This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
File:                     IlhakHPb2Nx6VQRFf_nceJcpdE4.mft (raw, json)
Hash identifier:          j56OydWBXgXC+5TEIxk/dt4d83+y0bnXovADMPE55Fg=
Subject key identifier:   C4:71:7F:29:97:0B:9C:82:C5:82:BC:D9:44:39:6A:E6:22:FF:37:92
Authority key identifier: 22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E
Certificate issuer:       /CN=F363CC24AF/serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
Certificate serial:       0491
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
Manifest number:          048E
Signing time:             Tue 23 Dec 2025 03:07:08 +0000
Manifest this update:     Tue 23 Dec 2025 03:07:07 +0000
Manifest next update:     Thu 25 Dec 2025 03:07:07 +0000
Files and hashes:         1: IlhakHPb2Nx6VQRFf_nceJcpdE4.crl (hash: yWu0TavAyMWuIEV06IKyzhtPHxXW71Kp2HPLrf00nio=)
                          2: C77901BE410D11F0A96504DADAE4EC9C.roa (hash: h5Q5khYZzTnat8k7l8n6jpmEewInGfW9hyutxls28Qc=)
                          3: 224FE6786CD311EDB88049ABF1222468.roa (hash: ngBqwzoWf1U22IRdw9sMrCAgllF9dt3JOK+klM8EtcI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 03:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169 (0x491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363CC24AF, serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
        Validity
            Not Before: Dec 23 03:07:07 2025 GMT
            Not After : Dec 25 03:07:07 2025 GMT
        Subject: CN=694a075c-a2c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2b:18:4e:bb:8b:a8:10:fb:58:cb:cc:91:95:
                    40:19:db:a4:bf:74:1a:59:3b:45:c6:e0:06:9c:c7:
                    cb:bc:dc:bf:d3:ac:c6:70:b7:c3:73:10:ba:d7:7c:
                    cd:d2:8e:18:56:0d:57:d2:1c:f1:e8:7a:9f:18:76:
                    11:15:60:21:57:92:16:a1:c0:89:1b:b0:3d:97:9a:
                    c0:53:15:d2:71:10:58:68:59:3b:ef:bd:18:b8:06:
                    9a:39:ff:61:af:12:50:93:4f:01:02:73:09:f1:d1:
                    81:d6:8c:4e:9c:bd:21:56:94:d1:a3:b6:3d:3a:1b:
                    15:6c:08:fb:4c:83:2b:c2:0e:be:aa:d1:ee:0d:00:
                    87:29:7a:9e:97:a9:0a:11:0f:d1:3e:59:15:13:ab:
                    e1:94:da:23:7a:30:83:06:0d:ab:c2:bf:5c:e8:60:
                    e9:1a:7b:46:37:bb:62:a7:02:10:27:8f:73:94:2a:
                    03:4e:1b:4d:3a:20:87:55:f3:01:f9:af:35:57:f9:
                    ce:d3:7b:8a:b7:37:ed:65:e0:75:71:6f:99:e8:c5:
                    ee:62:36:0f:d7:3a:18:a3:56:37:a0:75:66:d4:a3:
                    69:19:3a:37:4a:6b:15:ec:af:ee:11:9f:ea:81:76:
                    9b:49:c1:4c:52:d5:3f:8e:b4:c6:01:06:0a:d9:d5:
                    04:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:71:7F:29:97:0B:9C:82:C5:82:BC:D9:44:39:6A:E6:22:FF:37:92
            X509v3 Authority Key Identifier:
                keyid:22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ff:6c:b8:6e:fa:89:d3:9f:6f:95:b8:72:8c:e2:ac:1d:54:
         18:3c:ca:b6:eb:0f:fc:af:32:4a:4e:28:3d:f6:52:24:90:41:
         a8:e4:ad:99:89:24:59:13:c0:4a:3e:66:f8:f3:24:b0:44:c2:
         cb:23:ee:b5:68:43:1a:88:39:f6:a2:14:7e:1f:1e:25:97:5e:
         7e:78:22:36:23:67:d2:5f:d5:8b:e3:91:c2:8f:9d:ab:b1:aa:
         0d:39:40:6e:ce:e4:01:06:fa:44:b9:42:a6:a3:23:7e:d4:f5:
         39:ff:fb:42:f9:59:5d:56:c6:b8:33:75:2c:1b:49:6c:05:98:
         2d:bb:f9:fb:e6:97:0d:5e:8a:d8:58:db:be:bb:ac:2d:1a:26:
         5a:68:22:c5:48:4b:27:41:fd:65:7a:5a:60:fe:e0:ed:d7:9b:
         49:38:c0:79:ac:df:fd:33:16:62:e9:13:ba:66:de:81:d2:49:
         bc:e4:c6:e3:e6:5f:34:b9:d9:e6:04:4b:20:16:00:af:cc:64:
         35:5f:e4:e5:a4:31:84:67:4e:c5:c0:cb:c6:4f:08:f1:03:3e:
         b4:be:3d:50:80:af:85:2a:9b:b6:05:5c:cf:c6:e1:0b:8c:c4:
         a1:5c:94:b2:2f:3c:03:ee:cb:b1:2e:66:79:2e:f3:0c:db:b5:
         e8:72:3c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 22:47:54 2025 by rpki-client