This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
File:                     X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft (raw, json)
Hash identifier:          PskxtZrrXb6868b0vuOoSptEwnugpxty1jY5wq4aHRY=
Subject key identifier:   78:BE:65:07:57:A4:DA:61:3D:46:85:17:02:80:6D:D6:88:84:CF:81
Authority key identifier: 5F:91:E3:7E:17:C4:A5:87:15:A0:1A:FF:09:29:8B:B1:6F:23:82:C6
Certificate issuer:       /CN=F362A252AF/serialNumber=5F91E37E17C4A58715A01AFF09298BB16F2382C6
Certificate serial:       051C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
Manifest number:          051B
Signing time:             Wed 31 Dec 2025 02:53:48 +0000
Manifest this update:     Wed 31 Dec 2025 02:53:48 +0000
Manifest next update:     Fri 02 Jan 2026 02:53:48 +0000
Files and hashes:         1: X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl (hash: JWatoGde1T9iuJFlLb99lzWaEiO7YQ0XDwMt8tFCbvY=)
                          2: 07EE873A020211EDAC199783F1222468.roa (hash: YfCMAg3Y9dxZRfFftpeSFNVqy74lmtcSUOaH6LHRzXE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1308 (0x51c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362A252AF, serialNumber=5F91E37E17C4A58715A01AFF09298BB16F2382C6
        Validity
            Not Before: Dec 31 02:53:48 2025 GMT
            Not After : Jan  2 02:53:48 2026 GMT
        Subject: CN=6954903c-a067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:67:af:90:3f:8a:8b:1f:6f:91:95:5b:89:1e:
                    e1:c8:0a:6a:98:2f:94:cf:de:ae:05:a6:7f:43:42:
                    3a:bc:b4:2c:8c:26:59:c9:ba:3c:d8:27:ce:1b:2f:
                    bd:72:d3:d3:e8:92:91:33:a4:f2:11:71:c1:53:e6:
                    36:e6:16:c6:5c:62:1b:fb:36:3f:b7:1e:45:14:67:
                    8f:55:a5:25:94:09:a9:1e:e4:f9:7e:ce:49:ef:41:
                    80:62:86:97:c7:b6:1e:c3:d2:a1:0c:b0:1e:46:8d:
                    56:ff:1a:69:0a:8c:c1:cd:78:c6:7c:2a:9b:e9:17:
                    0d:8b:2b:60:09:aa:08:7d:23:57:a8:b9:93:9a:8d:
                    59:20:03:fd:9c:94:94:90:31:04:1a:8a:42:08:5f:
                    c7:bb:18:37:96:11:25:24:32:a7:e0:b8:5a:1c:00:
                    4d:18:bd:ea:99:67:49:b8:7d:21:a9:99:6d:db:bc:
                    86:14:72:73:9a:25:50:b6:a4:1d:2b:57:6a:3e:c6:
                    5d:36:11:5a:c4:51:8b:c3:b1:0e:59:06:ba:18:4f:
                    ac:fe:4e:e5:3b:fe:89:b3:e2:c5:03:92:d4:62:20:
                    1f:07:d0:f9:e8:36:90:69:58:6d:58:1f:3e:61:83:
                    74:7c:6b:c3:e2:a1:3d:33:8b:07:f7:13:5c:05:09:
                    21:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BE:65:07:57:A4:DA:61:3D:46:85:17:02:80:6D:D6:88:84:CF:81
            X509v3 Authority Key Identifier:
                keyid:5F:91:E3:7E:17:C4:A5:87:15:A0:1A:FF:09:29:8B:B1:6F:23:82:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:17:06:2e:8c:aa:9c:4e:53:5b:e9:bb:f5:f2:d9:a4:f1:e5:
         ab:34:8b:ec:28:54:a5:8e:22:ea:58:e0:6a:69:85:93:44:83:
         40:32:4e:5c:29:ff:c2:f8:a0:79:7c:d1:83:69:00:c0:cb:6c:
         55:f1:9f:94:a7:4f:34:b1:8b:68:7f:12:2a:0f:ae:c6:a2:1f:
         c5:5f:bc:2b:45:f6:7e:42:6a:5b:a7:7c:d3:2c:38:15:9e:25:
         07:b7:35:06:f8:90:0a:91:af:c9:23:b6:06:97:35:d9:65:e4:
         d6:86:b6:67:cd:2e:3f:e2:68:c2:62:40:8a:11:5d:6f:58:e9:
         3e:66:49:04:9d:c9:a0:4d:9e:00:d3:01:48:79:93:62:0b:ce:
         7d:a0:73:e9:ed:7c:1e:02:4f:b7:da:d3:2e:c8:81:72:5b:14:
         25:63:a6:94:fc:67:f4:81:ce:19:69:38:b2:14:73:4d:de:7e:
         4e:f5:b9:16:88:7e:40:6f:15:b2:17:ae:08:44:31:2b:56:05:
         b7:77:9d:6a:2d:87:66:3c:06:21:49:e4:f9:c8:ff:c5:1e:c0:
         16:7e:c0:63:6f:87:d8:2b:5c:a6:7d:79:06:f9:11:47:08:72:
         82:4c:7b:d3:f6:96:94:5d:61:6a:52:14:4d:80:66:53:b7:c1:
         75:4c:88:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 21:47:48 2025 by rpki-client