3a:fb:d2:23:04:b6:9e:84:38:
         26:7a:13:c7:20:00:a2:ca:97:a0:c9:c8:b8:59:fb:70:2c:12:
         04:ff:ba:e2:d8:5a:78:45:a6:e6:d0:8c:c7:6f:c3:17:a1:df:
         56:c2:cb:af:b2:43:ce:f4:f9:19:0c:63:c6:5e:3d:09:59:a6:
         35:db:57:2e:b4:fe:e1:d5:24:54:ef:7a:dc:64:e4:dc:ac:df:
         68:80:df:f8:d0:51:4d:11:c6:a2:ec:89:7a:1e:a1:55:ce:3f:
         68:ec:85:1a:87:9f:b1:b1:62:9f:da:ea:82:d6:fc:82:a6:72:
         64:72:d2:5e:84:cc:18:55:a8:f2:70:6c:41:55:69:00:1a:f7:
         4f:3a:49:63:6e:11:a2:a5:11:73:ad:7a:87:4d:b2:dd:5f:a4:
         e3:34:5d:52:52:59:40:9e:87:cc:7e:75:b4:3d:14:ab:de:e4:
         b4:7f:19:0e:2d:f5:c0:b3:fb:ef:da:18:a1:42:64:9d:78:c1:
         d2:57:ed:9f:ea:3e:42:dc:25:06:cf:89:75:16:eb:0a:40:d9:
         b0:f3:73:09:82:39:01:87:27:6e:a4:16:12:f6:c4:19:15:79:
         ed:b1:03:fe:40:a0:46:ac:86:de:2f:0c:2f:a7:d7:36:48:a0:
         eb:c6:28:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:51:28 2025 by rpki-client