This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
File:                     XabN45sUTEexNxp5v2LPbtykpzs.mft (raw, json)
Hash identifier:          CjnmqBKgaXofztaq+1U2roUzot6u3JeRc+ZJEg00I0o=
Subject key identifier:   7E:9A:86:ED:CC:E0:50:D5:CD:B7:0A:96:2F:5D:CB:A4:0A:E9:99:FC
Authority key identifier: 5D:A6:CD:E3:9B:14:4C:47:B1:37:1A:79:BF:62:CF:6E:DC:A4:A7:3B
Certificate issuer:       /CN=F361174DAF/serialNumber=5DA6CDE39B144C47B1371A79BF62CF6EDCA4A73B
Certificate serial:       050C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
Manifest number:          050A
Signing time:             Sun 21 Dec 2025 02:52:44 +0000
Manifest this update:     Sun 21 Dec 2025 02:52:44 +0000
Manifest next update:     Tue 23 Dec 2025 02:52:44 +0000
Files and hashes:         1: XabN45sUTEexNxp5v2LPbtykpzs.crl (hash: RKIHSO4Mq12GYv6sF3BOe9qs1FWtuZJFAHhcQVfD3l0=)
                          2: EFDD06EC090111EDBC15A4C3F1222468.roa (hash: mzBwRw/NsD0Kw5UC1+dnCe3jWxLCxwOLqnhj2973w4M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 02:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1292 (0x50c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361174DAF, serialNumber=5DA6CDE39B144C47B1371A79BF62CF6EDCA4A73B
        Validity
            Not Before: Dec 21 02:52:44 2025 GMT
            Not After : Dec 23 02:52:44 2025 GMT
        Subject: CN=694760fc-7000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:32:5b:7e:1b:c5:c3:ac:cd:e4:a3:4e:bf:58:
                    79:77:6b:e2:cf:c2:43:93:b0:47:b7:e0:87:22:a9:
                    d5:c1:bf:0e:f5:9a:c9:51:e8:c1:31:c3:68:bd:a7:
                    85:9e:64:c8:83:ad:7a:a3:f2:03:93:2a:18:c0:10:
                    3c:95:71:50:22:2d:5a:25:e0:0b:31:99:49:b3:77:
                    a5:82:8b:cf:93:54:d2:51:a1:bc:40:32:3d:71:e3:
                    a0:6f:6f:fb:c5:8e:81:3a:f1:83:75:e7:75:26:97:
                    4e:64:12:a1:9e:40:1c:a4:9d:eb:d2:80:7c:ae:45:
                    78:fc:07:6b:f2:4e:b1:f4:be:00:4c:31:39:c3:b5:
                    5a:b8:18:c0:27:1a:9c:e0:a9:33:05:bc:27:83:07:
                    35:58:f9:2a:32:5b:5f:63:8e:97:a0:7c:96:db:c5:
                    ed:2f:9d:ef:66:76:1a:31:ee:d2:6a:13:fc:36:d0:
                    fd:9b:e0:a6:99:36:e5:73:8c:f0:d7:bc:9d:9d:15:
                    1d:4d:f1:2f:b2:dd:27:14:03:1b:93:4c:00:9c:b9:
                    0d:74:cf:9b:bd:68:30:0f:1d:0e:ae:4d:8b:6e:1b:
                    04:ba:fd:74:a0:9a:8b:f4:22:ce:a0:46:a2:23:16:
                    54:31:66:83:fa:2f:48:8e:d5:34:cc:f7:7c:62:8f:
                    e0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9A:86:ED:CC:E0:50:D5:CD:B7:0A:96:2F:5D:CB:A4:0A:E9:99:FC
            X509v3 Authority Key Identifier:
                keyid:5D:A6:CD:E3:9B:14:4C:47:B1:37:1A:79:BF:62:CF:6E:DC:A4:A7:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b4:e6:c2:fc:0a:c3:9d:5c:41:a1:d4:00:86:74:9b:6c:fc:
         c7:a5:76:72:de:2f:92:68:44:56:a1:8c:a8:e7:32:5c:d9:42:
         56:4f:da:1f:7b:72:a3:7e:d1:81:e2:9d:37:b7:4e:c5:5d:a5:
         9c:24:21:05:53:71:df:16:ae:39:8c:c4:66:0b:a2:7c:b5:57:
         6f:9b:fc:10:07:68:11:d8:7a:6f:25:3a:06:39:85:21:f9:23:
         76:c6:38:76:9c:cc:f8:e9:b6:16:4a:f5:b2:29:36:f7:55:3e:
         58:27:16:4b:2e:ee:1b:4d:43:63:c9:ec:8e:7d:7a:b0:41:78:
         2e:54:1d:fc:11:98:e9:a1:9a:08:be:a8:80:e0:66:0e:e6:3b:
         41:fd:89:bc:bc:2a:d4:45:60:ae:b5:60:0a:91:67:f4:ed:a3:
         29:9e:d5:1c:86:33:26:58:0f:7e:6d:9e:bc:0f:b9:5c:4d:58:
         01:75:70:7c:27:7c:a6:9c:d9:ed:12:f5:86:41:fd:89:bd:f9:
         08:1a:aa:84:4f:da:75:a3:24:f9:88:e1:f8:a9:4c:db:a7:7f:
         34:2c:d7:3e:a1:d2:f2:5d:42:ff:12:05:c9:8c:75:df:95:8c:
         27:85:51:eb:9e:79:12:8d:c2:62:a7:40:15:a3:b8:ac:e0:73:
         af:f2:22:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 01:43:54 2025 by rpki-client