This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
File:                     yS6IWCfGdhnhMXVwMBfERC3f6s8.mft (raw, json)
Hash identifier:          UVzotb9gtLXkLBYfyKuXxuqOyhkY6b5yRhzxCZXooF0=
Subject key identifier:   74:85:98:E7:79:4A:6E:6F:01:31:17:E2:D8:4B:06:E2:63:23:20:F0
Authority key identifier: C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF
Certificate issuer:       /CN=F369F058AF/serialNumber=C92E885827C67619E13175703017C4442DDFEACF
Certificate serial:       09D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
Manifest number:          09D1
Signing time:             Fri 05 Dec 2025 01:18:29 +0000
Manifest this update:     Fri 05 Dec 2025 01:18:28 +0000
Manifest next update:     Sun 07 Dec 2025 01:18:28 +0000
Files and hashes:         1: yS6IWCfGdhnhMXVwMBfERC3f6s8.crl (hash: MV8v2aYX5p2E50rTWyrR6bg5OOifyvKTeGpkkB73IZo=)
                          2: F3961630123611EF80C92C51017001B1.roa (hash: P7zmLDBytjro0KKIgTEyZppS7BdxrGwBEJ1mm2r94Gc=)
                          3: 04605838361A11F0B9F961F3DAE4EC9C.roa (hash: r+y3Fw+81AAFIoIiHOQuOaDuH+WDZZZ3ri/u6RsXKpg=)
                          4: 25843EB0123711EFB5C1A851017001B1.roa (hash: 5Dbg0It6Gnjot6cZHpwak5GthbHzIipbWJ6mhVVl1e8=)
                          5: 32FAEFC2361B11F0B2EA437CDAE4EC9C.roa (hash: 22FqTrSwm7BxiKIiscjIzYYBmw1MfLawSBgcnxT4pB4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Dec 2025 00:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2520 (0x9d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F058AF, serialNumber=C92E885827C67619E13175703017C4442DDFEACF
        Validity
            Not Before: Dec  5 01:18:28 2025 GMT
            Not After : Dec  7 01:18:28 2025 GMT
        Subject: CN=693232e5-88fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bc:08:57:c5:eb:12:6f:2d:08:72:7e:2d:86:
                    c1:1e:1f:47:59:3a:97:05:4f:64:16:14:27:d5:78:
                    4b:a1:ef:f5:6b:10:56:3d:45:b7:4b:d8:fe:e5:97:
                    b0:87:10:66:50:f6:8e:9d:2c:0b:7f:19:49:2a:c9:
                    47:54:94:12:86:97:1e:48:d3:a2:16:db:9f:61:13:
                    30:37:d8:9f:80:7f:93:34:7c:83:ab:c8:8c:fe:d7:
                    76:64:74:08:b5:87:43:b8:ac:97:1f:7f:2c:61:1f:
                    ae:51:6d:f3:61:ca:2e:57:86:a6:da:2a:36:5f:cc:
                    f7:53:76:91:3f:06:1d:56:3e:5f:71:b1:0b:27:44:
                    4c:7e:b2:6f:c3:68:45:86:73:3a:fa:5e:46:e8:61:
                    90:7b:d1:e5:f3:b3:12:a8:c5:1e:02:4b:ef:90:b6:
                    59:7e:37:ab:b1:96:fa:6d:85:b9:55:32:42:3c:8e:
                    50:21:81:55:11:66:a8:42:1d:35:2c:e1:70:db:3e:
                    79:cf:29:1c:6e:f5:71:87:7f:f5:14:ea:fb:f6:f9:
                    87:74:e6:8e:c3:4d:9d:9e:5e:61:ea:b2:c4:42:ab:
                    0c:4d:00:2b:14:9e:7d:4c:23:02:0d:5a:de:e9:9e:
                    3a:d8:a7:52:7e:3e:03:a7:60:d3:9c:a3:8e:69:64:
                    64:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:85:98:E7:79:4A:6E:6F:01:31:17:E2:D8:4B:06:E2:63:23:20:F0
            X509v3 Authority Key Identifier:
                keyid:C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f1:3c:aa:0a:cc:54:70:76:6f:55:2b:18:44:a3:84:15:c3:
         9e:af:af:08:f9:15:15:15:2a:c1:eb:ce:2c:c2:2e:d1:9d:03:
         95:68:6d:42:c1:a2:a2:3d:bc:4b:92:eb:06:90:2e:9e:fe:02:
         9a:0b:47:f8:b7:34:38:09:59:69:10:27:a6:b7:ba:8a:72:7f:
         1c:34:ce:b2:ad:87:99:63:4b:7f:f3:07:0d:50:32:93:a0:c4:
         0b:9c:30:ea:c3:32:d9:71:2b:c5:ae:4d:60:99:d3:36:b9:a8:
         f7:47:91:ca:1d:a0:a5:dd:df:a3:87:8f:7b:a2:eb:7c:f3:3c:
         2f:bf:20:9d:f5:0f:9b:ac:fb:01:ca:da:70:ce:80:44:84:fb:
         06:a6:02:00:60:08:2d:a5:a0:a9:01:d2:be:b4:e0:97:f1:13:
         d1:f7:00:e7:27:53:db:a5:56:c2:05:f8:cc:5a:03:a7:bb:14:
         c3:42:fa:f4:1e:c3:3f:ad:6e:d4:d0:a7:93:92:8e:71:de:b3:
         a4:30:5f:8f:32:0e:98:c2:28:cc:a3:ed:e9:16:4a:b4:c1:60:
         12:c0:c3:c9:cd:2a:17:b9:78:77:94:c5:5a:f3:a6:9a:24:65:
         38:b7:89:9d:42:c5:fe:bf:1b:f0:38:b9:b4:c4:78:aa:8d:16:
         f7:4d:b3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 02:27:55 2025 by rpki-client