This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
File:                     68SoUZfDK0JWOKbH5YYLWWTmV_4.mft (raw, json)
Hash identifier:          ku6ZNlmoUAA8y4xmsKLxNVTGFvMojOu8W0i4EwOlABY=
Subject key identifier:   38:BD:BF:59:3B:74:B9:7A:93:EF:42:26:FF:4D:6A:A3:7C:9E:93:5D
Authority key identifier: EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
Certificate issuer:       /CN=F363212DAF/serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
Certificate serial:       060C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
Manifest number:          0604
Signing time:             Mon 29 Dec 2025 02:33:27 +0000
Manifest this update:     Mon 29 Dec 2025 02:33:26 +0000
Manifest next update:     Wed 31 Dec 2025 02:33:26 +0000
Files and hashes:         1: 68SoUZfDK0JWOKbH5YYLWWTmV_4.crl (hash: JBQSIhVRVaVGAi4Gk+rV/t5r9hgz7YO9vj5fLnhg5Uw=)
                          2: E1BA36FE532E11ECB8BC4E1DD8A014CE.roa (hash: cUhBHZ+Z4d5AZaeSFA399WQNY+kP31yeD+NHyVVFT18=)
                          3: 0193F69A532F11EC9ACDB21DD8A014CE.roa (hash: iI3TqolSTdmVetsfOW0QQOug0jNNQHUuD4Xvi/Pq7D4=)
                          4: 5C2091561C3911EFB205FD487DDC24C2.roa (hash: NKlDY276l6JOcXLF8QFggQf5j2sPub212V854yhc+iU=)
                          5: 24D701EA533111EC8641CB24D8A014CE.roa (hash: /Cg+GnqMealAZ/MM8CbfqkgM5mxpsZqxp+8Er6hjzIE=)
                          6: 4B1F6790532F11EC90C1831ED8A014CE.roa (hash: ELkepuwGqkp4OwjbpJ4s0LiN5zzQJggQYB6/QQtDAy0=)
                          7: B7D3BBC6532E11ECAD55D11CD8A014CE.roa (hash: pCw+Q0ElmqVkVeDqn8YLUNXneXlSCa0dfzrWbxPvi2o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 31 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1548 (0x60c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363212DAF, serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
        Validity
            Not Before: Dec 29 02:33:26 2025 GMT
            Not After : Dec 31 02:33:26 2025 GMT
        Subject: CN=6951e877-c301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1c:b6:64:fd:5d:36:f4:01:62:06:9b:a4:7d:
                    a2:42:cd:0a:26:bd:21:08:db:da:4a:3b:6b:b1:97:
                    6b:b5:d7:51:fd:50:6f:67:ba:11:59:1f:c6:d4:0c:
                    c4:92:5f:2b:3d:af:8f:26:a4:ad:29:8a:07:df:14:
                    18:0f:8a:48:8d:a7:af:01:00:da:51:75:89:54:22:
                    41:86:0b:23:19:99:c9:d0:89:69:fb:8f:cb:ec:b6:
                    b6:50:53:f5:d8:0d:f2:96:9f:d9:c7:8e:e0:87:50:
                    c3:70:a8:b7:fc:84:e2:42:a3:81:6e:13:db:97:f2:
                    e3:a4:ce:17:21:e4:1e:b1:c6:6d:c2:c2:7b:43:08:
                    0e:cc:31:03:d8:16:47:2c:21:18:ed:32:23:35:9f:
                    de:ba:8e:61:bd:b3:0e:9e:42:5c:a0:04:c2:21:02:
                    68:42:32:30:c0:dc:0b:f6:cb:1b:ac:39:90:b6:9f:
                    f0:a7:e5:20:43:5f:9f:03:b1:50:35:31:7e:e1:e4:
                    dd:df:32:3a:63:29:6f:22:24:3d:c4:de:21:96:0a:
                    9c:2f:05:b9:c3:61:38:65:dd:6a:c4:6a:85:8c:d2:
                    df:4b:09:fe:19:0b:03:c0:c0:47:c8:30:1a:d8:11:
                    8e:cd:bd:b8:eb:be:b2:c3:85:38:c0:e9:6e:c3:bd:
                    8c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BD:BF:59:3B:74:B9:7A:93:EF:42:26:FF:4D:6A:A3:7C:9E:93:5D
            X509v3 Authority Key Identifier:
                keyid:EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:0e:46:16:6a:ff:83:3f:c9:97:91:52:9b:b7:6b:51:dd:bd:
         e6:bc:f8:20:a2:5c:6e:e2:c1:03:10:12:77:67:98:7d:58:60:
         9e:49:43:49:f7:84:ae:56:d6:8d:cb:00:d4:5d:52:6b:92:04:
         79:61:f9:73:1e:a7:44:45:e7:63:35:c6:53:55:92:a2:1a:5e:
         54:8f:5e:86:4d:d2:48:0d:91:60:a1:05:71:4f:cb:93:51:98:
         28:df:f4:dc:21:b4:31:29:fa:c3:6c:99:c8:9e:bf:80:83:79:
         ee:ef:25:e5:7d:d2:82:61:f6:8f:e3:80:b8:cd:22:26:f9:85:
         88:31:85:bd:a6:ea:1a:c5:5d:3b:ce:f3:f5:d9:20:f7:d4:41:
         91:0b:ae:37:34:0c:7c:2d:27:51:b2:19:d5:f9:36:07:56:06:
         71:df:0d:5a:3d:0a:41:8f:ce:4f:7b:28:58:b1:85:d1:16:86:
         ba:ae:d8:dc:80:1a:59:98:3a:86:88:86:97:3a:d1:e7:f0:dd:
         57:b8:42:bb:04:90:ba:83:0c:7f:3d:1d:e3:dd:32:b2:4a:ab:
         43:75:bf:cf:84:a8:01:1b:32:6f:5a:6c:74:07:ad:60:53:54:
         f0:3b:a9:7b:1b:f6:18:77:bd:8e:2e:60:12:f1:1c:ec:c8:ed:
         cb:4a:41:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 19:24:12 2025 by rpki-client