This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
File:                     mEs08lM_l20v8hGUKFlsTLCoNJQ.mft (raw, json)
Hash identifier:          Qwy8Lbm+ZYdcH0lgS+6HJRl+8T1QBlKIHhGqvkFdpiE=
Subject key identifier:   D5:3B:07:03:ED:3F:3D:F7:A1:1B:ED:68:C5:E8:8F:A8:0E:59:2C:C6
Authority key identifier: 98:4B:34:F2:53:3F:97:6D:2F:F2:11:94:28:59:6C:4C:B0:A8:34:94
Certificate issuer:       /CN=F363E7DEAF/serialNumber=984B34F2533F976D2FF2119428596C4CB0A83494
Certificate serial:       0226
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mEs08lM_l20v8hGUKFlsTLCoNJQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
Manifest number:          0225
Signing time:             Wed 24 Dec 2025 04:26:37 +0000
Manifest this update:     Wed 24 Dec 2025 04:26:36 +0000
Manifest next update:     Fri 26 Dec 2025 04:26:36 +0000
Files and hashes:         1: mEs08lM_l20v8hGUKFlsTLCoNJQ.crl (hash: WKm4J9twv0Q7ERUE3X6AkhOP3Ujqx/v19Sp9WRHhRY8=)
                          2: D26968643D1911EF839BE3A0762E951A.roa (hash: J0djfjB+ImP9O4b/Y0DGlGrugUtQ+yVNNLjhpRXf1yA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mEs08lM_l20v8hGUKFlsTLCoNJQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Dec 2025 04:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363E7DEAF, serialNumber=984B34F2533F976D2FF2119428596C4CB0A83494
        Validity
            Not Before: Dec 24 04:26:36 2025 GMT
            Not After : Dec 26 04:26:36 2025 GMT
        Subject: CN=694b6b7c-717c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:55:45:61:8d:bb:02:1a:b4:60:dd:8b:c7:a5:
                    2e:68:6a:97:27:60:77:4f:73:0e:8a:0e:72:ab:00:
                    c0:9a:ea:49:4e:6b:4c:65:80:68:e4:bc:4f:7e:5d:
                    3e:b6:71:da:62:f7:41:31:d9:01:87:7a:7d:1e:ea:
                    c7:af:35:a6:63:de:6d:73:0a:40:49:c3:c1:4b:76:
                    e0:21:1e:c7:86:fa:14:ed:0f:e6:7c:bb:d2:b1:93:
                    8f:80:37:8b:a9:16:de:18:2a:c6:e8:60:8c:28:5a:
                    ef:80:13:18:e4:38:63:7a:04:55:01:fc:f4:2e:38:
                    da:26:23:9d:7d:06:6e:5b:d0:31:af:72:76:ce:b5:
                    e5:97:0e:8a:7f:7e:8b:a1:ea:c1:6d:ed:cf:6c:02:
                    7f:be:70:ae:ce:b5:7a:dd:b6:e5:31:33:e7:8d:05:
                    e2:42:2a:44:8d:d0:3a:79:ba:a9:32:7f:95:a8:fe:
                    da:bf:be:5a:79:4a:43:a0:a3:2c:90:a5:88:68:19:
                    9e:1a:f3:9c:dc:9d:df:fb:03:3f:48:27:b3:d2:41:
                    24:84:4d:f8:a9:94:ea:af:74:aa:f1:0a:1d:83:d2:
                    15:25:1e:20:71:b0:eb:b1:c0:35:3d:19:55:68:fc:
                    62:5b:ac:8a:bc:c3:ad:88:f4:42:c8:af:df:a1:e9:
                    03:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3B:07:03:ED:3F:3D:F7:A1:1B:ED:68:C5:E8:8F:A8:0E:59:2C:C6
            X509v3 Authority Key Identifier:
                keyid:98:4B:34:F2:53:3F:97:6D:2F:F2:11:94:28:59:6C:4C:B0:A8:34:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mEs08lM_l20v8hGUKFlsTLCoNJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:a2:10:3a:9b:d3:28:f9:11:02:df:65:e1:64:41:40:a0:81:
         df:60:8d:4c:ea:19:c7:1a:f9:6f:cb:da:f5:4c:b5:7e:b6:8e:
         e3:83:e3:a5:b2:ab:cd:46:dd:ed:67:9e:89:e1:62:17:ee:79:
         69:b2:9d:c6:35:f9:4d:7f:36:88:e1:36:04:27:43:bf:d9:7d:
         54:d3:96:a9:b0:ea:c6:87:e0:67:6f:3e:c5:c3:c6:e2:70:74:
         d9:e7:79:e6:83:59:c9:68:e8:29:d1:d3:55:a9:22:9d:05:c2:
         2d:76:cd:65:bd:2d:84:3e:ff:dd:06:1a:53:57:e9:50:1f:57:
         53:ef:16:36:fc:50:18:24:0b:04:66:b7:0e:61:26:60:f7:aa:
         30:bf:db:e7:e1:59:3e:e6:25:c4:bb:91:39:d7:d3:96:2b:17:
         38:29:a8:83:3c:e3:da:e7:98:96:3c:9d:f6:11:43:b1:33:69:
         47:41:4d:3a:60:3d:64:cb:59:d6:1d:cf:7b:ee:0e:a5:bb:16:
         b5:a7:ea:45:01:41:75:ac:c3:ae:d9:70:21:fd:31:fc:af:9d:
         28:dd:82:b2:fb:57:6d:8a:70:d6:a3:e7:04:4e:b3:0a:81:0e:
         57:bb:bf:c3:e8:3d:00:4b:eb:3f:f0:5e:bf:7c:c5:df:94:1e:
         a0:48:cd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:07:19 2025 by rpki-client