This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
File:                     JbZLdh63yNTuwchu-qN5sDvSAGE.mft (raw, json)
Hash identifier:          8TAr+cxk8MgUYsui8ihPAzLumrEnTRLSOs7VETffGtw=
Subject key identifier:   E4:48:4A:97:A3:78:04:EE:16:18:84:D5:7D:B0:28:70:1B:A1:5A:79
Authority key identifier: 25:B6:4B:76:1E:B7:C8:D4:EE:C1:C8:6E:FA:A3:79:B0:3B:D2:00:61
Certificate issuer:       /CN=F369FA36AF/serialNumber=25B64B761EB7C8D4EEC1C86EFAA379B03BD20061
Certificate serial:       0994
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JbZLdh63yNTuwchu-qN5sDvSAGE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
Manifest number:          0994
Signing time:             Tue 09 Dec 2025 01:22:25 +0000
Manifest this update:     Tue 09 Dec 2025 01:22:24 +0000
Manifest next update:     Thu 11 Dec 2025 01:22:24 +0000
Files and hashes:         1: JbZLdh63yNTuwchu-qN5sDvSAGE.crl (hash: YyyS54xyfhYQryfaYFJvH6gQdUIx9d/rhW+vRZGjt2Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JbZLdh63yNTuwchu-qN5sDvSAGE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 01:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2452 (0x994)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369FA36AF, serialNumber=25B64B761EB7C8D4EEC1C86EFAA379B03BD20061
        Validity
            Not Before: Dec  9 01:22:24 2025 GMT
            Not After : Dec 11 01:22:24 2025 GMT
        Subject: CN=693779d1-64eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:29:ce:3b:0c:0f:5d:df:fb:0a:98:98:09:
                    b7:b5:98:78:76:13:f2:8e:37:84:5d:59:41:8d:4e:
                    8d:08:88:fa:dc:a4:63:ff:73:66:3b:64:c7:f7:43:
                    fc:e7:bc:2d:08:61:0d:fa:f3:a6:11:36:03:34:30:
                    af:81:28:a0:ac:33:3e:1f:71:6c:be:c5:cb:0c:f1:
                    d6:b3:ff:29:97:94:6f:ad:89:60:96:c4:94:2c:af:
                    3c:64:e1:3c:7b:75:31:52:4d:87:8d:db:1b:43:5a:
                    1d:21:03:f4:f6:03:31:29:ad:b6:96:3c:2c:35:62:
                    ee:cf:73:41:82:0b:37:05:ae:4f:52:ac:07:1a:25:
                    3b:7b:7f:f6:ec:c1:35:0b:72:97:ae:e3:e5:ff:a1:
                    9a:60:c0:18:77:c9:63:8e:02:8e:11:64:94:09:c7:
                    9a:fb:ae:4d:e7:91:3c:a3:11:ae:bd:b9:c0:28:5c:
                    d9:70:f4:f5:93:f1:65:08:d6:79:c0:05:f6:0d:f3:
                    4b:db:f6:4b:4d:17:90:fe:7b:90:33:f2:97:40:bc:
                    f9:08:63:c9:52:bd:d5:22:4b:d0:c9:3f:82:be:09:
                    bc:a9:34:8e:10:da:f1:34:19:60:99:b5:e7:9e:3a:
                    d3:aa:91:b8:90:1a:b4:22:9f:a4:73:41:c9:78:e2:
                    e2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:48:4A:97:A3:78:04:EE:16:18:84:D5:7D:B0:28:70:1B:A1:5A:79
            X509v3 Authority Key Identifier:
                keyid:25:B6:4B:76:1E:B7:C8:D4:EE:C1:C8:6E:FA:A3:79:B0:3B:D2:00:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JbZLdh63yNTuwchu-qN5sDvSAGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d9:ad:23:8c:dd:2b:42:5a:fc:de:f7:24:57:75:5c:2d:68:
         b3:b0:1e:72:a4:4c:4c:65:39:6e:66:8f:01:96:d5:15:41:53:
         54:0d:6f:2c:f6:00:2a:cb:4f:f3:ba:bc:a7:48:b4:cd:87:29:
         42:6c:8f:82:37:6c:73:5a:be:ef:62:9f:f5:c8:40:9e:5f:98:
         95:ee:23:ab:4a:e4:22:f0:c8:05:07:9c:1d:97:ff:19:19:cd:
         f9:58:14:cb:e2:c0:9c:23:c4:98:8c:e3:ef:e8:a8:f3:16:15:
         b7:cf:3b:b0:48:39:4c:4a:67:0e:70:65:4a:77:68:8c:3e:09:
         5d:5b:1e:6a:d7:5c:de:3a:94:d0:f5:34:09:9c:75:1f:a8:a3:
         9c:66:c4:43:32:5a:c3:33:f7:ca:5f:8d:1c:8d:cb:98:01:89:
         bb:0b:31:bf:56:a5:2b:00:c0:7c:72:69:e4:fc:5c:2c:58:ef:
         f9:2b:dc:60:b6:bd:c1:85:66:85:13:3b:e5:1a:eb:f2:1a:e4:
         3c:cc:fa:f1:9b:ab:eb:d8:f9:cd:41:25:b8:99:d3:56:95:13:
         35:12:22:1d:fd:cf:9f:9e:bf:61:3d:e6:eb:12:25:e3:01:52:
         d6:6b:66:60:2a:70:1d:f3:eb:87:6d:c4:39:aa:40:82:a7:96:
         05:8f:e7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:18:12 2025 by rpki-client