This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
File:                     0ffADvPrBuiBfP3B25YGBAfknA0.mft (raw, json)
Hash identifier:          2Sfjqv39HxPQ4gC7QXFYf9SgMmc1CUvzhBZkofUB1Ls=
Subject key identifier:   D5:9C:97:49:6D:D1:EC:47:20:05:E4:86:87:FE:95:29:74:F0:EA:15
Authority key identifier: D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D
Certificate issuer:       /CN=F364789CAF/serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D
Certificate serial:       0864
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
Manifest number:          0852
Signing time:             Sat 20 Dec 2025 01:48:34 +0000
Manifest this update:     Sat 20 Dec 2025 01:48:33 +0000
Manifest next update:     Mon 22 Dec 2025 01:48:33 +0000
Files and hashes:         1: 0ffADvPrBuiBfP3B25YGBAfknA0.crl (hash: TJK2IKJdBZg+EyX4NbmstAj0C7lfrvXqLOrtIBXT6XI=)
                          2: 54D73B32D5AA11EE804D6FA3775412E6.roa (hash: oub8O6ESl+q+fLwREHJore+8A+bbiWh69N6JO+Ek91U=)
                          3: AE414C1EFDCA11EFB623BE90762E951A.roa (hash: Y5HeKaAGek99xysljagPwhZ+CgojdV1z+NsdhuzC9jQ=)
                          4: B77376ACD5AA11EEB33131A4775412E6.roa (hash: zxfvPEymIGP+/7cg1EGEyQR/t5Gie6/ZfCLSy+jKY0I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2148 (0x864)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364789CAF, serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D
        Validity
            Not Before: Dec 20 01:48:33 2025 GMT
            Not After : Dec 22 01:48:33 2025 GMT
        Subject: CN=69460071-9b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:31:a5:93:de:01:4e:9d:1a:3c:cf:c9:3a:
                    95:a0:4e:11:2c:75:14:40:97:de:ee:be:74:53:a3:
                    e0:1c:a2:1b:6c:af:d1:c9:ea:72:ec:62:95:2a:b8:
                    9e:a0:32:d3:d2:aa:39:da:d3:b7:23:22:2a:d8:a3:
                    88:ac:1a:0d:11:01:86:38:7a:f8:a7:4c:83:32:7a:
                    a8:08:6f:01:51:d9:ea:8c:6e:52:7c:fd:12:78:67:
                    8a:59:3c:1e:a5:36:47:d9:c8:cc:a4:cb:8c:20:a1:
                    03:90:33:f2:05:c3:03:48:b7:3f:2f:c4:7d:e2:54:
                    10:2f:b0:c3:c6:40:eb:65:a8:77:5c:14:59:10:0b:
                    2a:af:91:78:59:6d:d9:22:b3:5f:69:a6:13:2c:46:
                    f6:34:c4:e9:e5:da:85:15:9b:3d:ec:03:a6:21:67:
                    eb:6c:c8:10:a3:a9:8e:71:f4:7d:ae:47:af:f4:44:
                    0f:3f:d2:1a:26:7b:ae:63:c9:67:bb:b8:55:97:f1:
                    a8:10:bb:ed:0d:91:c3:f2:4c:03:0f:b1:74:c1:27:
                    35:a2:77:4c:33:91:cf:45:86:dc:68:bb:e5:73:4f:
                    7c:ee:46:0f:34:8c:64:a4:56:f9:59:88:89:a7:8a:
                    9b:47:12:72:86:c7:d1:ff:c7:da:53:60:cf:ce:fe:
                    e6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9C:97:49:6D:D1:EC:47:20:05:E4:86:87:FE:95:29:74:F0:EA:15
            X509v3 Authority Key Identifier:
                keyid:D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7d:3d:99:b4:49:12:0a:23:c3:ac:5d:90:aa:58:c0:63:0e:
         88:ab:a1:9a:8a:9f:0d:57:ab:ad:6b:f4:14:ed:25:08:82:e8:
         04:0c:cc:9e:cf:14:cd:56:c7:6f:08:fb:d1:f4:c2:6f:7e:0f:
         f3:47:be:7f:da:4d:40:95:25:cc:16:d5:45:46:86:f9:d9:87:
         a5:27:ef:90:4a:1f:0b:2e:28:02:82:45:ae:2b:05:00:ed:b2:
         d7:c6:4f:11:2e:dd:3f:23:b1:b2:e2:9d:8f:29:da:2d:01:5d:
         b3:18:40:23:c4:29:cd:31:48:fd:21:2e:9d:83:6e:fe:cc:f6:
         3a:c8:ac:8a:b7:c8:c0:b9:ad:c7:8a:80:81:9a:0c:b7:7a:56:
         46:be:39:8b:ea:26:9c:1a:c9:82:2c:05:78:98:64:f5:a7:2d:
         ae:e4:bb:29:f1:a1:69:0d:4a:16:35:2b:98:8f:3c:97:59:7d:
         6c:23:c1:b1:a7:f6:7f:89:6f:8b:37:3f:8e:60:7a:3b:6d:a0:
         a0:6d:fd:75:b1:c9:27:27:f3:ed:5d:93:54:b8:38:75:a2:0e:
         44:73:24:24:80:0c:d1:3d:86:b2:be:86:26:c6:51:49:fb:40:
         ac:8a:28:66:0b:c9:f6:a3:47:08:a1:17:2b:39:b4:dd:dd:d4:
         16:03:d3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:08:52 2025 by rpki-client