This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
File:                     1ijkyWq6nPsSRHeGe73xpENfD1s.mft (raw, json)
Hash identifier:          1pYVlY1yZD6Ykus3YrRXdWTWa3KazNEGjYyyZogLJ9I=
Subject key identifier:   F5:9E:C0:DF:58:90:49:45:62:C3:EC:AF:40:59:2C:30:CB:C6:FE:0B
Authority key identifier: D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B
Certificate issuer:       /CN=F362412EAF/serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B
Certificate serial:       0339
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
Manifest number:          0330
Signing time:             Tue 30 Dec 2025 03:51:48 +0000
Manifest this update:     Tue 30 Dec 2025 03:51:47 +0000
Manifest next update:     Thu 01 Jan 2026 03:51:47 +0000
Files and hashes:         1: 1ijkyWq6nPsSRHeGe73xpENfD1s.crl (hash: PQStT/3Kfaq635yctLWnN9WYsvb7RFBOhsfN7mehkF4=)
                          2: ED02D88AE81A11EE8623BCC5775412E6.roa (hash: mvHTVhODmwdELfP/e2cG297ECeboGj2BsOL9AUtxSak=)
                          3: D9673B327E3811EEA513EB3B4AD9E6FC.roa (hash: UqaCdDOXPbSropYSiVv8/KHGfuPJpE0IwMmtg9u2HE0=)
                          4: AD4DC7B2E81B11EE9D0AAC4C775412E6.roa (hash: Rg0rPDoDCNsPvE5jk03o2oztgTr1S1Uz/K+MpVZVO/k=)
                          5: 413308947E3A11EE832D2F404AD9E6FC.roa (hash: Eb0obFXe3E6DORP4MxW4QBN2bM/zRSA3RlnaOBqHUN0=)
                          6: A9A46126E81A11EEAA8ECCC1775412E6.roa (hash: wd/nf2EuVpjl0YLy2l9YBPgNolj8qZpz1sk3ozhlrnw=)
                          7: EA19B9687E3911EE8853E63E4AD9E6FC.roa (hash: O86LwkUf5r8SNUYChgmFxO/FC3RubzrEdUN/7g3zOxM=)
                          8: 1970B130E81B11EEACE154C6775412E6.roa (hash: 5vNOWkuS5OOw6HL2Agkgo+3kaWgHGPZi7TRSlYZvPNs=)
                          9: 48AE0434E81B11EE876ADDC6775412E6.roa (hash: wJr/eaxq68q6pHClMi9x3b4zYhBKBXGZVN5loE10NCg=)
                          10: 63F96FF2BEB411EE9F8AD251775412E6.roa (hash: ndpKTdXcDoxXSkEuWmu2k8nfK/ZfndTlZeUQ+gODKm4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 03:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 825 (0x339)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362412EAF, serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B
        Validity
            Not Before: Dec 30 03:51:47 2025 GMT
            Not After : Jan  1 03:51:47 2026 GMT
        Subject: CN=69534c54-7c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e2:a9:b3:18:37:88:aa:b7:25:53:a6:9a:77:
                    28:90:88:ef:57:be:b6:f2:ca:f9:01:cc:a4:96:a0:
                    21:78:fb:ae:3d:fd:b6:09:4e:f8:59:d3:dc:c4:60:
                    eb:57:b3:b8:0f:4e:98:e5:85:51:7b:f3:da:09:8d:
                    b0:1f:8b:51:b4:24:c5:1f:b2:50:24:bc:96:aa:7c:
                    26:32:73:77:45:e6:a2:51:01:80:97:9b:0f:6b:71:
                    d3:55:b4:9a:63:4d:99:81:a2:6d:01:4c:c0:ed:5a:
                    74:05:d2:5c:3a:cd:77:61:3e:4e:b8:43:8c:28:be:
                    16:bf:43:8a:8f:04:9e:2f:28:78:31:da:92:7e:9b:
                    2f:89:29:1f:f0:ca:80:2b:8e:98:b5:a0:44:a9:a3:
                    83:6c:7d:f7:3a:0a:46:3e:4f:d0:d5:2b:16:09:d8:
                    18:f1:8f:b4:13:22:e1:48:75:56:54:e1:cf:ce:4b:
                    34:e1:65:34:4a:ef:84:ae:27:77:ab:e3:81:a3:e3:
                    f8:e7:47:94:56:ef:9e:3c:2a:7a:8f:77:27:1f:76:
                    9b:a2:ff:2e:c2:3a:b7:04:9c:7f:62:cb:61:59:d2:
                    93:eb:1f:7b:32:37:8b:19:76:47:3d:a2:de:80:6a:
                    02:f5:10:d8:81:a9:bc:e1:87:29:ae:0d:dc:26:d9:
                    ee:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9E:C0:DF:58:90:49:45:62:C3:EC:AF:40:59:2C:30:CB:C6:FE:0B
            X509v3 Authority Key Identifier:
                keyid:D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:18:5f:1a:36:38:35:66:d9:92:d2:15:c6:0a:26:01:c7:1c:
         5a:85:e6:2a:94:45:1f:63:8e:1a:b9:d4:ff:5f:bb:f5:0d:bf:
         2e:1a:a1:86:26:aa:9e:18:07:68:fe:64:b1:38:cd:49:89:d9:
         61:db:3c:ae:7c:78:36:7a:a1:4d:17:5c:63:84:5a:67:a0:49:
         bb:e5:6c:2e:5b:16:3f:0a:a1:f2:a0:a6:a9:3d:00:d7:e8:05:
         e7:0a:1b:84:11:51:5b:b5:c3:29:f3:7c:2b:3c:8e:6a:7c:32:
         f0:55:ad:04:94:78:ef:c4:46:ce:a4:83:4f:56:0d:08:8f:6d:
         1e:d5:58:8d:eb:72:04:f4:1d:c0:8e:97:2d:c4:b6:68:0a:9f:
         80:49:97:1c:1b:15:b2:0b:c1:cd:e6:71:aa:a7:79:6f:33:9f:
         e5:d9:2e:5a:68:32:fa:5d:7a:46:a0:17:e8:f4:61:7b:41:da:
         a1:2d:6e:75:85:6f:72:69:f5:db:f1:7d:77:05:e4:bd:c5:8c:
         d9:7b:cd:11:73:9a:b3:78:b1:6f:d7:f6:21:18:e4:a0:31:d3:
         d0:09:40:71:44:cd:c9:2e:93:e4:08:aa:20:fc:75:aa:91:4d:
         76:2b:60:a5:73:46:7f:a1:7b:92:f2:35:73:3e:8a:33:cf:21:
         5c:be:8a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 02:00:24 2025 by rpki-client