This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
File:                     bxoQPhQn_wNIOr_Z402svhUk_4s.mft (raw, json)
Hash identifier:          fRssFEfIlD1+QNYjEPkWZw9thxxCMjgDPTdccXVU7Dc=
Subject key identifier:   1F:A1:F1:C6:99:CA:F3:D1:D8:C0:3E:E8:31:D8:04:53:D4:46:F0:FA
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer:       /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial:       0F70
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
Manifest number:          0F5D
Signing time:             Fri 19 Dec 2025 00:15:15 +0000
Manifest this update:     Fri 19 Dec 2025 00:15:12 +0000
Manifest next update:     Sun 21 Dec 2025 00:15:12 +0000
Files and hashes:         1: bxoQPhQn_wNIOr_Z402svhUk_4s.crl (hash: hFhKMDg+/KuKaV79T85GNEcgX7klLCwB+SkLtuqWs5M=)
                          2: 7vdTJDjdpqMkdkrK-E72JOF34MU.cer (hash: rv1kEJuZHu+DX0DTMEOnscLsCZlcmBJ81z2u+ACteHw=)
                          3: cvCHQUzi30S8T03_W-EUenpxqa4.cer (hash: fI1p3DHd6xCPdYa8vbre+aWndGfIHvfHIzw56wOpGcU=)
                          4: U_eNgMrA6y6s13sBdd8xno91J5Y.cer (hash: 7wnmK4TUsAQFB4aTf61zo6E0Mz2KJ5b/rgxYOI5V3nQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3952 (0xf70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=APNICTOAFRINIC, serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
        Validity
            Not Before: Dec 19 00:15:12 2025 GMT
            Not After : Dec 21 00:15:12 2025 GMT
        Subject: CN=69449911-940e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:24:74:ab:50:e3:91:ac:79:fe:ca:ae:bd:
                    82:8a:28:71:db:71:24:68:40:4e:22:ec:54:b1:df:
                    94:e9:b7:45:88:1c:d9:0a:e1:16:4d:62:b6:ab:34:
                    3a:e0:ab:4a:fc:53:d9:de:42:c2:c1:69:5c:85:ea:
                    cc:3d:cd:28:ab:48:f0:61:04:44:c7:2a:bc:c5:a6:
                    e6:6b:73:9d:61:c6:d2:ca:dc:d7:d4:bf:91:43:74:
                    11:83:25:ce:cd:13:bd:e4:24:a3:9f:d3:57:9a:0b:
                    d6:ee:ae:e4:52:4c:8c:16:26:45:ba:a0:17:5d:a8:
                    43:b6:30:87:9a:78:9f:60:8f:0b:c4:2b:fc:07:b0:
                    be:b3:e2:8c:f2:40:00:d8:c4:2d:dd:a7:38:69:79:
                    5a:62:22:5d:14:84:0b:d4:cd:03:92:3f:6e:e1:c4:
                    ca:e5:62:d4:91:40:7b:3a:c7:8c:9d:0b:69:a9:7d:
                    cc:eb:23:0c:8f:52:36:4b:1d:53:10:2b:bf:45:8e:
                    53:ff:bf:64:03:c9:92:d5:10:f2:16:5c:6b:3d:a7:
                    78:b0:aa:cb:cd:93:ef:57:3c:f7:6a:0a:c8:03:01:
                    13:5e:61:28:77:d8:7a:b5:dd:3f:07:11:78:21:f3:
                    2e:28:1c:a4:75:4b:86:83:92:ee:cd:a1:bc:81:e6:
                    c4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A1:F1:C6:99:CA:F3:D1:D8:C0:3E:E8:31:D8:04:53:D4:46:F0:FA
            X509v3 Authority Key Identifier:
                keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:53:99:56:c4:06:c7:c6:47:97:e3:3f:11:4f:2f:a6:9a:88:
         66:48:22:66:cd:4e:f7:50:54:11:74:3e:a6:5d:12:3a:03:96:
         73:e1:c7:42:50:f1:8d:bf:52:c9:3b:45:80:ca:51:cb:fc:10:
         fc:c1:ce:d3:15:aa:e4:1c:af:51:aa:dd:ca:d9:7a:f1:66:4a:
         7a:a2:87:d5:bb:10:c9:0b:66:2c:6f:99:5a:a0:8c:87:d6:af:
         7b:b9:7c:ae:45:17:60:e7:4a:e1:35:b2:96:32:93:91:eb:e4:
         7a:5a:9d:26:90:b5:4e:dc:91:ed:15:60:39:6c:8f:7d:57:11:
         89:01:d7:95:ab:47:3f:94:9a:2c:26:39:c7:29:f7:ba:d4:2c:
         6f:ec:73:4a:e7:4f:f6:c1:8f:20:9b:42:6f:39:73:3f:8e:79:
         52:97:5b:fd:be:5c:74:6d:95:ee:a9:ab:3e:da:15:98:4a:99:
         97:56:b2:e5:fe:2a:f1:c8:11:53:e6:56:28:ef:b5:e9:90:4f:
         55:ba:f6:d2:65:49:95:f4:d3:5b:1d:df:ef:7e:a6:b9:c8:d2:
         6c:27:78:58:3b:69:00:14:c8:8d:1b:6a:00:68:ff:31:d3:be:
         f6:db:09:0b:a5:37:a8:d0:37:f5:a1:da:45:58:6a:60:3f:d2:
         1f:16:22:0a
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgICD3AwDQYJKoZIhvcNAQELBQAwTDEXMBUGA1UEAxMOQVBO
SUNUT0FGUklOSUMxMTAvBgNVBAUTKDZGMUExMDNFMTQyN0ZGMDM0ODNBQkZEOUUz
NERBQ0JFMTUyNEZGOEIwHhcNMjUxMjE5MDAxNTEyWhcNMjUxMjIxMDAxNTEyWjAY
MRYwFAYDVQQDEw02OTQ0OTkxMS05NDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxZ0kdKtQ45Gsef7Krr2Ciihx23EkaEBOIuxUsd+U6bdFiBzZCuEW
TWK2qzQ64KtK/FPZ3kLCwWlcherMPc0oq0jwYQRExyq8xabma3OdYcbSytzX1L+R
Q3QRgyXOzRO95CSjn9NXmgvW7q7kUkyMFiZFuqAXXahDtjCHmnifYI8LxCv8B7C+
s+KM8kAA2MQt3ac4aXlaYiJdFIQL1M0Dkj9u4cTK5WLUkUB7OseMnQtpqX3M6yMM
j1I2Sx1TECu/RY5T/79kA8mS1RDyFlxrPad4sKrLzZPvVzz3agrIAwETXmEod9h6
td0/BxF4IfMuKBykdUuGg5LuzaG8gebETQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FB+h8caZyvPR2MA+6DHYBFPURvD6MB8GA1UdIwQYMBaAFG8aED4UJ/8DSDq/2eNN
rL4VJP+LMA4GA1UdDwEB/wQEAwIHgDBaBgNVHR8EUzBRME+gTaBLhklyc3luYzov
L3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcG5pYy9ieG9RUGhRbl93TklP
cl9aNDAyc3ZoVWtfNHMuY3JsMHUGCCsGAQUFBwEBBGkwZzBlBggrBgEFBQcwAoZZ
cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvMDRFOEIwRDgwRjRE
MTFFMEI2NTdEODkzMTM2N0FFN0QvYXBuaWMtdG8tYWZyaW5pYy5jZXIwTwYDVR0g
AQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2ku
YWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwgZ4GCCsGAQUFBwELBIGRMIGOMFUG
CCsGAQUFBzALhklyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9h
cG5pYy9ieG9RUGhRbl93TklPcl9aNDAyc3ZoVWtfNHMubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAL9TmVbEBsfGR5fjPxFPL6aaiGZIImbN
TvdQVBF0PqZdEjoDlnPhx0JQ8Y2/Usk7RYDKUcv8EPzBztMVquQcr1Gq3crZevFm
Snqih9W7EMkLZixvmVqgjIfWr3u5fK5FF2DnSuE1spYyk5Hr5HpanSaQtU7cke0V
YDlsj31XEYkB15WrRz+UmiwmOccp97rULG/sc0rnT/bBjyCbQm85cz+OeVKXW/2+
XHRtle6pqz7aFZhKmZdWsuX+KvHIEVPmVijvtemQT1W69tJlSZX001sd3+9+prnI
0mwneFg7aQAUyI0bagBo/zHTvvbbCQulN6jQN/Wh2kVYamA/0h8WIgo=
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:40 2025 by rpki-client