This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
File:                     0ffADvPrBuiBfP3B25YGBAfknA0.mft (raw, json)
Hash identifier:          x9OsNpWe+5DGjwj4QtxPXLZt5tigFTN+NWKLjKul1sc=
Subject key identifier:   1E:C9:D8:C2:0B:D6:FF:51:1E:ED:9F:61:3A:E1:D7:9D:AA:B6:84:34
Authority key identifier: D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D
Certificate issuer:       /CN=F364789CAF/serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D
Certificate serial:       0868
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
Manifest number:          0856
Signing time:             Wed 24 Dec 2025 01:53:12 +0000
Manifest this update:     Wed 24 Dec 2025 01:53:11 +0000
Manifest next update:     Fri 26 Dec 2025 01:53:11 +0000
Files and hashes:         1: 0ffADvPrBuiBfP3B25YGBAfknA0.crl (hash: QJoz1tB/2Os4tpKUF1BMGD53pbSqRstJKqIapaim0RE=)
                          2: 54D73B32D5AA11EE804D6FA3775412E6.roa (hash: oub8O6ESl+q+fLwREHJore+8A+bbiWh69N6JO+Ek91U=)
                          3: AE414C1EFDCA11EFB623BE90762E951A.roa (hash: Y5HeKaAGek99xysljagPwhZ+CgojdV1z+NsdhuzC9jQ=)
                          4: B77376ACD5AA11EEB33131A4775412E6.roa (hash: zxfvPEymIGP+/7cg1EGEyQR/t5Gie6/ZfCLSy+jKY0I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Dec 2025 01:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2152 (0x868)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364789CAF, serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D
        Validity
            Not Before: Dec 24 01:53:11 2025 GMT
            Not After : Dec 26 01:53:11 2025 GMT
        Subject: CN=694b4788-3131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ed:04:cc:8b:71:59:af:d7:c4:ca:f0:82:56:
                    30:ce:2a:08:65:a8:80:21:ea:14:8d:9e:d4:84:c5:
                    85:5d:c5:8a:3b:f3:25:5c:8e:29:5f:66:df:2b:c7:
                    5a:fd:fb:aa:df:36:c5:91:2a:e3:a4:ed:aa:0d:46:
                    cb:76:8e:19:b9:8b:be:5b:04:63:31:10:05:cc:39:
                    c7:c8:69:0c:e3:cd:33:f1:43:94:52:73:69:04:3b:
                    60:17:5e:5a:87:23:a3:b0:f4:7d:1a:33:bb:ce:68:
                    c7:2e:18:78:3d:71:d5:88:25:f8:08:0d:5b:64:af:
                    38:a6:69:3c:fa:7c:5b:fd:0b:5c:d6:66:7a:3f:7e:
                    59:42:c3:17:ad:5e:82:c6:be:8c:48:84:07:ae:0a:
                    c1:80:03:66:8e:03:b6:4e:be:74:87:fe:30:d3:fa:
                    dc:31:82:44:30:08:a9:fa:e6:30:4b:a0:06:44:17:
                    75:ae:8b:61:ff:f8:b3:a3:8b:b1:cf:48:16:c5:c1:
                    3a:b2:f7:84:e3:39:ef:18:91:1a:21:e6:4e:8b:48:
                    79:4e:aa:51:6d:a5:19:0a:16:86:26:73:2d:f6:11:
                    6e:ce:4f:a8:0a:3a:b2:1e:52:6b:22:1c:bf:a9:cc:
                    bc:71:60:65:dd:25:86:b9:82:3b:1f:2b:7c:93:e3:
                    db:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C9:D8:C2:0B:D6:FF:51:1E:ED:9F:61:3A:E1:D7:9D:AA:B6:84:34
            X509v3 Authority Key Identifier:
                keyid:D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f9:01:8c:bb:81:7c:ea:4c:df:fc:fd:49:5c:35:61:cb:b4:
         65:79:90:8f:e4:c1:ae:26:5d:d3:8d:81:0c:96:77:0e:a1:fd:
         8b:38:e9:3b:1a:28:11:67:87:e5:af:4d:b9:a6:a4:67:96:32:
         e7:92:61:41:d0:a0:cf:54:32:32:6f:74:b1:eb:8b:36:d5:a5:
         34:8a:7b:95:ab:b4:16:71:19:07:8d:ac:c9:7f:99:b0:52:1d:
         1f:4e:a2:b8:1c:ba:35:a9:80:36:aa:39:ed:b5:5c:fc:4c:7c:
         16:a1:be:af:92:fb:d1:4d:02:c3:91:8d:59:aa:62:c2:8e:2d:
         64:be:86:72:bb:a9:84:5e:cc:52:6d:34:1b:7b:96:15:69:c1:
         99:06:f6:c3:f3:4c:28:87:b2:c4:dc:28:4c:b3:c2:b6:62:e2:
         06:16:dd:f0:d7:b3:b8:f5:0e:a0:eb:2e:17:5d:06:44:22:0c:
         55:3f:ad:9a:24:d2:59:a0:f0:4f:a6:b7:96:fc:e2:02:6f:60:
         21:74:12:fb:a2:d5:a5:ca:81:69:1d:9e:a1:39:cc:5f:b0:e0:
         e6:7c:73:58:e0:42:c8:8a:8f:7c:63:a5:8a:38:f7:ca:89:0a:
         48:cf:31:d7:62:f7:d5:6f:49:00:a7:b5:d8:9a:f4:74:58:e0:
         8a:07:85:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 01:02:57 2025 by rpki-client