This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
File:                     CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft (raw, json)
Hash identifier:          ODC48I3Wvs8yTMlM3QlKOEttGF+4oWc3YfFqeTDWpzw=
Subject key identifier:   B8:BE:76:FF:40:54:4B:14:85:A3:9D:B1:1E:EC:C5:6C:08:26:DC:B8
Authority key identifier: 09:9D:BB:99:28:A5:C2:9F:A5:92:2C:FD:B9:5F:19:0E:C0:FB:4A:C8
Certificate issuer:       /CN=F363763AAF/serialNumber=099DBB9928A5C29FA5922CFDB95F190EC0FB4AC8
Certificate serial:       04B8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
Manifest number:          04B4
Signing time:             Sat 27 Dec 2025 03:06:48 +0000
Manifest this update:     Sat 27 Dec 2025 03:06:47 +0000
Manifest next update:     Mon 29 Dec 2025 03:06:47 +0000
Files and hashes:         1: CZ27mSilwp-lkiz9uV8ZDsD7Ssg.crl (hash: WAy3QGDAViy4kFku/CSCoYUMgudH9ozWsQAl6WaViSw=)
                          2: 0C17C5923C6511F0BEB31A91DAE4EC9C.roa (hash: Dk3egDXLcZWiCKWFaQebnI7KBH7G+aSO1771Cj6q3cY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1208 (0x4b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363763AAF, serialNumber=099DBB9928A5C29FA5922CFDB95F190EC0FB4AC8
        Validity
            Not Before: Dec 27 03:06:47 2025 GMT
            Not After : Dec 29 03:06:47 2025 GMT
        Subject: CN=694f4d48-b279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:73:99:c3:1b:a4:33:70:72:ce:88:00:ba:65:
                    9b:a7:ef:ad:4e:4a:ac:f0:46:ce:a9:e4:22:76:4d:
                    bd:1c:f2:c6:e4:8a:24:9d:dd:f6:45:67:85:3b:77:
                    8a:04:98:ac:e3:fc:e9:94:08:43:fa:fc:92:e5:82:
                    d8:4b:61:9d:00:0d:c9:7c:2d:66:77:76:7f:3b:5a:
                    59:5d:9f:8e:c1:fe:65:27:3b:6c:00:70:e8:0d:2c:
                    d8:ca:f0:68:86:6f:40:1b:68:34:35:f9:29:93:fd:
                    b2:c9:cc:cf:47:7d:04:51:41:7a:87:aa:95:b7:94:
                    a9:56:4c:74:80:53:09:82:59:e0:2d:69:c7:33:01:
                    58:06:6f:e2:25:b3:c0:31:f7:66:df:7b:54:39:87:
                    bc:45:20:27:4c:04:cb:6c:49:1f:06:cc:93:ec:06:
                    13:34:56:67:32:5d:13:04:b3:40:61:49:a1:3e:21:
                    b3:88:8a:b9:bf:e5:2f:9d:b6:04:e1:7b:79:99:31:
                    be:88:05:90:9a:94:47:c1:1d:9d:b0:4b:e8:ec:d4:
                    25:7e:91:9c:cf:28:e3:48:2c:12:ae:66:22:f0:e5:
                    c9:a2:96:2b:64:a3:18:36:e2:a0:88:0b:87:42:be:
                    50:4b:9c:bf:9b:2e:7e:f8:3a:9a:ea:ec:be:18:8a:
                    1f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BE:76:FF:40:54:4B:14:85:A3:9D:B1:1E:EC:C5:6C:08:26:DC:B8
            X509v3 Authority Key Identifier:
