This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/YnpDuw3zxvXmKHq_6henXbeyswM.mft
File:                     YnpDuw3zxvXmKHq_6henXbeyswM.mft (raw, json)
Hash identifier:          d5nYeCmewoMNXgrrIMnpJjs66jTEMpoyBKeX2wpjgZE=
Subject key identifier:   54:D9:3A:B0:82:47:F9:15:EB:C1:DB:C5:A8:E8:16:33:E1:37:30:3B
Authority key identifier: 62:7A:43:BB:0D:F3:C6:F5:E6:28:7A:BF:EA:17:A7:5D:B7:B2:B3:03
Certificate issuer:       /CN=F36F68F4AF/serialNumber=627A43BB0DF3C6F5E6287ABFEA17A75DB7B2B303
Certificate serial:       02B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YnpDuw3zxvXmKHq_6henXbeyswM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/YnpDuw3zxvXmKHq_6henXbeyswM.mft
Manifest number:          02B5
Signing time:             Tue 09 Dec 2025 04:04:15 +0000
Manifest this update:     Tue 09 Dec 2025 04:04:15 +0000
Manifest next update:     Thu 11 Dec 2025 04:04:15 +0000
Files and hashes:         1: YnpDuw3zxvXmKHq_6henXbeyswM.crl (hash: 2D0p3dnZgMSBcnY0MRgtii0DVrgVIkjJl1Zo6wKZrO0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/YnpDuw3zxvXmKHq_6henXbeyswM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/YnpDuw3zxvXmKHq_6henXbeyswM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YnpDuw3zxvXmKHq_6henXbeyswM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 04:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F68F4AF, serialNumber=627A43BB0DF3C6F5E6287ABFEA17A75DB7B2B303
        Validity
            Not Before: Dec  9 04:04:15 2025 GMT
            Not After : Dec 11 04:04:15 2025 GMT
        Subject: CN=69379fbf-acdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6c:7e:9a:ab:e2:9f:80:0e:f1:8a:26:d1:7e:
                    c6:cf:50:29:33:45:ed:97:39:73:32:cc:41:c5:9a:
                    e3:a8:be:3d:34:e9:36:ea:a9:3f:1c:af:08:18:9f:
                    b7:d6:ef:30:3c:70:be:b8:4a:e5:3e:1b:94:f4:01:
                    c2:de:89:39:17:ea:0c:25:d3:bf:94:6c:8f:69:0a:
                    a1:72:29:05:ca:c3:18:a5:c7:ee:d9:1e:5a:ea:78:
                    40:03:1b:07:f5:c9:9d:5b:6b:0e:c7:00:e7:4d:6a:
                    ca:e6:98:c6:cf:11:43:15:94:ab:de:9b:40:d7:3b:
                    9d:1e:9b:4b:28:69:fe:32:b6:df:2b:66:d2:ed:85:
                    8f:96:7a:76:b8:d6:e2:a2:b1:d1:db:a8:0d:75:99:
                    83:25:50:99:30:4e:cd:ee:fe:1b:27:e9:22:60:66:
                    46:d8:b4:b3:c9:60:56:63:ef:51:c6:32:b1:82:4f:
                    5c:75:59:9d:37:80:3f:38:ef:bb:3b:7a:ea:3e:67:
                    a2:f8:57:d8:b8:3e:0d:e6:72:e2:b1:cb:a9:90:41:
                    04:0b:fc:84:1b:27:f9:b4:73:fd:15:aa:33:0e:09:
                    af:7d:43:47:9b:e9:89:e4:86:63:e0:98:26:f4:83:
                    df:c1:d0:1f:10:41:2c:2a:80:47:0a:94:20:6e:dc:
                    13:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D9:3A:B0:82:47:F9:15:EB:C1:DB:C5:A8:E8:16:33:E1:37:30:3B
            X509v3 Authority Key Identifier:
                keyid:62:7A:43:BB:0D:F3:C6:F5:E6:28:7A:BF:EA:17:A7:5D:B7:B2:B3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/YnpDuw3zxvXmKHq_6henXbeyswM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YnpDuw3zxvXmKHq_6henXbeyswM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/51DF5004C67311EE84C75AA5775412E6/YnpDuw3zxvXmKHq_6henXbeyswM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d4:a5:70:54:b7:d5:41:20:f8:b3:2f:c3:65:b1:ce:1e:72:
         ad:09:f0:ef:fb:a7:3b:71:fa:aa:67:49:d3:95:d4:bf:63:30:
         2d:46:3f:68:46:b8:d3:36:24:92:52:95:64:74:95:6c:52:6e:
         43:01:75:f0:7b:2e:c4:84:a4:cb:25:1f:ff:93:8a:ee:07:6d:
         4b:d0:ef:05:95:74:cc:79:a8:0a:ef:97:03:1b:66:27:76:6c:
         83:8f:31:20:0b:39:5a:6d:a8:ef:10:99:fc:35:c1:a9:aa:d8:
         58:30:0a:86:64:c2:cb:8f:cf:a9:1a:f4:0c:60:ab:58:e7:c8:
         3a:3a:ab:09:3e:8f:53:8c:9f:60:67:a4:67:bf:e8:61:5a:9f:
         5a:45:e7:08:c9:56:da:dc:f2:da:1e:ff:d8:ff:cd:d3:42:ba:
         be:ba:37:25:c1:e4:57:94:f5:a6:b4:03:37:3c:1a:64:d3:ed:
         12:a1:0a:39:d1:7c:3a:69:0f:d4:25:5d:a1:46:8f:c9:8c:da:
         30:12:ae:b2:8a:05:67:bc:5c:da:e5:83:43:71:eb:a9:97:e2:
         68:39:cd:20:3b:98:19:d3:cf:3b:84:30:d1:7e:f3:89:00:b8:
         bf:48:36:9d:ce:04:d5:da:ee:26:84:53:47:c4:64:af:92:9b:
         64:9b:ec:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:16:45 2025 by rpki-client