This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
File:                     iO95xkHBXokYHnKdSKj-bnPOJac.mft (raw, json)
Hash identifier:          oXIrlSuPJ9jecL/oo2JbJIIMoJdyheNFejZVUsOnnL4=
Subject key identifier:   10:92:A9:5E:05:96:D9:F7:98:BD:02:6A:59:8D:CD:B2:16:CD:EC:B8
Authority key identifier: 88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7
Certificate issuer:       /CN=F363C396AF/serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
Certificate serial:       024C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
Manifest number:          024B
Signing time:             Tue 23 Dec 2025 04:15:45 +0000
Manifest this update:     Tue 23 Dec 2025 04:15:44 +0000
Manifest next update:     Thu 25 Dec 2025 04:15:44 +0000
Files and hashes:         1: iO95xkHBXokYHnKdSKj-bnPOJac.crl (hash: /g5kQDGP4jCgLxTZzwIfD3m7zBYUfGX6QjxfR8k9c0M=)
                          2: AB00E3321E9D11EFAD20E30A7DDC24C2.roa (hash: jczqBl4rLfWV3D8zqP6XHofdCAQZu3xZe0wHy+hc42o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 04:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 588 (0x24c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C396AF, serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
        Validity
            Not Before: Dec 23 04:15:44 2025 GMT
            Not After : Dec 25 04:15:44 2025 GMT
        Subject: CN=694a1771-c11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:3a:9c:4c:b9:a4:94:74:0e:b9:76:a7:52:
                    83:ac:94:65:0e:85:f8:1f:e7:37:3f:13:be:41:47:
                    8d:b0:b8:da:2a:3d:7e:90:1d:ad:cc:df:83:18:88:
                    b9:ed:03:b2:e2:b2:81:a0:b1:1f:0b:0d:1d:6a:e3:
                    4f:16:a1:a6:12:5d:b7:68:b5:b8:71:28:55:81:6e:
                    45:0a:78:4a:79:b6:c2:d1:2f:97:4a:c5:10:f6:60:
                    41:f9:d9:e6:37:bc:ab:fe:06:ed:9a:c1:5a:c7:ba:
                    7c:3a:c3:2e:04:e9:ed:0e:ce:62:60:de:a4:56:ee:
                    6a:5a:cb:49:3c:49:3c:68:da:25:e7:83:71:b8:53:
                    77:41:eb:d5:d9:f2:45:3b:b2:e5:de:1b:62:63:7a:
                    6b:41:e5:ab:1c:6d:6c:06:a2:9e:01:b5:b1:55:b8:
                    c1:c2:ea:d7:a8:f5:20:26:69:56:f7:49:57:bf:3f:
                    fb:07:7d:52:b2:b1:d7:38:73:8e:ec:c7:54:d1:61:
                    8a:76:99:64:e1:f9:c4:ab:75:32:c1:ec:c8:dd:19:
                    cf:f8:f1:dc:a2:49:ab:1a:30:b3:22:bb:0a:c9:1e:
                    cf:0c:0b:8f:e3:a7:ab:ca:5c:76:43:e2:36:47:7a:
                    a1:de:34:cd:c0:be:eb:36:ae:3e:fa:a8:c1:19:79:
                    18:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:92:A9:5E:05:96:D9:F7:98:BD:02:6A:59:8D:CD:B2:16:CD:EC:B8
            X509v3 Authority Key Identifier:
                keyid:88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d5:4f:b5:a6:18:9c:39:59:18:08:c2:0d:fc:d6:63:54:8b:
         e3:74:c7:e1:d1:ef:a4:85:86:70:f1:90:8d:ab:f9:84:0c:fb:
         4c:17:51:03:11:d6:f1:9f:95:8c:a3:90:32:d7:da:58:3b:3e:
         07:a2:35:65:b9:51:f4:24:fc:42:6d:ef:a0:22:60:47:2b:cb:
         c9:26:3b:c5:82:d7:87:04:07:02:d9:52:e7:fb:51:20:31:58:
         41:b8:89:0a:07:c5:86:27:cf:0f:22:66:fb:0d:9d:9d:cb:5b:
         0f:b2:5a:82:36:52:71:52:0c:89:7d:ac:ba:dd:61:db:3a:53:
         2e:a3:b1:10:d1:fe:5f:c5:d6:51:2e:1c:d5:d4:25:07:d1:af:
         68:48:a4:89:12:a1:e8:cb:67:b1:3c:d2:60:e2:6b:4e:74:a2:
         e1:c9:ce:d8:56:22:2b:87:90:b6:b1:3e:71:78:c1:89:98:88:
         7e:2e:63:03:3f:fe:bf:cc:a0:97:bf:dd:61:46:dd:10:97:78:
         74:92:2c:14:6e:86:02:aa:48:76:c9:95:65:5c:2c:af:e1:f4:
         8e:ca:ed:68:30:ce:b9:94:cf:79:06:90:6e:c7:61:b7:47:04:
         bf:fe:71:88:dd:e8:be:cc:d7:75:de:2d:17:7e:5f:f3:24:cb:
         54:6b:5e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 10:50:52 2025 by rpki-client