This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
File:                     XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft (raw, json)
Hash identifier:          4tFpY6ZBju1STtxvuCBc5GyI0M80vVy2lELpq+h81eg=
Subject key identifier:   AB:3C:C8:D0:BB:1A:FF:18:4D:64:01:7F:99:C6:E0:FF:49:B4:BC:D7
Authority key identifier: 5D:25:4C:BC:9D:CA:24:76:7E:24:86:00:96:80:B7:43:41:1F:08:F8
Certificate issuer:       /CN=F365062AAF/serialNumber=5D254CBC9DCA24767E2486009680B743411F08F8
Certificate serial:       0415
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
Manifest number:          0411
Signing time:             Sat 27 Dec 2025 03:24:23 +0000
Manifest this update:     Sat 27 Dec 2025 03:24:22 +0000
Manifest next update:     Mon 29 Dec 2025 03:24:22 +0000
Files and hashes:         1: XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl (hash: a4VCJnCD26jowoDgDVhxCcP6Tkn7645dbMGtizprOdo=)
                          2: 1ED4202ECD7511EDB2ED6A96F1222468.roa (hash: 9yazktSrBnSqQLJYDiJlJ8U061x2FlDHFoEX+tDlWCY=)
                          3: 8981BFF8CD7511EDADBDC297F1222468.roa (hash: XHwwuY3b3DDaJzLvFzJY6Cge3h5RZq961ny7aXpfhL8=)
                          4: F9FA5CE6CD7411EDA8B70696F1222468.roa (hash: 8eDGMcM6rbtGPj7+umoDH74//2ioLQd3MbdNouRQeVo=)
                          5: 42F3F790CD7511ED90D70697F1222468.roa (hash: pBMuRG1HJgh4SVstyiUpIYlRbDo+xDDlMaQsl1/xXjw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1045 (0x415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365062AAF, serialNumber=5D254CBC9DCA24767E2486009680B743411F08F8
        Validity
            Not Before: Dec 27 03:24:22 2025 GMT
            Not After : Dec 29 03:24:22 2025 GMT
        Subject: CN=694f5166-8828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8a:cf:6b:0d:21:e0:11:cc:20:76:bd:0c:c5:
                    dd:1b:68:0c:07:d8:b3:5a:21:92:32:da:cb:09:45:
                    b4:0a:0b:45:02:49:10:39:63:f6:d4:25:12:17:8e:
                    96:f7:55:3a:b3:6d:c8:fc:65:b3:e3:0a:c4:8d:1d:
                    c3:c2:a1:2c:73:c6:e6:d2:1d:58:8d:25:af:aa:7b:
                    75:f2:0d:ba:bd:a9:15:d6:2f:f0:53:91:41:c8:03:
                    bd:bb:40:f8:73:9f:2a:92:60:8b:9e:11:3e:81:e7:
                    d0:13:09:67:d8:6b:d7:b0:96:f8:8c:32:75:cb:bd:
                    ea:dd:3d:c4:0c:3b:6f:65:bb:ef:4d:ef:4d:90:7a:
                    cf:90:17:58:a0:31:bd:d3:3d:49:5f:a5:e0:32:2e:
                    c3:a7:1b:56:6a:58:df:e7:40:e1:ad:33:76:46:2f:
                    03:63:60:9d:37:8d:fd:a4:63:e5:32:c4:6a:a1:75:
                    bc:12:02:d7:ce:3e:d0:e9:c8:87:3a:de:ac:f1:17:
                    f3:d8:93:b4:87:eb:93:e1:c8:1e:fb:53:f1:ed:b8:
                    dd:2c:dd:cd:40:e5:6a:c6:f1:ce:05:99:5e:5f:2f:
                    c8:8a:d9:14:2c:1d:4f:26:c5:0f:ca:2e:57:3f:16:
                    9b:aa:65:a6:24:1c:82:b5:10:49:7f:cd:4b:ef:c8:
                    50:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3C:C8:D0:BB:1A:FF:18:4D:64:01:7F:99:C6:E0:FF:49:B4:BC:D7
            X509v3 Authority Key Identifier:
                keyid:5D:25:4C:BC:9D:CA:24:76:7E:24:86:00:96:80:B7:43:41:1F:08:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:4f:1d:a6:2c:1b:f9:38:9e:a5:ff:e0:65:fd:28:c4:67:ff:
         63:19:5e:59:d0:09:03:d7:b5:a5:bd:cf:d7:f0:bc:b4:ad:ff:
         cf:c4:f7:c0:36:1e:6a:c5:62:4d:e8:0f:81:88:95:3a:ca:1d:
         5d:b5:6b:25:4f:58:0f:90:df:59:c1:37:59:ec:48:51:78:55:
         38:cc:e7:33:93:70:e5:4b:1b:67:20:c1:63:a3:0f:13:9a:b0:
         7e:43:59:27:6c:00:a0:a1:95:58:70:59:65:26:49:36:57:7c:
         c3:0e:7c:6e:9b:a7:ce:37:b3:18:6d:7c:45:95:ef:62:70:7c:
         17:6a:31:02:17:58:97:11:05:e1:88:9f:38:66:03:22:bf:e5:
         28:90:98:95:e5:4b:d9:9d:72:3d:70:ea:2c:22:12:d4:4a:92:
         9c:2f:ef:f2:e7:4b:7d:aa:4a:66:fc:82:aa:1d:6b:ae:9c:24:
         48:0e:64:08:fd:bc:f1:13:d9:21:78:ae:58:e1:1b:87:f6:e8:
         8c:03:87:17:74:be:a7:ca:dd:cb:5a:c2:4c:b8:e3:ff:88:30:
         30:9a:44:47:24:7e:30:8d:99:20:1a:16:f5:fd:e8:22:f5:c9:
         41:49:91:6b:e5:51:72:d3:ce:5c:c3:0e:4d:75:e3:92:1f:ce:
         f9:81:30:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 08:09:06 2025 by rpki-client