This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.mft
File:                     vujDtMU1w6-g9ubE9pxolZBF-RY.mft (raw, json)
Hash identifier:          NxYrHWd8b6WMUfWjmiGBvgnIkKslkhta62IvegLeLSU=
Subject key identifier:   5D:A7:9B:EF:BD:A8:0E:F4:CB:14:AE:AF:81:DC:89:DD:60:5F:91:86
Authority key identifier: BE:E8:C3:B4:C5:35:C3:AF:A0:F6:E6:C4:F6:9C:68:95:90:45:F9:16
Certificate issuer:       /CN=F36311EEAF/serialNumber=BEE8C3B4C535C3AFA0F6E6C4F69C68959045F916
Certificate serial:       01D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.mft
Manifest number:          01D1
Signing time:             Mon 29 Dec 2025 04:41:27 +0000
Manifest this update:     Mon 29 Dec 2025 04:41:26 +0000
Manifest next update:     Wed 31 Dec 2025 04:41:26 +0000
Files and hashes:         1: vujDtMU1w6-g9ubE9pxolZBF-RY.crl (hash: biymkjBvg8+WzYpMpTR4MFRYnKPCF2e8fHPE3W0u8qU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 31 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36311EEAF, serialNumber=BEE8C3B4C535C3AFA0F6E6C4F69C68959045F916
        Validity
            Not Before: Dec 29 04:41:26 2025 GMT
            Not After : Dec 31 04:41:26 2025 GMT
        Subject: CN=69520677-3f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:5c:45:1b:8d:07:56:9f:40:af:55:01:2d:
                    a4:6e:98:c1:5c:cb:a3:71:cd:52:01:6b:86:8e:3a:
                    41:b0:56:1c:4c:dc:6e:60:65:5e:87:1b:d7:89:3a:
                    92:a4:0f:7b:4b:f6:af:9a:9f:d2:0c:9d:73:66:3c:
                    63:0a:3a:ef:2c:d0:e8:ea:14:0a:82:50:67:83:5d:
                    cb:45:df:33:46:e1:35:79:2c:d5:12:ad:f5:24:1f:
                    dd:a3:0b:44:cd:f0:f1:fc:e9:d4:57:0f:e2:b9:49:
                    b6:df:73:13:fb:2b:2c:3c:d5:d8:da:93:f5:6b:6c:
                    39:4a:c3:f6:bf:46:a4:69:9a:c5:1a:c9:8c:58:ab:
                    32:89:c9:c2:9a:5c:9b:68:69:e9:8e:e9:46:db:72:
                    61:1b:a1:48:36:03:bf:b2:2e:f9:8f:38:e6:f7:47:
                    d0:cd:ce:d9:5f:e8:17:81:8b:13:5a:b0:e0:37:8e:
                    58:d9:1b:e6:8e:ec:51:66:6d:13:65:7a:e8:1c:04:
                    9e:ce:ec:51:4f:41:a7:9c:3f:69:2b:8e:f1:2f:99:
                    72:68:c4:e8:ab:0a:c6:a3:d5:4d:21:19:08:50:e1:
                    ab:85:a3:7f:47:37:d5:c9:83:52:26:11:6d:45:03:
                    09:73:0a:b3:7d:1a:76:b3:5d:e2:cf:c0:e8:5b:19:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A7:9B:EF:BD:A8:0E:F4:CB:14:AE:AF:81:DC:89:DD:60:5F:91:86
            X509v3 Authority Key Identifier:
                keyid:BE:E8:C3:B4:C5:35:C3:AF:A0:F6:E6:C4:F6:9C:68:95:90:45:F9:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:9d:dd:85:84:21:18:f8:80:cc:a8:52:f0:bb:4f:1f:e2:e1:
         4f:fe:c5:37:f1:95:48:04:7c:4b:02:2a:86:4a:7d:63:57:0f:
         94:bf:41:65:bb:ef:c2:c5:e0:e7:47:11:f3:10:84:37:a2:ed:
         58:11:a1:f2:e4:11:e0:e8:90:98:7f:00:e3:c8:64:e9:e2:fb:
         2c:b0:59:90:27:04:6f:ac:5d:19:dc:fe:21:83:49:4f:a1:a1:
         44:fc:7f:8d:b7:d3:2f:64:b8:7a:e2:de:c5:00:f9:4b:ab:d0:
         16:b9:da:d6:87:f1:51:61:52:8a:74:11:9d:e2:db:73:7c:00:
         81:06:5a:96:27:cd:a4:cf:4f:13:bd:b0:6f:d5:e1:b9:c8:4f:
         7c:63:33:db:d3:c6:51:a7:b6:68:a6:fe:d1:ae:1b:28:15:4e:
         9f:cd:d8:9c:9b:fd:a6:4f:b1:67:97:ab:18:d0:b0:26:d9:16:
         b9:0d:73:d5:3d:8b:c8:16:36:5e:32:05:30:a6:b6:fc:3f:1e:
         71:09:4c:94:a5:06:38:26:ff:25:4e:93:e4:0f:62:c1:f1:d2:
         1a:78:da:84:74:4b:ea:36:1e:08:fe:5a:3a:fa:b7:c1:1f:43:
         05:1c:1a:c8:aa:86:98:91:68:e4:27:05:2b:af:02:fb:cc:8b:
         82:cc:7d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 00:24:15 2025 by rpki-client