This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft
File:                     BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft (raw, json)
Hash identifier:          CgDfqECOXW/QN71sbR8zGYyiSx9mXPTmhPteopHspls=
Subject key identifier:   F4:4C:BA:7B:C1:8A:17:D6:E0:D3:40:E3:20:30:A9:CA:47:80:63:27
Authority key identifier: 04:C7:0D:0F:E1:0C:8F:6B:2A:F8:27:B7:C6:66:17:AD:C2:EF:21:E5
Certificate issuer:       /CN=F362B2F5AF/serialNumber=04C70D0FE10C8F6B2AF827B7C66617ADC2EF21E5
Certificate serial:       D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BMcND-EMj2sq-Ce3xmYXrcLvIeU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft
Manifest number:          D6
Signing time:             Sat 20 Dec 2025 04:58:41 +0000
Manifest this update:     Sat 20 Dec 2025 04:58:40 +0000
Manifest next update:     Mon 22 Dec 2025 04:58:40 +0000
Files and hashes:         1: BMcND-EMj2sq-Ce3xmYXrcLvIeU.crl (hash: GGPpY/KytqR9HOtafvY/BGW0PyQi0yorwhPnRaa0iJA=)
                          2: 39B8368C3BAA11F09A3A42CEDAE4EC9C.roa (hash: NGOVvxGcMctTOcLjdKtNGDdIQDHinApagvdcC37+4wQ=)
                          3: F3CD790A3B9211F0B6A215B9DAE4EC9C.roa (hash: uy0pfZG46ZecPcXleZMS+n60uaQG5DsddR4RCRLej+Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BMcND-EMj2sq-Ce3xmYXrcLvIeU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 04:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B2F5AF, serialNumber=04C70D0FE10C8F6B2AF827B7C66617ADC2EF21E5
        Validity
            Not Before: Dec 20 04:58:40 2025 GMT
            Not After : Dec 22 04:58:40 2025 GMT
        Subject: CN=69462d01-518a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:19:ec:0f:32:59:7d:1a:88:77:bc:8a:8a:da:
                    b7:21:01:1d:89:42:23:6a:57:b9:ae:b8:76:e4:57:
                    14:c5:ff:a8:55:ef:42:ad:25:87:28:60:d9:cc:96:
                    31:33:bc:4f:a5:c4:f6:15:f4:a1:51:6b:59:de:95:
                    f8:ec:a9:33:5e:8d:88:9b:b6:75:99:bc:2b:2d:75:
                    16:3d:3a:10:61:ab:0b:43:5c:c6:3f:1c:c5:3b:3d:
                    7b:7a:00:b7:c6:2e:dc:01:3b:2a:a7:9b:28:0d:e0:
                    6e:54:38:ad:50:df:5a:0f:bf:de:7f:12:21:88:23:
                    ec:33:0d:12:eb:cd:0c:e2:33:ea:a9:fa:b2:28:21:
                    84:f6:8e:ed:9d:1b:8f:d0:d0:ce:55:07:21:91:70:
                    92:40:9a:65:38:f6:ff:77:ea:88:35:5f:86:2c:68:
                    cb:53:4c:f9:9f:fa:c0:6d:2d:5d:bf:0b:13:5a:cd:
                    4a:c5:88:eb:4e:80:e1:08:9f:7d:1c:75:56:c4:dc:
                    e8:1d:d7:07:2b:45:51:08:67:dc:8d:b1:e6:5e:b4:
                    06:43:98:62:94:ac:0c:7b:4c:09:3d:9c:b3:b4:13:
                    07:29:07:a3:51:e1:71:38:2a:c4:a1:d4:d7:09:8b:
                    07:a9:ec:ff:b8:4f:d1:dd:f4:d1:ae:e0:d8:9e:aa:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4C:BA:7B:C1:8A:17:D6:E0:D3:40:E3:20:30:A9:CA:47:80:63:27
            X509v3 Authority Key Identifier:
                keyid:04:C7:0D:0F:E1:0C:8F:6B:2A:F8:27:B7:C6:66:17:AD:C2:EF:21:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BMcND-EMj2sq-Ce3xmYXrcLvIeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:98:71:8f:d3:f1:7e:d0:1c:b7:b9:ee:a4:a0:69:19:71:b3:
         af:cc:30:ce:4e:0c:37:8f:1c:ac:bf:3d:c2:33:c1:d3:e4:82:
         7d:75:58:84:4a:af:b6:fe:01:ee:0d:33:ca:e8:ef:bc:a1:91:
         cb:4d:15:20:67:f1:c8:ff:f4:42:5f:04:42:a5:79:5d:34:d1:
         f6:9d:5b:df:11:4a:c3:ac:24:37:b6:c4:74:2d:45:03:89:40:
         eb:78:2d:32:05:a5:3f:bf:5d:5c:0d:f3:68:6a:4f:67:46:6b:
         43:5e:94:cd:4e:22:7c:62:07:a5:56:d5:87:aa:77:ab:69:14:
         fa:7e:7b:90:65:0b:39:c5:e0:c9:58:9c:16:e7:b8:08:43:e2:
         91:14:a6:4c:f6:fa:96:e3:58:2e:24:35:d7:16:18:e3:25:39:
         d1:dc:e1:cd:f9:1d:42:c3:6e:47:0e:3c:07:d1:c2:ff:02:4c:
         f4:b3:29:a3:0d:3a:40:61:f1:c9:d7:bb:40:6a:6d:99:a3:04:
         a4:33:72:7c:ec:68:bc:bb:18:35:d5:96:ef:2e:17:9e:cb:db:
         3f:af:7c:a6:aa:b8:0d:1c:f3:a7:8d:71:0b:f9:a4:0a:f2:2f:
         6c:5d:ad:12:3c:0f:38:83:78:ff:b7:6d:23:67:19:38:19:25:
         d4:a3:20:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:24:33 2025 by rpki-client