This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.mft
File:                     98YIN8gMV8TbybsBYAgwPJT7oqk.mft (raw, json)
Hash identifier:          hrGKt47yhMgKyM1OYRbkMrMH8LRl4I6Kk+s1+IrMguA=
Subject key identifier:   2C:D5:FD:73:5B:39:75:41:42:9E:EC:B5:E5:24:DF:8B:10:0F:A0:AA
Authority key identifier: F7:C6:08:37:C8:0C:57:C4:DB:C9:BB:01:60:08:30:3C:94:FB:A2:A9
Certificate issuer:       /CN=F363C4A6AF/serialNumber=F7C60837C80C57C4DBC9BB016008303C94FBA2A9
Certificate serial:       0199
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/98YIN8gMV8TbybsBYAgwPJT7oqk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.mft
Manifest number:          0198
Signing time:             Tue 30 Dec 2025 04:44:50 +0000
Manifest this update:     Tue 30 Dec 2025 04:44:49 +0000
Manifest next update:     Thu 01 Jan 2026 04:44:49 +0000
Files and hashes:         1: 98YIN8gMV8TbybsBYAgwPJT7oqk.crl (hash: 8Pjm6KnBVWsEFR9xP7RMRNrCuJE6JUUf9D9gsyUXPio=)
                          2: 7DDDEAB0AD5111EFA8CB627A762E951A.roa (hash: dvM01EkOXh9FWTfE/7UMNp1k9IOWCI+KkRyoJeJVDAA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/98YIN8gMV8TbybsBYAgwPJT7oqk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 04:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C4A6AF, serialNumber=F7C60837C80C57C4DBC9BB016008303C94FBA2A9
        Validity
            Not Before: Dec 30 04:44:49 2025 GMT
            Not After : Jan  1 04:44:49 2026 GMT
        Subject: CN=695358c2-a082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:da:21:6e:92:24:ef:81:f8:c2:98:57:e7:0c:
                    28:0f:75:78:b9:71:ef:15:fb:99:e2:9c:5e:10:4b:
                    5e:c3:d9:4c:aa:bf:4c:5b:3c:69:88:b2:59:e2:0a:
                    69:74:e2:8a:ab:70:ea:57:3f:78:72:f3:ca:a2:83:
                    b3:d5:12:00:cd:66:9b:62:46:8d:e1:ea:f0:e2:3d:
                    73:57:b7:12:ef:86:00:af:74:dc:29:58:f5:37:b7:
                    89:ec:49:a7:5d:35:45:ff:e8:68:38:cb:87:19:31:
                    15:cb:80:d9:81:bf:e9:f7:9d:d6:79:a0:fc:b8:ef:
                    95:04:00:28:2a:72:8e:b4:fc:57:40:96:8b:46:45:
                    5f:86:fe:e6:60:aa:f7:d4:79:55:3e:11:3f:7f:6e:
                    68:db:7a:bb:5d:84:85:8e:fa:48:40:a9:48:b3:60:
                    48:6c:53:93:f2:c1:48:4a:0b:4a:34:fa:db:64:4a:
                    eb:c1:a1:65:83:f5:4f:f0:83:29:6f:ae:9c:4b:9e:
                    84:61:6a:12:85:c2:05:00:46:1d:7c:3c:10:88:68:
                    62:99:26:64:06:03:f8:83:39:8b:87:31:f7:be:71:
                    de:ad:68:93:30:fb:40:08:09:36:34:03:b2:18:c9:
                    43:07:8e:03:1b:bb:0d:3c:e4:c1:46:37:1f:6b:51:
                    6d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D5:FD:73:5B:39:75:41:42:9E:EC:B5:E5:24:DF:8B:10:0F:A0:AA
            X509v3 Authority Key Identifier:
                keyid:F7:C6:08:37:C8:0C:57:C4:DB:C9:BB:01:60:08:30:3C:94:FB:A2:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/98YIN8gMV8TbybsBYAgwPJT7oqk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:9a:fe:c7:5f:99:bc:19:c2:f5:6a:75:d8:d4:9d:cd:3e:f8:
         ca:ff:19:29:67:58:5a:28:50:bb:9d:8c:e6:f0:53:ba:9d:e1:
         0f:96:73:d9:cd:6d:ab:31:d8:0d:8c:b6:27:a1:84:a0:a7:c1:
         3b:c6:02:ec:8f:b4:39:a3:e0:34:ad:2c:9f:95:7a:14:24:b3:
         ee:7f:8e:2e:98:87:79:2b:a0:0e:79:db:51:54:e6:ad:1f:7a:
         9f:45:94:50:ba:31:85:e2:2c:d7:d6:cc:8d:cc:57:da:ad:66:
         4c:bd:40:e7:bd:53:d8:b9:72:ed:ad:6c:7f:ee:e5:d1:e0:c7:
         93:d7:f3:21:9a:a8:7a:b2:06:18:6f:f8:f1:e4:77:8a:5f:13:
         33:b0:15:e2:7c:d5:52:cd:d4:d8:02:75:4a:f5:3e:fe:2a:12:
         c5:b0:ff:72:33:90:60:87:ba:13:e3:35:22:fb:ae:1b:e9:fb:
         18:57:69:fe:d9:f7:e7:6e:3c:0a:da:e6:a4:fa:81:25:22:7f:
         60:db:52:8c:89:b5:07:6f:17:71:07:bd:22:35:de:ff:32:05:
         77:5e:66:ad:73:13:e0:d8:fb:9d:30:4b:b4:ef:22:31:6d:e0:
         33:d9:12:ea:e2:0c:71:9a:79:f5:df:8e:3b:1e:7a:57:1c:79:
         e2:df:68:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 01:56:08 2025 by rpki-client