                keyid:09:9D:BB:99:28:A5:C2:9F:A5:92:2C:FD:B9:5F:19:0E:C0:FB:4A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c8:2b:83:8c:97:72:00:70:4a:b0:66:18:c0:c4:46:e9:85:
         ed:e2:82:ee:4d:6a:e4:47:f8:cb:ff:6b:50:3b:2b:df:f1:f9:
         69:d3:0c:8a:94:5e:07:a6:52:2e:10:9f:c9:1e:ba:fd:7f:70:
         1e:2d:3b:bd:45:13:47:d6:48:45:77:c6:fa:53:0c:4d:5d:5d:
         d6:4f:05:c1:37:af:01:1c:ba:ce:04:4a:26:c9:74:ea:0b:fd:
         1d:60:b1:b4:ec:18:eb:a3:b5:b6:66:3d:c6:c9:ed:47:da:21:
         fc:f6:7a:20:3e:73:c1:5a:9f:d1:4b:ca:ec:ea:a0:99:93:d8:
         63:c2:e9:2c:56:b0:db:f2:12:f1:60:97:51:a6:0d:31:85:3b:
         25:32:b9:12:75:58:d5:6f:d8:a8:c8:9e:fd:47:53:c4:55:8e:
         47:5a:e2:a9:1e:4a:37:0d:93:d0:9e:65:58:34:75:60:19:5a:
         e6:6f:2e:17:57:dd:c7:ca:f4:b0:97:2d:1e:12:dc:23:ed:a8:
         01:c6:59:a8:fd:d6:9e:2c:60:7f:22:c2:81:36:45:93:c1:43:
         83:de:26:fd:25:2d:35:20:15:ff:cd:3b:34:21:45:82:79:2b:
         87:89:80:58:11:f5:5b:52:41:c7:57:40:1d:63:0a:b9:36:8a:
         f3:95:0f:1b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBLgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Mzc2M0FBRjExMC8GA1UEBRMoMDk5REJCOTkyOEE1QzI5RkE1OTIyQ0ZEQjk1RjE5
MEVDMEZCNEFDODAeFw0yNTEyMjcwMzA2NDdaFw0yNTEyMjkwMzA2NDdaMBgxFjAU
BgNVBAMTDTY5NGY0ZDQ4LWIyNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDpc5nDG6QzcHLOiAC6ZZun761OSqzwRs6p5CJ2Tb0c8sbkiiSd3fZFZ4U7
d4oEmKzj/OmUCEP6/JLlgthLYZ0ADcl8LWZ3dn87Wlldn47B/mUnO2wAcOgNLNjK
8GiGb0AbaDQ1+SmT/bLJzM9HfQRRQXqHqpW3lKlWTHSAUwmCWeAtacczAVgGb+Il
s8Ax92bfe1Q5h7xFICdMBMtsSR8GzJPsBhM0VmcyXRMEs0BhSaE+IbOIirm/5S+d
tgThe3mZMb6IBZCalEfBHZ2wS+js1CV+kZzPKONILBKuZiLw5cmilitkoxg24qCI
C4dCvlBLnL+bLn74Oprq7L4Yih/FAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUuL52
/0BUSxSFo52xHuzFbAgm3LgwHwYDVR0jBBgwFoAUCZ27mSilwp+lkiz9uV8ZDsD7
SsgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM3NjNBL0I2MEFCRDcwNTM2RjExRUQ4NTVEN0FBMkYxMjIyNDY4L0NaMjdt
U2lsd3AtbGtpejl1VjhaRHNEN1NzZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NaMjdtU2lsd3AtbGtpejl1VjhaRHNEN1NzZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Mzc2M0EvQjYwQUJENzA1MzZGMTFFRDg1NUQ3QUEyRjEy
MjI0NjgvQ1oyN21TaWx3cC1sa2l6OXVWOFpEc0Q3U3NnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCiyCuDjJdyAHBKsGYYwMRG6YXt4oLu
TWrkR/jL/2tQOyvf8flp0wyKlF4HplIuEJ/JHrr9f3AeLTu9RRNH1khFd8b6UwxN
XV3WTwXBN68BHLrOBEomyXTqC/0dYLG07Bjro7W2Zj3Gye1H2iH89nogPnPBWp/R
S8rs6qCZk9hjwuksVrDb8hLxYJdRpg0xhTslMrkSdVjVb9ioyJ79R1PEVY5HWuKp
Hko3DZPQnmVYNHVgGVrmby4XV93HyvSwly0eEtwj7agBxlmo/daeLGB/IsKBNkWT
wUOD3ib9JS01IBX/zTs0IUWCeSuHiYBYEfVbUkHHV0AdYwq5NorzlQ8b
-----END CERTIFICATE-----
Generated at Sat Dec 27 08:08:58 2025 by rpki-client